0000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:25 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000ac0)={0x14, r1, 0x1}, 0x14}}, 0x80) 07:20:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000040}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r1, 0x31, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x848}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x10) 07:20:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000ac0)={0x14, r1, 0x1}, 0x14}}, 0x80) 07:20:25 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a0231", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:25 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a0231", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000ac0)={0x20, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) 07:20:25 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0xf9, 0x7, 0xffffffff, 0x21, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x10, 0x80, 0x6, 0x101}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) 07:20:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000ac0)={0x14, r1, 0x1}, 0x14}}, 0x80) 07:20:25 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a0231", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:25 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a0231", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:25 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a0231", @ANYRES64=0x0, @ANYBLOB="010000000000000002000000000000000c000000000400002c2f7d262c29265ea00c2a210000000006000000000000000100008000000000010000000000000024000000000000000300000000000000080000000000000009000000000000002f6465762f70707000000000000000000400000000000000fdffffffffffffff04000000018000002d7d2827000000000000000000000000050000000000000009000000800000002f6465762f70707000000000000000000300000000000000200000000000000001000000010000002e0000000000000002000000000000000008000000000000010000000800000024000000000000000300000000000000000000000000000000000000fffffeff"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:25 executing program 4: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000ac0)={0x6fc, r0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8f1}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3d1}}}]}}, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}, {{0x8}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x6fc}}, 0x80) 07:20:25 executing program 1: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000ac0)={0x6fc, r0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8f1}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3d1}}}]}}, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}, {{0x8}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x6fc}}, 0x80) 07:20:25 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a0231", @ANYRES64=0x0, @ANYBLOB="010000000000000002000000000000000c000000000400002c2f7d262c29265ea00c2a210000000006000000000000000100008000000000010000000000000024000000000000000300000000000000080000000000000009000000000000002f6465762f70707000000000000000000400000000000000fdffffffffffffff04000000018000002d7d2827000000000000000000000000050000000000000009000000800000002f6465762f70707000000000000000000300000000000000200000000000000001000000010000002e0000000000000002000000000000000008000000000000010000000800000024000000000000000300000000000000000000000000000000000000fffffeff"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000ac0)={0x14, r1, 0x1}, 0x14}}, 0x80) 07:20:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) 07:20:25 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a023100", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:25 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000040}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r2, 0x31, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x848}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x10) 07:20:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000ac0)={0x20, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) 07:20:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0xf9, 0x7, 0xffffffff, 0x21, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x10, 0x80, 0x6, 0x101}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) 07:20:25 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="010000000000000002000000000000000c000000000400002c2f7d262c29265ea00c2a210000000006000000000000000100008000000000010000000000000024000000000000000300000000000000080000000000000009000000000000002f6465762f70707000000000000000000400000000000000fdffffffffffffff04000000018000002d7d2827000000000000000000000000050000000000000009000000800000002f6465762f70707000000000000000000300000000000000200000000000000001000000010000002e0000000000000002000000000000000008000000000000010000000800000024000000000000000300000000000000000000000000000000000000fffffeff"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0xf9, 0x7, 0xffffffff, 0x21, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x10, 0x80, 0x6, 0x101}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x9, &(0x7f00000000c0)=@raw=[@ldst={0x0, 0x2, 0x2, 0x7, 0x3, 0x92, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10001}, @ldst={0x3, 0x1, 0xdd98b4e1752500b0, 0x4, 0x8, 0xfffffffffffffff8, 0x10}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @alu={0x24d2e03e4d4b305f, 0x1, 0x5, 0x3, 0x1, 0x6, 0xfffffffffffffffc}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}], &(0x7f0000000180)='GPL\x00', 0x8, 0x1000, &(0x7f00000011c0)=""/4096, 0x41100, 0x10, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x10, 0x10000, 0x40}, 0x10}, 0x78) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x4000001) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000ac0)={0x6fc, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8f1}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3d1}}}]}}, {{0x8, 0x1, r4}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}, {{0x8}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x6fc}}, 0x80) 07:20:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0xf9, 0x7, 0xffffffff, 0x21, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x10, 0x80, 0x6, 0x101}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x9, &(0x7f00000000c0)=@raw=[@ldst={0x0, 0x2, 0x2, 0x7, 0x3, 0x92, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10001}, @ldst={0x3, 0x1, 0xdd98b4e1752500b0, 0x4, 0x8, 0xfffffffffffffff8, 0x10}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @alu={0x24d2e03e4d4b305f, 0x1, 0x5, 0x3, 0x1, 0x6, 0xfffffffffffffffc}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}], &(0x7f0000000180)='GPL\x00', 0x8, 0x1000, &(0x7f00000011c0)=""/4096, 0x41100, 0x10, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x10, 0x10000, 0x40}, 0x10}, 0x78) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x4000001) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000040}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, 0x0, 0x31, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x848}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x10) 07:20:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000ac0)={0x20, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) 07:20:26 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0x0, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="010000000000000002000000000000000c000000000400002c2f7d262c29265ea00c2a210000000006000000000000000100008000000000010000000000000024000000000000000300000000000000080000000000000009000000000000002f6465762f70707000000000000000000400000000000000fdffffffffffffff04000000018000002d7d2827000000000000000000000000050000000000000009000000800000002f6465762f70707000000000000000000300000000000000200000000000000001000000010000002e0000000000000002000000000000000008000000000000010000000800000024000000000000000300000000000000000000000000000000000000fffffeff"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:26 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a023100", @ANYRES64=0x0, @ANYBLOB="010000000000000002000000000000000c000000000400002c2f7d262c29265ea00c2a210000000006000000000000000100008000000000010000000000000024000000000000000300000000000000080000000000000009000000000000002f6465762f70707000000000000000000400000000000000fdffffffffffffff04000000018000002d7d2827000000000000000000000000050000000000000009000000800000002f6465762f70707000000000000000000300000000000000200000000000000001000000010000002e0000000000000002000000000000000008000000000000010000000800000024000000000000000300000000000000000000000000000000000000fffffeff"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:26 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:26 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a023100", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:26 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a023100", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0xf9, 0x7, 0xffffffff, 0x21, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x10, 0x80, 0x6, 0x101}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x9, &(0x7f00000000c0)=@raw=[@ldst={0x0, 0x2, 0x2, 0x7, 0x3, 0x92, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10001}, @ldst={0x3, 0x1, 0xdd98b4e1752500b0, 0x4, 0x8, 0xfffffffffffffff8, 0x10}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @alu={0x24d2e03e4d4b305f, 0x1, 0x5, 0x3, 0x1, 0x6, 0xfffffffffffffffc}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}], &(0x7f0000000180)='GPL\x00', 0x8, 0x1000, &(0x7f00000011c0)=""/4096, 0x41100, 0x10, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x10, 0x10000, 0x40}, 0x10}, 0x78) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x4000001) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000040}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r6, 0x31, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x848}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000ac0)={0x6fc, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8f1}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3d1}}}]}}, {{0x8, 0x1, r4}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}, {{0x8}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x6fc}}, 0x80) 07:20:26 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x0, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:26 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a023100", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:26 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:26 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a023100", @ANYRES64=0x0, @ANYBLOB="010000000000000002000000000000000c000000000400002c2f7d262c29265ea00c2a210000000006000000000000000100008000000000010000000000000024000000000000000300000000000000080000000000000009000000000000002f6465762f70707000000000000000000400000000000000fdffffffffffffff04000000018000002d7d2827000000000000000000000000050000000000000009000000800000002f6465762f70707000000000000000000300000000000000200000000000000001000000010000002e0000000000000002000000000000000008000000000000010000000800000024000000000000000300000000000000000000000000000000000000fffffeff"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:26 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x0, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0xf9, 0x7, 0xffffffff, 0x21, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x10, 0x80, 0x6, 0x101}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x9, &(0x7f00000000c0)=@raw=[@ldst={0x0, 0x2, 0x2, 0x7, 0x3, 0x92, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10001}, @ldst={0x3, 0x1, 0xdd98b4e1752500b0, 0x4, 0x8, 0xfffffffffffffff8, 0x10}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @alu={0x24d2e03e4d4b305f, 0x1, 0x5, 0x3, 0x1, 0x6, 0xfffffffffffffffc}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}], &(0x7f0000000180)='GPL\x00', 0x8, 0x1000, &(0x7f00000011c0)=""/4096, 0x41100, 0x10, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x10, 0x10000, 0x40}, 0x10}, 0x78) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x4000001) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000040}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r8, 0x31, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x848}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r6, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xff}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000881}, 0x8080) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000ac0)={0x6fc, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8f1}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3d1}}}]}}, {{0x8, 0x1, r4}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}, {{0x8}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x6fc}}, 0x80) 07:20:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0xf9, 0x7, 0xffffffff, 0x21, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x10, 0x80, 0x6, 0x101}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x9, &(0x7f00000000c0)=@raw=[@ldst={0x0, 0x2, 0x2, 0x7, 0x3, 0x92, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10001}, @ldst={0x3, 0x1, 0xdd98b4e1752500b0, 0x4, 0x8, 0xfffffffffffffff8, 0x10}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @alu={0x24d2e03e4d4b305f, 0x1, 0x5, 0x3, 0x1, 0x6, 0xfffffffffffffffc}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}], &(0x7f0000000180)='GPL\x00', 0x8, 0x1000, &(0x7f00000011c0)=""/4096, 0x41100, 0x10, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x10, 0x10000, 0x40}, 0x10}, 0x78) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x4000001) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000040}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r8, 0x31, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x848}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r6, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xff}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000881}, 0x8080) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000ac0)={0x6fc, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8f1}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3d1}}}]}}, {{0x8, 0x1, r4}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}, {{0x8}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}]}, 0x6fc}}, 0x80) 07:20:26 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="010000000000000002000000000000000c000000000400002c2f7d262c29265ea00c2a210000000006000000000000000100008000000000010000000000000024000000000000000300000000000000080000000000000009000000000000002f6465762f70707000000000000000000400000000000000fdffffffffffffff04000000018000002d7d2827000000000000000000000000050000000000000009000000800000002f6465762f70707000000000000000000300000000000000200000000000000001000000010000002e0000000000000002000000000000000008000000000000010000000800000024000000000000000300000000000000000000000000000000000000fffffeff"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 07:20:26 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a023100", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:26 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a023100", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:26 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x0, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="010000000000000002000000000000000c000000000400002c2f7d262c29265ea00c2a210000000006000000000000000100008000000000010000000000000024000000000000000300000000000000080000000000000009000000000000002f6465762f70707000000000000000000400000000000000fdffffffffffffff04000000018000002d7d2827000000000000000000000000050000000000000009000000800000002f6465762f70707000000000000000000300000000000000200000000000000001000000010000002e0000000000000002000000000000000008000000000000010000000800000024000000000000000300000000000000000000000000000000000000fffffeff"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:26 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ccd000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/77) shmget$private(0x0, 0x1000, 0x400, &(0x7f0000d3b000/0x1000)=nil) shmget(0x3, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) 07:20:26 executing program 2: r0 = fork() waitid(0x1, 0xffffffffffffffff, 0x0, 0x1, 0x0) waitid(0x0, r0, &(0x7f0000000140), 0x1, 0x0) r1 = fork() waitid(0x1, r1, 0x0, 0x1, &(0x7f0000000000)) r2 = gettid() prlimit64(r2, 0xc94a3c1257f61ef0, 0x0, 0x0) prlimit64(r2, 0xe, &(0x7f00000000c0)={0x1000, 0x1}, &(0x7f0000000100)) 07:20:26 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a023100", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:26 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a023100", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:26 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="010000000000000002000000000000000c000000000400002c2f7d262c29265ea00c2a210000000006000000000000000100008000000000010000000000000024000000000000000300000000000000080000000000000009000000000000002f6465762f70707000000000000000000400000000000000fdffffffffffffff04000000018000002d7d2827000000000000000000000000050000000000000009000000800000002f6465762f70707000000000000000000300000000000000200000000000000001000000010000002e0000000000000002000000000000000008000000000000010000000800000024000000000000000300000000000000000000000000000000000000fffffeff"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:26 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 07:20:26 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ccd000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/77) shmget$private(0x0, 0x1000, 0x400, &(0x7f0000d3b000/0x1000)=nil) shmget(0x3, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) 07:20:26 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a023100", @ANYRES64=0x0, @ANYBLOB="010000000000000002000000000000000c000000000400002c2f7d262c29265ea00c2a210000000006000000000000000100008000000000010000000000000024000000000000000300000000000000080000000000000009000000000000002f6465762f70707000000000000000000400000000000000fdffffffffffffff04000000018000002d7d2827000000000000000000000000050000000000000009000000800000002f6465762f70707000000000000000000300000000000000200000000000000001000000010000002e0000000000000002000000000000000008000000000000010000000800000024000000000000000300000000000000000000000000000000000000fffffeff"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:26 executing program 5: shmget(0x1, 0x4000, 0x54000000, &(0x7f0000ebf000/0x4000)=nil) socket$l2tp(0x2, 0x2, 0x73) 07:20:26 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ccd000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/77) shmget$private(0x0, 0x1000, 0x400, &(0x7f0000d3b000/0x1000)=nil) shmget(0x3, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) 07:20:26 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="010000000000000002000000000000000c000000000400002c2f7d262c29265ea00c2a210000000006000000000000000100008000000000010000000000000024000000000000000300000000000000080000000000000009000000000000002f6465762f70707000000000000000000400000000000000fdffffffffffffff04000000018000002d7d2827000000000000000000000000050000000000000009000000800000002f6465762f70707000000000000000000300000000000000200000000000000001000000010000002e0000000000000002000000000000000008000000000000010000000800000024000000000000000300000000000000000000000000000000000000fffffeff"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 07:20:26 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 07:20:26 executing program 2: r0 = fork() waitid(0x1, 0xffffffffffffffff, 0x0, 0x1, 0x0) waitid(0x0, r0, &(0x7f0000000140), 0x1, 0x0) r1 = fork() waitid(0x1, r1, 0x0, 0x1, &(0x7f0000000000)) r2 = gettid() prlimit64(r2, 0xc94a3c1257f61ef0, 0x0, 0x0) prlimit64(r2, 0xe, &(0x7f00000000c0)={0x1000, 0x1}, &(0x7f0000000100)) 07:20:26 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000e98000/0x3000)=nil) getrandom(&(0x7f0000000040)=""/197, 0xc5, 0x2) mmap$usbfs(&(0x7f0000e98000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x4) 07:20:26 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ccd000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/77) shmget$private(0x0, 0x1000, 0x400, &(0x7f0000d3b000/0x1000)=nil) 07:20:26 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:26 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 07:20:27 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ccd000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/77) 07:20:27 executing program 0: shmget$private(0x0, 0x400000, 0x800, &(0x7f0000bfd000/0x400000)=nil) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r0, 0xf, &(0x7f0000002040)={0x7, 0x7ff}, &(0x7f0000002080)) 07:20:27 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000e98000/0x3000)=nil) getrandom(&(0x7f0000000040)=""/197, 0xc5, 0x2) mmap$usbfs(&(0x7f0000e98000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x4) 07:20:27 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:27 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="010000000000000002000000000000000c000000000400002c2f7d262c29265ea00c2a210000000006000000000000000100008000000000010000000000000024000000000000000300000000000000080000000000000009000000000000002f6465762f70707000000000000000000400000000000000fdffffffffffffff04000000018000002d7d2827000000000000000000000000050000000000000009000000800000002f6465762f70707000000000000000000300000000000000200000000000000001000000010000002e0000000000000002000000000000000008000000000000010000000800000024000000000000000300000000000000000000000000000000000000fffffeff"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 07:20:27 executing program 0: shmget$private(0x0, 0x400000, 0x800, &(0x7f0000bfd000/0x400000)=nil) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r0, 0xf, &(0x7f0000002040)={0x7, 0x7ff}, &(0x7f0000002080)) 07:20:27 executing program 4: shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ccd000/0x2000)=nil) 07:20:27 executing program 2: syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) shmget$private(0x0, 0x400000, 0x800, &(0x7f0000bfd000/0x400000)=nil) 07:20:27 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:27 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000e98000/0x3000)=nil) getrandom(&(0x7f0000000040)=""/197, 0xc5, 0x2) mmap$usbfs(&(0x7f0000e98000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x4) 07:20:27 executing program 3: shmget$private(0x0, 0x400000, 0x800, &(0x7f0000bfd000/0x400000)=nil) shmget(0x0, 0x3000, 0x54000000, &(0x7f0000f10000/0x3000)=nil) 07:20:27 executing program 4: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ccd000/0x2000)=nil) 07:20:27 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) write$FUSE_OPEN(r1, &(0x7f0000000040)={0x20}, 0x20) ioctl$NBD_CLEAR_QUE(r0, 0xab05) socket$inet_tcp(0x2, 0x1, 0x0) 07:20:27 executing program 0: shmget$private(0x0, 0x400000, 0x800, &(0x7f0000bfd000/0x400000)=nil) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r0, 0xf, &(0x7f0000002040)={0x7, 0x7ff}, &(0x7f0000002080)) 07:20:27 executing program 4: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ccd000/0x2000)=nil) 07:20:27 executing program 3: shmget$private(0x0, 0x400000, 0x800, &(0x7f0000bfd000/0x400000)=nil) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_disconnect={0x80}) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x4, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000040)=0x266e) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000c0a000/0x3000)=nil) 07:20:27 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:27 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000e98000/0x3000)=nil) getrandom(&(0x7f0000000040)=""/197, 0xc5, 0x2) 07:20:27 executing program 0: shmget$private(0x0, 0x400000, 0x800, &(0x7f0000bfd000/0x400000)=nil) prlimit64(0x0, 0xf, &(0x7f0000002040)={0x7, 0x7ff}, &(0x7f0000002080)) 07:20:27 executing program 4: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ccd000/0x2000)=nil) 07:20:27 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:27 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x9, 0x7, 0x8}, 0x40) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', r0}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000440)={&(0x7f0000000100)="94cc2acf42c1e15529a41986547e3f2691607e854f1211fcf466b784ab57c7ec69890f65e21031f421001e23bc815459c2a1193ff6edf6cd07ddd548f86e220be93c1fe496ba7a363831b230f089dcdb1d852d1b0c6c14ef4be8e0417928329735de9cb09e46e9e9ec7701dcfd8bd5da7db2450c1950dee92456e70b5c217bca8e991da245c4d5f7261bab2ddc72dc99eaada5a2e84d6c415e22fb76db63cab66b0efcbd1bb124f485b1dd63364f856804671e0570d050dbbcac292a707356", &(0x7f00000001c0)=""/193, &(0x7f00000002c0)="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", &(0x7f00000003c0)="7ee6a0a04b6230e0ad7e5edea9bb12eedef3cfc0bfdda45462b179c879bd60e125cc9db70eccbcf84373c0d313ddf7d30a2ead3e4b588db6c4b4d958f79da3ce3ef1be93f0216d", 0x4, r0, 0x4}, 0x38) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x200) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000080)={0x9}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000040)) 07:20:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0xa6a00) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x3, 0x200) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000100)={0x7, 0x0, 0x10000}) 07:20:27 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000e98000/0x3000)=nil) getrandom(&(0x7f0000000040)=""/197, 0xc5, 0x2) 07:20:27 executing program 0: prlimit64(0x0, 0xf, &(0x7f0000002040)={0x7, 0x7ff}, &(0x7f0000002080)) 07:20:27 executing program 4: shmget$private(0x0, 0x400000, 0x800, &(0x7f0000bfd000/0x400000)=nil) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x7, 0xffff0001, 0xd180, 0x4, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000200)={&(0x7f0000000000)="0ba9b42223e1dd32d4d6c3", &(0x7f0000000040)=""/47, &(0x7f0000000080)="066bd8a7f06df76ba1f0cd7f8e1d7b4544f3b15ee714aedb84ac6269c52957034dba98b083bff513f4f9a4076d0fd785726f33faa3ee4e530e45554cdbf2fe11690481a3d7ac8862a81d16abf7384c7a1752bc19d10294c53e2b5b902d5f67aeb20c23ad2d92c07f0c7c258db4eb597fed79249aeb05186d18582e1ad1e3f98ac03f18969a8125787d9cdb67ca97e5cb39879aa3b472", &(0x7f0000000140)="130731e4078616ec1794298d056f245207665db9bb1cedf2dd15df7ad6e63461112060d8bf75950eba6a7ba2a55eb3ec09daaeaed9a2b29f2dc628a494aac11525deb564a34cc6daf48f082961f8787918989f48ee57df230b7c28f67e", 0x2, r0}, 0x38) 07:20:27 executing program 3: shmget$private(0x0, 0x400000, 0x2, &(0x7f0000bfd000/0x400000)=nil) 07:20:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0xa6a00) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x3, 0x200) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000100)={0x7, 0x0, 0x10000}) 07:20:27 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'gre0\x00'}) shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ff7000/0x2000)=nil) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xffffffffffffffe0, 0x8100) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000040)=0x100) r2 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff6000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) 07:20:27 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000e98000/0x3000)=nil) getrandom(&(0x7f0000000040)=""/197, 0xc5, 0x2) 07:20:27 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000002040)={0x7, 0x7ff}, &(0x7f0000002080)) 07:20:27 executing program 4: shmget$private(0x0, 0x400000, 0x800, &(0x7f0000bfd000/0x400000)=nil) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x7, 0xffff0001, 0xd180, 0x4, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000200)={&(0x7f0000000000)="0ba9b42223e1dd32d4d6c3", &(0x7f0000000040)=""/47, &(0x7f0000000080)="066bd8a7f06df76ba1f0cd7f8e1d7b4544f3b15ee714aedb84ac6269c52957034dba98b083bff513f4f9a4076d0fd785726f33faa3ee4e530e45554cdbf2fe11690481a3d7ac8862a81d16abf7384c7a1752bc19d10294c53e2b5b902d5f67aeb20c23ad2d92c07f0c7c258db4eb597fed79249aeb05186d18582e1ad1e3f98ac03f18969a8125787d9cdb67ca97e5cb39879aa3b472", &(0x7f0000000140)="130731e4078616ec1794298d056f245207665db9bb1cedf2dd15df7ad6e63461112060d8bf75950eba6a7ba2a55eb3ec09daaeaed9a2b29f2dc628a494aac11525deb564a34cc6daf48f082961f8787918989f48ee57df230b7c28f67e", 0x2, r0}, 0x38) 07:20:27 executing program 3: r0 = shmget$private(0x0, 0x400000, 0x800, &(0x7f0000bfd000/0x400000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/68) r1 = shmget(0x0, 0x2000, 0x800, &(0x7f0000ccb000/0x2000)=nil) r2 = shmget(0x0, 0x3000, 0x8, &(0x7f0000dca000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000100)=""/109) shmctl$SHM_LOCK(r1, 0xb) 07:20:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0xa6a00) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x3, 0x200) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000100)={0x7, 0x0, 0x10000}) 07:20:27 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000e98000/0x3000)=nil) mmap$usbfs(&(0x7f0000e98000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x4) 07:20:27 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'gre0\x00'}) shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ff7000/0x2000)=nil) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xffffffffffffffe0, 0x8100) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000040)=0x100) r2 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff6000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) 07:20:27 executing program 3: r0 = shmget$private(0x0, 0x400000, 0x800, &(0x7f0000bfd000/0x400000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/68) r1 = shmget(0x0, 0x2000, 0x800, &(0x7f0000ccb000/0x2000)=nil) r2 = shmget(0x0, 0x3000, 0x8, &(0x7f0000dca000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000100)=""/109) shmctl$SHM_LOCK(r1, 0xb) 07:20:27 executing program 4: shmget$private(0x0, 0x400000, 0x800, &(0x7f0000bfd000/0x400000)=nil) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x7, 0xffff0001, 0xd180, 0x4, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000200)={&(0x7f0000000000)="0ba9b42223e1dd32d4d6c3", &(0x7f0000000040)=""/47, &(0x7f0000000080)="066bd8a7f06df76ba1f0cd7f8e1d7b4544f3b15ee714aedb84ac6269c52957034dba98b083bff513f4f9a4076d0fd785726f33faa3ee4e530e45554cdbf2fe11690481a3d7ac8862a81d16abf7384c7a1752bc19d10294c53e2b5b902d5f67aeb20c23ad2d92c07f0c7c258db4eb597fed79249aeb05186d18582e1ad1e3f98ac03f18969a8125787d9cdb67ca97e5cb39879aa3b472", &(0x7f0000000140)="130731e4078616ec1794298d056f245207665db9bb1cedf2dd15df7ad6e63461112060d8bf75950eba6a7ba2a55eb3ec09daaeaed9a2b29f2dc628a494aac11525deb564a34cc6daf48f082961f8787918989f48ee57df230b7c28f67e", 0x2, r0}, 0x38) 07:20:27 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000002040)={0x7, 0x7ff}, &(0x7f0000002080)) 07:20:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0xa6a00) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000080), 0x3, 0x200) 07:20:27 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000e98000/0x3000)=nil) mmap$usbfs(&(0x7f0000e98000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x4) 07:20:27 executing program 3: r0 = shmget$private(0x0, 0x400000, 0x800, &(0x7f0000bfd000/0x400000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/68) r1 = shmget(0x0, 0x2000, 0x800, &(0x7f0000ccb000/0x2000)=nil) r2 = shmget(0x0, 0x3000, 0x8, &(0x7f0000dca000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000100)=""/109) shmctl$SHM_LOCK(r1, 0xb) 07:20:27 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'gre0\x00'}) shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ff7000/0x2000)=nil) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xffffffffffffffe0, 0x8100) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000040)=0x100) r2 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff6000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) 07:20:28 executing program 4: shmget$private(0x0, 0x400000, 0x800, &(0x7f0000bfd000/0x400000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x7, 0xffff0001, 0xd180, 0x4, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) 07:20:28 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000002040)={0x7, 0x7ff}, &(0x7f0000002080)) 07:20:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0xa6a00) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)) 07:20:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x80}) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) 07:20:28 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000e98000/0x3000)=nil) mmap$usbfs(&(0x7f0000e98000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x4) 07:20:28 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'gre0\x00'}) shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ff7000/0x2000)=nil) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xffffffffffffffe0, 0x8100) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000040)=0x100) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff6000/0x3000)=nil) 07:20:28 executing program 0: prlimit64(0x0, 0xf, 0x0, &(0x7f0000002080)) 07:20:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x7, 0xffff0001, 0xd180, 0x4, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) 07:20:28 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0xa6a00) 07:20:28 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) getrandom(&(0x7f0000000040)=""/197, 0xc5, 0x2) mmap$usbfs(&(0x7f0000e98000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x4) 07:20:28 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) ioctl$NBD_CLEAR_QUE(r2, 0xab05) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x0, r5}, 0x10) r7 = accept4(r0, &(0x7f0000000140)=@caif=@rfm, &(0x7f00000001c0)=0x80, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000200)=""/201, &(0x7f0000000300)=0xc9) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r8, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r8, &(0x7f0000000040)={0x10, 0x0, r9}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r2, &(0x7f0000002380)={0x90, 0x24, r9, {0x4, 0x1, 0x6874, 0x81, 0x5ef, 0x4, {0x5, 0x8, 0x4e, 0x0, 0x0, 0x8, 0x3, 0x2, 0xa15, 0xc000, 0x0, r10, r6, 0xfc00, 0x4}}}, 0x90) write$FUSE_POLL(r2, &(0x7f0000000040)={0x18, 0x0, r5, {0x9}}, 0x18) 07:20:28 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'gre0\x00'}) shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ff7000/0x2000)=nil) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xffffffffffffffe0, 0x8100) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000040)=0x100) 07:20:28 executing program 0: prlimit64(0x0, 0xf, 0x0, &(0x7f0000002080)) 07:20:28 executing program 5: syz_open_dev$dri(0x0, 0x0, 0xa6a00) 07:20:28 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:20:28 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) getrandom(&(0x7f0000000040)=""/197, 0xc5, 0x2) mmap$usbfs(&(0x7f0000e98000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x4) 07:20:28 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) ioctl$NBD_CLEAR_QUE(r2, 0xab05) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x0, r5}, 0x10) r7 = accept4(r0, &(0x7f0000000140)=@caif=@rfm, &(0x7f00000001c0)=0x80, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000200)=""/201, &(0x7f0000000300)=0xc9) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r8, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r8, &(0x7f0000000040)={0x10, 0x0, r9}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r2, &(0x7f0000002380)={0x90, 0x24, r9, {0x4, 0x1, 0x6874, 0x81, 0x5ef, 0x4, {0x5, 0x8, 0x4e, 0x0, 0x0, 0x8, 0x3, 0x2, 0xa15, 0xc000, 0x0, r10, r6, 0xfc00, 0x4}}}, 0x90) write$FUSE_POLL(r2, &(0x7f0000000040)={0x18, 0x0, r5, {0x9}}, 0x18) 07:20:28 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'gre0\x00'}) shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ff7000/0x2000)=nil) syz_open_dev$usbfs(&(0x7f0000000080), 0xffffffffffffffe0, 0x8100) 07:20:28 executing program 0: prlimit64(0x0, 0xf, 0x0, &(0x7f0000002080)) 07:20:28 executing program 5: syz_open_dev$dri(0x0, 0x0, 0xa6a00) 07:20:28 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:20:28 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'gre0\x00'}) shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ff7000/0x2000)=nil) 07:20:28 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) getrandom(&(0x7f0000000040)=""/197, 0xc5, 0x2) mmap$usbfs(&(0x7f0000e98000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x4) 07:20:28 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) ioctl$NBD_CLEAR_QUE(r2, 0xab05) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x0, r5}, 0x10) r7 = accept4(r0, &(0x7f0000000140)=@caif=@rfm, &(0x7f00000001c0)=0x80, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000200)=""/201, &(0x7f0000000300)=0xc9) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r8, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r8, &(0x7f0000000040)={0x10, 0x0, r9}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r2, &(0x7f0000002380)={0x90, 0x24, r9, {0x4, 0x1, 0x6874, 0x81, 0x5ef, 0x4, {0x5, 0x8, 0x4e, 0x0, 0x0, 0x8, 0x3, 0x2, 0xa15, 0xc000, 0x0, r10, r6, 0xfc00, 0x4}}}, 0x90) write$FUSE_POLL(r2, &(0x7f0000000040)={0x18, 0x0, r5, {0x9}}, 0x18) 07:20:28 executing program 0: prlimit64(0x0, 0xf, &(0x7f0000002040)={0x0, 0x7ff}, &(0x7f0000002080)) 07:20:28 executing program 5: syz_open_dev$dri(0x0, 0x0, 0xa6a00) 07:20:28 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'gre0\x00'}) 07:20:28 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000e98000/0x3000)=nil) getrandom(&(0x7f0000000040)=""/197, 0xc5, 0x2) mmap$usbfs(&(0x7f0000e98000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x4) 07:20:28 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:20:28 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) 07:20:28 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) ioctl$NBD_CLEAR_QUE(r2, 0xab05) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x0, r5}, 0x10) r7 = accept4(r0, &(0x7f0000000140)=@caif=@rfm, &(0x7f00000001c0)=0x80, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000200)=""/201, &(0x7f0000000300)=0xc9) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r8, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r8, &(0x7f0000000040)={0x10, 0x0, r9}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r2, &(0x7f0000002380)={0x90, 0x24, r9, {0x4, 0x1, 0x6874, 0x81, 0x5ef, 0x4, {0x5, 0x8, 0x4e, 0x0, 0x0, 0x8, 0x3, 0x2, 0xa15, 0xc000, 0x0, r10, r6, 0xfc00, 0x4}}}, 0x90) 07:20:28 executing program 0: prlimit64(0x0, 0xf, &(0x7f0000002040), &(0x7f0000002080)) 07:20:28 executing program 2: ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'gre0\x00'}) 07:20:28 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000e98000/0x3000)=nil) getrandom(&(0x7f0000000040)=""/197, 0xc5, 0x2) mmap$usbfs(&(0x7f0000e98000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x4) 07:20:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x0, 0xffff0001, 0xd180, 0x4, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) 07:20:28 executing program 2: ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'gre0\x00'}) 07:20:28 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) 07:20:28 executing program 0: prlimit64(0x0, 0xf, &(0x7f0000002040), 0x0) 07:20:28 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) ioctl$NBD_CLEAR_QUE(r2, 0xab05) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x0, r5}, 0x10) r6 = accept4(r0, &(0x7f0000000140)=@caif=@rfm, &(0x7f00000001c0)=0x80, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f0000000200)=""/201, &(0x7f0000000300)=0xc9) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r7, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r7, &(0x7f0000000040)={0x10, 0x0, r8}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020}, 0x2020) 07:20:28 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000e98000/0x3000)=nil) getrandom(&(0x7f0000000040)=""/197, 0xc5, 0x2) mmap$usbfs(&(0x7f0000e98000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x4) 07:20:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x0, 0xffff0001, 0xd180, 0x4, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) 07:20:28 executing program 2: ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'gre0\x00'}) 07:20:28 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) 07:20:28 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) ioctl$NBD_CLEAR_QUE(r2, 0xab05) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x0, r5}, 0x10) r6 = accept4(r0, &(0x7f0000000140)=@caif=@rfm, &(0x7f00000001c0)=0x80, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f0000000200)=""/201, &(0x7f0000000300)=0xc9) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r7, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r7, &(0x7f0000000040)={0x10, 0x0, r8}, 0x10) 07:20:28 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000e98000/0x3000)=nil) getrandom(&(0x7f0000000040)=""/197, 0xc5, 0x2) mmap$usbfs(&(0x7f0000e98000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x4) 07:20:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x0, 0xffff0001, 0xd180, 0x4, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) 07:20:29 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) ioctl$NBD_CLEAR_QUE(r2, 0xab05) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x0, r5}, 0x10) r7 = accept4(r0, &(0x7f0000000140)=@caif=@rfm, &(0x7f00000001c0)=0x80, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000200)=""/201, &(0x7f0000000300)=0xc9) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r8, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r8, &(0x7f0000000040)={0x10, 0x0, r9}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r2, &(0x7f0000002380)={0x90, 0x24, r9, {0x4, 0x1, 0x6874, 0x81, 0x5ef, 0x4, {0x5, 0x8, 0x4e, 0x0, 0x0, 0x8, 0x3, 0x2, 0xa15, 0xc000, 0x0, r10, r6, 0xfc00, 0x4}}}, 0x90) 07:20:29 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) ioctl$NBD_CLEAR_QUE(r2, 0xab05) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x0, r5}, 0x10) r7 = accept4(r0, &(0x7f0000000140)=@caif=@rfm, &(0x7f00000001c0)=0x80, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000200)=""/201, &(0x7f0000000300)=0xc9) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r8, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r8, &(0x7f0000000040)={0x10, 0x0, r9}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r2, &(0x7f0000002380)={0x90, 0x24, r9, {0x4, 0x1, 0x6874, 0x81, 0x5ef, 0x4, {0x5, 0x8, 0x4e, 0x0, 0x0, 0x8, 0x3, 0x2, 0xa15, 0xc000, 0x0, r10, r6, 0xfc00, 0x4}}}, 0x90) 07:20:29 executing program 2: socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'gre0\x00'}) 07:20:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x7, 0x0, 0xd180, 0x4, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) 07:20:29 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) ioctl$NBD_CLEAR_QUE(r2, 0xab05) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x0, r5}, 0x10) r6 = accept4(r0, &(0x7f0000000140)=@caif=@rfm, &(0x7f00000001c0)=0x80, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f0000000200)=""/201, &(0x7f0000000300)=0xc9) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r7, &(0x7f0000003440)={0x2020}, 0x2020) 07:20:29 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000e98000/0x3000)=nil) getrandom(&(0x7f0000000040)=""/197, 0xc5, 0x2) mmap$usbfs(&(0x7f0000e98000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x4) 07:20:29 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) ioctl$NBD_CLEAR_QUE(r2, 0xab05) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x0, r5}, 0x10) r6 = accept4(r0, &(0x7f0000000140)=@caif=@rfm, &(0x7f00000001c0)=0x80, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f0000000200)=""/201, &(0x7f0000000300)=0xc9) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r7, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r7, &(0x7f0000000040)={0x10, 0x0, r8}, 0x10) 07:20:29 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) ioctl$NBD_CLEAR_QUE(r2, 0xab05) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x0, r5}, 0x10) r7 = accept4(r0, &(0x7f0000000140)=@caif=@rfm, &(0x7f00000001c0)=0x80, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000200)=""/201, &(0x7f0000000300)=0xc9) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r8, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r8, &(0x7f0000000040)={0x10, 0x0, r9}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r2, &(0x7f0000002380)={0x90, 0x24, r9, {0x4, 0x1, 0x6874, 0x81, 0x5ef, 0x4, {0x5, 0x8, 0x4e, 0x0, 0x0, 0x8, 0x3, 0x2, 0xa15, 0xc000, 0x0, r10, r6, 0xfc00, 0x4}}}, 0x90) 07:20:29 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) ioctl$NBD_CLEAR_QUE(r2, 0xab05) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x0, r5}, 0x10) r6 = accept4(r0, &(0x7f0000000140)=@caif=@rfm, &(0x7f00000001c0)=0x80, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f0000000200)=""/201, &(0x7f0000000300)=0xc9) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 07:20:29 executing program 2: socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'gre0\x00'}) 07:20:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x7, 0x0, 0x0, 0x4, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) 07:20:29 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) ioctl$NBD_CLEAR_QUE(r2, 0xab05) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x0, r5}, 0x10) r6 = accept4(r0, &(0x7f0000000140)=@caif=@rfm, &(0x7f00000001c0)=0x80, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f0000000200)=""/201, &(0x7f0000000300)=0xc9) 07:20:29 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000e98000/0x3000)=nil) getrandom(&(0x7f0000000040)=""/197, 0xc5, 0x2) mmap$usbfs(&(0x7f0000e98000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x4) 07:20:29 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) ioctl$NBD_CLEAR_QUE(r2, 0xab05) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x0, r5}, 0x10) r6 = accept4(r0, &(0x7f0000000140)=@caif=@rfm, &(0x7f00000001c0)=0x80, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f0000000200)=""/201, &(0x7f0000000300)=0xc9) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 07:20:29 executing program 2: socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'gre0\x00'}) 07:20:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x7, 0x0, 0x0, 0x0, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) 07:20:29 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) ioctl$NBD_CLEAR_QUE(r2, 0xab05) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x0, r5}, 0x10) r7 = accept4(r0, &(0x7f0000000140)=@caif=@rfm, &(0x7f00000001c0)=0x80, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000200)=""/201, &(0x7f0000000300)=0xc9) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r8, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r8, &(0x7f0000000040)={0x10, 0x0, r9}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r2, &(0x7f0000002380)={0x90, 0x24, r9, {0x4, 0x1, 0x6874, 0x81, 0x5ef, 0x4, {0x5, 0x8, 0x4e, 0x0, 0x0, 0x8, 0x3, 0x2, 0xa15, 0xc000, 0x0, r10, r6, 0xfc00, 0x4}}}, 0x90) 07:20:29 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) ioctl$NBD_CLEAR_QUE(r2, 0xab05) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x0, r5}, 0x10) accept4(r0, &(0x7f0000000140)=@caif=@rfm, &(0x7f00000001c0)=0x80, 0x0) 07:20:29 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) getrandom(&(0x7f0000000040)=""/197, 0xc5, 0x2) mmap$usbfs(&(0x7f0000e98000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x4) 07:20:29 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000e98000/0x3000)=nil) getrandom(0x0, 0x0, 0x2) mmap$usbfs(&(0x7f0000e98000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x4) 07:20:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) 07:20:29 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, 0x0) 07:20:29 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) ioctl$NBD_CLEAR_QUE(r2, 0xab05) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x0, r5}, 0x10) r6 = accept4(r0, &(0x7f0000000140)=@caif=@rfm, &(0x7f00000001c0)=0x80, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f0000000200)=""/201, &(0x7f0000000300)=0xc9) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r7, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r7, &(0x7f0000000040)={0x10, 0x0, r8}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020}, 0x2020) 07:20:29 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) ioctl$NBD_CLEAR_QUE(r2, 0xab05) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x0, r5}, 0x10) 07:20:29 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000e98000/0x3000)=nil) getrandom(0x0, 0x0, 0x2) mmap$usbfs(&(0x7f0000e98000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x4) 07:20:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) 07:20:29 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, 0x0) 07:20:29 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) 07:20:29 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) ioctl$NBD_CLEAR_QUE(r2, 0xab05) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020}, 0x2020) 07:20:29 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) ioctl$NBD_CLEAR_QUE(r2, 0xab05) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x0, r5}, 0x10) r6 = accept4(r0, &(0x7f0000000140)=@caif=@rfm, &(0x7f00000001c0)=0x80, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f0000000200)=""/201, &(0x7f0000000300)=0xc9) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r7, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r7, &(0x7f0000000040)={0x10, 0x0, r8}, 0x10) 07:20:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) 07:20:29 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, 0x0) 07:20:29 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000e98000/0x3000)=nil) getrandom(0x0, 0x0, 0x2) mmap$usbfs(&(0x7f0000e98000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x4) 07:20:29 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) 07:20:29 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) ioctl$NBD_CLEAR_QUE(r2, 0xab05) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 07:20:29 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) ioctl$NBD_CLEAR_QUE(r2, 0xab05) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x0, r5}, 0x10) r6 = accept4(r0, &(0x7f0000000140)=@caif=@rfm, &(0x7f00000001c0)=0x80, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f0000000200)=""/201, &(0x7f0000000300)=0xc9) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r7, &(0x7f0000003440)={0x2020}, 0x2020) 07:20:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x7, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) 07:20:29 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) ioctl$NBD_CLEAR_QUE(r2, 0xab05) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x0, r5}, 0x10) r6 = accept4(r0, &(0x7f0000000140)=@caif=@rfm, &(0x7f00000001c0)=0x80, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f0000000200)=""/201, &(0x7f0000000300)=0xc9) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r7, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r7, &(0x7f0000000040)={0x10, 0x0, r8}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020}, 0x2020) 07:20:29 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000e98000/0x3000)=nil) getrandom(&(0x7f0000000040)=""/197, 0xc5, 0x0) mmap$usbfs(&(0x7f0000e98000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x4) 07:20:29 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) 07:20:29 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) ioctl$NBD_CLEAR_QUE(r2, 0xab05) 07:20:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x7, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x40) 07:20:30 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) ioctl$NBD_CLEAR_QUE(r2, 0xab05) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x0, r5}, 0x10) r6 = accept4(r0, &(0x7f0000000140)=@caif=@rfm, &(0x7f00000001c0)=0x80, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f0000000200)=""/201, &(0x7f0000000300)=0xc9) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 07:20:30 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:20:30 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'gre0\x00'}) shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ff7000/0x2000)=nil) 07:20:30 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000e98000/0x3000)=nil) getrandom(&(0x7f0000000040)=""/197, 0xc5, 0x0) mmap$usbfs(&(0x7f0000e98000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x4) 07:20:30 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x1, 0x4) 07:20:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x7, 0x0, 0x0, 0x0, 0x80, 0x1}, 0x40) 07:20:30 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) ioctl$NBD_CLEAR_QUE(r2, 0xab05) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x0, r5}, 0x10) r6 = accept4(r0, &(0x7f0000000140)=@caif=@rfm, &(0x7f00000001c0)=0x80, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f0000000200)=""/201, &(0x7f0000000300)=0xc9) 07:20:30 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:20:30 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) 07:20:30 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) getrandom(&(0x7f0000000040)=""/197, 0xc5, 0x2) mmap$usbfs(&(0x7f0000e98000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x4) 07:20:30 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000e98000/0x3000)=nil) getrandom(&(0x7f0000000040)=""/197, 0xc5, 0x0) mmap$usbfs(&(0x7f0000e98000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x4) 07:20:30 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) ioctl$NBD_CLEAR_QUE(r2, 0xab05) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x0, r5}, 0x10) r7 = accept4(r0, &(0x7f0000000140)=@caif=@rfm, &(0x7f00000001c0)=0x80, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000200)=""/201, &(0x7f0000000300)=0xc9) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r8, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r8, &(0x7f0000000040)={0x10, 0x0, r9}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r2, &(0x7f0000002380)={0x90, 0x24, r9, {0x4, 0x1, 0x6874, 0x81, 0x5ef, 0x4, {0x5, 0x8, 0x4e, 0x0, 0x0, 0x8, 0x3, 0x2, 0xa15, 0xc000, 0x0, r10, r6, 0xfc00, 0x4}}}, 0x90) write$FUSE_POLL(r2, &(0x7f0000000040)={0x18, 0x0, r5, {0x9}}, 0x18) 07:20:30 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) ioctl$NBD_CLEAR_QUE(r2, 0xab05) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x0, r5}, 0x10) accept4(r0, &(0x7f0000000140)=@caif=@rfm, &(0x7f00000001c0)=0x80, 0x0) 07:20:30 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:20:30 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) 07:20:30 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000e98000/0x3000)=nil) getrandom(&(0x7f0000000040)=""/197, 0xc5, 0x2) mmap$usbfs(&(0x7f0000e98000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) 07:20:30 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0x0, r1}, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000040)={0x10, 0x0, r4}, 0x10) write$FUSE_DIRENT(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="e800000000000000", @ANYRES64=r4, @ANYBLOB="03000000000000007f000000000000000a000000070000002f6465762f637573650000000000000006000000001329a115b2553e9cdf08a3424d0e434a00000052631113000000000a000000000000002f6465762f63757365000000000000000500000000000000380e0000000000000a000000010000002f6465762f63757365000000000000000300000000000000060000000000030000000000000000000000000000000a000000020000002f6465762f637573650000000000000002000000000000001f0000000000000001000000579e00002d00"], 0xe8) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, r1}, 0x10) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r5, 0x40106439, &(0x7f0000000040)) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r7, 0x0, 0x0) read$FUSE(r7, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r6, &(0x7f0000000040)={0x10, 0x0, r8}, 0x10) write$FUSE_OPEN(r2, &(0x7f00000001c0)={0x20, 0x0, r8}, 0x20) 07:20:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000080)=@usbdevfs_connect={0xfffffbff}) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x80000) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) accept(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) shmget$private(0x0, 0x400000, 0x800, &(0x7f0000bfd000/0x400000)=nil) socket$bt_rfcomm(0x1f, 0x3, 0x3) 07:20:30 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) 07:20:30 executing program 3: socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xcf609) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 07:20:30 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) ioctl$NBD_CLEAR_QUE(r2, 0xab05) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x0, r5}, 0x10) 07:20:30 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) ioctl$NBD_CLEAR_QUE(r2, 0xab05) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x0, r5}, 0x10) accept4(r0, &(0x7f0000000140)=@caif=@rfm, &(0x7f00000001c0)=0x80, 0x0) 07:20:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000080)=@usbdevfs_connect={0xfffffbff}) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x80000) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) accept(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) shmget$private(0x0, 0x400000, 0x800, &(0x7f0000bfd000/0x400000)=nil) socket$bt_rfcomm(0x1f, 0x3, 0x3) 07:20:30 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000e98000/0x3000)=nil) getrandom(&(0x7f0000000040)=""/197, 0xc5, 0x2) mmap$usbfs(&(0x7f0000e98000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) 07:20:30 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) 07:20:30 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) ioctl$NBD_CLEAR_QUE(r2, 0xab05) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020}, 0x2020) 07:20:30 executing program 3: socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xcf609) 07:20:30 executing program 4: socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xcf609) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 07:20:30 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000e98000/0x3000)=nil) getrandom(&(0x7f0000000040)=""/197, 0xc5, 0x2) mmap$usbfs(&(0x7f0000e98000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) 07:20:30 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) 07:20:30 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000e98000/0x3000)=nil) getrandom(&(0x7f0000000040)=""/197, 0xc5, 0x2) mmap$usbfs(&(0x7f0000e98000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x4) 07:20:30 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) ioctl$NBD_CLEAR_QUE(r2, 0xab05) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x0, r5}, 0x10) 07:20:30 executing program 3: socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xcf609) 07:20:30 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) ioctl$NBD_CLEAR_QUE(r2, 0xab05) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 07:20:30 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x17247) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000040)) shmget$private(0x0, 0x400000, 0x800, &(0x7f0000bfd000/0x400000)=nil) 07:20:30 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) 07:20:30 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000e98000/0x3000)=nil) getrandom(&(0x7f0000000040)=""/197, 0xc5, 0x2) mmap$usbfs(&(0x7f0000e98000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x4) 07:20:30 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) fork() 07:20:30 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) ioctl$NBD_CLEAR_QUE(r2, 0xab05) 07:20:30 executing program 3: socket$inet_smc(0x2b, 0x1, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xcf609) 07:20:31 executing program 4: socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xcf609) 07:20:31 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x40) 07:20:31 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000e98000/0x3000)=nil) getrandom(&(0x7f0000000040)=""/197, 0xc5, 0x2) mmap$usbfs(&(0x7f0000e98000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x4) 07:20:31 executing program 3: socket$inet_smc(0x2b, 0x1, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xcf609) 07:20:31 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x1, 0x4) 07:20:31 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000e98000/0x3000)=nil) getrandom(&(0x7f0000000040)=""/197, 0xc5, 0x2) mmap$usbfs(&(0x7f0000e98000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x4) 07:20:31 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 07:20:31 executing program 4: socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xcf609) 07:20:31 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000e98000/0x3000)=nil) getrandom(&(0x7f0000000040)=""/197, 0xc5, 0x2) mmap$usbfs(&(0x7f0000e98000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x0) 07:20:31 executing program 3: socket$inet_smc(0x2b, 0x1, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xcf609) 07:20:31 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) 07:20:31 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000002440)={0x9}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x1, 0x4) 07:20:31 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) fork() 07:20:31 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000e98000/0x3000)=nil) getrandom(&(0x7f0000000040)=""/197, 0xc5, 0x2) mmap$usbfs(&(0x7f0000e98000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x0) 07:20:31 executing program 4: socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xcf609) 07:20:31 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xcf609) 07:20:31 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcf609) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) accept(r0, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) 07:20:31 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000500)) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000000)) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0xffffffffffffffff, 0x293200) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000040)) 07:20:31 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000e98000/0x3000)=nil) getrandom(&(0x7f0000000040)=""/197, 0xc5, 0x2) mmap$usbfs(&(0x7f0000e98000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x0) 07:20:31 executing program 4: socket$inet_smc(0x2b, 0x1, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xcf609) 07:20:31 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xcf609) 07:20:31 executing program 5: socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xcf609) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 07:20:31 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) fork() 07:20:31 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000500)) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000000)) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0xffffffffffffffff, 0x293200) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000040)) 07:20:31 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xcf609) 07:20:31 executing program 4: socket$inet_smc(0x2b, 0x1, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xcf609) 07:20:31 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000077805000900"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:31 executing program 5: socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xcf609) 07:20:31 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000500)) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000000)) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0xffffffffffffffff, 0x293200) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000040)) 07:20:31 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xcf609) 07:20:31 executing program 4: socket$inet_smc(0x2b, 0x1, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xcf609) 07:20:31 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000077805000900"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:31 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) fork() 07:20:31 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xcf609) 07:20:32 executing program 3: syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xcf609) 07:20:32 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000500)) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f00000000c0), 0xffffffffffffffff, 0x293200) 07:20:32 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000077805000900"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:32 executing program 5: socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xcf609) 07:20:32 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) 07:20:32 executing program 3: syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xcf609) 07:20:32 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xcf609) 07:20:32 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xcf609) 07:20:32 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000500)) syz_open_dev$dri(&(0x7f00000000c0), 0xffffffffffffffff, 0x293200) 07:20:32 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10}, 0x10) shmget$private(0x0, 0x400000, 0x800, &(0x7f0000bfd000/0x400000)=nil) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000c28000/0x4000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000080)=""/173) shmget$private(0x0, 0x1000, 0x10, &(0x7f0000f1d000/0x1000)=nil) read$FUSE(r0, &(0x7f00000023c0)={0x2020, 0x0, 0x0}, 0x2020) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) getgroups(0x8, &(0x7f0000002180)=[0xee00, 0xee01, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0]) write$FUSE_DIRENTPLUS(r3, &(0x7f00000021c0)={0x1f0, 0x0, r4, [{{0x0, 0x2, 0x36f, 0x0, 0x2, 0x6, {0x2, 0x2e, 0x1, 0x8, 0x8, 0x4, 0x7, 0x4, 0x2, 0x6000, 0x3, 0x0, 0xee00, 0x80000001, 0x3}}, {0x3, 0x3, 0x0, 0x1000}}, {{0x6, 0x2, 0x5, 0x6, 0xffff0000, 0x101, {0x2, 0x0, 0x4, 0x0, 0x27, 0x401, 0x3f80000, 0x1, 0x80000000, 0x1000, 0x1f, 0xee00, r5, 0xdb6, 0xfffff001}}, {0x5, 0x0, 0x1, 0x7, '$'}}, {{0x6, 0x3, 0x3ff, 0x5, 0x8, 0xffff, {0x5, 0xdd6, 0x7, 0x7, 0xfff, 0x3, 0x4815, 0x8, 0x3ff, 0x2000, 0x25288cff, 0xee01, 0xee00, 0x9, 0x8e}}, {0x4, 0x1, 0xa, 0x9, '/dev/fuse\x00'}}]}, 0x1f0) write$FUSE_GETXATTR(r0, &(0x7f0000004400)={0x18, 0xffffffffffffffda, r2, {0x80000001}}, 0x18) 07:20:32 executing program 3: syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xcf609) 07:20:32 executing program 5: socket$inet_smc(0x2b, 0x1, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xcf609) 07:20:32 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xcf609) 07:20:32 executing program 1: socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xcf609) 07:20:32 executing program 2: openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0xffffffffffffffff, 0x293200) 07:20:32 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xcf609) 07:20:32 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x0) 07:20:32 executing program 5: socket$inet_smc(0x2b, 0x1, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xcf609) 07:20:32 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000077805000900"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:32 executing program 1: shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffc000/0x2000)=nil) 07:20:32 executing program 4: syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xcf609) 07:20:32 executing program 2: syz_open_dev$dri(&(0x7f00000000c0), 0xffffffffffffffff, 0x293200) 07:20:32 executing program 5: socket$inet_smc(0x2b, 0x1, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xcf609) 07:20:32 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x0) 07:20:32 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x0) 07:20:32 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0xffffffffffffffff, 0x293200) 07:20:32 executing program 4: syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xcf609) 07:20:32 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x0) 07:20:32 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xcf609) 07:20:32 executing program 2: syz_open_dev$dri(0x0, 0xffffffffffffffff, 0x293200) 07:20:32 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0xffffffffffffffff, 0x293200) 07:20:32 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x0) 07:20:32 executing program 4: syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xcf609) 07:20:32 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000c79000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000c3d000/0x2000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000000)=""/188) r2 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000c3d000/0x2000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f00000000c0)=""/249) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f00000001c0)=""/62) 07:20:32 executing program 2: syz_open_dev$dri(0x0, 0xffffffffffffffff, 0x293200) 07:20:32 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xcf609) 07:20:32 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0xffffffffffffffff, 0x293200) 07:20:32 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x0) 07:20:32 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x0) 07:20:32 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000c79000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000c3d000/0x2000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000000)=""/188) r2 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000c3d000/0x2000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f00000000c0)=""/249) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f00000001c0)=""/62) 07:20:32 executing program 2: syz_open_dev$dri(0x0, 0xffffffffffffffff, 0x293200) 07:20:32 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xcf609) 07:20:32 executing program 1: syz_open_dev$dri(&(0x7f00000000c0), 0xffffffffffffffff, 0x293200) 07:20:32 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x0) 07:20:32 executing program 0: ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0) 07:20:33 executing program 2: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x293200) 07:20:33 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000c79000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000c3d000/0x2000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000000)=""/188) r2 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000c3d000/0x2000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f00000000c0)=""/249) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f00000001c0)=""/62) 07:20:33 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xcf609) 07:20:33 executing program 1: syz_open_dev$dri(0x0, 0xffffffffffffffff, 0x293200) 07:20:33 executing program 0: ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0) 07:20:33 executing program 2: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x293200) 07:20:33 executing program 5: syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xcf609) 07:20:33 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x0) 07:20:33 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000c79000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000c3d000/0x2000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000000)=""/188) r2 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000c3d000/0x2000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f00000000c0)=""/249) 07:20:33 executing program 0: ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0) 07:20:33 executing program 2: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x293200) 07:20:33 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000c79000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000c3d000/0x2000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000000)=""/188) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000c3d000/0x2000)=nil) 07:20:33 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffe, 0x101040) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x200002) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={0x0, 0x6}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x8) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000080)) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x4435f) 07:20:33 executing program 1: syz_open_dev$dri(0x0, 0xffffffffffffffff, 0x293200) 07:20:33 executing program 5: syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xcf609) 07:20:33 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000c79000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000c3d000/0x2000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000000)=""/188) 07:20:33 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x0) 07:20:33 executing program 2: syz_open_dev$dri(&(0x7f00000000c0), 0xffffffffffffffff, 0x0) [ 594.144963] block nbd4: shutting down sockets 07:20:33 executing program 1: syz_open_dev$dri(0x0, 0xffffffffffffffff, 0x293200) 07:20:33 executing program 5: syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xcf609) 07:20:33 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffe, 0x101040) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x200002) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={0x0, 0x6}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x8) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000080)) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x4435f) 07:20:33 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000c79000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmget$private(0x0, 0x2000, 0x20, &(0x7f0000c3d000/0x2000)=nil) 07:20:33 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x0) 07:20:33 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x0) 07:20:33 executing program 2: syz_open_dev$dri(&(0x7f00000000c0), 0xffffffffffffffff, 0x0) 07:20:33 executing program 1: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x293200) 07:20:33 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000c79000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) [ 594.343780] block nbd4: shutting down sockets 07:20:33 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffe, 0x101040) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x200002) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={0x0, 0x6}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x8) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000080)) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x4435f) 07:20:33 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x0) 07:20:33 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x0) 07:20:33 executing program 2: syz_open_dev$dri(&(0x7f00000000c0), 0xffffffffffffffff, 0x0) 07:20:33 executing program 1: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x293200) 07:20:33 executing program 3: shmctl$SHM_LOCK(0x0, 0xb) 07:20:33 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffe, 0x101040) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x200002) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={0x0, 0x6}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x8) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000080)) [ 594.513897] block nbd4: shutting down sockets 07:20:33 executing program 2: syz_open_dev$dri(&(0x7f00000000c0), 0xffffffffffffffff, 0x0) 07:20:33 executing program 1: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x293200) 07:20:33 executing program 3: shmctl$SHM_LOCK(0x0, 0xb) 07:20:33 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x0) 07:20:33 executing program 0: syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0) 07:20:33 executing program 2: syz_open_dev$dri(&(0x7f00000000c0), 0xffffffffffffffff, 0x0) [ 594.643552] block nbd4: shutting down sockets 07:20:33 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffe, 0x101040) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x200002) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={0x0, 0x6}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x8) 07:20:33 executing program 5: syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xcf609) 07:20:33 executing program 3: shmctl$SHM_LOCK(0x0, 0xb) 07:20:34 executing program 2: syz_open_dev$dri(&(0x7f00000000c0), 0xffffffffffffffff, 0x0) 07:20:34 executing program 1: syz_open_dev$dri(&(0x7f00000000c0), 0xffffffffffffffff, 0x0) 07:20:34 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffe, 0x101040) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x200002) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={0x0, 0x6}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x8) 07:20:34 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="000000000000000007780500"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) [ 594.773922] block nbd4: shutting down sockets 07:20:34 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000c79000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) 07:20:34 executing program 0: syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0) 07:20:34 executing program 2: syz_open_dev$dri(0x0, 0xffffffffffffffff, 0x0) 07:20:34 executing program 3: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000c79000/0x1000)=nil) shmctl$SHM_LOCK(0x0, 0xb) 07:20:34 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffe, 0x101040) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x200002) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={0x0, 0x6}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x8) 07:20:34 executing program 1: syz_open_dev$dri(&(0x7f00000000c0), 0xffffffffffffffff, 0x0) 07:20:34 executing program 0: syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0) 07:20:34 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="000000000000000007780500"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:34 executing program 2: syz_open_dev$dri(0x0, 0xffffffffffffffff, 0x0) 07:20:34 executing program 3: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000c79000/0x1000)=nil) shmctl$SHM_LOCK(0x0, 0xb) 07:20:34 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffe, 0x101040) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x200002) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={0x0, 0x6}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x8) 07:20:34 executing program 1: syz_open_dev$dri(&(0x7f00000000c0), 0xffffffffffffffff, 0x0) 07:20:34 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="000000000000000007780500"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffe, 0x101040) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x200002) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={0x0, 0x6}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x8) 07:20:34 executing program 3: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000c79000/0x1000)=nil) shmctl$SHM_LOCK(0x0, 0xb) 07:20:34 executing program 2: syz_open_dev$dri(0x0, 0xffffffffffffffff, 0x0) 07:20:34 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffe, 0x101040) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x200002) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={0x0, 0x6}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x8) 07:20:34 executing program 5: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000c79000/0x1000)=nil) shmctl$SHM_LOCK(0x0, 0xb) 07:20:34 executing program 0: getrusage(0xffffffffffffffff, &(0x7f0000000000)) shmget$private(0x0, 0x400000, 0x800, &(0x7f0000bfd000/0x400000)=nil) 07:20:34 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f00000001c0)={{{0x4, 0x1}}, 0xf0, 0x7fff, &(0x7f00000000c0)="8bd56d36cf8ec2bd8c1b2445364ffa7d1920972ade474be1501210bb8b72c2a76f3e68f2dc14a8ba0c6694218eb58a483dc144b6c8714ccbc5cd55264821c84a3668bb5012a2b42ea16a442ce7dc4adc2e0d9f5e6bfba072ed7f64f4fa412307e9301a3f7c744fe586b6b5e50606bd76cfe84dab6f76fd3b22fb35226bf6c9962621d2cde4ae519f8378444e9a7a4a6495d38e7cf39740f82bc487fd64d61a5c99731a62311e986e913217155dd9b507b2526d89fa466b80b0bec97376780e976cbd0b7cb74b64248010ce87606f4c908b170b8ba0c7a2d3566343f4c30fc0366d2d64a95d9e2f8d5f1e4b1933e44224"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x7) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)) 07:20:34 executing program 2: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) 07:20:34 executing program 3: r0 = shmget$private(0x0, 0x400000, 0x800, &(0x7f0000bfd000/0x400000)=nil) r1 = shmget(0x0, 0x2000, 0x78000000, &(0x7f0000c0d000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000001000)=""/54) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000000)=""/4096) r2 = shmget(0x1, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001040)=""/190) 07:20:34 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffe, 0x101040) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x200002) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={0x0, 0x6}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x8) 07:20:34 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="000000000000000007780500"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) [ 595.373536] block nbd1: shutting down sockets 07:20:34 executing program 2: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) 07:20:34 executing program 1: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = getuid() r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r2}, 0x10) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000022c0)={0x18, 0xfffffffffffffffe, r2, {0x80}}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000002300)=0x4) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002140)={0x90, 0x0, 0x0, {0x4, 0x0, 0x3, 0x80, 0x7799a342, 0x0, {0x2, 0x4, 0x9, 0x3, 0x14000, 0xb5, 0x7b727b7a, 0x3, 0x4, 0xa000, 0x0, r0, r5, 0xffff7fff, 0x3}}}, 0x90) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000040)) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002200)={0x90, 0xffffffffffffffda, 0x0, {0x3, 0x3, 0x0, 0xa184, 0x9, 0xb, {0x2, 0x6, 0x9, 0x3, 0x0, 0x1ff, 0x16, 0x7f, 0x7, 0x6000, 0x2, r0, r3, 0x9, 0xe13c}}}, 0x90) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) write$FUSE_OPEN(r1, &(0x7f00000023c0)={0x20, 0x0, r4, {0x0, 0x4}}, 0x20) write$FUSE_POLL(r7, &(0x7f0000002380)={0x18, 0x0, r4, {0xffffffe1}}, 0x18) r8 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r8, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000002400)={0x0, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_FREE(r8, 0x40206435, &(0x7f0000002440)={0x0, r9}) 07:20:34 executing program 0: getrusage(0xffffffffffffffff, &(0x7f0000000000)) shmget$private(0x0, 0x400000, 0x800, &(0x7f0000bfd000/0x400000)=nil) 07:20:34 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:34 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffe, 0x101040) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x200002) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000100)={0x0, 0x6}) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x8) 07:20:34 executing program 2: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) 07:20:34 executing program 0: getrusage(0xffffffffffffffff, &(0x7f0000000000)) shmget$private(0x0, 0x400000, 0x800, &(0x7f0000bfd000/0x400000)=nil) 07:20:34 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="010000000000000002000000000000000c000000000400002c2f7d262c29265ea00c2a210000000006000000000000000100008000000000010000000000000024000000000000000300000000000000080000000000000009000000000000002f6465762f70707000000000000000000400000000000000fdffffffffffffff04000000018000002d7d2827000000000000000000000000050000000000000009000000800000002f6465762f70707000000000000000000300000000000000200000000000000001000000010000002e0000000000000002000000000000000008000000000000010000000800000024000000000000000300000000000000000000000000000000000000fffffeff"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:34 executing program 1: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = getuid() r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r2}, 0x10) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000022c0)={0x18, 0xfffffffffffffffe, r2, {0x80}}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000002300)=0x4) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002140)={0x90, 0x0, 0x0, {0x4, 0x0, 0x3, 0x80, 0x7799a342, 0x0, {0x2, 0x4, 0x9, 0x3, 0x14000, 0xb5, 0x7b727b7a, 0x3, 0x4, 0xa000, 0x0, r0, r5, 0xffff7fff, 0x3}}}, 0x90) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000040)) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002200)={0x90, 0xffffffffffffffda, 0x0, {0x3, 0x3, 0x0, 0xa184, 0x9, 0xb, {0x2, 0x6, 0x9, 0x3, 0x0, 0x1ff, 0x16, 0x7f, 0x7, 0x6000, 0x2, r0, r3, 0x9, 0xe13c}}}, 0x90) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) write$FUSE_OPEN(r1, &(0x7f00000023c0)={0x20, 0x0, r4, {0x0, 0x4}}, 0x20) write$FUSE_POLL(r7, &(0x7f0000002380)={0x18, 0x0, r4, {0xffffffe1}}, 0x18) r8 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r8, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000002400)={0x0, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_FREE(r8, 0x40206435, &(0x7f0000002440)={0x0, r9}) 07:20:34 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:34 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffe, 0x101040) syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x200002) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 07:20:34 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)) r1 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000180)={0x0, 0xfffffffffffffc}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x3ff, 0x0}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000080)={r2, 0x4}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f00000001c0)={0x3, r2}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0x2, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000140)={r3, 0x9}) 07:20:34 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:34 executing program 0: getrusage(0xffffffffffffffff, &(0x7f0000000000)) 07:20:34 executing program 1: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = getuid() r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r2}, 0x10) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000022c0)={0x18, 0xfffffffffffffffe, r2, {0x80}}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000002300)=0x4) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002140)={0x90, 0x0, 0x0, {0x4, 0x0, 0x3, 0x80, 0x7799a342, 0x0, {0x2, 0x4, 0x9, 0x3, 0x14000, 0xb5, 0x7b727b7a, 0x3, 0x4, 0xa000, 0x0, r0, r5, 0xffff7fff, 0x3}}}, 0x90) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000040)) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002200)={0x90, 0xffffffffffffffda, 0x0, {0x3, 0x3, 0x0, 0xa184, 0x9, 0xb, {0x2, 0x6, 0x9, 0x3, 0x0, 0x1ff, 0x16, 0x7f, 0x7, 0x6000, 0x2, r0, r3, 0x9, 0xe13c}}}, 0x90) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) write$FUSE_OPEN(r1, &(0x7f00000023c0)={0x20, 0x0, r4, {0x0, 0x4}}, 0x20) write$FUSE_POLL(r7, &(0x7f0000002380)={0x18, 0x0, r4, {0xffffffe1}}, 0x18) r8 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r8, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000002400)={0x0, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_FREE(r8, 0x40206435, &(0x7f0000002440)={0x0, r9}) 07:20:35 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:35 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffe, 0x101040) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 07:20:35 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:35 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:35 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:35 executing program 0: getrusage(0x0, &(0x7f0000000000)) 07:20:35 executing program 1: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = getuid() r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r2}, 0x10) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000022c0)={0x18, 0xfffffffffffffffe, r2, {0x80}}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000002300)=0x4) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002140)={0x90, 0x0, 0x0, {0x4, 0x0, 0x3, 0x80, 0x7799a342, 0x0, {0x2, 0x4, 0x9, 0x3, 0x14000, 0xb5, 0x7b727b7a, 0x3, 0x4, 0xa000, 0x0, r0, r5, 0xffff7fff, 0x3}}}, 0x90) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000040)) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002200)={0x90, 0xffffffffffffffda, 0x0, {0x3, 0x3, 0x0, 0xa184, 0x9, 0xb, {0x2, 0x6, 0x9, 0x3, 0x0, 0x1ff, 0x16, 0x7f, 0x7, 0x6000, 0x2, r0, r3, 0x9, 0xe13c}}}, 0x90) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) write$FUSE_OPEN(r1, &(0x7f00000023c0)={0x20, 0x0, r4, {0x0, 0x4}}, 0x20) write$FUSE_POLL(r7, &(0x7f0000002380)={0x18, 0x0, r4, {0xffffffe1}}, 0x18) r8 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r8, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000002400)={0x0, 0x0, 0x10001}) 07:20:35 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 07:20:35 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:35 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:35 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:35 executing program 1: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = getuid() r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r2}, 0x10) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000022c0)={0x18, 0xfffffffffffffffe, r2, {0x80}}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000002300)=0x4) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002140)={0x90, 0x0, 0x0, {0x4, 0x0, 0x3, 0x80, 0x7799a342, 0x0, {0x2, 0x4, 0x9, 0x3, 0x14000, 0xb5, 0x7b727b7a, 0x3, 0x4, 0xa000, 0x0, r0, r5, 0xffff7fff, 0x3}}}, 0x90) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000040)) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002200)={0x90, 0xffffffffffffffda, 0x0, {0x3, 0x3, 0x0, 0xa184, 0x9, 0xb, {0x2, 0x6, 0x9, 0x3, 0x0, 0x1ff, 0x16, 0x7f, 0x7, 0x6000, 0x2, r0, r3, 0x9, 0xe13c}}}, 0x90) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) write$FUSE_OPEN(r1, &(0x7f00000023c0)={0x20, 0x0, r4, {0x0, 0x4}}, 0x20) write$FUSE_POLL(r7, &(0x7f0000002380)={0x18, 0x0, r4, {0xffffffe1}}, 0x18) r8 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r8, 0x40106436, &(0x7f0000000600)) 07:20:35 executing program 0: getrusage(0x0, &(0x7f0000000000)) 07:20:35 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 07:20:35 executing program 1: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = getuid() r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r2}, 0x10) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000022c0)={0x18, 0xfffffffffffffffe, r2, {0x80}}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000002300)=0x4) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002140)={0x90, 0x0, 0x0, {0x4, 0x0, 0x3, 0x80, 0x7799a342, 0x0, {0x2, 0x4, 0x9, 0x3, 0x14000, 0xb5, 0x7b727b7a, 0x3, 0x4, 0xa000, 0x0, r0, r5, 0xffff7fff, 0x3}}}, 0x90) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000040)) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002200)={0x90, 0xffffffffffffffda, 0x0, {0x3, 0x3, 0x0, 0xa184, 0x9, 0xb, {0x2, 0x6, 0x9, 0x3, 0x0, 0x1ff, 0x16, 0x7f, 0x7, 0x6000, 0x2, r0, r3, 0x9, 0xe13c}}}, 0x90) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) write$FUSE_OPEN(r1, &(0x7f00000023c0)={0x20, 0x0, r4, {0x0, 0x4}}, 0x20) write$FUSE_POLL(r7, &(0x7f0000002380)={0x18, 0x0, r4, {0xffffffe1}}, 0x18) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) 07:20:35 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="010000000000000002000000000000000c000000000400002c2f7d262c29265ea00c2a210000000006000000000000000100008000000000010000000000000024000000000000000300000000000000080000000000000009000000000000002f6465762f70707000000000000000000400000000000000fdffffffffffffff04000000018000002d7d2827000000000000000000000000050000000000000009000000800000002f6465762f70707000000000000000000300000000000000200000000000000001000000010000002e0000000000000002000000000000000008000000000000010000000800000024000000000000000300000000000000000000000000000000000000fffffeff"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:35 executing program 0: getrusage(0x0, &(0x7f0000000000)) 07:20:35 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:35 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:35 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 07:20:35 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000500)) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000040)) 07:20:35 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 07:20:35 executing program 0: getrusage(0xffffffffffffffff, 0x0) 07:20:35 executing program 1: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = getuid() r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r2}, 0x10) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000022c0)={0x18, 0xfffffffffffffffe, r2, {0x80}}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000002300)=0x4) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002140)={0x90, 0x0, 0x0, {0x4, 0x0, 0x3, 0x80, 0x7799a342, 0x0, {0x2, 0x4, 0x9, 0x3, 0x14000, 0xb5, 0x7b727b7a, 0x3, 0x4, 0xa000, 0x0, r0, r5, 0xffff7fff, 0x3}}}, 0x90) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000040)) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002200)={0x90, 0xffffffffffffffda, 0x0, {0x3, 0x3, 0x0, 0xa184, 0x9, 0xb, {0x2, 0x6, 0x9, 0x3, 0x0, 0x1ff, 0x16, 0x7f, 0x7, 0x6000, 0x2, r0, r3, 0x9, 0xe13c}}}, 0x90) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) write$FUSE_OPEN(r1, &(0x7f00000023c0)={0x20, 0x0, r4, {0x0, 0x4}}, 0x20) write$FUSE_POLL(r7, &(0x7f0000002380)={0x18, 0x0, r4, {0xffffffe1}}, 0x18) 07:20:35 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, 0x0, &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="010000000000000002000000000000000c000000000400002c2f7d262c29265ea00c2a210000000006000000000000000100008000000000010000000000000024000000000000000300000000000000080000000000000009000000000000002f6465762f70707000000000000000000400000000000000fdffffffffffffff04000000018000002d7d2827000000000000000000000000050000000000000009000000800000002f6465762f70707000000000000000000300000000000000200000000000000001000000010000002e0000000000000002000000000000000008000000000000010000000800000024000000000000000300000000000000000000000000000000000000fffffeff"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:35 executing program 5: r0 = gettid() prlimit64(r0, 0xc94a3c1257f61ef0, 0x0, 0x0) prlimit64(r0, 0x9, &(0x7f0000000040)={0x9, 0x5}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$NBD_CLEAR_QUE(r1, 0xab05) 07:20:35 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x8) 07:20:35 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, 0x0, &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:35 executing program 0: getrusage(0xffffffffffffffff, 0x0) 07:20:35 executing program 1: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = getuid() r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r2}, 0x10) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000022c0)={0x18, 0xfffffffffffffffe, r2, {0x80}}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000002300)=0x4) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002140)={0x90, 0x0, 0x0, {0x4, 0x0, 0x3, 0x80, 0x7799a342, 0x0, {0x2, 0x4, 0x9, 0x3, 0x14000, 0xb5, 0x7b727b7a, 0x3, 0x4, 0xa000, 0x0, r0, r5, 0xffff7fff, 0x3}}}, 0x90) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000040)) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002200)={0x90, 0xffffffffffffffda, 0x0, {0x3, 0x3, 0x0, 0xa184, 0x9, 0xb, {0x2, 0x6, 0x9, 0x3, 0x0, 0x1ff, 0x16, 0x7f, 0x7, 0x6000, 0x2, r0, r3, 0x9, 0xe13c}}}, 0x90) openat$fuse(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) write$FUSE_OPEN(r1, &(0x7f00000023c0)={0x20, 0x0, r4, {0x0, 0x4}}, 0x20) 07:20:35 executing program 5: r0 = gettid() prlimit64(r0, 0xc94a3c1257f61ef0, 0x0, 0x0) prlimit64(r0, 0x9, &(0x7f0000000040)={0x9, 0x5}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$NBD_CLEAR_QUE(r1, 0xab05) 07:20:35 executing program 3: shmget$private(0x0, 0x406800, 0x800, &(0x7f0000bfd000/0x400000)=nil) 07:20:35 executing program 0: getrusage(0xffffffffffffffff, 0x0) 07:20:35 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x8) 07:20:35 executing program 2: shmget$private(0x0, 0x40007a, 0x800, &(0x7f0000bfd000/0x400000)=nil) 07:20:35 executing program 5: r0 = gettid() prlimit64(r0, 0xc94a3c1257f61ef0, 0x0, 0x0) prlimit64(r0, 0x9, &(0x7f0000000040)={0x9, 0x5}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$NBD_CLEAR_QUE(r1, 0xab05) 07:20:35 executing program 1: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = getuid() r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r2}, 0x10) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000022c0)={0x18, 0xfffffffffffffffe, r2, {0x80}}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000002300)=0x4) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002140)={0x90, 0x0, 0x0, {0x4, 0x0, 0x3, 0x80, 0x7799a342, 0x0, {0x2, 0x4, 0x9, 0x3, 0x14000, 0xb5, 0x7b727b7a, 0x3, 0x4, 0xa000, 0x0, r0, r4, 0xffff7fff, 0x3}}}, 0x90) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r5, 0x40106439, &(0x7f0000000040)) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002200)={0x90, 0xffffffffffffffda, 0x0, {0x3, 0x3, 0x0, 0xa184, 0x9, 0xb, {0x2, 0x6, 0x9, 0x3, 0x0, 0x1ff, 0x16, 0x7f, 0x7, 0x6000, 0x2, r0, r3, 0x9, 0xe13c}}}, 0x90) openat$fuse(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) 07:20:35 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:35 executing program 2: shmget$private(0x0, 0x400300, 0x800, &(0x7f0000bfd000/0x400000)=nil) 07:20:36 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x8) 07:20:36 executing program 5: r0 = gettid() prlimit64(r0, 0xc94a3c1257f61ef0, 0x0, 0x0) prlimit64(r0, 0x9, &(0x7f0000000040)={0x9, 0x5}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 07:20:36 executing program 0: openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_CLEAR_QUE(r2, 0xab05) 07:20:36 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:36 executing program 1: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = getuid() r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r2}, 0x10) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000022c0)={0x18, 0xfffffffffffffffe, r2, {0x80}}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000002300)=0x4) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002140)={0x90, 0x0, 0x0, {0x4, 0x0, 0x3, 0x80, 0x7799a342, 0x0, {0x2, 0x4, 0x9, 0x3, 0x14000, 0xb5, 0x7b727b7a, 0x3, 0x4, 0xa000, 0x0, r0, r4, 0xffff7fff, 0x3}}}, 0x90) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r5, 0x40106439, &(0x7f0000000040)) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002200)={0x90, 0xffffffffffffffda, 0x0, {0x3, 0x3, 0x0, 0xa184, 0x9, 0xb, {0x2, 0x6, 0x9, 0x3, 0x0, 0x1ff, 0x16, 0x7f, 0x7, 0x6000, 0x2, r0, r3, 0x9, 0xe13c}}}, 0x90) 07:20:36 executing program 2: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = getuid() r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r2}, 0x10) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000022c0)={0x18, 0xfffffffffffffffe, r2, {0x80}}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000002300)=0x4) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002140)={0x90, 0x0, 0x0, {0x4, 0x0, 0x3, 0x80, 0x7799a342, 0x0, {0x2, 0x4, 0x9, 0x3, 0x14000, 0xb5, 0x7b727b7a, 0x3, 0x4, 0xa000, 0x0, r0, r4, 0xffff7fff, 0x3}}}, 0x90) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r5, 0x40106439, &(0x7f0000000040)) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002200)={0x90, 0xffffffffffffffda, 0x0, {0x3, 0x3, 0x0, 0xa184, 0x9, 0xb, {0x2, 0x6, 0x9, 0x3, 0x0, 0x1ff, 0x16, 0x7f, 0x7, 0x6000, 0x2, r0, r3, 0x9, 0xe13c}}}, 0x90) openat$fuse(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) 07:20:36 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x0) 07:20:36 executing program 5: r0 = gettid() prlimit64(r0, 0xc94a3c1257f61ef0, 0x0, 0x0) prlimit64(r0, 0x9, &(0x7f0000000040)={0x9, 0x5}, 0x0) 07:20:36 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) [ 596.903512] block nbd0: shutting down sockets 07:20:36 executing program 1: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = getuid() r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r2}, 0x10) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000022c0)={0x18, 0xfffffffffffffffe, r2, {0x80}}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000002300)=0x4) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002140)={0x90, 0x0, 0x0, {0x4, 0x0, 0x3, 0x80, 0x7799a342, 0x0, {0x2, 0x4, 0x9, 0x3, 0x14000, 0xb5, 0x7b727b7a, 0x3, 0x4, 0xa000, 0x0, r0, r3, 0xffff7fff, 0x3}}}, 0x90) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f0000000040)) 07:20:36 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:36 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x0) 07:20:36 executing program 5: r0 = gettid() prlimit64(r0, 0x9, &(0x7f0000000040)={0x9, 0x5}, 0x0) 07:20:36 executing program 2: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = getuid() r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r2}, 0x10) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000022c0)={0x18, 0xfffffffffffffffe, r2, {0x80}}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000002300)=0x4) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002140)={0x90, 0x0, 0x0, {0x4, 0x0, 0x3, 0x80, 0x7799a342, 0x0, {0x2, 0x4, 0x9, 0x3, 0x14000, 0xb5, 0x7b727b7a, 0x3, 0x4, 0xa000, 0x0, r0, r4, 0xffff7fff, 0x3}}}, 0x90) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r5, 0x40106439, &(0x7f0000000040)) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002200)={0x90, 0xffffffffffffffda, 0x0, {0x3, 0x3, 0x0, 0xa184, 0x9, 0xb, {0x2, 0x6, 0x9, 0x3, 0x0, 0x1ff, 0x16, 0x7f, 0x7, 0x6000, 0x2, r0, r3, 0x9, 0xe13c}}}, 0x90) openat$fuse(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) 07:20:36 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x0) 07:20:36 executing program 1: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = getuid() r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r2}, 0x10) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000022c0)={0x18, 0xfffffffffffffffe, r2, {0x80}}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000002300)=0x4) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002140)={0x90, 0x0, 0x0, {0x4, 0x0, 0x3, 0x80, 0x7799a342, 0x0, {0x2, 0x4, 0x9, 0x3, 0x14000, 0xb5, 0x7b727b7a, 0x3, 0x4, 0xa000, 0x0, r0, r3, 0xffff7fff, 0x3}}}, 0x90) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) 07:20:36 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x0) 07:20:36 executing program 5: prlimit64(0x0, 0x9, &(0x7f0000000040)={0x9, 0x5}, 0x0) 07:20:36 executing program 2: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = getuid() r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r2}, 0x10) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000022c0)={0x18, 0xfffffffffffffffe, r2, {0x80}}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000002300)=0x4) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002140)={0x90, 0x0, 0x0, {0x4, 0x0, 0x3, 0x80, 0x7799a342, 0x0, {0x2, 0x4, 0x9, 0x3, 0x14000, 0xb5, 0x7b727b7a, 0x3, 0x4, 0xa000, 0x0, r0, r4, 0xffff7fff, 0x3}}}, 0x90) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r5, 0x40106439, &(0x7f0000000040)) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002200)={0x90, 0xffffffffffffffda, 0x0, {0x3, 0x3, 0x0, 0xa184, 0x9, 0xb, {0x2, 0x6, 0x9, 0x3, 0x0, 0x1ff, 0x16, 0x7f, 0x7, 0x6000, 0x2, r0, r3, 0x9, 0xe13c}}}, 0x90) openat$fuse(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) 07:20:36 executing program 0: shmget$private(0x0, 0x400048, 0x800, &(0x7f0000bfd000/0x400000)=nil) 07:20:36 executing program 1: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = getuid() r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r2}, 0x10) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000022c0)={0x18, 0xfffffffffffffffe, r2, {0x80}}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000002300)=0x4) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002140)={0x90, 0x0, 0x0, {0x4, 0x0, 0x3, 0x80, 0x7799a342, 0x0, {0x2, 0x4, 0x9, 0x3, 0x14000, 0xb5, 0x7b727b7a, 0x3, 0x4, 0xa000, 0x0, r0, r3, 0xffff7fff, 0x3}}}, 0x90) 07:20:36 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x0) 07:20:36 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r2, &(0x7f00000020c0)={0x110, 0x0, r3, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x4, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x2, 0x101, '$\\'}, {0x0, 0x400, 0xa, 0x6, '/dev/fuse\x00'}, {0x0, 0x0, 0xa, 0x10000, '/dev/cuse\x00'}, {0x2, 0x5, 0x2, 0x4b37, '-$'}, {0x0, 0xe5d1, 0x4, 0x100, '\xa4r:!'}]}, 0x110) read$FUSE(r2, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10, 0x0, r4}, 0x10) write$FUSE_WRITE(r1, &(0x7f0000000040)={0x18, 0x0, r4, {0x79a}}, 0x18) write$FUSE_OPEN(r0, &(0x7f0000002200)={0x20, 0x0, r4}, 0x20) 07:20:36 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000040)={0x9, 0x5}, 0x0) 07:20:36 executing program 2: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = getuid() r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r2}, 0x10) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000022c0)={0x18, 0xfffffffffffffffe, r2, {0x80}}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000002300)=0x4) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002140)={0x90, 0x0, 0x0, {0x4, 0x0, 0x3, 0x80, 0x7799a342, 0x0, {0x2, 0x4, 0x9, 0x3, 0x14000, 0xb5, 0x7b727b7a, 0x3, 0x4, 0xa000, 0x0, r0, r4, 0xffff7fff, 0x3}}}, 0x90) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r5, 0x40106439, &(0x7f0000000040)) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002200)={0x90, 0xffffffffffffffda, 0x0, {0x3, 0x3, 0x0, 0xa184, 0x9, 0xb, {0x2, 0x6, 0x9, 0x3, 0x0, 0x1ff, 0x16, 0x7f, 0x7, 0x6000, 0x2, r0, r3, 0x9, 0xe13c}}}, 0x90) 07:20:36 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6", 0x57) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:36 executing program 1: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getuid() r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r1}, 0x10) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000022c0)={0x18, 0xfffffffffffffffe, r1, {0x80}}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000002300)=0x4) 07:20:36 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x0) 07:20:36 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r2, &(0x7f00000020c0)={0x110, 0x0, r3, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x4, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x2, 0x101, '$\\'}, {0x0, 0x400, 0xa, 0x6, '/dev/fuse\x00'}, {0x0, 0x0, 0xa, 0x10000, '/dev/cuse\x00'}, {0x2, 0x5, 0x2, 0x4b37, '-$'}, {0x0, 0xe5d1, 0x4, 0x100, '\xa4r:!'}]}, 0x110) read$FUSE(r2, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10, 0x0, r4}, 0x10) write$FUSE_WRITE(r1, &(0x7f0000000040)={0x18, 0x0, r4, {0x79a}}, 0x18) write$FUSE_OPEN(r0, &(0x7f0000002200)={0x20, 0x0, r4}, 0x20) 07:20:36 executing program 2: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = getuid() r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r2}, 0x10) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000022c0)={0x18, 0xfffffffffffffffe, r2, {0x80}}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000002300)=0x4) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002140)={0x90, 0x0, 0x0, {0x4, 0x0, 0x3, 0x80, 0x7799a342, 0x0, {0x2, 0x4, 0x9, 0x3, 0x14000, 0xb5, 0x7b727b7a, 0x3, 0x4, 0xa000, 0x0, r0, r3, 0xffff7fff, 0x3}}}, 0x90) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f0000000040)) 07:20:36 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) 07:20:36 executing program 1: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getuid() r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r1}, 0x10) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000022c0)={0x18, 0xfffffffffffffffe, r1, {0x80}}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) 07:20:36 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r2, &(0x7f00000020c0)={0x110, 0x0, r3, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x4, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x2, 0x101, '$\\'}, {0x0, 0x400, 0xa, 0x6, '/dev/fuse\x00'}, {0x0, 0x0, 0xa, 0x10000, '/dev/cuse\x00'}, {0x2, 0x5, 0x2, 0x4b37, '-$'}, {0x0, 0xe5d1, 0x4, 0x100, '\xa4r:!'}]}, 0x110) read$FUSE(r2, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10, 0x0, r4}, 0x10) write$FUSE_WRITE(r1, &(0x7f0000000040)={0x18, 0x0, r4, {0x79a}}, 0x18) write$FUSE_OPEN(r0, &(0x7f0000002200)={0x20, 0x0, r4}, 0x20) 07:20:36 executing program 0: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = getuid() r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r2}, 0x10) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000022c0)={0x18, 0xfffffffffffffffe, r2, {0x80}}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000002300)=0x4) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002140)={0x90, 0x0, 0x0, {0x4, 0x0, 0x3, 0x80, 0x7799a342, 0x0, {0x2, 0x4, 0x9, 0x3, 0x14000, 0xb5, 0x7b727b7a, 0x3, 0x4, 0xa000, 0x0, r0, r4, 0xffff7fff, 0x3}}}, 0x90) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r5, 0x40106439, &(0x7f0000000040)) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002200)={0x90, 0xffffffffffffffda, 0x0, {0x3, 0x3, 0x0, 0xa184, 0x9, 0xb, {0x2, 0x6, 0x9, 0x3, 0x0, 0x1ff, 0x16, 0x7f, 0x7, 0x6000, 0x2, r0, r3, 0x9, 0xe13c}}}, 0x90) 07:20:36 executing program 3: ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x0) 07:20:36 executing program 2: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = getuid() r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r2}, 0x10) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000022c0)={0x18, 0xfffffffffffffffe, r2, {0x80}}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000002300)=0x4) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002140)={0x90, 0x0, 0x0, {0x4, 0x0, 0x3, 0x80, 0x7799a342, 0x0, {0x2, 0x4, 0x9, 0x3, 0x14000, 0xb5, 0x7b727b7a, 0x3, 0x4, 0xa000, 0x0, r0, r3, 0xffff7fff, 0x3}}}, 0x90) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) 07:20:36 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) 07:20:36 executing program 1: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getuid() r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r1}, 0x10) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000022c0)={0x18, 0xfffffffffffffffe, r1, {0x80}}, 0x18) 07:20:36 executing program 0: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = getuid() r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r2}, 0x10) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000022c0)={0x18, 0xfffffffffffffffe, r2, {0x80}}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000002300)=0x4) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002140)={0x90, 0x0, 0x0, {0x4, 0x0, 0x3, 0x80, 0x7799a342, 0x0, {0x2, 0x4, 0x9, 0x3, 0x14000, 0xb5, 0x7b727b7a, 0x3, 0x4, 0xa000, 0x0, r0, r4, 0xffff7fff, 0x3}}}, 0x90) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r5, 0x40106439, &(0x7f0000000040)) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002200)={0x90, 0xffffffffffffffda, 0x0, {0x3, 0x3, 0x0, 0xa184, 0x9, 0xb, {0x2, 0x6, 0x9, 0x3, 0x0, 0x1ff, 0x16, 0x7f, 0x7, 0x6000, 0x2, r0, r3, 0x9, 0xe13c}}}, 0x90) 07:20:36 executing program 3: ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x0) 07:20:36 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r2, &(0x7f00000020c0)={0x110, 0x0, r3, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x4, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x2, 0x101, '$\\'}, {0x0, 0x400, 0xa, 0x6, '/dev/fuse\x00'}, {0x0, 0x0, 0xa, 0x10000, '/dev/cuse\x00'}, {0x2, 0x5, 0x2, 0x4b37, '-$'}, {0x0, 0xe5d1, 0x4, 0x100, '\xa4r:!'}]}, 0x110) read$FUSE(r2, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10, 0x0, r4}, 0x10) write$FUSE_WRITE(r1, &(0x7f0000000040)={0x18, 0x0, r4, {0x79a}}, 0x18) 07:20:36 executing program 2: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = getuid() r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r2}, 0x10) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000022c0)={0x18, 0xfffffffffffffffe, r2, {0x80}}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000002300)=0x4) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002140)={0x90, 0x0, 0x0, {0x4, 0x0, 0x3, 0x80, 0x7799a342, 0x0, {0x2, 0x4, 0x9, 0x3, 0x14000, 0xb5, 0x7b727b7a, 0x3, 0x4, 0xa000, 0x0, r0, r3, 0xffff7fff, 0x3}}}, 0x90) 07:20:37 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) 07:20:37 executing program 1: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getuid() r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r1}, 0x10) 07:20:37 executing program 0: shmget$private(0x0, 0x400068, 0x800, &(0x7f0000bfd000/0x400000)=nil) 07:20:37 executing program 3: ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x0) 07:20:37 executing program 0: shmget$private(0x0, 0x400006, 0x800, &(0x7f0000bfd000/0x400000)=nil) 07:20:37 executing program 2: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getuid() r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r1}, 0x10) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000022c0)={0x18, 0xfffffffffffffffe, r1, {0x80}}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000002300)=0x4) 07:20:37 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r2, &(0x7f00000020c0)={0x110, 0x0, r3, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x4, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x2, 0x101, '$\\'}, {0x0, 0x400, 0xa, 0x6, '/dev/fuse\x00'}, {0x0, 0x0, 0xa, 0x10000, '/dev/cuse\x00'}, {0x2, 0x5, 0x2, 0x4b37, '-$'}, {0x0, 0xe5d1, 0x4, 0x100, '\xa4r:!'}]}, 0x110) read$FUSE(r2, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10, 0x0, r4}, 0x10) 07:20:37 executing program 1: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getuid() r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe}, 0x10) 07:20:37 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000040)={0x0, 0x5}, 0x0) 07:20:37 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x0) 07:20:37 executing program 0: shmget$private(0x0, 0x400048, 0x800, &(0x7f0000bfd000/0x400000)=nil) 07:20:37 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r2, &(0x7f00000020c0)={0x110, 0x0, r3, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x4, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x2, 0x101, '$\\'}, {0x0, 0x400, 0xa, 0x6, '/dev/fuse\x00'}, {0x0, 0x0, 0xa, 0x10000, '/dev/cuse\x00'}, {0x2, 0x5, 0x2, 0x4b37, '-$'}, {0x0, 0xe5d1, 0x4, 0x100, '\xa4r:!'}]}, 0x110) read$FUSE(r2, &(0x7f0000003440)={0x2020}, 0x2020) 07:20:37 executing program 2: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getuid() r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r1}, 0x10) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000022c0)={0x18, 0xfffffffffffffffe, r1, {0x80}}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) 07:20:37 executing program 1: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getuid() r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe}, 0x10) 07:20:37 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000040)={0x0, 0x5}, 0x0) 07:20:37 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x0) 07:20:37 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202", 0x56) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:37 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r2, &(0x7f00000020c0)={0x110, 0x0, r3, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x4, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x2, 0x101, '$\\'}, {0x0, 0x400, 0xa, 0x6, '/dev/fuse\x00'}, {0x0, 0x0, 0xa, 0x10000, '/dev/cuse\x00'}, {0x2, 0x5, 0x2, 0x4b37, '-$'}, {0x0, 0xe5d1, 0x4, 0x100, '\xa4r:!'}]}, 0x110) 07:20:37 executing program 2: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getuid() r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r1}, 0x10) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000022c0)={0x18, 0xfffffffffffffffe, r1, {0x80}}, 0x18) 07:20:37 executing program 1: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getuid() r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe}, 0x10) 07:20:37 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x0) 07:20:37 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000040)={0x0, 0x5}, 0x0) 07:20:37 executing program 0: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getuid() r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r1}, 0x10) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000022c0)={0x18, 0xfffffffffffffffe, r1, {0x80}}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) 07:20:37 executing program 2: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getuid() r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r1}, 0x10) 07:20:37 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_DIRENT(r2, &(0x7f00000020c0)={0x110, 0x0, 0x0, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x4, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x2, 0x101, '$\\'}, {0x0, 0x400, 0xa, 0x6, '/dev/fuse\x00'}, {0x0, 0x0, 0xa, 0x10000, '/dev/cuse\x00'}, {0x2, 0x5, 0x2, 0x4b37, '-$'}, {0x0, 0xe5d1, 0x4, 0x100, '\xa4r:!'}]}, 0x110) 07:20:37 executing program 1: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getuid() read$FUSE(0xffffffffffffffff, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r0}, 0x10) 07:20:37 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x0) 07:20:37 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000040)={0x9}, 0x0) 07:20:37 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202", 0x56) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="010000000000000002000000000000000c000000000400002c2f7d262c29265ea00c2a210000000006000000000000000100008000000000010000000000000024000000000000000300000000000000080000000000000009000000000000002f6465762f70707000000000000000000400000000000000fdffffffffffffff04000000018000002d7d2827000000000000000000000000050000000000000009000000800000002f6465762f70707000000000000000000300000000000000200000000000000001000000010000002e0000000000000002000000000000000008000000000000010000000800000024000000000000000300000000000000000000000000000000000000fffffeff"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:37 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_DIRENT(r2, &(0x7f00000020c0)={0x110, 0x0, 0x0, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x4, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x2, 0x101, '$\\'}, {0x0, 0x400, 0xa, 0x6, '/dev/fuse\x00'}, {0x0, 0x0, 0xa, 0x10000, '/dev/cuse\x00'}, {0x2, 0x5, 0x2, 0x4b37, '-$'}, {0x0, 0xe5d1, 0x4, 0x100, '\xa4r:!'}]}, 0x110) 07:20:37 executing program 2: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getuid() r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe}, 0x10) 07:20:37 executing program 1: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getuid() read$FUSE(0xffffffffffffffff, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r0}, 0x10) 07:20:37 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x0) 07:20:37 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)) r1 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000000)) 07:20:37 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x0) 07:20:37 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_DIRENT(r2, &(0x7f00000020c0)={0x110, 0x0, 0x0, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x4, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x2, 0x101, '$\\'}, {0x0, 0x400, 0xa, 0x6, '/dev/fuse\x00'}, {0x0, 0x0, 0xa, 0x10000, '/dev/cuse\x00'}, {0x2, 0x5, 0x2, 0x4b37, '-$'}, {0x0, 0xe5d1, 0x4, 0x100, '\xa4r:!'}]}, 0x110) 07:20:37 executing program 1: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getuid() read$FUSE(0xffffffffffffffff, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r0}, 0x10) 07:20:37 executing program 2: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getuid() r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe}, 0x10) 07:20:37 executing program 0: shmget$private(0x0, 0x400002, 0x800, &(0x7f0000bfd000/0x400000)=nil) 07:20:37 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202", 0x56) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:37 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000020c0)={0x110, 0x0, r2, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x4, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x2, 0x101, '$\\'}, {0x0, 0x400, 0xa, 0x6, '/dev/fuse\x00'}, {0x0, 0x0, 0xa, 0x10000, '/dev/cuse\x00'}, {0x2, 0x5, 0x2, 0x4b37, '-$'}, {0x0, 0xe5d1, 0x4, 0x100, '\xa4r:!'}]}, 0x110) 07:20:37 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r7 = getuid() read$FUSE(r1, &(0x7f0000004200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getgroups(0x2, &(0x7f0000000080)=[r4, r4]) r10 = geteuid() write$FUSE_DIRENTPLUS(r5, &(0x7f0000006240)={0x3f0, 0x0, r6, [{{0x4, 0x2, 0x6, 0x5, 0x3ff, 0x101, {0x0, 0xffff, 0x8000, 0x8000, 0x6, 0xe38, 0x7fff, 0x80000001, 0x0, 0x9000, 0x4219, r7, r8, 0x1, 0x10001}}, {0x4, 0xff, 0xa, 0x5, '/dev/fuse\x00'}}, {{0x0, 0x2, 0xfffffffffffffffd, 0xffffffffffffffff, 0x7, 0xfffffff9, {0x3, 0x45dc2093, 0x100000001, 0x2000000000, 0x0, 0x401, 0x6, 0x6, 0x5, 0x6000, 0x6, 0xee00, r4, 0x6, 0x2}}, {0x6, 0x3, 0xa, 0x8, '/dev/fuse\x00'}}, {{0x1, 0x0, 0x1ff, 0x400, 0x7fffffff, 0x4, {0x4, 0x7, 0x8, 0x6, 0x3, 0x101, 0x5, 0x9, 0x2, 0xe000, 0x0, r3, r4, 0x8, 0x893}}, {0x4, 0x3, 0xa, 0x2, '/dev/fuse\x00'}}, {{0x5, 0x1, 0x3, 0x6, 0x1, 0x0, {0x0, 0x100, 0x1, 0x5, 0x2, 0x1, 0x10000, 0xffffffff, 0x80000000, 0x2000, 0x0, r3, r9, 0x200, 0x4}}, {0x5, 0x0, 0xa, 0x9, '/dev/fuse\x00'}}, {{0x5, 0x3, 0x4, 0x400, 0x3, 0x8e6, {0x1, 0x2, 0x20, 0x7f3b, 0x6, 0x3, 0x3, 0x40, 0x100000, 0x4000, 0x8, r3, r4, 0x6, 0x1}}, {0x0, 0x9, 0x0, 0x1}}, {{0x3, 0x1, 0x3ff, 0x5, 0x5, 0x8, {0x4, 0xc53, 0xa94, 0x80000000, 0x4, 0x100000000, 0xffffffff, 0x4000000, 0x40000, 0x1000, 0x3, r10, r4, 0x8, 0x1}}, {0x6, 0x29a8, 0xa, 0x7fff, '/dev/fuse\x00'}}]}, 0x3f0) write$FUSE_OPEN(r1, &(0x7f0000000040)={0x20, 0x0, r2, {0x0, 0x2}}, 0x20) socketpair(0xf, 0x0, 0x0, &(0x7f0000000140)) ioctl$NBD_CLEAR_QUE(r0, 0xab05) socket$l2tp6(0xa, 0x2, 0x73) 07:20:38 executing program 1: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r1}, 0x10) 07:20:38 executing program 2: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getuid() r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe}, 0x10) 07:20:38 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c", 0x53) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:38 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202", 0x56) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:38 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000020c0)={0x110, 0x0, r2, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x4, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x2, 0x101, '$\\'}, {0x0, 0x400, 0xa, 0x6, '/dev/fuse\x00'}, {0x0, 0x0, 0xa, 0x10000, '/dev/cuse\x00'}, {0x2, 0x5, 0x2, 0x4b37, '-$'}, {0x0, 0xe5d1, 0x4, 0x100, '\xa4r:!'}]}, 0x110) 07:20:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_QUE(r1, 0xab05) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x0, r5}, 0x10) write$FUSE_LK(r3, &(0x7f0000000100)={0x28, 0x0, r5, {{0x4, 0x7, 0x1, 0xffffffffffffffff}}}, 0x28) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x12dd) r6 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)) 07:20:38 executing program 2: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getuid() read$FUSE(0xffffffffffffffff, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r0}, 0x10) 07:20:38 executing program 1: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r1}, 0x10) 07:20:38 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_QUE(r1, 0xab05) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x0, r5}, 0x10) write$FUSE_LK(r3, &(0x7f0000000100)={0x28, 0x0, r5, {{0x4, 0x7, 0x1, 0xffffffffffffffff}}}, 0x28) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x12dd) r6 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)) 07:20:38 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000020c0)={0x110, 0x0, r2, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x4, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x2, 0x101, '$\\'}, {0x0, 0x400, 0xa, 0x6, '/dev/fuse\x00'}, {0x0, 0x0, 0xa, 0x10000, '/dev/cuse\x00'}, {0x2, 0x5, 0x2, 0x4b37, '-$'}, {0x0, 0xe5d1, 0x4, 0x100, '\xa4r:!'}]}, 0x110) [ 598.999378] block nbd3: shutting down sockets 07:20:38 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202", 0x56) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_QUE(r1, 0xab05) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x0, r5}, 0x10) write$FUSE_LK(r3, &(0x7f0000000100)={0x28, 0x0, r5, {{0x4, 0x7, 0x1, 0xffffffffffffffff}}}, 0x28) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x12dd) r6 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)) 07:20:38 executing program 2: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getuid() read$FUSE(0xffffffffffffffff, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r0}, 0x10) 07:20:38 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r1}, 0x10) 07:20:38 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c", 0x53) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) [ 599.114974] block nbd0: shutting down sockets 07:20:38 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r1, &(0x7f00000020c0)={0x110, 0x0, r2, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x4, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x2, 0x101, '$\\'}, {0x0, 0x400, 0xa, 0x6, '/dev/fuse\x00'}, {0x0, 0x0, 0xa, 0x10000, '/dev/cuse\x00'}, {0x2, 0x5, 0x2, 0x4b37, '-$'}, {0x0, 0xe5d1, 0x4, 0x100, '\xa4r:!'}]}, 0x110) 07:20:38 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_QUE(r1, 0xab05) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x0, r5}, 0x10) write$FUSE_LK(r3, &(0x7f0000000100)={0x28, 0x0, r5, {{0x4, 0x7, 0x1, 0xffffffffffffffff}}}, 0x28) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x12dd) r6 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)) [ 599.184887] block nbd3: shutting down sockets 07:20:38 executing program 2: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getuid() read$FUSE(0xffffffffffffffff, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r0}, 0x10) 07:20:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_QUE(r1, 0xab05) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x0, r5}, 0x10) write$FUSE_LK(r3, &(0x7f0000000100)={0x28, 0x0, r5, {{0x4, 0x7, 0x1, 0xffffffffffffffff}}}, 0x28) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x12dd) r6 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)) 07:20:38 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r1}, 0x10) 07:20:38 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r1, &(0x7f00000020c0)={0x110, 0x0, r2, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x4, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x2, 0x101, '$\\'}, {0x0, 0x400, 0xa, 0x6, '/dev/fuse\x00'}, {0x0, 0x0, 0xa, 0x10000, '/dev/cuse\x00'}, {0x2, 0x5, 0x2, 0x4b37, '-$'}, {0x0, 0xe5d1, 0x4, 0x100, '\xa4r:!'}]}, 0x110) 07:20:38 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c", 0x53) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="010000000000000002000000000000000c000000000400002c2f7d262c29265ea00c2a210000000006000000000000000100008000000000010000000000000024000000000000000300000000000000080000000000000009000000000000002f6465762f70707000000000000000000400000000000000fdffffffffffffff04000000018000002d7d2827000000000000000000000000050000000000000009000000800000002f6465762f70707000000000000000000300000000000000200000000000000001000000010000002e0000000000000002000000000000000008000000000000010000000800000024000000000000000300000000000000000000000000000000000000fffffeff"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) [ 599.295660] block nbd0: shutting down sockets 07:20:38 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_QUE(r1, 0xab05) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x0, r5}, 0x10) write$FUSE_LK(r3, &(0x7f0000000100)={0x28, 0x0, r5, {{0x4, 0x7, 0x1, 0xffffffffffffffff}}}, 0x28) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x12dd) r6 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)) 07:20:38 executing program 2: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r1}, 0x10) 07:20:38 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r1}, 0x10) 07:20:38 executing program 4: openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x110, 0x0, r1, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x4, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x2, 0x101, '$\\'}, {0x0, 0x400, 0xa, 0x6, '/dev/fuse\x00'}, {0x0, 0x0, 0xa, 0x10000, '/dev/cuse\x00'}, {0x2, 0x5, 0x2, 0x4b37, '-$'}, {0x0, 0xe5d1, 0x4, 0x100, '\xa4r:!'}]}, 0x110) [ 599.404826] block nbd3: shutting down sockets 07:20:38 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c", 0x53) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:38 executing program 3: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000040)={0x10, 0x0, r4}, 0x10) write$FUSE_LK(r2, &(0x7f0000000100)={0x28, 0x0, r4, {{0x4, 0x7, 0x1, 0xffffffffffffffff}}}, 0x28) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x12dd) r5 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) [ 599.457373] block nbd0: shutting down sockets 07:20:38 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r1}, 0x10) 07:20:38 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x110, 0x0, r1, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x4, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x2, 0x101, '$\\'}, {0x0, 0x400, 0xa, 0x6, '/dev/fuse\x00'}, {0x0, 0x0, 0xa, 0x10000, '/dev/cuse\x00'}, {0x2, 0x5, 0x2, 0x4b37, '-$'}, {0x0, 0xe5d1, 0x4, 0x100, '\xa4r:!'}]}, 0x110) 07:20:38 executing program 0: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000040)={0x10, 0x0, r4}, 0x10) write$FUSE_LK(r2, &(0x7f0000000100)={0x28, 0x0, r4, {{0x4, 0x7, 0x1, 0xffffffffffffffff}}}, 0x28) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x12dd) r5 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) 07:20:38 executing program 2: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x1}) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r1}, 0x10) [ 599.554015] block nbd3: shutting down sockets 07:20:38 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r1}, 0x10) 07:20:38 executing program 3: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000040)={0x10, 0x0, r4}, 0x10) write$FUSE_LK(r2, &(0x7f0000000100)={0x28, 0x0, r4, {{0x4, 0x7, 0x1, 0xffffffffffffffff}}}, 0x28) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x12dd) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 07:20:38 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000040)={0x10, 0x0, r4}, 0x10) write$FUSE_LK(r2, &(0x7f0000000100)={0x28, 0x0, r4, {{0x4, 0x7, 0x1, 0xffffffffffffffff}}}, 0x28) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x12dd) r5 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) 07:20:38 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x110, 0x0, r1, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x4, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x2, 0x101, '$\\'}, {0x0, 0x400, 0xa, 0x6, '/dev/fuse\x00'}, {0x0, 0x0, 0xa, 0x10000, '/dev/cuse\x00'}, {0x2, 0x5, 0x2, 0x4b37, '-$'}, {0x0, 0xe5d1, 0x4, 0x100, '\xa4r:!'}]}, 0x110) 07:20:38 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r1}, 0x10) [ 599.665701] block nbd0: shutting down sockets 07:20:38 executing program 0: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000040)={0x10, 0x0, r4}, 0x10) write$FUSE_LK(r2, &(0x7f0000000100)={0x28, 0x0, r4, {{0x4, 0x7, 0x1, 0xffffffffffffffff}}}, 0x28) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x12dd) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) 07:20:39 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r1}, 0x10) 07:20:39 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000040)={0x10, 0x0, r4}, 0x10) write$FUSE_LK(r2, &(0x7f0000000100)={0x28, 0x0, r4, {{0x4, 0x7, 0x1, 0xffffffffffffffff}}}, 0x28) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x12dd) r5 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) [ 599.765484] block nbd5: shutting down sockets [ 599.774228] block nbd3: shutting down sockets 07:20:39 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x110, 0x0, r1, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x4, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x2, 0x101, '$\\'}, {0x0, 0x400, 0xa, 0x6, '/dev/fuse\x00'}, {0x0, 0x0, 0xa, 0x10000, '/dev/cuse\x00'}, {0x2, 0x5, 0x2, 0x4b37, '-$'}, {0x0, 0xe5d1, 0x4, 0x100, '\xa4r:!'}]}, 0x110) 07:20:39 executing program 3: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000040)={0x10, 0x0, r4}, 0x10) write$FUSE_LK(r2, &(0x7f0000000100)={0x28, 0x0, r4, {{0x4, 0x7, 0x1, 0xffffffffffffffff}}}, 0x28) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x12dd) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 07:20:39 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r1}, 0x10) 07:20:39 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r1}, 0x10) 07:20:39 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x110, 0x0, r1, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x4, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x2, 0x101, '$\\'}, {0x0, 0x400, 0xa, 0x6, '/dev/fuse\x00'}, {0x0, 0x0, 0xa, 0x10000, '/dev/cuse\x00'}, {0x2, 0x5, 0x2, 0x4b37, '-$'}, {0x0, 0xe5d1, 0x4, 0x100, '\xa4r:!'}]}, 0x110) 07:20:39 executing program 0: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000040)={0x10, 0x0, r4}, 0x10) write$FUSE_LK(r2, &(0x7f0000000100)={0x28, 0x0, r4, {{0x4, 0x7, 0x1, 0xffffffffffffffff}}}, 0x28) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) [ 599.906755] block nbd0: shutting down sockets [ 599.911432] block nbd5: shutting down sockets 07:20:39 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe}, 0x10) 07:20:39 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000040)={0x10, 0x0, r4}, 0x10) write$FUSE_LK(r2, &(0x7f0000000100)={0x28, 0x0, r4, {{0x4, 0x7, 0x1, 0xffffffffffffffff}}}, 0x28) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x12dd) r5 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) 07:20:39 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r1}, 0x10) [ 599.995532] block nbd3: shutting down sockets 07:20:39 executing program 3: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000040)={0x10, 0x0, r4}, 0x10) write$FUSE_LK(r2, &(0x7f0000000100)={0x28, 0x0, r4, {{0x4, 0x7, 0x1, 0xffffffffffffffff}}}, 0x28) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x12dd) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 07:20:39 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x110, 0x0, r1, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x4, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x2, 0x101, '$\\'}, {0x0, 0x400, 0xa, 0x6, '/dev/fuse\x00'}, {0x0, 0x0, 0xa, 0x10000, '/dev/cuse\x00'}, {0x2, 0x5, 0x2, 0x4b37, '-$'}, {0x0, 0xe5d1, 0x4, 0x100, '\xa4r:!'}]}, 0x110) 07:20:39 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe}, 0x10) [ 600.074807] block nbd5: shutting down sockets [ 600.087101] block nbd0: shutting down sockets 07:20:39 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000040)={0x10, 0x0, r4}, 0x10) write$FUSE_LK(r2, &(0x7f0000000100)={0x28, 0x0, r4, {{0x4, 0x7, 0x1, 0xffffffffffffffff}}}, 0x28) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x12dd) r5 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) 07:20:39 executing program 0: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10, 0x0, r3}, 0x10) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) 07:20:39 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r1}, 0x10) [ 600.177749] block nbd3: shutting down sockets 07:20:39 executing program 3: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000040)={0x10, 0x0, r4}, 0x10) write$FUSE_LK(r2, &(0x7f0000000100)={0x28, 0x0, r4, {{0x4, 0x7, 0x1, 0xffffffffffffffff}}}, 0x28) r5 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) 07:20:39 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe}, 0x10) 07:20:39 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x110, 0x0, r1, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x4, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x2, 0x101, '$\\'}, {0x0, 0x400, 0xa, 0x6, '/dev/fuse\x00'}, {0x0, 0x0, 0xa, 0x10000, '/dev/cuse\x00'}, {0x2, 0x5, 0x2, 0x4b37, '-$'}, {0x0, 0xe5d1, 0x4, 0x100, '\xa4r:!'}]}, 0x110) [ 600.284809] block nbd5: shutting down sockets 07:20:39 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r1}, 0x10) 07:20:39 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000040)={0x10, 0x0, r4}, 0x10) write$FUSE_LK(r2, &(0x7f0000000100)={0x28, 0x0, r4, {{0x4, 0x7, 0x1, 0xffffffffffffffff}}}, 0x28) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x12dd) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 07:20:39 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r1}, 0x10) [ 600.337163] block nbd0: shutting down sockets 07:20:39 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r1}, 0x10) 07:20:39 executing program 0: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003440)={0x2020}, 0x2020) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) 07:20:39 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x110, 0x0, r1, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x4, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x2, 0x101, '$\\'}, {0x0, 0x400, 0xa, 0x6, '/dev/fuse\x00'}, {0x0, 0x0, 0xa, 0x10000, '/dev/cuse\x00'}, {0x2, 0x5, 0x2, 0x4b37, '-$'}, {0x0, 0xe5d1, 0x4, 0x100, '\xa4r:!'}]}, 0x110) [ 600.414160] block nbd3: shutting down sockets 07:20:39 executing program 3: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10, 0x0, r3}, 0x10) r4 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 07:20:39 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r1}, 0x10) [ 600.494168] block nbd5: shutting down sockets 07:20:39 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r1}, 0x10) [ 600.526625] block nbd0: shutting down sockets 07:20:39 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000040)={0x10, 0x0, r4}, 0x10) write$FUSE_LK(r2, &(0x7f0000000100)={0x28, 0x0, r4, {{0x4, 0x7, 0x1, 0xffffffffffffffff}}}, 0x28) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x12dd) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 07:20:39 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x110, 0x0, 0x0, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x4, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x2, 0x101, '$\\'}, {0x0, 0x400, 0xa, 0x6, '/dev/fuse\x00'}, {0x0, 0x0, 0xa, 0x10000, '/dev/cuse\x00'}, {0x2, 0x5, 0x2, 0x4b37, '-$'}, {0x0, 0xe5d1, 0x4, 0x100, '\xa4r:!'}]}, 0x110) 07:20:39 executing program 0: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) 07:20:39 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe}, 0x10) [ 600.603807] block nbd3: shutting down sockets 07:20:39 executing program 3: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003440)={0x2020}, 0x2020) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 07:20:39 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r1}, 0x10) 07:20:39 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x110, 0x0, 0x0, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x4, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x2, 0x101, '$\\'}, {0x0, 0x400, 0xa, 0x6, '/dev/fuse\x00'}, {0x0, 0x0, 0xa, 0x10000, '/dev/cuse\x00'}, {0x2, 0x5, 0x2, 0x4b37, '-$'}, {0x0, 0xe5d1, 0x4, 0x100, '\xa4r:!'}]}, 0x110) [ 600.652240] block nbd5: shutting down sockets 07:20:39 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000040)={0x10, 0x0, r4}, 0x10) write$FUSE_LK(r2, &(0x7f0000000100)={0x28, 0x0, r4, {{0x4, 0x7, 0x1, 0xffffffffffffffff}}}, 0x28) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x12dd) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 07:20:39 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) write$FUSE_INTERRUPT(r0, 0x0, 0x0) 07:20:40 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe}, 0x10) 07:20:40 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x110, 0x0, 0x0, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x4, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x2, 0x101, '$\\'}, {0x0, 0x400, 0xa, 0x6, '/dev/fuse\x00'}, {0x0, 0x0, 0xa, 0x10000, '/dev/cuse\x00'}, {0x2, 0x5, 0x2, 0x4b37, '-$'}, {0x0, 0xe5d1, 0x4, 0x100, '\xa4r:!'}]}, 0x110) 07:20:40 executing program 0: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) [ 600.776240] block nbd3: shutting down sockets [ 600.776281] block nbd0: shutting down sockets [ 600.814090] block nbd5: shutting down sockets 07:20:40 executing program 3: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 07:20:40 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000040)={0x10, 0x0, r4}, 0x10) write$FUSE_LK(r2, &(0x7f0000000100)={0x28, 0x0, r4, {{0x4, 0x7, 0x1, 0xffffffffffffffff}}}, 0x28) r5 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) 07:20:40 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) write$FUSE_INTERRUPT(r0, 0x0, 0x0) 07:20:40 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe}, 0x10) 07:20:40 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000020c0)={0x110, 0x0, r1, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x4, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x2, 0x101, '$\\'}, {0x0, 0x400, 0xa, 0x6, '/dev/fuse\x00'}, {0x0, 0x0, 0xa, 0x10000, '/dev/cuse\x00'}, {0x2, 0x5, 0x2, 0x4b37, '-$'}, {0x0, 0xe5d1, 0x4, 0x100, '\xa4r:!'}]}, 0x110) [ 600.934052] block nbd0: shutting down sockets [ 600.954005] block nbd5: shutting down sockets 07:20:40 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) write$FUSE_INTERRUPT(r0, 0x0, 0x0) 07:20:40 executing program 0: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) [ 600.988716] block nbd3: shutting down sockets 07:20:40 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10, 0x0, r3}, 0x10) r4 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 07:20:40 executing program 3: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 07:20:40 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r1}, 0x10) [ 601.093225] block nbd0: shutting down sockets 07:20:40 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r1}, 0x10) [ 601.114184] block nbd3: shutting down sockets [ 601.119220] block nbd5: shutting down sockets 07:20:40 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003440)={0x2020}, 0x2020) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 07:20:40 executing program 0: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) 07:20:40 executing program 3: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 07:20:40 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000020c0)={0x110, 0x0, r1, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x4, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x2, 0x101, '$\\'}, {0x0, 0x400, 0xa, 0x6, '/dev/fuse\x00'}, {0x0, 0x0, 0xa, 0x10000, '/dev/cuse\x00'}, {0x2, 0x5, 0x2, 0x4b37, '-$'}, {0x0, 0xe5d1, 0x4, 0x100, '\xa4r:!'}]}, 0x110) 07:20:40 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, r1}, 0x10) 07:20:40 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0x0, r1}, 0x10) 07:20:40 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000020c0)={0x110, 0x0, r1, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x4, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x2, 0x101, '$\\'}, {0x0, 0x400, 0xa, 0x6, '/dev/fuse\x00'}, {0x0, 0x0, 0xa, 0x10000, '/dev/cuse\x00'}, {0x2, 0x5, 0x2, 0x4b37, '-$'}, {0x0, 0xe5d1, 0x4, 0x100, '\xa4r:!'}]}, 0x110) [ 601.296601] block nbd0: shutting down sockets [ 601.306169] block nbd3: shutting down sockets [ 601.311287] block nbd5: shutting down sockets 07:20:40 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) write$FUSE_DIRENT(r0, 0x0, 0x0) 07:20:40 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0x0, r1}, 0x10) 07:20:40 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) write$FUSE_INTERRUPT(r0, 0x0, 0x0) 07:20:40 executing program 0: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) 07:20:40 executing program 3: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 07:20:40 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 07:20:40 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) write$FUSE_DIRENT(r0, 0x0, 0x0) 07:20:40 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0x0, r1}, 0x10) 07:20:40 executing program 0: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) 07:20:40 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) write$FUSE_INTERRUPT(r0, 0x0, 0x0) [ 601.533885] block nbd3: shutting down sockets 07:20:40 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) write$FUSE_DIRENT(r0, 0x0, 0x0) [ 601.563077] block nbd5: shutting down sockets 07:20:40 executing program 3: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:40 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 07:20:40 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe}, 0x10) 07:20:40 executing program 0: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) 07:20:40 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) write$FUSE_INTERRUPT(r0, 0x0, 0x0) 07:20:40 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x110, 0x0, 0x0, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x4, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x2, 0x101, '$\\'}, {0x0, 0x400, 0xa, 0x6, '/dev/fuse\x00'}, {0x0, 0x0, 0xa, 0x10000, '/dev/cuse\x00'}, {0x2, 0x5, 0x2, 0x4b37, '-$'}, {0x0, 0xe5d1, 0x4, 0x100, '\xa4r:!'}]}, 0x110) 07:20:40 executing program 3: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) [ 601.764089] block nbd5: shutting down sockets 07:20:41 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 07:20:41 executing program 0: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) 07:20:41 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe}, 0x10) 07:20:41 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0x0, r1}, 0x10) 07:20:41 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x110, 0x0, 0x0, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x4, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x2, 0x101, '$\\'}, {0x0, 0x400, 0xa, 0x6, '/dev/fuse\x00'}, {0x0, 0x0, 0xa, 0x10000, '/dev/cuse\x00'}, {0x2, 0x5, 0x2, 0x4b37, '-$'}, {0x0, 0xe5d1, 0x4, 0x100, '\xa4r:!'}]}, 0x110) 07:20:41 executing program 3: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:41 executing program 0: syz_open_dev$ndb(0x0, 0x0, 0x6c01) 07:20:41 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe}, 0x10) 07:20:41 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x110, 0x0, 0x0, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x4, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x2, 0x101, '$\\'}, {0x0, 0x400, 0xa, 0x6, '/dev/fuse\x00'}, {0x0, 0x0, 0xa, 0x10000, '/dev/cuse\x00'}, {0x2, 0x5, 0x2, 0x4b37, '-$'}, {0x0, 0xe5d1, 0x4, 0x100, '\xa4r:!'}]}, 0x110) 07:20:41 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0x0, r1}, 0x10) [ 601.943303] block nbd5: shutting down sockets 07:20:41 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 07:20:41 executing program 3: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:41 executing program 0: syz_open_dev$ndb(0x0, 0x0, 0x6c01) 07:20:41 executing program 1: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 07:20:41 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0x0, r1}, 0x10) 07:20:41 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0xf0, 0x0, r1, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x4, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x2, 0x101, '$\\'}, {0x0, 0x400, 0xa, 0x6, '/dev/fuse\x00'}, {0x0, 0x0, 0xa, 0x10000, '/dev/cuse\x00'}, {0x2, 0x5, 0x2, 0x4b37, '-$'}]}, 0xf0) [ 602.113170] block nbd5: shutting down sockets 07:20:41 executing program 0: syz_open_dev$ndb(0x0, 0x0, 0x6c01) 07:20:41 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) [ 602.167530] block nbd1: shutting down sockets 07:20:41 executing program 3: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:41 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0xd0, 0x0, r1, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x4, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x2, 0x101, '$\\'}, {0x0, 0x400, 0xa, 0x6, '/dev/fuse\x00'}, {0x0, 0x0, 0xa, 0x10000, '/dev/cuse\x00'}]}, 0xd0) 07:20:41 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe}, 0x10) 07:20:41 executing program 1: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 07:20:41 executing program 0: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) 07:20:41 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:41 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:41 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0xa8, 0x0, r1, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x4, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x2, 0x101, '$\\'}, {0x0, 0x400, 0xa, 0x6, '/dev/fuse\x00'}]}, 0xa8) 07:20:41 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe}, 0x10) 07:20:41 executing program 0: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) [ 602.334993] block nbd1: shutting down sockets 07:20:41 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:41 executing program 1: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 07:20:41 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x80, 0x0, r1, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x4, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x2, 0x101, '$\\'}]}, 0x80) 07:20:41 executing program 3: syz_open_dev$ndb(0x0, 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:41 executing program 0: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) 07:20:41 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe}, 0x10) 07:20:41 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) [ 602.483441] block nbd1: shutting down sockets 07:20:41 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x60, 0x0, r1, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x4, 0x2, 0x0, 0x9}]}, 0x60) 07:20:41 executing program 1: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 07:20:41 executing program 3: syz_open_dev$ndb(0x0, 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:41 executing program 0: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10, 0x0, r3}, 0x10) r4 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 07:20:41 executing program 2: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10, 0x0, r3}, 0x10) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) 07:20:41 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:41 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x48, 0x0, r1, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}]}, 0x48) 07:20:41 executing program 3: syz_open_dev$ndb(0x0, 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:41 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) [ 602.662974] block nbd1: shutting down sockets [ 602.674820] block nbd0: shutting down sockets 07:20:41 executing program 1: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) [ 602.705676] block nbd2: shutting down sockets 07:20:41 executing program 0: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10, 0x0, r3}, 0x10) r4 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 07:20:42 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:42 executing program 2: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:42 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x48, 0x0, r1, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}]}, 0x48) [ 602.802871] block nbd1: shutting down sockets 07:20:42 executing program 2: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000040)={0x10, 0x0, r4}, 0x10) write$FUSE_LK(r2, &(0x7f0000000100)={0x28, 0x0, r4, {{0x4, 0x7, 0x1, 0xffffffffffffffff}}}, 0x28) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x12dd) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) 07:20:42 executing program 1: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) [ 602.824003] block nbd0: shutting down sockets 07:20:42 executing program 0: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10, 0x0, r3}, 0x10) r4 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 07:20:42 executing program 5: syz_open_dev$ndb(0x0, 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:42 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x48, 0x0, r1, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}]}, 0x48) 07:20:42 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:42 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x60, 0x0, r1, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x0, 0x2, 0x0, 0x9}]}, 0x60) 07:20:42 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:42 executing program 1: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) [ 602.941695] block nbd2: shutting down sockets [ 602.953030] block nbd1: shutting down sockets [ 602.971015] block nbd0: shutting down sockets 07:20:42 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x60, 0x0, r1, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {0x0, 0x0, 0x0, 0x9}]}, 0x60) 07:20:42 executing program 5: syz_open_dev$ndb(0x0, 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:42 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x48, 0x0, r1, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}]}, 0x48) 07:20:42 executing program 0: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10, 0x0, r3}, 0x10) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 07:20:42 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:42 executing program 1: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:42 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682be", 0x4d) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:42 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 07:20:42 executing program 5: syz_open_dev$ndb(0x0, 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:42 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x60, 0x0, r1, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x5, 0xdb, 0x0, 0x7ff}, {}]}, 0x60) [ 603.154554] block nbd0: shutting down sockets 07:20:42 executing program 0: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10, 0x0, r3}, 0x10) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 07:20:42 executing program 1: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:42 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x48, 0x0, r1, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {}]}, 0x48) 07:20:42 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 07:20:42 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682be", 0x4d) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:42 executing program 1: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:42 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) [ 603.333616] block nbd0: shutting down sockets 07:20:42 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x48, 0x0, r1, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {}]}, 0x48) 07:20:42 executing program 0: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10, 0x0, r3}, 0x10) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 07:20:42 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 07:20:42 executing program 1: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:42 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x602000) syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x42a8c0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0xc2203) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0xfffffffffffffeff, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000001c0)={0xc1, r2}) r3 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f00000000c0)={0xfff, 0x0}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000200)={0x7, r4}) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x2, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0106438, &(0x7f0000000080)={0x1ff, r5}) 07:20:42 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x48, 0x0, r1, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {}]}, 0x48) [ 603.484823] block nbd0: shutting down sockets 07:20:42 executing program 3: shmget$private(0x4c00000000000000, 0x400000, 0x800, &(0x7f0000bfd000/0x400000)=nil) 07:20:42 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:42 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:42 executing program 0: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003440)={0x2020}, 0x2020) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 07:20:42 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x60, 0x0, r1, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x0, 0xdb, 0x0, 0x7ff}, {}]}, 0x60) 07:20:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x602000) syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x42a8c0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0xc2203) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0xfffffffffffffeff, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000001c0)={0xc1, r2}) r3 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f00000000c0)={0xfff, 0x0}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000200)={0x7, r4}) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x2, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0106438, &(0x7f0000000080)={0x1ff, r5}) 07:20:42 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:42 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d1", 0x42) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:42 executing program 1: syz_open_dev$ndb(0x0, 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) [ 603.668309] block nbd0: shutting down sockets 07:20:42 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x60, 0x0, r1, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {0x0, 0x0, 0x0, 0x7ff}, {}]}, 0x60) 07:20:42 executing program 0: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 07:20:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x602000) syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x42a8c0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0xc2203) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0xfffffffffffffeff, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000001c0)={0xc1, r2}) r3 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f00000000c0)={0xfff, 0x0}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000200)={0x7, r4}) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x2, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0106438, &(0x7f0000000080)={0x1ff, r5}) 07:20:43 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 07:20:43 executing program 1: syz_open_dev$ndb(0x0, 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:43 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d1", 0x42) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:43 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x60, 0x0, r1, [{0x6, 0x2, 0x5, 0x3, '[::&('}, {}, {}]}, 0x60) 07:20:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x602000) syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x42a8c0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0xc2203) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0xfffffffffffffeff, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000001c0)={0xc1, r2}) r3 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f00000000c0)={0xfff, 0x0}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000200)={0x7, r4}) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x2, 0x0, 0x10001}) [ 603.846220] block nbd0: shutting down sockets 07:20:43 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 07:20:43 executing program 0: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 07:20:43 executing program 1: syz_open_dev$ndb(0x0, 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:43 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d1", 0x42) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:43 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x40, 0x0, r1, [{}, {}]}, 0x40) 07:20:43 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 07:20:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x602000) syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x42a8c0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0xc2203) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0xfffffffffffffeff, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000001c0)={0xc1, r2}) r3 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f00000000c0)={0xfff, 0x0}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000200)={0x7, r4}) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000600)) 07:20:43 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) [ 603.982946] block nbd0: shutting down sockets 07:20:43 executing program 3: syz_open_dev$ndb(0x0, 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x602000) syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x42a8c0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0xc2203) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0xfffffffffffffeff, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000001c0)={0xc1, r2}) r3 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f00000000c0)={0xfff, 0x0}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000200)={0x7, r4}) 07:20:43 executing program 0: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 07:20:43 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0xd5, 0x800) getrusage(0x1, &(0x7f0000000100)) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0xfffffffffffffffe}) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1, 0x20000) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f00000001c0)=0x7f) 07:20:43 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x40, 0x0, r1, [{}, {}]}, 0x40) 07:20:43 executing program 3: openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x20000) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x40002) ioctl$NBD_CLEAR_QUE(r2, 0xab05) 07:20:43 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x602000) syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x42a8c0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0xc2203) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0xfffffffffffffeff, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000001c0)={0xc1, r2}) r3 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f00000000c0)={0xfff}) [ 604.133027] block nbd0: shutting down sockets 07:20:43 executing program 0: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 07:20:43 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:43 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0xd5, 0x800) getrusage(0x1, &(0x7f0000000100)) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0xfffffffffffffffe}) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1, 0x20000) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f00000001c0)=0x7f) [ 604.203126] block nbd3: shutting down sockets 07:20:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x602000) syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x42a8c0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0xc2203) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0xfffffffffffffeff, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000001c0)={0xc1, r2}) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:20:43 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x40, 0x0, r1, [{}, {}]}, 0x40) 07:20:43 executing program 3: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 604.283007] block nbd0: shutting down sockets 07:20:43 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0xd5, 0x800) getrusage(0x1, &(0x7f0000000100)) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0xfffffffffffffffe}) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1, 0x20000) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f00000001c0)=0x7f) 07:20:43 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:43 executing program 0: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:43 executing program 2: syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x602000) syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x42a8c0) r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0xc2203) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000180)={0xfffffffffffffeff, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:20:43 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0xd5, 0x800) getrusage(0x1, &(0x7f0000000100)) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0xfffffffffffffffe}) syz_open_dev$usbfs(&(0x7f0000000080), 0x1, 0x20000) 07:20:43 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x60, 0x0, r1, [{0x0, 0x2, 0x5, 0x3, '[::&('}, {}, {}]}, 0x60) [ 604.373168] block nbd3: shutting down sockets 07:20:43 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d1", 0x42) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:43 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 07:20:43 executing program 2: syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x602000) syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x42a8c0) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0xc2203) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:20:43 executing program 0: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:43 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x60, 0x0, r1, [{0x0, 0x0, 0x5, 0x3, '[::&('}, {}, {}]}, 0x60) 07:20:43 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0xd5, 0x800) getrusage(0x1, &(0x7f0000000100)) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0xfffffffffffffffe}) 07:20:43 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d1", 0x42) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:43 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 07:20:43 executing program 0: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:43 executing program 2: syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x602000) syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x42a8c0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:20:43 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x60, 0x0, r1, [{0x0, 0x0, 0x5, 0x0, '[::&('}, {}, {}]}, 0x60) 07:20:43 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xd5, 0x800) getrusage(0x1, &(0x7f0000000100)) 07:20:43 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d1", 0x42) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="010000000000000002000000000000000c000000000400002c2f7d262c29265ea00c2a210000000006000000000000000100008000000000010000000000000024000000000000000300000000000000080000000000000009000000000000002f6465762f70707000000000000000000400000000000000fdffffffffffffff04000000018000002d7d2827000000000000000000000000050000000000000009000000800000002f6465762f70707000000000000000000300000000000000200000000000000001000000010000002e0000000000000002000000000000000008000000000000010000000800000024000000000000000300000000000000000000000000000000000000fffffeff"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:43 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 07:20:43 executing program 2: syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x602000) syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x42a8c0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:20:43 executing program 0: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:44 executing program 4: shmget$private(0x600000000000000, 0x400000, 0x800, &(0x7f0000bfd000/0x400000)=nil) 07:20:44 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) getrusage(0x1, &(0x7f0000000100)) 07:20:44 executing program 1: shmget$private(0x500000000000000, 0x400000, 0x800, &(0x7f0000bfd000/0x400000)=nil) 07:20:44 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8", 0x2c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:44 executing program 2: syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x602000) syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x42a8c0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:20:44 executing program 0: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:44 executing program 5: getrusage(0x1, &(0x7f0000000100)) 07:20:44 executing program 2: syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x602000) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0xc2203) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:20:44 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8", 0x2c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:44 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) 07:20:44 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:44 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8", 0x2c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:44 executing program 5: getrusage(0x0, &(0x7f0000000100)) 07:20:44 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0xc2203) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:20:44 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x1) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x3) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) accept4(0xffffffffffffffff, &(0x7f0000000400)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f00000003c0)=0x80, 0x81800) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000380)) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r5, 0x111, 0x1, 0x40, 0x4) r6 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$khugepaged_scan(r6, &(0x7f0000000000), 0x79) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000140)="79ef6678397b8a0d7cb746a4d53d7211308eb592da7980baf0be59629eaea4e04aff6e85be8dae64f40713887954a6785f5381d100db3a8f429a3f5cea1ef702660d5b51e027ba56dc6071627e178afdde44", &(0x7f0000000240)=""/247}, 0x20) write$khugepaged_scan(r6, &(0x7f0000000100), 0x8) 07:20:44 executing program 0: syz_open_dev$ndb(0x0, 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:44 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:44 executing program 5: getrusage(0x0, &(0x7f0000000100)) 07:20:44 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r1, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r1, &(0x7f0000002180)={0x18, 0xfffffffffffffffe, r3, {0x8}}, 0x18) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, r2}, 0x10) write$FUSE_WRITE(r1, &(0x7f0000000080)={0x18, 0x0, r2, {0x7719}}, 0x18) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f00000021c0)) ioctl$NBD_SET_BLKSIZE(r4, 0xab01, 0x81) 07:20:44 executing program 2: syz_open_dev$dri(0x0, 0x0, 0xc2203) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:20:44 executing program 5: getrusage(0x0, &(0x7f0000000100)) [ 605.143180] block nbd1: shutting down sockets 07:20:44 executing program 0: syz_open_dev$ndb(0x0, 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:44 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980), 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:44 executing program 4: shmget$private(0x68000000, 0x400000, 0x800, &(0x7f0000bfd000/0x400000)=nil) 07:20:44 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r1, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r1, &(0x7f0000002180)={0x18, 0xfffffffffffffffe, r3, {0x8}}, 0x18) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, r2}, 0x10) write$FUSE_WRITE(r1, &(0x7f0000000080)={0x18, 0x0, r2, {0x7719}}, 0x18) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f00000021c0)) ioctl$NBD_SET_BLKSIZE(r4, 0xab01, 0x81) 07:20:44 executing program 0: syz_open_dev$ndb(0x0, 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:44 executing program 4: shmget$private(0x68000000, 0x400000, 0x800, &(0x7f0000bfd000/0x400000)=nil) 07:20:44 executing program 2: syz_open_dev$dri(0x0, 0x0, 0xc2203) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:20:44 executing program 5: getrusage(0x1, 0x0) 07:20:44 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r1, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r1, &(0x7f0000002180)={0x18, 0xfffffffffffffffe, r3, {0x8}}, 0x18) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, r2}, 0x10) write$FUSE_WRITE(r1, &(0x7f0000000080)={0x18, 0x0, r2, {0x7719}}, 0x18) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f00000021c0)) ioctl$NBD_SET_BLKSIZE(r4, 0xab01, 0x81) 07:20:44 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980), 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:44 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:44 executing program 2: syz_open_dev$dri(0x0, 0x0, 0xc2203) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:20:44 executing program 4: shmget$private(0x68000000, 0x400000, 0x800, &(0x7f0000bfd000/0x400000)=nil) 07:20:44 executing program 5: getrusage(0x1, 0x0) 07:20:44 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r1, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r1, &(0x7f0000002180)={0x18, 0xfffffffffffffffe, r3, {0x8}}, 0x18) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, r2}, 0x10) write$FUSE_WRITE(r1, &(0x7f0000000080)={0x18, 0x0, r2, {0x7719}}, 0x18) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$NBD_SET_BLKSIZE(r4, 0xab01, 0x81) 07:20:44 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980), 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:44 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:44 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:20:44 executing program 4: shmget$private(0x68000000, 0x400000, 0x0, &(0x7f0000bfd000/0x400000)=nil) 07:20:44 executing program 5: getrusage(0x1, 0x0) 07:20:44 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r1, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r1, &(0x7f0000002180)={0x18, 0xfffffffffffffffe, r3, {0x8}}, 0x18) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, r2}, 0x10) write$FUSE_WRITE(r1, &(0x7f0000000080)={0x18, 0x0, r2, {0x7719}}, 0x18) ioctl$NBD_CLEAR_QUE(r0, 0xab05) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x81) 07:20:44 executing program 1: syz_open_dev$ndb(0x0, 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:44 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x6c01) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:44 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x4000) 07:20:44 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x5}) r1 = gettid() prlimit64(r1, 0xc94a3c1257f61ef0, 0x0, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, {{0x5, 0x10001, 0x2, r1}}}, 0x28) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x21, 0x7fffffff, 0x410, 0xff, 0xb616, 0x1, 0x2}}, 0x50) r2 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) r3 = gettid() prlimit64(r3, 0xc94a3c1257f61ef0, 0x0, 0x0) prlimit64(r3, 0x7, &(0x7f0000000240)={0x0, 0x7fffffff}, &(0x7f0000000280)) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0xffffffff, 0x0, 0x10000}) r5 = syz_open_dev$dri(&(0x7f00000001c0), 0x23c3, 0xa0000) ioctl$DRM_IOCTL_AGP_BIND(r5, 0x40106436, &(0x7f0000000200)={r4, 0x4}) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000100)={0x9, r4}) 07:20:44 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x5}) r1 = gettid() prlimit64(r1, 0xc94a3c1257f61ef0, 0x0, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, {{0x5, 0x10001, 0x2, r1}}}, 0x28) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x21, 0x7fffffff, 0x410, 0xff, 0xb616, 0x1, 0x2}}, 0x50) r2 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) r3 = gettid() prlimit64(r3, 0xc94a3c1257f61ef0, 0x0, 0x0) prlimit64(r3, 0x7, &(0x7f0000000240)={0x0, 0x7fffffff}, &(0x7f0000000280)) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0xffffffff, 0x0, 0x10000}) r5 = syz_open_dev$dri(&(0x7f00000001c0), 0x23c3, 0xa0000) ioctl$DRM_IOCTL_AGP_BIND(r5, 0x40106436, &(0x7f0000000200)={r4, 0x4}) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000100)={0x9, r4}) 07:20:44 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r1, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r1, &(0x7f0000002180)={0x18, 0xfffffffffffffffe, r3, {0x8}}, 0x18) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, r2}, 0x10) write$FUSE_WRITE(r1, &(0x7f0000000080)={0x18, 0x0, r2, {0x7719}}, 0x18) ioctl$NBD_CLEAR_QUE(r0, 0xab05) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x81) 07:20:44 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980), 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:44 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:44 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x4000) 07:20:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x5}) r1 = gettid() prlimit64(r1, 0xc94a3c1257f61ef0, 0x0, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, {{0x5, 0x10001, 0x2, r1}}}, 0x28) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x21, 0x7fffffff, 0x410, 0xff, 0xb616, 0x1, 0x2}}, 0x50) r2 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) r3 = gettid() prlimit64(r3, 0xc94a3c1257f61ef0, 0x0, 0x0) prlimit64(r3, 0x7, &(0x7f0000000240)={0x0, 0x7fffffff}, &(0x7f0000000280)) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0xffffffff, 0x0, 0x10000}) r5 = syz_open_dev$dri(&(0x7f00000001c0), 0x23c3, 0xa0000) ioctl$DRM_IOCTL_AGP_BIND(r5, 0x40106436, &(0x7f0000000200)={r4, 0x4}) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000100)={0x9, r4}) 07:20:45 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:45 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 07:20:45 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r1, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r1, &(0x7f0000002180)={0x18, 0xfffffffffffffffe, r3, {0x8}}, 0x18) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, r2}, 0x10) write$FUSE_WRITE(r1, &(0x7f0000000080)={0x18, 0x0, r2, {0x7719}}, 0x18) ioctl$NBD_CLEAR_QUE(r0, 0xab05) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x81) 07:20:45 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980), 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="010000000000000002000000000000000c000000000400002c2f7d262c29265ea00c2a210000000006000000000000000100008000000000010000000000000024000000000000000300000000000000080000000000000009000000000000002f6465762f70707000000000000000000400000000000000fdffffffffffffff04000000018000002d7d2827000000000000000000000000050000000000000009000000800000002f6465762f70707000000000000000000300000000000000200000000000000001000000010000002e0000000000000002000000000000000008000000000000010000000800000024000000000000000300000000000000000000000000000000000000fffffeff"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:45 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x4000) 07:20:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x5}) r1 = gettid() prlimit64(r1, 0xc94a3c1257f61ef0, 0x0, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, {{0x5, 0x10001, 0x2, r1}}}, 0x28) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x21, 0x7fffffff, 0x410, 0xff, 0xb616, 0x1, 0x2}}, 0x50) r2 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) r3 = gettid() prlimit64(r3, 0xc94a3c1257f61ef0, 0x0, 0x0) prlimit64(r3, 0x7, &(0x7f0000000240)={0x0, 0x7fffffff}, &(0x7f0000000280)) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0xffffffff, 0x0, 0x10000}) r5 = syz_open_dev$dri(&(0x7f00000001c0), 0x23c3, 0xa0000) ioctl$DRM_IOCTL_AGP_BIND(r5, 0x40106436, &(0x7f0000000200)={r4, 0x4}) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000100)={0x9, r4}) 07:20:45 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 07:20:45 executing program 3: openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r0, &(0x7f0000002180)={0x18, 0xfffffffffffffffe, r2, {0x8}}, 0x18) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, r1}, 0x10) write$FUSE_WRITE(r0, &(0x7f0000000080)={0x18, 0x0, r1, {0x7719}}, 0x18) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x81) 07:20:45 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980), 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:45 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r1, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r1, &(0x7f0000002180)={0x18, 0xfffffffffffffffe, r3, {0x8}}, 0x18) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, r2}, 0x10) write$FUSE_WRITE(r1, &(0x7f0000000080)={0x18, 0x0, r2, {0x7719}}, 0x18) ioctl$NBD_CLEAR_QUE(r0, 0xab05) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x81) 07:20:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x5}) r1 = gettid() prlimit64(r1, 0xc94a3c1257f61ef0, 0x0, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, {{0x5, 0x10001, 0x2, r1}}}, 0x28) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x21, 0x7fffffff, 0x410, 0xff, 0xb616, 0x1, 0x2}}, 0x50) r2 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) r3 = gettid() prlimit64(r3, 0xc94a3c1257f61ef0, 0x0, 0x0) prlimit64(r3, 0x7, &(0x7f0000000240)={0x0, 0x7fffffff}, &(0x7f0000000280)) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0xffffffff, 0x0, 0x10000}) r5 = syz_open_dev$dri(&(0x7f00000001c0), 0x23c3, 0xa0000) ioctl$DRM_IOCTL_AGP_BIND(r5, 0x40106436, &(0x7f0000000200)={r4, 0x4}) 07:20:45 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) 07:20:45 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 07:20:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x5}) r1 = gettid() prlimit64(r1, 0xc94a3c1257f61ef0, 0x0, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, {{0x5, 0x10001, 0x2, r1}}}, 0x28) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x21, 0x7fffffff, 0x410, 0xff, 0xb616, 0x1, 0x2}}, 0x50) r2 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) r3 = gettid() prlimit64(r3, 0xc94a3c1257f61ef0, 0x0, 0x0) prlimit64(r3, 0x7, &(0x7f0000000240)={0x0, 0x7fffffff}, &(0x7f0000000280)) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0xffffffff, 0x0, 0x10000}) syz_open_dev$dri(&(0x7f00000001c0), 0x23c3, 0xa0000) 07:20:45 executing program 3: openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r0, &(0x7f0000002180)={0x18, 0xfffffffffffffffe, r2, {0x8}}, 0x18) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, r1}, 0x10) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x81) 07:20:45 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) 07:20:45 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x80000001, 0x2) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x4, 0x408000) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000140)={0x0, 0x3}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000080)=0xa59) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)) 07:20:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x5}) r1 = gettid() prlimit64(r1, 0xc94a3c1257f61ef0, 0x0, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, {{0x5, 0x10001, 0x2, r1}}}, 0x28) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x21, 0x7fffffff, 0x410, 0xff, 0xb616, 0x1, 0x2}}, 0x50) r2 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) r3 = gettid() prlimit64(r3, 0xc94a3c1257f61ef0, 0x0, 0x0) prlimit64(r3, 0x7, &(0x7f0000000240)={0x0, 0x7fffffff}, &(0x7f0000000280)) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0xffffffff, 0x0, 0x10000}) 07:20:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x5}) r1 = gettid() prlimit64(r1, 0xc94a3c1257f61ef0, 0x0, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, {{0x5, 0x10001, 0x2, r1}}}, 0x28) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x21, 0x7fffffff, 0x410, 0xff, 0xb616, 0x1, 0x2}}, 0x50) r2 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) r3 = gettid() prlimit64(r3, 0xc94a3c1257f61ef0, 0x0, 0x0) prlimit64(r3, 0x7, &(0x7f0000000240)={0x0, 0x7fffffff}, &(0x7f0000000280)) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0xffffffff, 0x0, 0x10000}) syz_open_dev$dri(&(0x7f00000001c0), 0x23c3, 0xa0000) 07:20:45 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(0xffffffffffffffff, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:45 executing program 3: openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003440)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r0, &(0x7f0000002180)={0x18, 0xfffffffffffffffe, r1, {0x8}}, 0x18) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x81) 07:20:45 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) 07:20:45 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_BMAP(r0, &(0x7f00000000c0)={0x18, 0xfffffffffffffffe, 0x0, {0xfa}}, 0x18) ioctl$NBD_CLEAR_QUE(r0, 0xab05) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x1) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000000)) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x408000) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x8) 07:20:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x5}) r1 = gettid() prlimit64(r1, 0xc94a3c1257f61ef0, 0x0, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, {{0x5, 0x10001, 0x2, r1}}}, 0x28) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x21, 0x7fffffff, 0x410, 0xff, 0xb616, 0x1, 0x2}}, 0x50) r2 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) r3 = gettid() prlimit64(r3, 0xc94a3c1257f61ef0, 0x0, 0x0) prlimit64(r3, 0x7, &(0x7f0000000240)={0x0, 0x7fffffff}, &(0x7f0000000280)) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000600)) 07:20:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x200000000000000}) 07:20:45 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(0xffffffffffffffff, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="010000000000000002000000000000000c000000000400002c2f7d262c29265ea00c2a210000000006000000000000000100008000000000010000000000000024000000000000000300000000000000080000000000000009000000000000002f6465762f70707000000000000000000400000000000000fdffffffffffffff04000000018000002d7d2827000000000000000000000000050000000000000009000000800000002f6465762f70707000000000000000000300000000000000200000000000000001000000010000002e0000000000000002000000000000000008000000000000010000000800000024000000000000000300000000000000000000000000000000000000fffffeff"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:45 executing program 3: openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003440)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x81) 07:20:45 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, 0x0) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x5}) r1 = gettid() prlimit64(r1, 0xc94a3c1257f61ef0, 0x0, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, {{0x5, 0x10001, 0x2, r1}}}, 0x28) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x21, 0x7fffffff, 0x410, 0xff, 0xb616, 0x1, 0x2}}, 0x50) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) r2 = gettid() prlimit64(r2, 0xc94a3c1257f61ef0, 0x0, 0x0) prlimit64(r2, 0x7, &(0x7f0000000240)={0x0, 0x7fffffff}, &(0x7f0000000280)) 07:20:45 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) [ 606.358167] block nbd4: shutting down sockets 07:20:45 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:45 executing program 3: openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003440)={0x2020}, 0x2020) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x81) 07:20:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x5}) r1 = gettid() prlimit64(r1, 0xc94a3c1257f61ef0, 0x0, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, {{0x5, 0x10001, 0x2, r1}}}, 0x28) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x21, 0x7fffffff, 0x410, 0xff, 0xb616, 0x1, 0x2}}, 0x50) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) r2 = gettid() prlimit64(r2, 0x7, &(0x7f0000000240)={0x0, 0x7fffffff}, &(0x7f0000000280)) 07:20:45 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:45 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xcb96, 0x40402) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$NBD_CLEAR_QUE(r1, 0xab05) 07:20:45 executing program 3: openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x81) 07:20:45 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:45 executing program 0: shmget$private(0x600, 0x400000, 0x800, &(0x7f0000bfd000/0x400000)=nil) 07:20:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x5}) r1 = gettid() prlimit64(r1, 0xc94a3c1257f61ef0, 0x0, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, {{0x5, 0x10001, 0x2, r1}}}, 0x28) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x21, 0x7fffffff, 0x410, 0xff, 0xb616, 0x1, 0x2}}, 0x50) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000240)={0x0, 0x7fffffff}, &(0x7f0000000280)) 07:20:45 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:45 executing program 3: openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x81) 07:20:45 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:45 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x401064c9, &(0x7f0000000040)) 07:20:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x5}) r1 = gettid() prlimit64(r1, 0xc94a3c1257f61ef0, 0x0, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, {{0x5, 0x10001, 0x2, r1}}}, 0x28) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x21, 0x7fffffff, 0x410, 0xff, 0xb616, 0x1, 0x2}}, 0x50) prlimit64(0x0, 0x7, &(0x7f0000000240)={0x0, 0x7fffffff}, &(0x7f0000000280)) 07:20:46 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x81) 07:20:46 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x401064c9, &(0x7f0000000040)) 07:20:46 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:46 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xc0045878) 07:20:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x5}) r1 = gettid() prlimit64(r1, 0xc94a3c1257f61ef0, 0x0, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, {{0x5, 0x10001, 0x2, r1}}}, 0x28) prlimit64(0x0, 0x7, &(0x7f0000000240)={0x0, 0x7fffffff}, &(0x7f0000000280)) 07:20:46 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x8000) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x81) 07:20:46 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x401064c9, &(0x7f0000000040)) 07:20:46 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000500)) write$ppp(r0, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r1, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="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"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:46 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0x8004e500) 07:20:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x5}) r1 = gettid() prlimit64(r1, 0xc94a3c1257f61ef0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000240)={0x0, 0x7fffffff}, &(0x7f0000000280)) 07:20:46 executing program 0: ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x401064c9, &(0x7f0000000040)) 07:20:46 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x8000) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x81) 07:20:46 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) write$ppp(r1, &(0x7f0000000980)="27dd526b646180a6ea22895d12dcb9051fe8c31837e0af2656ace67fd7d2d4a633c5e03b316f32625454b5c8379b68d8e78952cc7cd623247376603bc3166759e9d156b14bcd512fda370682beca00ca3f7e3c89b202f6e3", 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000008000000183900c74ce4000400000000000800000000008500000013deff0018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000000778050009000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x9, 0xa4bb, 0xfffffff7}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="007e1b5a02310000", @ANYRES64=0x0, @ANYBLOB="010000000000000002000000000000000c000000000400002c2f7d262c29265ea00c2a210000000006000000000000000100008000000000010000000000000024000000000000000300000000000000080000000000000009000000000000002f6465762f70707000000000000000000400000000000000fdffffffffffffff04000000018000002d7d2827000000000000000000000000050000000000000009000000800000002f6465762f70707000000000000000000300000000000000200000000000000001000000010000002e0000000000000002000000000000000008000000000000010000000800000024000000000000000300000000000000000000000000000000000000fffffeff"], 0x120) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x1ff) 07:20:46 executing program 2 (fault-call:1 fault-nth:0): syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:20:46 executing program 0: ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x401064c9, &(0x7f0000000040)) 07:20:46 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0x8004e500) 07:20:46 executing program 1 (fault-call:2 fault-nth:0): syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x5}) gettid() prlimit64(0x0, 0x7, &(0x7f0000000240)={0x0, 0x7fffffff}, &(0x7f0000000280)) 07:20:46 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x8000) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x81) 07:20:46 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0x8004e500) [ 607.150451] FAULT_INJECTION: forcing a failure. [ 607.150451] name failslab, interval 1, probability 0, space 0, times 0 [ 607.199647] CPU: 1 PID: 6499 Comm: syz-executor.2 Not tainted 4.19.202-syzkaller #0 [ 607.207481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 607.216841] Call Trace: [ 607.219442] dump_stack+0x1fc/0x2ef [ 607.223082] should_fail.cold+0xa/0xf [ 607.226896] ? setup_fault_attr+0x200/0x200 [ 607.231235] ? lock_acquire+0x170/0x3c0 [ 607.235260] __should_failslab+0x115/0x180 [ 607.239506] should_failslab+0x5/0x10 [ 607.243344] kmem_cache_alloc+0x277/0x370 [ 607.247505] getname_flags+0xce/0x590 [ 607.251320] do_sys_open+0x26c/0x520 [ 607.255041] ? filp_open+0x70/0x70 [ 607.258593] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 607.263965] ? trace_hardirqs_off_caller+0x6e/0x210 [ 607.268990] ? do_syscall_64+0x21/0x620 [ 607.272978] do_syscall_64+0xf9/0x620 [ 607.276790] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 607.281984] RIP: 0033:0x4196d4 07:20:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x5}) prlimit64(0x0, 0x7, &(0x7f0000000240)={0x0, 0x7fffffff}, &(0x7f0000000280)) 07:20:46 executing program 0: ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x401064c9, &(0x7f0000000040)) 07:20:46 executing program 4: ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0x8004e500) 07:20:46 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) [ 607.285183] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 607.304090] RSP: 002b:00007f81fa824cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 607.311810] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 607.319086] RDX: 0000000000004000 RSI: 00007f81fa824d60 RDI: 00000000ffffff9c [ 607.326708] RBP: 00007f81fa824d60 R08: 0000000000000000 R09: 0023647261632f69 [ 607.334021] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004000 [ 607.341421] R13: 00007fff7f2bc3ef R14: 00007f81fa825300 R15: 0000000000022000 07:20:46 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x81) 07:20:46 executing program 2 (fault-call:1 fault-nth:1): syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:20:46 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000240)={0x0, 0x7fffffff}, &(0x7f0000000280)) 07:20:46 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x401064c9, &(0x7f0000000040)) 07:20:46 executing program 4: ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0x8004e500) 07:20:46 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x2) 07:20:46 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x401064c9, &(0x7f0000000040)) 07:20:46 executing program 4: ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0x8004e500) [ 607.506248] FAULT_INJECTION: forcing a failure. [ 607.506248] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 607.518088] CPU: 1 PID: 6538 Comm: syz-executor.2 Not tainted 4.19.202-syzkaller #0 [ 607.526232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 607.535619] Call Trace: [ 607.538219] dump_stack+0x1fc/0x2ef [ 607.542030] should_fail.cold+0xa/0xf [ 607.545852] ? setup_fault_attr+0x200/0x200 [ 607.550181] ? lock_downgrade+0x720/0x720 07:20:46 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x401064c9, &(0x7f0000000040)) [ 607.554333] ? lock_acquire+0x170/0x3c0 [ 607.558314] ? mark_held_locks+0xf0/0xf0 [ 607.562389] __alloc_pages_nodemask+0x239/0x2890 [ 607.567151] ? _kstrtoull+0x297/0x540 [ 607.570983] ? _copy_from_user+0xd2/0x130 [ 607.575262] ? __lock_acquire+0x6de/0x3ff0 [ 607.579507] ? lock_downgrade+0x720/0x720 [ 607.583756] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 607.588611] ? check_preemption_disabled+0x41/0x280 [ 607.593819] ? proc_fail_nth_write+0x95/0x1d0 [ 607.598365] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 607.603312] cache_grow_begin+0xa4/0x8a0 [ 607.607411] ? setup_fault_attr+0x200/0x200 [ 607.611745] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 607.616521] cache_alloc_refill+0x273/0x340 [ 607.620859] kmem_cache_alloc+0x346/0x370 [ 607.625019] getname_flags+0xce/0x590 [ 607.628828] do_sys_open+0x26c/0x520 [ 607.632554] ? filp_open+0x70/0x70 [ 607.636107] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 607.641571] ? trace_hardirqs_off_caller+0x6e/0x210 [ 607.646596] ? do_syscall_64+0x21/0x620 [ 607.650934] do_syscall_64+0xf9/0x620 07:20:46 executing program 0: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x401064c9, &(0x7f0000000040)) [ 607.654746] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 607.659935] RIP: 0033:0x4196d4 [ 607.663128] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 607.682036] RSP: 002b:00007f81fa824cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 607.689758] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 607.697033] RDX: 0000000000004000 RSI: 00007f81fa824d60 RDI: 00000000ffffff9c 07:20:46 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x81) 07:20:47 executing program 0: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x401064c9, &(0x7f0000000040)) [ 607.704319] RBP: 00007f81fa824d60 R08: 0000000000000000 R09: 0023647261632f69 [ 607.711592] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004000 [ 607.718869] R13: 00007fff7f2bc3ef R14: 00007f81fa825300 R15: 0000000000022000 07:20:47 executing program 5: prlimit64(0x0, 0x7, &(0x7f0000000240)={0x0, 0x7fffffff}, &(0x7f0000000280)) 07:20:47 executing program 2 (fault-call:1 fault-nth:2): syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:20:47 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x301) 07:20:47 executing program 0: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x401064c9, &(0x7f0000000040)) 07:20:47 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0x8004e500) 07:20:47 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000240)={0x0, 0x7fffffff}, &(0x7f0000000280)) 07:20:47 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x81) [ 607.879449] FAULT_INJECTION: forcing a failure. [ 607.879449] name failslab, interval 1, probability 0, space 0, times 0 [ 607.925945] CPU: 0 PID: 6569 Comm: syz-executor.2 Not tainted 4.19.202-syzkaller #0 [ 607.933781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 607.943139] Call Trace: [ 607.945740] dump_stack+0x1fc/0x2ef [ 607.949396] should_fail.cold+0xa/0xf [ 607.953381] ? setup_fault_attr+0x200/0x200 [ 607.957710] ? lock_acquire+0x170/0x3c0 [ 607.961698] __should_failslab+0x115/0x180 [ 607.965953] should_failslab+0x5/0x10 [ 607.969762] kmem_cache_alloc+0x277/0x370 [ 607.973926] __alloc_file+0x21/0x330 [ 607.977647] alloc_empty_file+0x6d/0x170 [ 607.981716] path_openat+0xe9/0x2df0 [ 607.985435] ? __lock_acquire+0x6de/0x3ff0 [ 607.989682] ? check_preemption_disabled+0x41/0x280 [ 607.994715] ? path_lookupat+0x8d0/0x8d0 [ 607.998785] ? mark_held_locks+0xf0/0xf0 [ 608.002853] ? proc_fail_nth_write+0x95/0x1d0 [ 608.007360] do_filp_open+0x18c/0x3f0 [ 608.011164] ? may_open_dev+0xf0/0xf0 [ 608.014971] ? __alloc_fd+0x28d/0x570 [ 608.018782] ? lock_downgrade+0x720/0x720 [ 608.023106] ? lock_acquire+0x170/0x3c0 [ 608.027255] ? __alloc_fd+0x34/0x570 [ 608.031072] ? do_raw_spin_unlock+0x171/0x230 [ 608.035576] ? _raw_spin_unlock+0x29/0x40 [ 608.039819] ? __alloc_fd+0x28d/0x570 [ 608.043632] do_sys_open+0x3b3/0x520 [ 608.047353] ? filp_open+0x70/0x70 [ 608.050904] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 608.056278] ? trace_hardirqs_off_caller+0x6e/0x210 [ 608.061401] ? do_syscall_64+0x21/0x620 [ 608.065480] do_syscall_64+0xf9/0x620 [ 608.069294] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 608.074488] RIP: 0033:0x4196d4 [ 608.077778] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 608.096833] RSP: 002b:00007f81fa824cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 608.104549] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 608.111924] RDX: 0000000000004000 RSI: 00007f81fa824d60 RDI: 00000000ffffff9c [ 608.119199] RBP: 00007f81fa824d60 R08: 0000000000000000 R09: 0023647261632f69 07:20:47 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000240)={0x0, 0x7fffffff}, &(0x7f0000000280)) 07:20:47 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x81) 07:20:47 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0x8004e500) 07:20:47 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x0) 07:20:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x401064c9, 0x0) 07:20:47 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0x8004e500) [ 608.126964] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004000 [ 608.134243] R13: 00007fff7f2bc3ef R14: 00007f81fa825300 R15: 0000000000022000 07:20:47 executing program 2 (fault-call:1 fault-nth:3): syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:20:47 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x125d) 07:20:47 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000240)={0x0, 0x7fffffff}, &(0x7f0000000280)) 07:20:47 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x0) 07:20:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x401064c9, 0x0) 07:20:47 executing program 4: openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0x8004e500) 07:20:47 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x0) 07:20:47 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x125e) 07:20:47 executing program 5: prlimit64(0x0, 0x7, 0x0, &(0x7f0000000280)) [ 608.346182] FAULT_INJECTION: forcing a failure. [ 608.346182] name failslab, interval 1, probability 0, space 0, times 0 [ 608.383579] CPU: 0 PID: 6614 Comm: syz-executor.2 Not tainted 4.19.202-syzkaller #0 07:20:47 executing program 4: openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0x8004e500) [ 608.391411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 608.400772] Call Trace: [ 608.403370] dump_stack+0x1fc/0x2ef [ 608.407010] should_fail.cold+0xa/0xf [ 608.410841] ? setup_fault_attr+0x200/0x200 [ 608.415169] ? lock_acquire+0x170/0x3c0 [ 608.419156] __should_failslab+0x115/0x180 [ 608.423401] should_failslab+0x5/0x10 [ 608.427209] kmem_cache_alloc_trace+0x284/0x380 [ 608.431889] apparmor_file_alloc_security+0x394/0xad0 [ 608.437090] ? apparmor_file_receive+0x160/0x160 [ 608.441855] ? __alloc_file+0x21/0x330 [ 608.445778] security_file_alloc+0x40/0x90 [ 608.450036] __alloc_file+0xc9/0x330 [ 608.453759] alloc_empty_file+0x6d/0x170 [ 608.457825] path_openat+0xe9/0x2df0 [ 608.461555] ? __lock_acquire+0x6de/0x3ff0 [ 608.465801] ? check_preemption_disabled+0x41/0x280 [ 608.470823] ? path_lookupat+0x8d0/0x8d0 [ 608.474890] ? mark_held_locks+0xf0/0xf0 [ 608.478953] ? proc_fail_nth_write+0x95/0x1d0 [ 608.483473] do_filp_open+0x18c/0x3f0 [ 608.487275] ? may_open_dev+0xf0/0xf0 [ 608.491076] ? __alloc_fd+0x28d/0x570 07:20:47 executing program 4: openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0x8004e500) [ 608.494884] ? lock_downgrade+0x720/0x720 [ 608.499042] ? lock_acquire+0x170/0x3c0 [ 608.503023] ? __alloc_fd+0x34/0x570 [ 608.506743] ? do_raw_spin_unlock+0x171/0x230 [ 608.511242] ? _raw_spin_unlock+0x29/0x40 [ 608.515391] ? __alloc_fd+0x28d/0x570 [ 608.519202] do_sys_open+0x3b3/0x520 [ 608.522927] ? filp_open+0x70/0x70 [ 608.526510] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 608.531877] ? trace_hardirqs_off_caller+0x6e/0x210 [ 608.536986] ? do_syscall_64+0x21/0x620 [ 608.541061] do_syscall_64+0xf9/0x620 07:20:47 executing program 5: prlimit64(0x0, 0x7, 0x0, &(0x7f0000000280)) [ 608.544871] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 608.550086] RIP: 0033:0x4196d4 [ 608.553284] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 608.572224] RSP: 002b:00007f81fa824cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 608.580037] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 608.587312] RDX: 0000000000004000 RSI: 00007f81fa824d60 RDI: 00000000ffffff9c [ 608.594616] RBP: 00007f81fa824d60 R08: 0000000000000000 R09: 0023647261632f69 [ 608.601896] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004000 [ 608.609211] R13: 00007fff7f2bc3ef R14: 00007f81fa825300 R15: 0000000000022000 07:20:47 executing program 2 (fault-call:1 fault-nth:4): syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:20:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x401064c9, 0x0) 07:20:47 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x125d) 07:20:47 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x125f) 07:20:47 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x125e) 07:20:47 executing program 5: prlimit64(0x0, 0x7, 0x0, &(0x7f0000000280)) 07:20:48 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1260) 07:20:48 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x125d) 07:20:48 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x125f) 07:20:48 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x125e) [ 608.755028] FAULT_INJECTION: forcing a failure. [ 608.755028] name failslab, interval 1, probability 0, space 0, times 0 07:20:48 executing program 5: prlimit64(0x0, 0x7, &(0x7f0000000240), &(0x7f0000000280)) [ 608.830586] CPU: 1 PID: 6648 Comm: syz-executor.2 Not tainted 4.19.202-syzkaller #0 [ 608.839118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 608.848574] Call Trace: [ 608.851203] dump_stack+0x1fc/0x2ef [ 608.854853] should_fail.cold+0xa/0xf [ 608.858666] ? setup_fault_attr+0x200/0x200 [ 608.863011] ? lock_acquire+0x170/0x3c0 [ 608.866999] __should_failslab+0x115/0x180 [ 608.871243] should_failslab+0x5/0x10 [ 608.875050] kmem_cache_alloc_trace+0x284/0x380 [ 608.879733] ? vgem_prime_import_sg_table+0x2b0/0x2b0 [ 608.884935] vgem_open+0x40/0xe0 [ 608.888399] drm_file_alloc+0x494/0x900 [ 608.892386] drm_open+0x271/0x810 [ 608.895848] ? drm_file_alloc+0x900/0x900 [ 608.900031] drm_stub_open+0x290/0x410 [ 608.903924] ? drm_minor_acquire+0x1f0/0x1f0 [ 608.908334] chrdev_open+0x266/0x770 [ 608.912092] ? lockref_get+0x11/0x50 [ 608.915823] ? __register_chrdev+0x400/0x400 [ 608.920239] ? check_preemption_disabled+0x41/0x280 [ 608.925270] do_dentry_open+0x4aa/0x1160 [ 608.930473] ? __register_chrdev+0x400/0x400 [ 608.934896] ? inode_permission.part.0+0x10c/0x450 [ 608.939828] ? chown_common+0x550/0x550 [ 608.943815] ? inode_permission+0x3d/0x140 [ 608.948062] path_openat+0x793/0x2df0 [ 608.951927] ? path_lookupat+0x8d0/0x8d0 [ 608.956004] ? mark_held_locks+0xf0/0xf0 [ 608.960165] ? mark_held_locks+0xf0/0xf0 [ 608.964239] do_filp_open+0x18c/0x3f0 [ 608.968044] ? may_open_dev+0xf0/0xf0 [ 608.971861] ? lock_downgrade+0x720/0x720 [ 608.976016] ? lock_acquire+0x170/0x3c0 [ 608.980028] ? __alloc_fd+0x34/0x570 [ 608.983841] ? do_raw_spin_unlock+0x171/0x230 [ 608.988346] ? _raw_spin_unlock+0x29/0x40 [ 608.992496] ? __alloc_fd+0x28d/0x570 [ 608.996323] do_sys_open+0x3b3/0x520 [ 609.000051] ? filp_open+0x70/0x70 [ 609.003606] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 609.009070] ? trace_hardirqs_off_caller+0x6e/0x210 [ 609.014107] ? do_syscall_64+0x21/0x620 [ 609.018096] do_syscall_64+0xf9/0x620 [ 609.021911] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 609.027132] RIP: 0033:0x4196d4 07:20:48 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x125f) [ 609.030361] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 609.049266] RSP: 002b:00007f81fa824cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 609.056980] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 609.064299] RDX: 0000000000004000 RSI: 00007f81fa824d60 RDI: 00000000ffffff9c [ 609.071575] RBP: 00007f81fa824d60 R08: 0000000000000000 R09: 0023647261632f69 07:20:48 executing program 2 (fault-call:1 fault-nth:5): syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:20:48 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x125f) 07:20:48 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1261) 07:20:48 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x125d) 07:20:48 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x125e) 07:20:48 executing program 5: prlimit64(0x0, 0x7, &(0x7f0000000240), &(0x7f0000000280)) [ 609.078939] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004000 [ 609.086307] R13: 00007fff7f2bc3ef R14: 00007f81fa825300 R15: 0000000000022000 07:20:48 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x125f) 07:20:48 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1262) [ 609.200518] FAULT_INJECTION: forcing a failure. [ 609.200518] name failslab, interval 1, probability 0, space 0, times 0 07:20:48 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x125e) [ 609.255073] CPU: 1 PID: 6690 Comm: syz-executor.2 Not tainted 4.19.202-syzkaller #0 [ 609.262994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 609.272352] Call Trace: [ 609.274999] dump_stack+0x1fc/0x2ef [ 609.278641] should_fail.cold+0xa/0xf [ 609.282486] ? setup_fault_attr+0x200/0x200 [ 609.286838] ? lock_acquire+0x170/0x3c0 [ 609.290828] __should_failslab+0x115/0x180 [ 609.295080] should_failslab+0x5/0x10 [ 609.298885] kmem_cache_alloc_trace+0x284/0x380 07:20:48 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x125e) 07:20:48 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x125e) [ 609.303565] ? vgem_prime_import_sg_table+0x2b0/0x2b0 [ 609.308858] vgem_open+0x40/0xe0 [ 609.312236] drm_file_alloc+0x494/0x900 [ 609.316223] drm_open+0x271/0x810 [ 609.319691] ? drm_file_alloc+0x900/0x900 [ 609.323844] drm_stub_open+0x290/0x410 [ 609.327738] ? drm_minor_acquire+0x1f0/0x1f0 [ 609.332155] chrdev_open+0x266/0x770 [ 609.335874] ? lockref_get+0x11/0x50 [ 609.339593] ? __register_chrdev+0x400/0x400 [ 609.344006] ? check_preemption_disabled+0x41/0x280 [ 609.349034] do_dentry_open+0x4aa/0x1160 07:20:48 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x125e) [ 609.353101] ? __register_chrdev+0x400/0x400 [ 609.357515] ? inode_permission.part.0+0x10c/0x450 [ 609.362453] ? chown_common+0x550/0x550 [ 609.366454] ? inode_permission+0x3d/0x140 [ 609.370704] path_openat+0x793/0x2df0 [ 609.374518] ? path_lookupat+0x8d0/0x8d0 [ 609.378590] ? mark_held_locks+0xf0/0xf0 [ 609.382670] do_filp_open+0x18c/0x3f0 [ 609.386478] ? may_open_dev+0xf0/0xf0 [ 609.390328] ? lock_downgrade+0x720/0x720 [ 609.394480] ? lock_acquire+0x170/0x3c0 [ 609.398461] ? __alloc_fd+0x34/0x570 [ 609.402179] ? do_raw_spin_unlock+0x171/0x230 [ 609.407044] ? _raw_spin_unlock+0x29/0x40 [ 609.411196] ? __alloc_fd+0x28d/0x570 [ 609.415026] do_sys_open+0x3b3/0x520 [ 609.419096] ? filp_open+0x70/0x70 [ 609.422644] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 609.428027] ? trace_hardirqs_off_caller+0x6e/0x210 [ 609.433054] ? do_syscall_64+0x21/0x620 [ 609.437299] do_syscall_64+0xf9/0x620 [ 609.441114] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 609.446317] RIP: 0033:0x4196d4 [ 609.449521] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 609.468519] RSP: 002b:00007f81fa824cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 609.476240] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196d4 [ 609.483529] RDX: 0000000000004000 RSI: 00007f81fa824d60 RDI: 00000000ffffff9c [ 609.490835] RBP: 00007f81fa824d60 R08: 0000000000000000 R09: 0023647261632f69 [ 609.498090] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000004000 [ 609.505345] R13: 00007fff7f2bc3ef R14: 00007f81fa825300 R15: 0000000000022000 07:20:48 executing program 2 (fault-call:1 fault-nth:6): syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:20:48 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x125e) 07:20:48 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1263) 07:20:48 executing program 5: prlimit64(0x0, 0x7, &(0x7f0000000240), &(0x7f0000000280)) 07:20:48 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x125f) 07:20:48 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x125d) 07:20:48 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x125e) 07:20:48 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1264) 07:20:48 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:20:48 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x125d) 07:20:48 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1265) 07:20:48 executing program 5: prlimit64(0x0, 0x7, &(0x7f0000000240)={0x0, 0x7fffffff}, 0x0) 07:20:48 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x125f) 07:20:48 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x125e) 07:20:49 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x2, 0x4000) 07:20:49 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x125d) 07:20:49 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1263) 07:20:49 executing program 3: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x125e) 07:20:49 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1267) 07:20:49 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x125f) 07:20:49 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x4, 0x4000) 07:20:49 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x125d) 07:20:49 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1263) 07:20:49 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x125d) 07:20:49 executing program 3: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x125e) 07:20:49 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x3f00, 0x4000) 07:20:49 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1268) 07:20:49 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x125f) 07:20:49 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1263) 07:20:49 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x125d) 07:20:49 executing program 3: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x125e) 07:20:49 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x1000000, 0x4000) 07:20:49 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x125f) 07:20:49 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1269) 07:20:49 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1263) 07:20:49 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x125d) 07:20:49 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x2000000, 0x4000) 07:20:49 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1268) 07:20:49 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x125f) 07:20:49 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1274) 07:20:49 executing program 4: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x125d) 07:20:49 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1263) 07:20:49 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1263) 07:20:49 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1268) 07:20:49 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1276) 07:20:49 executing program 0: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x125f) 07:20:49 executing program 4: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x125d) 07:20:49 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x4000000, 0x4000) 07:20:49 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1263) 07:20:49 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1277) 07:20:49 executing program 0: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x125f) 07:20:49 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1268) 07:20:49 executing program 4: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x125d) 07:20:49 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x3f000000, 0x4000) 07:20:49 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1263) 07:20:49 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1278) 07:20:50 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1268) 07:20:50 executing program 0: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x125f) 07:20:50 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1263) 07:20:50 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0xf6ffffff, 0x4000) 07:20:50 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1277) 07:20:50 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1268) 07:20:50 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1279) 07:20:50 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1278) 07:20:50 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0xfffffff6, 0x4000) 07:20:50 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1277) 07:20:50 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1263) 07:20:50 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127a) 07:20:50 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1278) 07:20:50 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1268) 07:20:50 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x1000000000000, 0x4000) 07:20:50 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1277) 07:20:50 executing program 5: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1263) 07:20:50 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127b) 07:20:50 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1278) 07:20:50 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1268) 07:20:50 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x100000000000000, 0x4000) 07:20:50 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1277) 07:20:50 executing program 5: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1263) 07:20:50 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127c) 07:20:50 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1278) 07:20:50 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x200000000000000, 0x4000) 07:20:50 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1268) 07:20:50 executing program 5: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1263) 07:20:50 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1277) 07:20:50 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127d) 07:20:50 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x400000000000000, 0x4000) 07:20:50 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1278) 07:20:50 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1268) 07:20:50 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1277) 07:20:50 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127c) 07:20:50 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1268) 07:20:50 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1278) 07:20:50 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127c) 07:20:50 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127e) 07:20:50 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x3f00000000000000, 0x4000) 07:20:50 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1277) 07:20:50 executing program 3: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1268) 07:20:50 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0xf6ffffff00000000, 0x4000) 07:20:50 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127f) 07:20:50 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1277) 07:20:50 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127c) 07:20:50 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1278) 07:20:50 executing program 3: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1268) 07:20:51 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1277) 07:20:51 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4002) 07:20:51 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127c) 07:20:51 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x5421) 07:20:51 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1278) 07:20:51 executing program 3: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1268) 07:20:51 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1277) 07:20:51 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1278) 07:20:51 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4004) 07:20:51 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x5450) 07:20:51 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127c) 07:20:51 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127c) 07:20:51 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1278) 07:20:51 executing program 4: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1277) 07:20:51 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x5451) 07:20:51 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:20:51 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x5450) 07:20:51 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127c) 07:20:51 executing program 0: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1278) 07:20:51 executing program 4: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1277) 07:20:51 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1277) 07:20:51 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) r0 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x8001, 0x480000) r1 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000600)) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x80) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000040)={0x6, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0x2, r3}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000000)) 07:20:51 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x5452) 07:20:51 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127c) 07:20:51 executing program 0: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1278) 07:20:51 executing program 4: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1277) 07:20:51 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x7f, 0x0) 07:20:51 executing program 3: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1277) 07:20:51 executing program 0: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1278) 07:20:51 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127c) 07:20:51 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x5421) 07:20:51 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x5460) 07:20:51 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127f) 07:20:51 executing program 2: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r0, 0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000340)='/dev/dri/card#\x00'}, 0x30) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x5, 0x3514c1) r2 = syz_open_dev$dri(&(0x7f0000000200), 0x100000000, 0x561800) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f00000003c0)="e46ed5a114abefc2706f526bc93d") ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000100)={0xfffffffffffffffc, 0x0}) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000180)={0x5, r3}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000240)={0x3, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000280)={0x0, r4}) r5 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0xa100) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000140)={0x2, 0x0, 0x1}) r6 = gettid() prlimit64(r6, 0xc94a3c1257f61ef0, 0x0, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0xfffffffffffffffe, 0x0, {{0x3, 0x7, 0x0, r6}}}, 0x28) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000000)) r7 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r7, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_SG_FREE(r7, 0x40106439, &(0x7f0000000040)={0x7}) r8 = syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x620001) ioctl$NBD_CLEAR_QUE(r8, 0xab05) 07:20:51 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127e) 07:20:51 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127c) 07:20:51 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127d) 07:20:51 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab00) 07:20:51 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127f) 07:20:51 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127c) 07:20:51 executing program 2: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000200)=0x32, 0x4) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000200)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x13}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfe8000}, @jmp={0x5, 0x0, 0xd, 0x3, 0x0, 0xfffffffffffffff4, 0x4}, @jmp={0x5, 0x0, 0x3, 0x6, 0xb, 0x6, 0x8}, @map={0x18, 0x2, 0x1, 0x0, 0x1}, @generic={0x7, 0x8, 0x7, 0x5, 0x9}], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r0, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_ext={0x1c, 0xa, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x10000}, [@alu={0x4, 0x0, 0x9, 0x1, 0x7, 0x6}, @generic={0x8, 0x6, 0x6, 0x1, 0x3}, @call={0x85, 0x0, 0x0, 0x22}, @ldst={0x1, 0x3, 0x0, 0x6, 0x5, 0xfffffffffffffff4, 0x10}, @generic={0x0, 0x9, 0x7, 0x1, 0x9}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0x0, 0xfffff800, 0x3}, 0x10, 0x19dd, r0}, 0x78) 07:20:51 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127e) 07:20:51 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127d) 07:20:51 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127f) 07:20:51 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab01) 07:20:51 executing program 5: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127c) 07:20:51 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127e) 07:20:51 executing program 2: syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x59, 0x4000) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x400, 0x302) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x5, 0x0, 0x10000}) r3 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0106438, &(0x7f0000000140)={0x8, r2}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f00000000c0)={r2, 0x9}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x4a0002) 07:20:51 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127d) 07:20:52 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127e) 07:20:52 executing program 5: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127c) 07:20:52 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127f) 07:20:52 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab02) 07:20:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000000)={0x1f, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000040)={0x80000000, r2}) 07:20:52 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127d) 07:20:52 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127e) 07:20:52 executing program 5: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127c) 07:20:52 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab03) 07:20:52 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127f) 07:20:52 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x8a1, 0xa000) 07:20:52 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127d) 07:20:52 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab05) 07:20:52 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127f) 07:20:52 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab00) 07:20:52 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127e) 07:20:52 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x2b6880) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) 07:20:52 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127d) 07:20:52 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab00) 07:20:52 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab06) 07:20:52 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127e) 07:20:52 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) 07:20:52 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127f) 07:20:52 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127e) 07:20:52 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab07) 07:20:52 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127d) 07:20:52 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab00) 07:20:52 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, r2}, 0x10) write$FUSE_POLL(r0, &(0x7f0000000040)={0x18, 0x0, r2, {0xfffffffa}}, 0x18) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:20:52 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab08) 07:20:52 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127e) 07:20:52 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127f) 07:20:52 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127d) 07:20:52 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab00) [ 613.386515] block nbd1: NBD_DISCONNECT 07:20:52 executing program 2: shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffc000/0x2000)=nil) r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x7a6, 0x0, 0x10000}) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x7029ce2c855fc9cf) syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x581a03) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) socket$bt_rfcomm(0x1f, 0x1, 0x3) 07:20:52 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127e) [ 613.421929] block nbd1: NBD_DISCONNECT 07:20:52 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127f) 07:20:52 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127d) 07:20:52 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab09) 07:20:52 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab00) 07:20:52 executing program 0: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127e) 07:20:52 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x9, 0xcbff6ca1507964c1) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000000)=0x9) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:20:52 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127f) 07:20:52 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127d) 07:20:52 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab0a) 07:20:52 executing program 0: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127e) 07:20:52 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab00) 07:20:52 executing program 3: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127f) 07:20:52 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000000000)={0x18}, 0x18) syz_open_dev$dri(&(0x7f0000000540), 0x3, 0x41ca42) 07:20:52 executing program 4: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127d) 07:20:53 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x40049409) 07:20:53 executing program 0: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127e) 07:20:53 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab00) 07:20:53 executing program 3: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127f) 07:20:53 executing program 4: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127d) 07:20:53 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x40040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 07:20:53 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x40081271) 07:20:53 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab0a) 07:20:53 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab00) 07:20:53 executing program 3: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127f) 07:20:53 executing program 4: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127d) 07:20:53 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x40101283) 07:20:53 executing program 2: ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)=0x8) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000500)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000180)=0x5) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x3, 0x230941) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000200)={0x0, 0x1}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r2, 0x31}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40001020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x600}]}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x800) 07:20:53 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab00) 07:20:53 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab0a) 07:20:53 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x40081271) 07:20:53 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab0a) 07:20:53 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401070c9) 07:20:53 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab00) 07:20:53 executing program 2: syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:20:53 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab0a) 07:20:53 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x40081271) 07:20:53 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401070ca) 07:20:53 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401070c9) 07:20:53 executing program 5: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab00) 07:20:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000040)) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x40a0) 07:20:53 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab0a) 07:20:53 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x40081271) 07:20:53 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401070c9) 07:20:53 executing program 5: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab00) 07:20:53 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x19000000000, 0x4000) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000000c0)={0x2}) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x76182) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x60, 0x0, 0x10001}) 07:20:53 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401070cd) 07:20:53 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x40081271) 07:20:53 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401070c9) 07:20:53 executing program 5: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab00) 07:20:53 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab0a) 07:20:53 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x121880) syz_open_dev$dri(&(0x7f0000000540), 0x1, 0x4000) 07:20:53 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401870c8) 07:20:53 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x40081271) 07:20:53 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000000), 0x4) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:20:53 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401070c9) 07:20:53 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401070cd) 07:20:53 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab0a) 07:20:53 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x40081271) 07:20:53 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x4000000000005, 0x10d000) 07:20:53 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401070c9) 07:20:53 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401870cb) 07:20:54 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401070cd) 07:20:54 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x40081271) 07:20:54 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab0a) 07:20:54 executing program 2: syz_open_dev$dri(&(0x7f00000000c0), 0x5, 0x6000) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000180)=ANY=[@ANYRESHEX]) syz_open_dev$dri(&(0x7f0000000040), 0x8003, 0x444000) r0 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x101000) syz_open_dev$dri(&(0x7f0000000000), 0x20, 0x200000) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000080)={0x0, 0x8001}) syz_open_dev$dri(&(0x7f0000000140), 0x8, 0x0) 07:20:54 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401070c9) 07:20:54 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401070cd) 07:20:54 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x40081271) 07:20:54 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401870cc) 07:20:54 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab0a) 07:20:54 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x9, 0x400002) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f00000000c0)={0x2}) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1, 0x4, {0xa, 0x4e24, 0x117, @private1={0xfc, 0x1, '\x00', 0x1}, 0x90f4}}}, 0x32) socketpair(0x1e, 0x2, 0xfffff800, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000100)={'veth0_to_hsr\x00'}) 07:20:54 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401070c9) 07:20:54 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401070cd) 07:20:54 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x40081271) 07:20:54 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x4020940d) 07:20:54 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab0a) 07:20:54 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401070c9) 07:20:54 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401070cd) 07:20:54 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401070c9) 07:20:54 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x40081271) 07:20:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x400000001, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000140)=0x28, 0x4) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x9, 0x0, 0x2}) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x0, 0x0, {0x6}}, 0x18) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000080)={r2, 0x5}) syz_open_dev$dri(&(0x7f0000000100), 0x7, 0x351200) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:20:54 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x80081270) 07:20:54 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401070cd) 07:20:54 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401070c9) 07:20:54 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab0a) 07:20:54 executing program 2: socketpair(0x0, 0x3, 0x8001, &(0x7f0000000040)={0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000025c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setgroups(0x4, &(0x7f0000000080)=[0xee00, 0x0, r1, r2]) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:20:54 executing program 3: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x40081271) 07:20:54 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401070cd) 07:20:54 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x80081272) 07:20:54 executing program 4: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401070c9) 07:20:54 executing program 0: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab0a) 07:20:54 executing program 3: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x40081271) 07:20:54 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401070cd) 07:20:54 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc0045878) 07:20:54 executing program 0: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab0a) 07:20:54 executing program 3: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x40081271) 07:20:54 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0x81}, 0xa) 07:20:54 executing program 4: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401070c9) 07:20:54 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc0045878) 07:20:54 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401070cd) 07:20:54 executing program 0: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab0a) 07:20:54 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x80081272) 07:20:54 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc0101282) 07:20:54 executing program 4: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401070c9) 07:20:54 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x10000, 0x2, 0x1}}}, 0x28) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:20:54 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x80081272) 07:20:54 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401070cd) 07:20:54 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401070cd) 07:20:54 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x80081270) 07:20:54 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc0189436) 07:20:54 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc0101282) 07:20:55 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4269c2) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) read$FUSE(r0, &(0x7f0000000380)={0x2020}, 0x2020) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x81, 0x1, 0xef63, 0x8, @remote, @private2, 0x700, 0x1, 0x4, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', r2, 0x4, 0xfe, 0x5, 0x7, 0x64, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8, 0x3, 0xe262}}) 07:20:55 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x80081272) 07:20:55 executing program 5: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401070cd) 07:20:55 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x80081270) 07:20:55 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc0101282) 07:20:55 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc020660b) 07:20:55 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x80081272) 07:20:55 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x80081270) 07:20:55 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc0101282) 07:20:55 executing program 5: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401070cd) 07:20:55 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc0481273) 07:20:55 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x80081272) 07:20:55 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xc0101282) 07:20:55 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x80081270) 07:20:55 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x80081272) 07:20:55 executing program 5: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401070cd) 07:20:55 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000080)=0x100) ioctl$TIOCGSID(r3, 0x5429, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x806) 07:20:55 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x2) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x4, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000080)={r2, 0xe704}) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0xfffffffffffffd8f, 0x307000) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000100)={0xffffffff, 0x0, 0x10001}) r7 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@isdn, &(0x7f0000000240)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000280)={'vxcan1\x00'}) ioctl$DRM_IOCTL_SG_ALLOC(r5, 0xc0106438, &(0x7f0000000180)={0x7fff, r6}) ioctl$NBD_CLEAR_QUE(r3, 0xab05) 07:20:55 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc0481273) 07:20:55 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x80081270) 07:20:55 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x80081272) 07:20:55 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc0481273) 07:20:56 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xc0101282) [ 616.722454] block nbd1: shutting down sockets [ 616.742312] block nbd2: shutting down sockets 07:20:56 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x80081272) [ 616.772098] block nbd2: shutting down sockets 07:20:56 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x2, 0x4000) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0x43}, 0xa) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_LK(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, {{0x401, 0xfffffffffffffff7, 0x2, 0xffffffffffffffff}}}, 0x28) 07:20:56 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x101400) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) [ 616.815891] block nbd1: shutting down sockets 07:20:56 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x80081270) 07:20:56 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc0481273) 07:20:56 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x80081272) 07:20:56 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xc0101282) 07:20:56 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) r0 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000000)={0x0, 0x4}) [ 616.921925] block nbd1: shutting down sockets 07:20:56 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x80081270) [ 616.971877] block nbd1: shutting down sockets 07:20:56 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xc0481273) 07:20:56 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={&(0x7f0000000040)="d5a8e59da4b976bba177fcd7ac5aa97ea0e546433204f53e6c92b2582db557d86b3c5dd1069e991c64d97367e97c596f91f4c76bdbd53edf81bac39d26aa0c041beaa9d140e162dabcddc6638e1b2a07d5cf560f9e2c35a2615857895a8338bf8114b8432679797b28de3aa6646f734baefbb21b6ca3636fe1973d12c4fa87069de32d83450a0f9a998da551ad06132bbd3f2e1d463000e8544562877c1ed758223f40667a4b16b6d2966b758710", &(0x7f0000000100)=""/7, &(0x7f0000000180), &(0x7f00000001c0)="161f71df22bcdc925511476afd221df6870bfe50329ca33272555bd16317cb6799921138fa6e06ecb81761302abf2f96ee3763e25060a02064371a83319c574bc48e2b63aea2bf96b6291ebf91474ca5da2a5bc001eac9ff7e3a8653c89d674b94fec44d419d376a51b8d25bda23008784807f7db088ec1cabdc1519719d9a01bd0bd7ffac7dde9f073c3c725f846cca66e81654508341d11b26a2ae1548f5fd67bd257f2d59398f9d5e2c8416fe7f587a494251df7e", 0xeb54, 0x1, 0x4}, 0x38) 07:20:56 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x80081272) 07:20:56 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc0101282) 07:20:56 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x88000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x2) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSID(r1, 0x5429, 0x0) r2 = syz_open_pts(r1, 0x400) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) 07:20:56 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x80081270) 07:20:56 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xc0481273) 07:20:56 executing program 3: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x80081272) 07:20:56 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc0101282) 07:20:56 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000040)=0x2) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0xffff}) 07:20:56 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x80081270) 07:20:56 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x1) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x6, 0x6, 0x10, @remote, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x80, 0xffffffff}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x1, 0xe22d, 0x39, @private2, @mcast2, 0x80, 0x8, 0x200, 0xffffffff}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x29, 0x1f, 0x3f, 0x80000000, 0x19, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7800, 0x7800, 0x0, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x29, 0x8, 0x40, 0x5, 0x30, @mcast2, @loopback, 0x20, 0x700, 0x6, 0x10000}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x8, 0x7, 0x42, @mcast1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x8000, 0x7, 0xb4, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x2f, 0x7, 0xfa, 0xfffffffa, 0x22, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x1, 0x700, 0x7, 0x9}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000d80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d40)={&(0x7f0000000dc0)={0x73c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffe1}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x400, 0xfa, 0x2, 0x8}, {0x20, 0xff, 0x7, 0x7}, {0x4, 0x7, 0x5, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x40, 0x5, 0x7, 0x1ff}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x800000}}}]}}, {{0x8}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}]}, 0x73c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8805) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:56 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xc0481273) 07:20:56 executing program 3: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x80081272) 07:20:56 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc0101282) 07:20:56 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x80081270) [ 617.321934] block nbd1: shutting down sockets 07:20:56 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x101, 0x1) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x2f, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={r2, 0x3}) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4) syz_open_dev$dri(&(0x7f0000000540), 0x81, 0x0) 07:20:56 executing program 3: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x80081272) 07:20:56 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc0481273) [ 617.391667] block nbd1: shutting down sockets 07:20:56 executing program 4: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x80081270) 07:20:56 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc0101282) 07:20:56 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x34df82) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x640000) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x15}) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) r2 = syz_open_pts(0xffffffffffffffff, 0x100) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000001c0)) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)=',\xe3'}, 0x30) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x4, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000001, 0x12, r3, 0xec2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x8, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x259}, [@alu={0x4, 0x0, 0x8, 0x0, 0x9, 0x8, 0x4}, @exit, @ldst={0x2, 0x0, 0x3, 0x6, 0x0, 0x30, 0x1}, @call={0x85, 0x0, 0x0, 0x48}, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x81, 0xa9, &(0x7f0000000280)=""/169, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0xb, 0xffff7fff, 0x6}, 0x10}, 0x78) [ 617.452297] block nbd2: shutting down sockets 07:20:56 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x1) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x6, 0x6, 0x10, @remote, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x80, 0xffffffff}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x1, 0xe22d, 0x39, @private2, @mcast2, 0x80, 0x8, 0x200, 0xffffffff}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x29, 0x1f, 0x3f, 0x80000000, 0x19, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7800, 0x7800, 0x0, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x29, 0x8, 0x40, 0x5, 0x30, @mcast2, @loopback, 0x20, 0x700, 0x6, 0x10000}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x8, 0x7, 0x42, @mcast1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x8000, 0x7, 0xb4, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x2f, 0x7, 0xfa, 0xfffffffa, 0x22, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x1, 0x700, 0x7, 0x9}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000d80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d40)={&(0x7f0000000dc0)={0x73c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffe1}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x400, 0xfa, 0x2, 0x8}, {0x20, 0xff, 0x7, 0x7}, {0x4, 0x7, 0x5, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x40, 0x5, 0x7, 0x1ff}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x800000}}}]}}, {{0x8}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}]}, 0x73c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8805) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:56 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc0481273) [ 617.487172] block nbd2: shutting down sockets 07:20:56 executing program 4: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x80081270) 07:20:56 executing program 0: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xc0101282) 07:20:56 executing program 2: syz_open_dev$dri(&(0x7f00000000c0), 0x10000, 0x54c06) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000500)) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000040)={0x7a5, 0x800}) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x5) 07:20:56 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) 07:20:56 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc0481273) [ 617.592323] block nbd3: shutting down sockets 07:20:56 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x34df82) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x640000) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x15}) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) r2 = syz_open_pts(0xffffffffffffffff, 0x100) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000001c0)) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)=',\xe3'}, 0x30) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x4, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000001, 0x12, r3, 0xec2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x8, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x259}, [@alu={0x4, 0x0, 0x8, 0x0, 0x9, 0x8, 0x4}, @exit, @ldst={0x2, 0x0, 0x3, 0x6, 0x0, 0x30, 0x1}, @call={0x85, 0x0, 0x0, 0x48}, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x81, 0xa9, &(0x7f0000000280)=""/169, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0xb, 0xffff7fff, 0x6}, 0x10}, 0x78) 07:20:56 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x21, 0x1, 0x40040, 0x9, 0x6, 0x800, 0x8}}, 0x50) 07:20:56 executing program 0: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xc0101282) 07:20:56 executing program 4: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x80081270) 07:20:56 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc0481273) 07:20:57 executing program 1: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x400000001, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000140)=0x28, 0x4) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x9, 0x0, 0x2}) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x0, 0x0, {0x6}}, 0x18) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000080)={r2, 0x5}) syz_open_dev$dri(&(0x7f0000000100), 0x7, 0x351200) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:20:57 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:20:57 executing program 0: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xc0101282) 07:20:57 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401870cc) 07:20:57 executing program 5: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xc0481273) 07:20:57 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401870cb) 07:20:57 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401870cc) 07:20:57 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x40081271) 07:20:57 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x121202) 07:20:57 executing program 2: bpf$MAP_UPDATE_ELEM(0xc, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x800000000007, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x48800) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000080)=0x1) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000000)=0x4) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) 07:20:57 executing program 5: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xc0481273) 07:20:57 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401870cb) 07:20:57 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x6c0003) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:57 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x7, 0x7fffffff, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x40) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', r0}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={0xffffffffffffffff, r0}, 0xc) 07:20:57 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401870cc) 07:20:57 executing program 0: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:20:57 executing program 5: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xc0481273) 07:20:57 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401870cb) 07:20:57 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x86480) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) read$FUSE(r1, &(0x7f0000000380)={0x2020}, 0x2020) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x9, 0x6, 0x2d, @ipv4={'\x00', '\xff\xff', @multicast2}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x700, 0x100, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000180)={'sit0\x00', r2, 0x29, 0x3f, 0x6, 0x1, 0x9, @loopback, @private2, 0x8000, 0x7, 0xc44, 0x7}}) 07:20:57 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401870cc) 07:20:57 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) r0 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0x101}) 07:20:57 executing program 0: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x4000000000005, 0x10d000) 07:20:57 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401870cb) 07:20:57 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401870c8) 07:20:57 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401870cc) 07:20:57 executing program 2: bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={&(0x7f0000000000)="93c73e8e5a1dac3fba7000340d6a7b8e23b0e3c5337489055fbdcbc3e3e1f68745eea62bde0b9dc68c948799df4b20e54c6da6b180aa7cd0feaf4968aa5db8e989f0388e07ad1b704ded4de6fbc921c46ed1eeecf22f53326608d14f5b43e0b16b0593416c6719d812a7fb68886fae2ae5f74f4fb39ba4e37312c9e1177f36a3d8ac3790fe1c9af45e", &(0x7f0000000380)=""/82, &(0x7f0000000180)="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", &(0x7f00000000c0)="40b35990957db6eb8b9d24ee41c04bbe60e0c8e001de951dee276db759d55033189741857d52d79117510c20a291280fefe9c7fbdf9c8952", 0xfffffcf7, 0xffffffffffffffff, 0x4}, 0x38) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xa00) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x10040) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:20:57 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab0a) 07:20:57 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401870c8) 07:20:57 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401870cb) 07:20:57 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401870cc) 07:20:58 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x430102) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x8000) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:58 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401070ca) 07:20:58 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401870c8) 07:20:58 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x40000000000, 0x2e0c00) 07:20:58 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401870cb) 07:20:58 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401870cc) 07:20:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x2000) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000000)={0x4}) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) 07:20:58 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401870cb) 07:20:58 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401870c8) 07:20:58 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000180)={0x3f, "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"}) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x800000000000009, 0x450000) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x3) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f00000000c0)={0x5, 0x1}) 07:20:58 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401870cc) 07:20:58 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401070ca) 07:20:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000180)={0x6, 0x1, "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"}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x1, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000040)={0x0, r1}) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x5, 0x200000) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f00000000c0)={0x400, r1}) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffe000/0x1000)=nil) 07:20:58 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401870cb) 07:20:58 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401870c8) 07:20:58 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401870cc) 07:20:58 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 07:20:58 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401070ca) 07:20:58 executing program 2: socket$l2tp(0x2, 0x2, 0x73) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:20:58 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401870cc) 07:20:58 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401870cb) 07:20:58 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401870c8) 07:20:58 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401070ca) [ 619.312017] block nbd1: shutting down sockets 07:20:58 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401870cb) [ 619.352119] block nbd1: shutting down sockets 07:20:58 executing program 4: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401870cc) 07:20:58 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, r0}, 0x10) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 07:20:58 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0xfffffffffffffc01, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:20:58 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401870c8) 07:20:58 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401070ca) 07:20:58 executing program 4: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401870cc) 07:20:58 executing program 3: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401870cb) 07:20:58 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x10400) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="fb6153a636b5a5ce54505fe546141e999b2b7decd35382c930e6f47ae9d21f611a87e0bee5", &(0x7f00000003c0)=""/212, &(0x7f0000000080)="7668da1ad6c138a6e63d9cf49abf8fe08d6e757099aebf4ad40617ef0ac4531f51dfcfff87776a798789abada643adb4d9c5071a2350278cd6d19c8157154509fd4c061482cf60e7cc5bcb60bc9e0a17881690f0d54b34db7cec513e46233d3d6bad3710111e253ef6376ec83686bfeeb3149c807789b466e829adc78e6a078795", &(0x7f0000000180)="11cfabad57b3966743e4e974a80811378c51ba2442e78ba016d3247f841114dc3d026bd7c5fdabb093e384ad5ef544d1c4b4f6ec0c24c7b275756906f7f83bf5ec4d75d1d3cc270bd4b135fa3b79c6093f368bbf8895a3e9845e17c4b843ceceac9f1772b50c0368e886358ec98fdd2205907ba465ced21a087b049837346399829468d8b3c555b441a9a0d73263d28747372c492166347094917208f787dac09c3823125b4a09e3e7dcee07e7f9ab19e9acbf143cfda38c2cf26b14996ac6d83c04", 0x100ffff, 0x1, 0x4}, 0x38) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x400200, 0x0) 07:20:58 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401870c8) 07:20:58 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x109000) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:20:58 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401070ca) 07:20:58 executing program 4: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401870cc) 07:20:58 executing program 3: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401870cb) 07:20:58 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x10000) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000080)) 07:20:58 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401870c8) 07:20:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) r1 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x401, 0x0}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000000c0)=@urb_type_interrupt={0x1, {0x3, 0x1}, 0x800, 0x40, &(0x7f0000000080)="e6a8bdfbe867b508c16515dbc8874fe665caa16a667fd442cf761c319f570dd9196e9b1de1bedd18b0a22b131ff41f25e11342231e9b05ee8a223104a1", 0x3d, 0x8, 0x2, 0x0, 0x10001, 0x92, &(0x7f0000000180)="8785be5039d1115626954e185a1f75fddd426c2d961aaa078b7a7088724361f40eeda89d6b0237fc43918f20c9be8fcc4c0d4ba1354812aea89bbb96fdb9fe792c97447dbaea665066f25394ee50ff88ee2b023d81c78fae4457b31cffbefb59c403af4629adbe25b10f2fbb3f202e8c7c6c273f313633e02e3f6949e36f16b37812ee19c9e8efb9e0995fa9c74ae7f5a038022f9466bbf4eb6ff3aa1d35a986f262b969a631ac382ab0a1a806749b"}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000040)={0x985000000000000, r2}) 07:20:58 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x86480) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) read$FUSE(r1, &(0x7f0000000380)={0x2020}, 0x2020) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x9, 0x6, 0x2d, @ipv4={'\x00', '\xff\xff', @multicast2}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x700, 0x100, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000180)={'sit0\x00', r2, 0x29, 0x3f, 0x6, 0x1, 0x9, @loopback, @private2, 0x8000, 0x7, 0xc44, 0x7}}) 07:20:58 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401070ca) 07:20:59 executing program 3: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401870cb) 07:20:59 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401870c8) 07:20:59 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x719080) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x20}) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 07:20:59 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401070ca) 07:20:59 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x80000001, 0x52b100) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000040)={0x1}) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ccd000/0x2000)=nil) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:20:59 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401070ca) 07:20:59 executing program 5: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401870c8) 07:20:59 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401070ca) 07:20:59 executing program 1: write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, 0x0, {0x4}}, 0x18) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:59 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x210c00) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000040)=0x3) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000140)={0x2020}, 0xfd05) 07:20:59 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x86480) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) read$FUSE(r1, &(0x7f0000000380)={0x2020}, 0x2020) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x9, 0x6, 0x2d, @ipv4={'\x00', '\xff\xff', @multicast2}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x700, 0x100, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000180)={'sit0\x00', r2, 0x29, 0x3f, 0x6, 0x1, 0x9, @loopback, @private2, 0x8000, 0x7, 0xc44, 0x7}}) 07:20:59 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401870cc) 07:20:59 executing program 5: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401870c8) 07:20:59 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401070ca) 07:20:59 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@generic, &(0x7f00000000c0)=0x80, 0x800) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffa}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x5) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:20:59 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000000)) 07:20:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000040)) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x40a0) 07:20:59 executing program 5: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401870c8) 07:20:59 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DISCONNECT(r1, 0xab08) 07:20:59 executing program 0: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401070ca) 07:20:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000040)) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x40a0) 07:20:59 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0xfffffffffffffffd, 0xc0400) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) [ 620.785846] block nbd1: NBD_DISCONNECT [ 620.790612] block nbd1: Disconnected due to user request. [ 620.797536] block nbd1: shutting down sockets [ 620.841759] block nbd1: NBD_DISCONNECT [ 620.846008] block nbd1: Disconnected due to user request. [ 620.852115] block nbd1: shutting down sockets 07:21:00 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x86480) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) read$FUSE(r1, &(0x7f0000000380)={0x2020}, 0x2020) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x9, 0x6, 0x2d, @ipv4={'\x00', '\xff\xff', @multicast2}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x700, 0x100, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000180)={'sit0\x00', r2, 0x29, 0x3f, 0x6, 0x1, 0x9, @loopback, @private2, 0x8000, 0x7, 0xc44, 0x7}}) 07:21:00 executing program 5: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401870c8) 07:21:00 executing program 0: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401070ca) 07:21:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000040)) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x40a0) 07:21:00 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x17, 0x4, 0x6, 0x1, 0x300, 0xffffffffffffffff, 0x8, '\x00', 0x0, r0, 0x5, 0x5}, 0x40) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000380)={&(0x7f0000000000)="d7c3f4f483e2912146de929079b352a648c5cdb7e1d39c7a31664517af57fad5d4fff90370d086fae29c284a7bb91483b2a7039f597508e5fb31adbccad502852524b1d855da2a0b3d062f61d32b18ed8e89dcebe227e5f8be6371da0e49123cd1208195bb895560e87445254c5dfceb0c19076d2b54cba5fb38d69cb1d7cc3d6aacdd1e38682f62a42ec84b8ce6268f89dc8e6a77e584827989a3f987af2ae436180f80c28c722c462505577e50f8c36c5039b4714a7cdc66d9cceb886732bb0997570b1229c4c103067f66fdb20302bd6805e59f9c4b4e29983bba046e8b81118e5956f203191f8ae19f311a2b93d7", &(0x7f0000000180)=""/136, &(0x7f0000000240)="2a36174e6ec3f7afa1c986a60d7cfe720045ea3d255249606f3855bb3a497f10116631888ef9730f6703b5bf567368597fc8a74a822e8a0186ddc515f4212336977a7eaf46c6854a66c5b8c45256f90d6b5d24278f68a1c2ef0e95db876715328e30b94e9cb6fd21c49fad902a49eb4ed9511f415e0872e921978cb5c183d8ceccf1507282c5e269cc40101e587727051cc0", &(0x7f0000000300)="34694ca796b5b83b83fe85f55f530ec9e6fe2c2362d8ef307d3a845299fdacc9c2735bcb1d36f3b731830d3dfd3c4c1086ea9f1b9f289c9ba2a08c9506744d652d6b47a3e9917994dc5545ed0507bde18490e7b47c6d6a89d35f0af841348423b8d2ba757fa19908be", 0x0, r1}, 0x38) 07:21:00 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:00 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x40101283) 07:21:00 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x800000007ff8, 0xf06003) syz_open_dev$dri(&(0x7f0000000540), 0x7, 0x0) 07:21:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x40a0) 07:21:00 executing program 1: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x121180) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:00 executing program 0: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x401070ca) 07:21:00 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x40101283) 07:21:01 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x86480) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) read$FUSE(r1, &(0x7f0000000380)={0x2020}, 0x2020) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x29, 0x3f, 0x6, 0x1, 0x9, @loopback, @private2, 0x8000, 0x7, 0xc44, 0x7}}) 07:21:01 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab08) 07:21:01 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x8e}}, 0x18) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x6, 0x0, 0x10000}) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 07:21:01 executing program 3: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x40a0) 07:21:01 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x40101283) 07:21:01 executing program 1: syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x20400) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x401) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x806) 07:21:01 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x40101283) 07:21:01 executing program 3: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x40a0) [ 622.461686] block nbd1: shutting down sockets 07:21:01 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x40101283) 07:21:01 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x400000) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x101200) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 07:21:01 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x652c22) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000500)) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x1f, 0x8, 0x16, @dev={0xfe, 0x80, '\x00', 0x24}, @dev={0xfe, 0x80, '\x00', 0x23}, 0x700, 0x8000, 0x7357fb4b, 0x4}}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000200)={0x675}) syz_open_dev$dri(&(0x7f0000000040), 0xcd7, 0x8ad80) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x100000001, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000080)={0x3}) r3 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f00000004c0)={0x0, 0x3}) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000240)={0xa}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000340)) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x630a314f, 0x2) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f00000001c0)=0x67) r5 = syz_open_dev$usbfs(&(0x7f0000000380), 0x8001, 0x4cca80) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000300)) read$usbfs(r5, &(0x7f0000000280)=""/85, 0x55) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000580)={'syztnl1\x00', r1, 0x2f, 0x1f, 0x1, 0xffffffff, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x700, 0x7, 0x10001, 0x7}}) ioctl$PPPIOCGUNIT(r6, 0x80047456, &(0x7f0000000100)) 07:21:01 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x40a0) [ 622.495271] block nbd0: NBD_DISCONNECT [ 622.501867] block nbd1: shutting down sockets 07:21:02 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x86480) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x29, 0x3f, 0x6, 0x1, 0x9, @loopback, @private2, 0x8000, 0x7, 0xc44, 0x7}}) 07:21:02 executing program 0: syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x20400) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x401) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x806) 07:21:02 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x40101283) 07:21:02 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x80000000, 0x40, 0x0, 0x1, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x4, 0x1, 0x101, 0x822, r1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x40) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 07:21:02 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000000)={'veth0_macvtap\x00'}) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:21:02 executing program 3: syz_open_dev$dri(0x0, 0x1, 0x40a0) 07:21:02 executing program 3: syz_open_dev$dri(0x0, 0x1, 0x40a0) [ 623.324022] block nbd0: shutting down sockets 07:21:02 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000500)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x81, 0x40, 0x3f, 0x13b}, {0xb, 0x4, 0x4, 0x7}]}) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000000)=""/12, &(0x7f0000000040)=0xc) 07:21:02 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x40101283) 07:21:02 executing program 0: syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x20400) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x401) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x806) 07:21:02 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x121802) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x3ff) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x9, 0x7, 0x8}, 0x40) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', r2}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', r2}, 0x10) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000180)={0x4, "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"}) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 07:21:02 executing program 3: syz_open_dev$dri(0x0, 0x1, 0x40a0) 07:21:02 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x86480) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x29, 0x3f, 0x6, 0x1, 0x9, @loopback, @private2, 0x8000, 0x7, 0xc44, 0x7}}) 07:21:02 executing program 2: syz_open_dev$dri(&(0x7f0000000080), 0xffffffdffffffbfe, 0x448140) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x4, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f00000000c0)=ANY=[@ANYBLOB="407400001b0000008d0703828a0383868605870e828d8d000d0d80058789848c0e8d80"]) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000000)=0x40) syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x2b86c1) socket$l2tp(0x2, 0x2, 0x73) 07:21:02 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x40101283) 07:21:02 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x40a0) [ 623.536985] block nbd0: shutting down sockets 07:21:02 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x40101283) 07:21:02 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES16=r1, @ANYBLOB="00082bbd7000fedbdf25070000e004000d0000000000050012002d0000000c0016000400000000000000050012008100000008001800e00000020c000f00060000000000d4000005000400db000000a22129dbcf97451f1b6b349d23935e5a5f3704ab6a509447a54b72614637da3f34867fcbebdfd60ade51062e2ad261f730b83777411217992d3aa859827fb304113a5941876a13837201bb0ded8ba5bcc6b6d82b75434642d872da7f06ab91e09cb953cc70016f7e7b79964d0f4f0ebfcd4b3373f5066cd63f0e7d061525ac9f58fada35e1c6d2336578b5d8e45c497c2975488c276397d565865fc5aee67e55a8b1667ff1a885acfb4e833473d79c4acdb5b32cd0278c"], 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x840) syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x400000) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x2) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x42c880) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:02 executing program 0: syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x20400) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x401) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x806) 07:21:02 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x86480) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x29, 0x3f, 0x6, 0x1, 0x9, @loopback, @private2, 0x8000, 0x7, 0xc44, 0x7}}) 07:21:02 executing program 2: ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000040)=0x2) syz_open_dev$dri(&(0x7f0000000000), 0x14751f4, 0x262c80) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x1}}, 0x18) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:21:02 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) [ 623.712298] block nbd0: shutting down sockets 07:21:03 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x86480) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x29, 0x3f, 0x6, 0x1, 0x9, @loopback, @private2, 0x8000, 0x7, 0xc44, 0x7}}) 07:21:03 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, 0x0, {0x2}}, 0x18) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000380)) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000100), &(0x7f0000000180)=0x4) r2 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)={'ipvlan0\x00'}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000080)) 07:21:03 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x40101283) 07:21:03 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x86480) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x29, 0x3f, 0x6, 0x1, 0x9, @loopback, @private2, 0x8000, 0x7, 0xc44, 0x7}}) 07:21:03 executing program 2: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x48}}, 0x20000000) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSID(r0, 0x5429, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xe81b) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000), 0x4) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:21:03 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) 07:21:03 executing program 0: syz_open_dev$dri(0x0, 0x1, 0x40a0) 07:21:03 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x86480) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x29, 0x3f, 0x6, 0x1, 0x9, @loopback, @private2, 0x8000, 0x7, 0xc44, 0x7}}) 07:21:03 executing program 5: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x40101283) 07:21:03 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4024c1) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='erofs_destroy_inode\x00', r1}, 0x10) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) read$FUSE(r2, &(0x7f0000005480)={0x2020, 0x0, 0x0}, 0x2020) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000500)) ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f00000022c0)={0x4, &(0x7f0000002280)=[{0x4c76, 0xff, 0x9, 0x8}, {0x5, 0x5, 0x4, 0x1000}, {0x0, 0x1, 0x60, 0x1000}, {0x7, 0x1, 0x26, 0x1ff}]}) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x0, r5}, 0x10) write$FUSE_IOCTL(r2, &(0x7f0000002240)={0x20, 0x0, r5, {0x400, 0x4, 0x5, 0x5}}, 0x20) write$FUSE_STATFS(r2, &(0x7f00000021c0)={0x60, 0x0, r3, {{0x9, 0x8000, 0x4, 0x1, 0x9, 0x8, 0x9d, 0x1ff}}}, 0x60) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000100)) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:03 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) 07:21:03 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) 07:21:03 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x48}}, 0x20000000) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSID(r0, 0x5429, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xe81b) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000), 0x4) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:21:03 executing program 5: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x40101283) 07:21:03 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x86480) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x29, 0x3f, 0x6, 0x1, 0x9, @loopback, @private2, 0x8000, 0x7, 0xc44, 0x7}}) 07:21:03 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r1, &(0x7f0000000040)={0x60, 0x0, r2, {{0x67, 0xdb6, 0x8, 0x1, 0x9, 0x2, 0x9, 0x3}}}, 0x60) 07:21:03 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x9, 0xa0201) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:21:03 executing program 3: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x48}}, 0x20000000) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSID(r0, 0x5429, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xe81b) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000), 0x4) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:21:03 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x40a0) 07:21:03 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE(r2, 0xab02, 0x4) 07:21:03 executing program 5: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x40101283) 07:21:03 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127f) 07:21:03 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127f) 07:21:03 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0xac, 0x1f7880) 07:21:03 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x29, 0x3f, 0x6, 0x1, 0x9, @loopback, @private2, 0x8000, 0x7, 0xc44, 0x7}}) [ 624.252159] block nbd1: NBD_DISCONNECT [ 624.291916] block nbd1: NBD_DISCONNECT 07:21:03 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127d) 07:21:03 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:03 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE(r2, 0xab02, 0x4) 07:21:03 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x81, 0x81) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0x0, r1}, 0x10) r2 = geteuid() write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f00000000c0)={0xa0, 0x0, r1, {{0x0, 0x0, 0x20, 0x64, 0x8000, 0x19e, {0x5, 0x6, 0x100, 0x9, 0x0, 0xfff, 0x1000, 0x401, 0xfffff7ba, 0xc000, 0xb8, r2, 0xee01, 0x0, 0x5}}}}, 0xa0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x80) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f0000000080)={0x101}) 07:21:03 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x29, 0x3f, 0x6, 0x1, 0x9, @loopback, @private2, 0x8000, 0x7, 0xc44, 0x7}}) 07:21:03 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127b) 07:21:03 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127a) 07:21:03 executing program 1: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x5, 0x16, 0x8000, 0xfe00, 0xc, 0x8, &(0x7f0000000040)="676a77eb46b50627110db864"}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) [ 624.506878] block nbd0: NBD_DISCONNECT 07:21:03 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x100000001, 0x100) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000080)={0x78}, 0x78) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4080) 07:21:03 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127b) 07:21:03 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x29, 0x3f, 0x6, 0x1, 0x9, @loopback, @private2, 0x8000, 0x7, 0xc44, 0x7}}) 07:21:03 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE(r2, 0xab02, 0x4) 07:21:03 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127a) 07:21:03 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0xffffffffffffff81, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000002c0)={0x60, 0x15, 0x9, 0xff26, 0xe0, 0xfffffc00, &(0x7f00000001c0)="eb569f071d1dc6b077567fbcf15e067c5ee62040c16b1b8d15ab2279178492c4ba3b3ec4658bcbfdda651331b6e009bfb1dc466005854d65071bfe832b82e5ee0ca3a4499ee63fe1b58b1b199d8d2e8eed7c34ffd9b4dec4f0019da713ea44e14b9facc52750bcf4636c55fcaa5be53bfa60403d03c5706b59ad07f3f2fa15683db48a49618400d389249119ac0371c33dd45083366feae3ee8f1970d9be2f75b7f6b987b20ddc323c353870416c621c0dabf1d1f1c95049aab9ab35cb0a694deeda49024193d871236c8d45ba62e92142c3d34a826ff7047f2343a36173dd21"}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000180)={0x1, 0x30, 0xff, 0xe67f, 0x97, 0x3, &(0x7f0000000080)="d53e01d772fe6df94eabddcdb7458e5cffa4825d13afcb6ef4168e973b74432686368a10016b26199ee320bd941c39fa2aac389486fe570ab61ea13f96d4ec7001f5c6f92c5cf91b50c704df8373a94b9ff0d32b93e659cfa429cccf1d33d1fdaff49fdb657f008cb874122ba98021957fec1dd79fcee7915d0cb31a9f77cd837299292ddad636cef2de44767e3b21dc4656c8e228d486"}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x4, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 07:21:03 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127b) [ 624.667928] block nbd0: NBD_DISCONNECT 07:21:03 executing program 2: ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x6, 0x2, "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"}) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) syz_open_dev$usbmon(&(0x7f0000000180), 0x2, 0x3) syz_open_dev$usbfs(&(0x7f0000000200), 0x3, 0x8840) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000001c0)=0x2, 0x4) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x4, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, 0x0) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) 07:21:03 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x29, 0x3f, 0x6, 0x1, 0x9, @loopback, @private2, 0x8000, 0x7, 0xc44, 0x7}}) 07:21:04 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_SIZE(r2, 0xab02, 0x4) 07:21:04 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127a) 07:21:04 executing program 1: ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000040)={0xc021}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:04 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127b) 07:21:04 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) 07:21:04 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x518d1ebc, 0x0) [ 624.870922] block nbd0: NBD_DISCONNECT 07:21:04 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127a) 07:21:04 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127b) 07:21:04 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400100) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:04 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) 07:21:04 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) 07:21:04 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x109401) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:21:04 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127a) 07:21:04 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127b) [ 625.053375] block nbd0: NBD_DISCONNECT [ 625.067237] block nbd1: shutting down sockets 07:21:04 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) 07:21:04 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127a) 07:21:04 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x189240) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:21:04 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x0, {0x0, 0x12}}, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 07:21:04 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 07:21:04 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127b) 07:21:04 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127a) 07:21:04 executing program 2: getitimer(0x0, &(0x7f0000000040)) r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0x5}) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:21:04 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000100)={'sit0\x00', 0x0}) 07:21:04 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x80001) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x4, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, 0x0) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000180)={0x5d, "22451cc2b388ab84b36d413845afe28968d352309a967489f95a7c34e141cbd4c985d4a1403e23af649142061b4e4dc02b70af22fc8105a3855d43d156a4b24c17a2202e1b0960103248a0975cdc3607d0549a7da3de36dc2e1ad9b83892b89593e1876cb24248ca0a387bac519fcb263c638c7a85c376b95a776f8e44bf7248f293bf3e6ede1cd59f668cae2aa8281ad7de0cdb3be0fdfb37375f6a5dad920f66c7b4ae05583cbd19ec4ae4ad17cd0bd89acc53784158aa923f0ddf2832457379be79a0b1cba091e95f1af3ca75a0a9626818ea9c86c7aaf02b22cc480f44787e3d0f88bad3ccc35d07db53dcc6094300"}) read$usbfs(r0, &(0x7f0000000080)=""/8, 0x8) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x4, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f0000000140)) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x202140) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) [ 625.299500] block nbd0: NBD_DISCONNECT 07:21:04 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127b) 07:21:04 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127a) 07:21:04 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) 07:21:04 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1279) 07:21:04 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x8080) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0x3}) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:21:04 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127b) 07:21:04 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127a) 07:21:04 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1279) [ 625.510656] block nbd0: NBD_DISCONNECT 07:21:04 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) 07:21:04 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127b) 07:21:04 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 07:21:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140), 0xfffffffffffffffc, 0x4000) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x2, 0x0, 0x10001}) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) [ 625.602861] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.608482] ieee802154 phy1 wpan1: encryption failed: -22 07:21:04 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1279) 07:21:04 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127a) 07:21:04 executing program 3: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127b) 07:21:04 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) [ 625.695753] block nbd1: NBD_DISCONNECT [ 625.726805] block nbd1: NBD_DISCONNECT 07:21:05 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0xfffffffffffffff5, r4}, 0x10) write$FUSE_STATFS(r2, &(0x7f00000000c0)={0x60, 0x0, r4, {{0x8000, 0x2, 0x1, 0x2, 0x200, 0x401, 0x3713, 0x9}}}, 0x60) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:05 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) r0 = syz_open_dev$dri(&(0x7f0000000000), 0xff, 0x101000) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x3}) 07:21:05 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1279) 07:21:05 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) 07:21:05 executing program 5: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127a) 07:21:05 executing program 3: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127b) 07:21:05 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1279) 07:21:05 executing program 0: ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) 07:21:05 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x523c01) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_QUE(r1, 0xab05) 07:21:05 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x121102) r0 = accept(0xffffffffffffffff, &(0x7f0000000080)=@nl, &(0x7f0000000100)=0x80) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000180)=""/223, &(0x7f0000000280)=0xdf) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x9, 0x4) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x4800) syz_genetlink_get_family_id$team(&(0x7f00000002c0), r1) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000000)) r3 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000300)={0x0, 0x47}) 07:21:05 executing program 5: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127a) 07:21:05 executing program 3: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127b) 07:21:05 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1279) [ 626.061238] block nbd1: shutting down sockets 07:21:05 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0xfffffffffffffff5, r4}, 0x10) write$FUSE_STATFS(r2, &(0x7f00000000c0)={0x60, 0x0, r4, {{0x8000, 0x2, 0x1, 0x2, 0x200, 0x401, 0x3713, 0x9}}}, 0x60) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:05 executing program 0: ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) [ 626.101832] block nbd1: shutting down sockets 07:21:05 executing program 5: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x127a) 07:21:05 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x200000) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000040)={'macvtap0\x00'}) ioctl$NBD_CLEAR_QUE(r2, 0xab05) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x5) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x80) 07:21:05 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='finish_task_reaping\x00', r0}, 0x10) 07:21:05 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1279) [ 626.228611] macvtap0: mtu less than device minimum 07:21:05 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0xffffffff, 0x103200) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400000) ioctl$NBD_DISCONNECT(r0, 0xab08) 07:21:05 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0xfffffffffffffff5, r4}, 0x10) write$FUSE_STATFS(r2, &(0x7f00000000c0)={0x60, 0x0, r4, {{0x8000, 0x2, 0x1, 0x2, 0x200, 0x401, 0x3713, 0x9}}}, 0x60) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:05 executing program 0: ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) [ 626.259464] macvtap0: mtu less than device minimum 07:21:05 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1279) 07:21:05 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1279) 07:21:05 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) socketpair(0x14, 0x3, 0x9, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x5) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x1, {0xa, 0x4e22, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}}, 0x3a) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) 07:21:05 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0xfffffffffffffff5, r4}, 0x10) write$FUSE_STATFS(r2, &(0x7f00000000c0)={0x60, 0x0, r4, {{0x8000, 0x2, 0x1, 0x2, 0x200, 0x401, 0x3713, 0x9}}}, 0x60) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:05 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) 07:21:05 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1279) 07:21:05 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004}, 0x40400c1) 07:21:05 executing program 5: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x121102) r0 = accept(0xffffffffffffffff, &(0x7f0000000080)=@nl, &(0x7f0000000100)=0x80) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000180)=""/223, &(0x7f0000000280)=0xdf) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x9, 0x4) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x4800) syz_genetlink_get_family_id$team(&(0x7f00000002c0), r1) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000000)) r3 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000300)={0x0, 0x47}) 07:21:05 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) [ 626.511721] block nbd1: shutting down sockets 07:21:05 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0xfffffffffffffff5, r3}, 0x10) write$FUSE_STATFS(r1, &(0x7f00000000c0)={0x60, 0x0, r3, {{0x8000, 0x2, 0x1, 0x2, 0x200, 0x401, 0x3713, 0x9}}}, 0x60) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) 07:21:05 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1279) 07:21:05 executing program 2: syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @any, 0x5}, 0xa) 07:21:05 executing program 5: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004}, 0x40400c1) 07:21:05 executing program 4: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1279) [ 626.630981] block nbd1: Device being setup by another task [ 626.638002] block nbd1: shutting down sockets 07:21:05 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x181801) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x8001) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='qdisc_destroy\x00'}, 0x10) 07:21:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000100)) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x40080) 07:21:05 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) 07:21:06 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0xfffffffffffffff5, r3}, 0x10) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) 07:21:06 executing program 4: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1279) 07:21:06 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0xfffffffffffffff5, r3}, 0x10) write$FUSE_STATFS(r1, &(0x7f00000000c0)={0x60, 0x0, r3, {{0x8000, 0x2, 0x1, 0x2, 0x200, 0x401, 0x3713, 0x9}}}, 0x60) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) 07:21:06 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) 07:21:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x84c01) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000000)={0x0, 0x9}) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x6, &(0x7f00000000c0)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x8}, @jmp={0x5, 0x0, 0xd, 0x6, 0x5, 0xffffffffffffff6c}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @generic={0x3, 0x8, 0x9, 0x0, 0x8}], &(0x7f0000000100)='GPL\x00', 0xfffffffe, 0x25, &(0x7f0000000180)=""/37, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0xf, 0x101, 0x80000001}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x5, 0x3}, 0x0, 0x0, &(0x7f0000000340)={0x3, 0x7, 0xb7, 0x1}, &(0x7f0000000380)=0x725, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x1}}, 0x10) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000080)={0x6112, 0x11, [{0xf}, {0x6}, {0xa, 0x1}, {0xc, 0x1}, {0xd, 0x1}, {0x2}, {0x7, 0x1}, {0x9, 0x1}, {0xe, 0x1}, {0xe, 0x1}, {0xe, 0x1}, {0xa, 0x1}, {0x1}, {0x9}, {0x5, 0x1}, {0x8}, {0xc, 0x1}]}) 07:21:06 executing program 4: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1279) 07:21:06 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0xfffffffffffffff5, r3}, 0x10) write$FUSE_STATFS(r1, &(0x7f00000000c0)={0x60, 0x0, r3, {{0x8000, 0x2, 0x1, 0x2, 0x200, 0x401, 0x3713, 0x9}}}, 0x60) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) 07:21:06 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0xc22, 0x4800) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x24) read$usbfs(r2, &(0x7f0000000180)=""/102400, 0x19000) ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000080)=0x5b) syz_open_dev$usbfs(&(0x7f00000000c0), 0x10000, 0x583c00) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_DISCONNECT(r1, 0xab08) 07:21:06 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003440)={0x2020}, 0x2020) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) 07:21:06 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) socketpair(0x14, 0x3, 0x9, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x5) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x1, {0xa, 0x4e22, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}}, 0x3a) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) 07:21:06 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) [ 626.986685] block nbd1: NBD_DISCONNECT [ 627.001436] block nbd2: shutting down sockets 07:21:06 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0xfffffffffffffff5, r3}, 0x10) write$FUSE_STATFS(r1, &(0x7f00000000c0)={0x60, 0x0, r3, {{0x8000, 0x2, 0x1, 0x2, 0x200, 0x401, 0x3713, 0x9}}}, 0x60) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) [ 627.026837] block nbd1: NBD_DISCONNECT 07:21:06 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) 07:21:06 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) write$FUSE_OPEN(r1, &(0x7f00000000c0)={0x20, 0x0, 0x0, {0x0, 0x2}}, 0x20) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x90300, 0x0) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000080)=0x1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) [ 627.051081] block nbd2: shutting down sockets 07:21:06 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) 07:21:06 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0xfffffffffffffff5, r3}, 0x10) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) 07:21:06 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) 07:21:06 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) [ 627.195261] block nbd4: shutting down sockets 07:21:06 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:06 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) socketpair(0x14, 0x3, 0x9, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x5) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x1, {0xa, 0x4e22, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}}, 0x3a) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) 07:21:06 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003440)={0x2020}, 0x2020) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) 07:21:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000000)={0x7}) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x484400) 07:21:06 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) 07:21:06 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) syz_open_dev$ndb(0x0, 0x0, 0x0) 07:21:06 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) 07:21:06 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x3030c0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:06 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) [ 627.423321] block nbd0: NBD_DISCONNECT [ 627.441324] block nbd4: shutting down sockets 07:21:06 executing program 2: syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x470180) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x38002) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x2010001, 0x98d6b7df11debdcc) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x9e, 0x0, 0x10001}) 07:21:06 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) socketpair(0x14, 0x3, 0x9, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x5) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x1, {0xa, 0x4e22, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}}, 0x3a) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) 07:21:06 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) syz_open_dev$ndb(0x0, 0x0, 0x0) 07:21:06 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) 07:21:06 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2040) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:06 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) 07:21:06 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) [ 627.580436] block nbd0: NBD_DISCONNECT 07:21:06 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x7, 0x129200) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1000000020000, 0x101000) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x1ff, 0x0, 0x10000}) 07:21:06 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400, 0x2) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x6, 0x1}, 0x9, 0x4, &(0x7f00000000c0)={0x20, 0x0, 0xfff7, 0x0, 0xdcd}, 0x8, 0x5, 0x9, 0x0, 0x1000, 0x8, &(0x7f0000000180)="0d999ecb4071edcb0acb081955c411269c5c5aa0c70d99a1cb58e6e9e7620fd1e989d65de1de0b85ca14b1f06da37e2c39506879d2b38819d300d0cad73a80a750ff51ce533b18aac1272689a0f68975a403b41c91818215d7f63a30d09fbe2f490e0cf682c2c96a37609c01b59ed37f27c66252efae8eae77de7034f3250a9f306d9e4297cb6a8276e5e6755053c976654f9cae98e5dc2cd82851dfab36e86f68a20b53f81255290bae417ad698ca6bed7c88e5f3bba3841fdfe72a14f587784c653436dd626051e2b50c345c2b8c6dada61c93346daa290be94aa71148"}) read$usbfs(r1, &(0x7f00000002c0)=""/209, 0xd1) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x7, 0x10010, r1, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x4, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f0000000080)=0x3f) 07:21:06 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) syz_open_dev$ndb(0x0, 0x0, 0x0) 07:21:06 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) socket$pppl2tp(0x18, 0x1, 0x1) 07:21:06 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) [ 627.681221] block nbd4: shutting down sockets 07:21:07 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) 07:21:07 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) socketpair(0x14, 0x3, 0x9, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x5) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x1, {0xa, 0x4e22, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}}, 0x3a) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) [ 627.752118] block nbd0: NBD_DISCONNECT 07:21:07 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) 07:21:07 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x5) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x208002) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) 07:21:07 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:07 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) 07:21:07 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) read$usbfs(0xffffffffffffffff, &(0x7f0000000000)=""/123, 0x7b) 07:21:07 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) 07:21:07 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) [ 627.961429] block nbd4: shutting down sockets 07:21:07 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) 07:21:07 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1279) 07:21:07 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) socketpair(0x14, 0x3, 0x9, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x5) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x1, {0xa, 0x4e22, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}}, 0x3a) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) 07:21:07 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) 07:21:07 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) 07:21:07 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x80101) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000200)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x13}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfe8000}, @jmp={0x5, 0x0, 0xd, 0x3, 0x0, 0xfffffffffffffff4, 0x4}, @jmp={0x5, 0x0, 0x3, 0x6, 0xb, 0x6, 0x8}, @map={0x18, 0x2, 0x1, 0x0, 0x1}, @generic={0x7, 0x8, 0x7, 0x5, 0x9}], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x9, 0x7, 0x8}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r4, 0x2f, 0x98, 0x1, 0x0, 0x74, @mcast1, @loopback, 0x49, 0x1, 0x0, 0x1}}) r5 = syz_open_dev$usbmon(&(0x7f0000000280), 0x145, 0x400800) ioctl$MON_IOCG_STATS(r5, 0x80089203, &(0x7f00000002c0)) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', r3}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r2, r3}, 0xc) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 07:21:07 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) 07:21:07 executing program 0: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) read$usbfs(0xffffffffffffffff, &(0x7f0000000000)=""/123, 0x7b) 07:21:07 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) [ 628.181560] block nbd4: shutting down sockets 07:21:07 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSID(r1, 0x5429, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)) 07:21:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x100) r1 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000040)={0x401}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x0, 0x0, 0x10000}) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:21:07 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) socketpair(0x14, 0x3, 0x9, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x5) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x1, {0xa, 0x4e22, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}}, 0x3a) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 07:21:07 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) 07:21:07 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) socketpair(0x14, 0x3, 0x9, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x5) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x1, {0xa, 0x4e22, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}}, 0x3a) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) 07:21:07 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) [ 628.352159] block nbd4: shutting down sockets 07:21:07 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x800) ioctl$NBD_SET_SOCK(r0, 0xab00, r5) 07:21:07 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) [ 628.401192] block nbd0: shutting down sockets 07:21:07 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x801) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x290040) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x4803) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000100)) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000080)={0x100000000}) 07:21:07 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) 07:21:07 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) socketpair(0x14, 0x3, 0x9, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x5) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x1, {0xa, 0x4e22, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}}, 0x3a) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 07:21:07 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x80101) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000200)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x13}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfe8000}, @jmp={0x5, 0x0, 0xd, 0x3, 0x0, 0xfffffffffffffff4, 0x4}, @jmp={0x5, 0x0, 0x3, 0x6, 0xb, 0x6, 0x8}, @map={0x18, 0x2, 0x1, 0x0, 0x1}, @generic={0x7, 0x8, 0x7, 0x5, 0x9}], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x9, 0x7, 0x8}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r4, 0x2f, 0x98, 0x1, 0x0, 0x74, @mcast1, @loopback, 0x49, 0x1, 0x0, 0x1}}) r5 = syz_open_dev$usbmon(&(0x7f0000000280), 0x145, 0x400800) ioctl$MON_IOCG_STATS(r5, 0x80089203, &(0x7f00000002c0)) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', r3}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r2, r3}, 0xc) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 07:21:07 executing program 5: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) [ 628.541305] block nbd1: shutting down sockets [ 628.553315] block nbd4: shutting down sockets 07:21:07 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) 07:21:07 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) 07:21:07 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) socketpair(0x14, 0x3, 0x9, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x5) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x1, {0xa, 0x4e22, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}}, 0x3a) 07:21:07 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = accept(r0, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000040)=0x2080) socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x29, 0x3f, 0x9, 0xfff, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x10, 0x8, 0x9, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6gre0\x00', r2, 0x4, 0xf7, 0x81, 0x0, 0x50, @local, @dev={0xfe, 0x80, '\x00', 0x35}, 0x700, 0x20, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl0\x00', r2, 0x4, 0xfa, 0x4, 0x1ee7, 0xd, @dev={0xfe, 0x80, '\x00', 0x16}, @local, 0x7800, 0x63531ee7ab3f5cda, 0x40, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl2\x00', r2, 0x4, 0x8, 0x18, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x16}, @empty, 0x40, 0x8000, 0x9, 0x4}}) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40008070}, 0xc, &(0x7f00000011c0)={&(0x7f0000000640)={0xb6c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x1a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5967}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1c}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x218, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5f19}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r7}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb300}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x9, 0x0, 0x6, 0x7ff}, {0x3ff, 0x8, 0xec, 0x4d0a}, {0x3, 0x6, 0xa8, 0xb5}, {0x5, 0x81, 0x1, 0x7}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}, {{0x8, 0x1, r8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x76d3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0x100, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r2}, {0x1c0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8c1f}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0xb6c}, 0x1, 0x0, 0x0, 0x4040008}, 0x80) socket$inet6_udplite(0xa, 0x2, 0x88) [ 628.661312] block nbd1: shutting down sockets 07:21:07 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) 07:21:08 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:08 executing program 0: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x121102) r0 = accept(0xffffffffffffffff, &(0x7f0000000080)=@nl, &(0x7f0000000100)=0x80) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000180)=""/223, &(0x7f0000000280)=0xdf) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x9, 0x4) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x4800) syz_genetlink_get_family_id$team(&(0x7f00000002c0), r1) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000000)) r3 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000300)={0x0, 0x47}) 07:21:08 executing program 5: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) [ 628.720845] block nbd1: Device being setup by another task [ 628.772427] block nbd4: shutting down sockets 07:21:08 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) socketpair(0x14, 0x3, 0x9, &(0x7f0000000040)) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x5) 07:21:08 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000100)={0x9, &(0x7f0000000080)=[{0x6, 0x4, 0xe9, 0x6}, {0x9, 0x3f, 0xdb, 0x1b}, {0x7fff, 0x5, 0x7, 0xc}, {0x6, 0x5, 0x5, 0x10001}, {0x9, 0xca, 0x3f, 0x3}, {0x0, 0x40, 0xc6, 0xfffffffa}, {0x8000, 0x3f, 0xff, 0x100}, {0x1, 0x1, 0x9, 0xa040}, {0x6, 0x7, 0x2, 0x8}]}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x418403, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) syz_open_dev$dri(&(0x7f0000000180), 0x8, 0x8d021a23dde7bb74) syz_open_dev$dri(&(0x7f0000000540), 0x1000000000001, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1ff, 0x9, 0x1, 0x802, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0xfeffffff}, 0x40) 07:21:08 executing program 5: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) 07:21:08 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) 07:21:08 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x800) ioctl$NBD_SET_SOCK(r0, 0xab00, r5) 07:21:08 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 07:21:08 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) 07:21:08 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) [ 628.967012] block nbd4: shutting down sockets 07:21:08 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) socketpair(0x14, 0x3, 0x9, &(0x7f0000000040)) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) 07:21:08 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0x9, 0x1, 0x81, 0x54, @mcast2, @loopback, 0x8, 0x80, 0x3, 0x2}}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x214, r1, 0x300, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r2}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x8, 0xae, 0x1f, 0x4}, {0xfff8, 0x4, 0x40, 0x7}, {0x9, 0x5, 0x20, 0xfa75}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xab}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x214}, 0x1, 0x0, 0x0, 0x4008005}, 0x8000) 07:21:08 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000380)) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) [ 629.045381] block nbd0: shutting down sockets 07:21:08 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 07:21:08 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x800) ioctl$NBD_SET_SOCK(r0, 0xab00, r5) 07:21:08 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) socketpair(0x1f, 0x6, 0x408b4ca5, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x1) r1 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000600)={0x0, 0x3ff}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000000)={0x5}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', r3, 0x2d, 0x1, 0x3f, 0x1, 0x20, @private2, @private1, 0x700, 0x10, 0x0, 0x2}}) [ 629.141342] block nbd4: shutting down sockets 07:21:08 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) 07:21:08 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) socketpair(0x14, 0x3, 0x9, &(0x7f0000000040)) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 07:21:08 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 07:21:08 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 07:21:08 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x8, 0x13b180) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) r0 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0xb5e}) 07:21:08 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) socketpair(0x14, 0x3, 0x9, &(0x7f0000000040)) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) [ 629.292130] block nbd0: shutting down sockets 07:21:08 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) 07:21:08 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x800) ioctl$NBD_SET_SOCK(r0, 0xab00, r5) 07:21:08 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:08 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 07:21:08 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0xfc200) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:21:08 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d, 0x1}) 07:21:08 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) socketpair(0x14, 0x3, 0x9, &(0x7f0000000040)) 07:21:08 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x0, 0xfe7dfd4c1f16d82d, 0x1}) 07:21:08 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioperm(0x800, 0x80000001, 0x1bc) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) [ 629.521225] block nbd0: shutting down sockets 07:21:08 executing program 2: r0 = inotify_init1(0x0) inotify_rm_watch(r0, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x45, 0x127c82) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000080)={0x0, 0xfffffffffffffffb}) r2 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000000)={0x0, 0x497a}) 07:21:08 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x800) ioctl$NBD_SET_SOCK(r0, 0xab00, r5) 07:21:08 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) socketpair(0x14, 0x3, 0x9, &(0x7f0000000040)) 07:21:08 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 07:21:08 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x7fff0000, 0x1, 0x200000, 0x310, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xa, &(0x7f0000000040)=@raw=[@generic={0x5, 0x9, 0x5, 0x4000, 0x599}, @exit, @map={0x18, 0x8, 0x1, 0x0, r0}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @ldst={0x1, 0x1, 0x0, 0x3, 0x2, 0xfffffffffffffff0, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x6, 0x7, 0x9, 0x2, 0xfffffffffffffff0}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}], &(0x7f00000000c0)='GPL\x00', 0xffffffff, 0xe3, &(0x7f0000000180)=""/227, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x1, 0x7, 0x45ff}, 0x10}, 0x78) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:21:08 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 07:21:08 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x0, 0xfe7dfd4c1f16d82d, 0x1}) 07:21:08 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair(0x14, 0x3, 0x9, &(0x7f0000000040)) 07:21:09 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 629.731046] block nbd0: shutting down sockets 07:21:09 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) [ 629.785295] block nbd1: NBD_DISCONNECT [ 629.805320] block nbd1: NBD_DISCONNECT 07:21:09 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x800) 07:21:09 executing program 4: socketpair(0x14, 0x3, 0x9, &(0x7f0000000040)) 07:21:09 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x0, 0xfe7dfd4c1f16d82d, 0x1}) 07:21:09 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x400103) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:09 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 07:21:09 executing program 4: socketpair(0x0, 0x3, 0x9, &(0x7f0000000040)) 07:21:09 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioperm(0x800, 0x80000001, 0x1bc) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) [ 629.950957] block nbd0: shutting down sockets 07:21:09 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xfff, 0x0, 0x1}) 07:21:09 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) 07:21:09 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xc0200) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400000) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:09 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x0, 0xfe7dfd4c1f16d82d, 0x1}) 07:21:09 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x800) 07:21:09 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xfff, 0x0, 0x1}) [ 630.120023] block nbd0: shutting down sockets 07:21:09 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x7) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:09 executing program 4: socketpair(0x0, 0x3, 0x9, &(0x7f0000000040)) 07:21:09 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 07:21:09 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x0, 0xfe7dfd4c1f16d82d, 0x1}) [ 630.211145] block nbd2: shutting down sockets 07:21:09 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xfff, 0x0, 0x1}) 07:21:09 executing program 2: r0 = inotify_init1(0x0) inotify_rm_watch(r0, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x45, 0x127c82) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000080)={0x0, 0xfffffffffffffffb}) r2 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000000)={0x0, 0x497a}) 07:21:09 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:09 executing program 4: socketpair(0x0, 0x3, 0x9, &(0x7f0000000040)) [ 630.321101] block nbd0: shutting down sockets 07:21:09 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 07:21:09 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x0, 0xfe7dfd4c1f16d82d, 0x1}) 07:21:09 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d}) 07:21:09 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000380)) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:09 executing program 4: socketpair(0x14, 0x0, 0x9, &(0x7f0000000040)) 07:21:09 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xfff, 0x0, 0x1}) [ 630.492013] block nbd1: shutting down sockets [ 630.531109] block nbd0: shutting down sockets [ 630.531172] block nbd1: shutting down sockets 07:21:09 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 07:21:09 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x90c02) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x101) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x4, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000080)=0x5) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 07:21:09 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) socketpair(0x14, 0x3, 0x9, &(0x7f0000000040)) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) 07:21:09 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x800) ioctl$NBD_SET_SOCK(r0, 0xab00, r5) 07:21:10 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xfff, 0x0, 0x1}) 07:21:10 executing program 4: socketpair(0x14, 0x0, 0x0, &(0x7f0000000040)) 07:21:10 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x12100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 630.811167] block nbd3: shutting down sockets [ 630.816002] block nbd2: shutting down sockets [ 630.820755] block nbd0: shutting down sockets 07:21:10 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) socketpair(0x14, 0x3, 0x9, &(0x7f0000000040)) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) 07:21:10 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 07:21:10 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x800) ioctl$NBD_SET_SOCK(r0, 0xab00, r5) 07:21:10 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xfff, 0x0, 0x1}) 07:21:10 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x545004) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:10 executing program 4: socketpair(0x14, 0x0, 0x0, 0x0) 07:21:10 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xfff, 0xfe7dfd4c1f16d82d}) 07:21:10 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x12100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 631.013005] block nbd0: shutting down sockets [ 631.030953] block nbd3: shutting down sockets [ 631.051584] block nbd2: shutting down sockets 07:21:10 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 07:21:10 executing program 4: socketpair(0x14, 0x0, 0x0, 0x0) 07:21:10 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x800) ioctl$NBD_SET_SOCK(r0, 0xab00, r5) 07:21:10 executing program 1: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x490800, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 07:21:10 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x12100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 07:21:10 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x80001) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x4, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, 0x0) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000180)={0x5d, "22451cc2b388ab84b36d413845afe28968d352309a967489f95a7c34e141cbd4c985d4a1403e23af649142061b4e4dc02b70af22fc8105a3855d43d156a4b24c17a2202e1b0960103248a0975cdc3607d0549a7da3de36dc2e1ad9b83892b89593e1876cb24248ca0a387bac519fcb263c638c7a85c376b95a776f8e44bf7248f293bf3e6ede1cd59f668cae2aa8281ad7de0cdb3be0fdfb37375f6a5dad920f66c7b4ae05583cbd19ec4ae4ad17cd0bd89acc53784158aa923f0ddf2832457379be79a0b1cba091e95f1af3ca75a0a9626818ea9c86c7aaf02b22cc480f44787e3d0f88bad3ccc35d07db53dcc6094300"}) read$usbfs(r0, &(0x7f0000000080)=""/8, 0x8) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x4, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f0000000140)) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x202140) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 07:21:10 executing program 4: socketpair(0x14, 0x0, 0x0, 0x0) [ 631.241842] block nbd0: shutting down sockets [ 631.271703] block nbd2: shutting down sockets 07:21:10 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1279) 07:21:10 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 07:21:10 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) socketpair(0x28, 0x3, 0x7, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() prlimit64(r3, 0xc94a3c1257f61ef0, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='writeback_queue_io\x00'}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={r3, r4, 0x0, 0x3, &(0x7f0000000440)='#{\x00'}, 0x30) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x1, 0x4) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'veth0_to_bond\x00'}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x8a, 0x0}, 0x8) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000000140)='GPL\x00', 0x5, 0xce, &(0x7f0000000180)=""/206, 0x41100, 0x12, '\x00', r1, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x10, 0x75b, 0x3}, 0x10, r5}, 0x78) geteuid() 07:21:10 executing program 3: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0xf6ffffff, 0x4000) 07:21:10 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x800) 07:21:10 executing program 4: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0x4000000, 0x4000) [ 631.399027] veth0_to_bond: mtu less than device minimum [ 631.431652] block nbd0: shutting down sockets [ 631.443376] veth0_to_bond: mtu less than device minimum 07:21:10 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1276) 07:21:10 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 07:21:10 executing program 3: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0xf6ffffff, 0x4000) 07:21:10 executing program 1: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="60000010", @ANYRES16=r0, @ANYBLOB="020026bd7000fbdbdf25040000000c000f0001000000000000000c000000000005000700030010001400080076657468315f76697200007769666900050007000200000005002100000001800000000000000000f6afb2e803f4d0cf4e2ef54a50fb5a6803dd2fecf8304ca9941f43be0774080a9366da13e8c8fb64e94b03e2939225ee06528b93a0ea4bd7ddadd39cf37d0b354437ac3936ca47a20d8f2aed"], 0x60}, 0x1, 0x0, 0x0, 0x4044010}, 0x4040080) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xc0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x7f}, &(0x7f00000002c0)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x48ca}}, 0x10) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x4100) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x80) 07:21:10 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1274) [ 631.515022] block nbd2: shutting down sockets 07:21:10 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) 07:21:10 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 07:21:10 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1276) 07:21:10 executing program 3: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000540), 0xf6ffffff, 0x4000) 07:21:10 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) accept(0xffffffffffffffff, &(0x7f0000000040)=@nfc, &(0x7f00000000c0)=0x80) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 07:21:10 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1274) [ 631.710764] block nbd2: shutting down sockets 07:21:11 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1276) 07:21:11 executing program 3: syz_open_dev$dri(&(0x7f0000000540), 0xf6ffffff, 0x4000) 07:21:11 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 07:21:11 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 07:21:11 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1274) 07:21:11 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x220000) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x7f) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0xe6f4) 07:21:11 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1276) 07:21:11 executing program 3: syz_open_dev$dri(0x0, 0xf6ffffff, 0x4000) [ 631.927402] block nbd2: shutting down sockets 07:21:11 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 07:21:11 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1274) 07:21:11 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 07:21:11 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1276) 07:21:11 executing program 3: syz_open_dev$dri(0x0, 0xf6ffffff, 0x4000) [ 632.031150] block nbd1: shutting down sockets 07:21:11 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 07:21:11 executing program 3: syz_open_dev$dri(0x0, 0xf6ffffff, 0x4000) 07:21:11 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1274) 07:21:11 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1276) [ 632.151416] block nbd1: Device being setup by another task [ 632.157169] block nbd1: shutting down sockets [ 632.162726] block nbd2: shutting down sockets 07:21:11 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x6, 0x141042) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000000c0)=@urb_type_control={0x2, {0x3, 0x1}, 0x5, 0x6, &(0x7f0000000080)={0x45, 0xe, 0x8001, 0x100, 0xff53}, 0x8, 0xfffffff9, 0x7fffffff, 0x0, 0x8083, 0x201, &(0x7f0000000180)="7fc385c7192aa26673b58900f12d555bfbd064eba24c0f6cea543e830d365a08f3028f99055448cce157f50668214f058222e4a6240e92f8630daf8a3ec6d2622546eee42f6c96634f599ab76c2e864bbc8c4628ce70105f69baaddde9c93498645e3fd8c611e7a2825b988e95f3e38f72436311cd6845ef0218d70ecf47c854001c"}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x80) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 07:21:11 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 07:21:11 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:11 executing program 3: syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:21:11 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1274) 07:21:11 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1276) 07:21:11 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) [ 632.331455] block nbd2: shutting down sockets 07:21:11 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x74c080) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:11 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:11 executing program 3: syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:21:11 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1274) 07:21:11 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1276) 07:21:11 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 07:21:11 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x80000) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:11 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1274) 07:21:11 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1276) [ 632.541439] block nbd2: shutting down sockets 07:21:11 executing program 3: syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x4000) 07:21:11 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:11 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 07:21:11 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1276) 07:21:11 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 07:21:11 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1274) 07:21:11 executing program 3: syz_open_dev$dri(&(0x7f0000000540), 0xf6ffffff, 0x0) [ 632.711075] block nbd2: shutting down sockets 07:21:12 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:12 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1276) 07:21:12 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 07:21:12 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1274) 07:21:12 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:12 executing program 3: syz_open_dev$dri(&(0x7f0000000540), 0xf6ffffff, 0x0) [ 632.884236] block nbd2: shutting down sockets 07:21:12 executing program 5: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1276) 07:21:12 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:12 executing program 4: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1274) [ 632.940826] block nbd0: shutting down sockets 07:21:12 executing program 3: syz_open_dev$dri(&(0x7f0000000540), 0xf6ffffff, 0x0) 07:21:12 executing program 5: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1276) 07:21:12 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x4, 0x3}}, 0x26) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) socket$pppl2tp(0x18, 0x1, 0x1) 07:21:12 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 07:21:12 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:12 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:12 executing program 4: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1274) 07:21:12 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x60002) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f00000001c0)=0x3) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x181000) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = gettid() prlimit64(r1, 0xc94a3c1257f61ef0, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='f2fs_write_begin\x00'}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, r2, 0x0, 0xa, &(0x7f0000000100)='/dev/nbd#\x00'}, 0x30) 07:21:12 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) [ 633.134952] block nbd0: shutting down sockets 07:21:12 executing program 5: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1276) 07:21:12 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x6, 0x141042) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000000c0)=@urb_type_control={0x2, {0x3, 0x1}, 0x5, 0x6, &(0x7f0000000080)={0x45, 0xe, 0x8001, 0x100, 0xff53}, 0x8, 0xfffffff9, 0x7fffffff, 0x0, 0x8083, 0x201, &(0x7f0000000180)="7fc385c7192aa26673b58900f12d555bfbd064eba24c0f6cea543e830d365a08f3028f99055448cce157f50668214f058222e4a6240e92f8630daf8a3ec6d2622546eee42f6c96634f599ab76c2e864bbc8c4628ce70105f69baaddde9c93498645e3fd8c611e7a2825b988e95f3e38f72436311cd6845ef0218d70ecf47c854001c"}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x80) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 07:21:12 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:12 executing program 4: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1274) 07:21:12 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 07:21:12 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:12 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x60002) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f00000001c0)=0x3) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x181000) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = gettid() prlimit64(r1, 0xc94a3c1257f61ef0, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='f2fs_write_begin\x00'}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, r2, 0x0, 0xa, &(0x7f0000000100)='/dev/nbd#\x00'}, 0x30) 07:21:12 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 07:21:12 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1276) 07:21:12 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) [ 633.451401] block nbd1: shutting down sockets 07:21:12 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 07:21:12 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:12 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:12 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) [ 633.525865] block nbd1: shutting down sockets 07:21:12 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x8, &(0x7f0000000240)) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x152e) 07:21:12 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 07:21:12 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 07:21:12 executing program 4: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="60000010", @ANYRES16=r0, @ANYBLOB="020026bd7000fbdbdf25040000000c000f0001000000000000000c000000000005000700030010001400080076657468315f76697200007769666900050007000200000005002100000001800000000000000000f6afb2e803f4d0cf4e2ef54a50fb5a6803dd2fecf8304ca9941f43be0774080a9366da13e8c8fb64e94b03e2939225ee06528b93a0ea4bd7ddadd39cf37d0b354437ac3936ca47a20d8f2aed"], 0x60}, 0x1, 0x0, 0x0, 0x4044010}, 0x4040080) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xc0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x7f}, &(0x7f00000002c0)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x48ca}}, 0x10) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x4100) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x80) 07:21:12 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1269) 07:21:12 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) [ 633.692330] block nbd3: shutting down sockets 07:21:12 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 07:21:13 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000008000000000000000800000018390000040000000000000000000000850000001300000018210000", @ANYRES32=0x1, @ANYBLOB="000000000080fe00d503f4ff0400000035b606000800000018120000", @ANYRES32=0x1, @ANYBLOB="00000000000000ffffe6ffffff000000"], &(0x7f0000000700)='syzkaller\x00', 0x13, 0x3f, &(0x7f0000000740)=""/63, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x3, 0x6}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r0, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000001}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='svcsock_marker\x00', r0}, 0x10) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)={&(0x7f0000000440)='./file0\x00', 0x0, 0x10}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000600), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001980)=@bpf_tracing={0x1a, 0xe, &(0x7f00000004c0)=@raw=[@ldst={0x3, 0x1, 0xffd06e453bbac4, 0xa, 0xa, 0xc, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x932d, 0x0, 0x0, 0x0, 0x401}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @jmp={0x5, 0x0, 0x2, 0x3, 0x7, 0x0, 0x8}, @map_val={0x18, 0x5, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @map={0x18, 0xb}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x2}], &(0x7f0000000540)='GPL\x00', 0x6, 0xf9, &(0x7f0000001880)=""/249, 0x41000, 0x9, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xd, 0x5, 0x100}, 0x10, 0x1cb0, r3}, 0x78) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x9, 0x1100, 0x80000001, 0x2, 0x200, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x40) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000400)={&(0x7f0000000880)="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", &(0x7f0000000280)=""/169, &(0x7f0000000340)="0559e3e8a60e6ab7daa94474566478b3975794c7147a0403700b7606777848dd4f758250ffc182bc4deabb594a286fc89dae27d95baee402b4d06368301f360a13d6198f693ac64269bb069ade38f2a3f7140bbd136aabdf8500d14452817f3238d63c28ec271f8b0ca875", &(0x7f00000000c0)="19746495ec42c696c196f4fa71411f", 0x8, r4}, 0x38) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x4, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r5, 0x4004551e, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f0000001a00)={0x0, 0x1}) 07:21:13 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1267) 07:21:13 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:13 executing program 4: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x125e) 07:21:13 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1269) 07:21:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 07:21:13 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1267) 07:21:13 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0xcf0258da0ea2853d) ioctl$NBD_DISCONNECT(r0, 0xab08) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 07:21:13 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1262) 07:21:13 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:13 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1269) 07:21:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 07:21:13 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1267) [ 634.025296] block nbd1: NBD_DISCONNECT [ 634.042519] block nbd1: NBD_DISCONNECT 07:21:13 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:13 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1262) 07:21:13 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0xffffffffffffffe0) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 07:21:13 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1267) 07:21:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 07:21:13 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1269) 07:21:13 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 07:21:13 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) 07:21:13 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1269) 07:21:13 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1262) 07:21:13 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1267) 07:21:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) [ 634.351375] block nbd2: shutting down sockets 07:21:13 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 07:21:13 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1262) 07:21:13 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0xa6, 0xc080) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000001180)=@urb_type_iso={0x0, {0x8, 0x1}, 0xceed, 0x20, &(0x7f0000000180)="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", 0x1000, 0x4, 0x1, 0x29, 0x3, 0x5, &(0x7f0000000080)="a0afc931874d47e1065891ebb2a4c5e909dfa075ddb4da34e6f4652fc2220938c5b64bc9c5811e9f671376b9f581efbb4e73a986085124ceca876e7f05da4f43a16e0476ed53ede11bf9093fa46a0e3477d49447cb585eab5a32feef73beed9e236b790298e8f5f74b2f6bdf1b18f21970e8e7fc6821f2", [{0x7, 0x1000, 0xfffffff7}, {0x6, 0xfffffff7, 0x81}, {0x8001, 0xe476, 0x200}, {0x7, 0x7, 0x9}, {0x5, 0x4}, {0x0, 0xd464, 0xfffffffe}, {0x100, 0x5, 0x7d}, {0x9, 0x6a, 0x2}, {0x669, 0x4, 0x40}, {0x7f, 0x9, 0x4}, {0x1f, 0x2, 0x20}, {0x5c, 0x30000000, 0x51d3}, {0xdf36, 0x7fff, 0x8000}, {0x1, 0x4f63}, {0x7, 0xfff, 0x8}, {0x7, 0x41d, 0xfffffffa}, {0x5, 0x7bb2, 0x7ff}, {0x8, 0xffffb7f2, 0xfffffffd}, {0x0, 0x7, 0x5}, {0xfffff538, 0x8, 0x3}, {0x6, 0x1, 0x2}, {0x80000000, 0x8, 0x6}, {0x800, 0x49a, 0x101}, {0x1, 0x9, 0x100}, {0x3, 0x40, 0x1}, {0x6, 0x81, 0x5}, {0x9, 0x3ff, 0x1}, {0x2, 0x3, 0x7f}, {0xfac1, 0xff800000, 0x8}, {0x4, 0x9, 0xfffffffc}, {0xff, 0x1, 0x7}, {0x6, 0x3, 0x8}, {0x200, 0x3d7}, {0x36d, 0x4, 0x6e}, {0x8, 0x1, 0x10000}, {0x7, 0x5, 0x3}, {0x0, 0x1ff, 0x1b5}, {0x5, 0x36, 0x400}, {0x2, 0x9f6}, {0x3, 0xff, 0xfffffff9}, {0x407e, 0x1ff, 0x10001}]}) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 07:21:13 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1269) 07:21:13 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1267) 07:21:13 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1262) [ 634.521133] block nbd2: shutting down sockets 07:21:13 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x200000) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10) ioctl$NBD_DISCONNECT(r1, 0xab08) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:13 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 07:21:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 07:21:13 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1267) 07:21:13 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1269) 07:21:13 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1262) [ 634.671764] block nbd2: shutting down sockets 07:21:13 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1269) 07:21:13 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1267) 07:21:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 07:21:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:14 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x410000) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x80000000, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000080)={0xfc20, r2}) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:14 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1262) 07:21:14 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1269) 07:21:14 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1267) 07:21:14 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 07:21:14 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x17b140) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000100)) ioctl$NBD_DO_IT(r1, 0xab03) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f00000000c0)={0x20, 0xffffffffffffffda, 0x0, {0xb9, 0x0, 0x7}}, 0x20) socketpair(0x1a, 0x8, 0x7, &(0x7f0000000080)) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) [ 634.880795] block nbd2: shutting down sockets 07:21:14 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1262) 07:21:14 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:14 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1269) 07:21:14 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1267) 07:21:14 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1262) 07:21:14 executing program 5: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1269) [ 634.991255] block nbd0: shutting down sockets 07:21:14 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) [ 635.031637] block nbd2: shutting down sockets [ 635.052467] block nbd1: shutting down sockets 07:21:14 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:14 executing program 3: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1267) [ 635.090733] block nbd1: shutting down sockets 07:21:14 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x200100) ioctl$NBD_DISCONNECT(r1, 0xab08) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x9) 07:21:14 executing program 5: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1269) 07:21:14 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1262) [ 635.165077] block nbd0: shutting down sockets 07:21:14 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 07:21:14 executing program 3: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1267) [ 635.220906] block nbd2: shutting down sockets 07:21:14 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:14 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x8040) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x10000) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) ioctl$NBD_SET_SOCK(r3, 0xab00, 0xffffffffffffffff) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f0000000180)) accept4(r5, &(0x7f00000000c0)=@qipcrtr, &(0x7f0000000040)=0x80, 0x800) 07:21:14 executing program 4: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1262) 07:21:14 executing program 5: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1269) [ 635.370779] block nbd0: shutting down sockets 07:21:14 executing program 3: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1267) 07:21:14 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(0x0, 0x0, 0x0) 07:21:14 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) [ 635.421290] block nbd2: shutting down sockets 07:21:14 executing program 4: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1262) 07:21:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) [ 635.501633] block nbd1: shutting down sockets 07:21:14 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) [ 635.550725] block nbd0: shutting down sockets 07:21:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:14 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(0x0, 0x0, 0x0) 07:21:14 executing program 4: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1262) [ 635.572897] block nbd1: shutting down sockets [ 635.578070] block nbd5: shutting down sockets 07:21:14 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 07:21:14 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 07:21:14 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1261) 07:21:14 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(0x0, 0x0, 0x0) [ 635.681628] block nbd3: shutting down sockets [ 635.690663] block nbd0: shutting down sockets 07:21:15 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:15 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:15 executing program 1: arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x0, 0x5, 0x0, 0x1, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x40) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x4, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) read$FUSE(r3, &(0x7f0000000380)={0x2020}, 0x2020) getsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000400), &(0x7f0000000440)=0x4) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000180)={0x2, 0x14, 0x7ff, 0x7ff, 0xd1, 0x4, &(0x7f0000000040)="43c3ae0b4874b17fec0807b92e80f8546110a3938d0d94a3b0f270a39d626d8407ce530c20763dfdccf32225bd6094b521fda914a6bdd4ab0e12bbe7ce424dbb2b4df2b0ce93e61d3f219b9cd09bb7844f3e609b91e6a050c39a553521c060ed4f8d97460d56341c0746c26a22cb578010661f1704bc5fb719995293597cce4d17c51b9d7cdb4d562bb8fdb322d7d98d1643335b1d77bfdb3377fe0507cfb300c39883ec03d55ee734e81ae2634aef47b74b90a928e4c4f34a6cfd997aef97d8d6c99f3de205422d408ad7576487a66aad"}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={&(0x7f00000001c0)="ac7abd17288e8a0cfbd921c1ed9dfebed63d7852ee1c09889c2ef04d7a2e17fb730fdb850537367dddc86783fc2d2d4e32f4c2ad18", &(0x7f0000000200)=""/135, &(0x7f00000002c0)="e34f91006302d620197d415021ff20065d25f17048f88b285fb0011ec527cf40ec6def75249a0ce36c6a096aea878e09a48b7d08ae7c5e", &(0x7f0000000300)="30d05a3f71946900ba9bb2a70cde2c5e2dbfbbe821b79c7dce6a8c926d28ab6cb5ac6b22868525eac10b84e885bc730f1f8acdb4ce6a26b728c656e51c777a670ac20a7d2b3ce6a94868d9cbd128077004686a86032e37d8648290cd90e1bf42b8bf518086d522f25f4a7893a97e5a081612f3aa782f620a29d6153a41fe334c212eaff58f228e0c38adb77964c54942", 0x25fe, 0xffffffffffffffff, 0x4}, 0x38) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xaf3d) 07:21:15 executing program 5: prlimit64(0x0, 0x7, &(0x7f0000000240), &(0x7f0000000280)) 07:21:15 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1261) [ 635.830852] block nbd0: shutting down sockets 07:21:15 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1260) 07:21:15 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:15 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x125e) 07:21:15 executing program 5: prlimit64(0x0, 0x7, &(0x7f0000000240), &(0x7f0000000280)) 07:21:15 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1261) 07:21:15 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1260) 07:21:15 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:15 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x0) 07:21:15 executing program 5: prlimit64(0x0, 0x7, &(0x7f0000000240), &(0x7f0000000280)) 07:21:15 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:15 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1261) 07:21:15 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1260) 07:21:15 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:15 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:15 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)) 07:21:16 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1261) 07:21:16 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x301) 07:21:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:16 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)) 07:21:16 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1260) 07:21:16 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x40) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x0, 0x0, 0x0, 0x6}}) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0xa0600) ioctl$NBD_SET_SIZE(r3, 0xab02, 0x1) 07:21:16 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1261) 07:21:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:16 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x301) 07:21:16 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)) 07:21:16 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1260) 07:21:16 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1261) 07:21:16 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x301) 07:21:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:16 executing program 5: prlimit64(0x0, 0x7, 0x0, &(0x7f0000000280)) 07:21:16 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1260) 07:21:16 executing program 1: accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 07:21:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:16 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x301) 07:21:16 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1260) 07:21:16 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1261) 07:21:16 executing program 5: prlimit64(0x0, 0x7, 0x0, &(0x7f0000000280)) 07:21:16 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 07:21:16 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1260) 07:21:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:16 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x301) 07:21:16 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1261) 07:21:16 executing program 5: prlimit64(0x0, 0x7, 0x0, &(0x7f0000000280)) 07:21:16 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1260) 07:21:16 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1261) [ 637.521250] block nbd1: shutting down sockets 07:21:16 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x301) 07:21:16 executing program 5: prlimit64(0x0, 0x7, &(0x7f0000000240), 0x0) 07:21:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:16 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1260) [ 637.624399] block nbd1: shutting down sockets 07:21:16 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 07:21:16 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x401064c9, &(0x7f0000000040)) 07:21:16 executing program 4: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1261) 07:21:16 executing program 3: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1260) 07:21:16 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x301) 07:21:17 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:17 executing program 3: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1260) [ 637.810944] block nbd1: shutting down sockets 07:21:17 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 07:21:17 executing program 4: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1261) 07:21:17 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) [ 637.852935] block nbd2: shutting down sockets 07:21:17 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x301) 07:21:17 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:17 executing program 3: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1260) 07:21:17 executing program 4: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x1261) 07:21:17 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x301) 07:21:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x5}) gettid() prlimit64(0x0, 0x7, &(0x7f0000000240)={0x0, 0x7fffffff}, &(0x7f0000000280)) 07:21:17 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) [ 638.010531] block nbd2: shutting down sockets [ 638.010846] block nbd5: shutting down sockets [ 638.041177] block nbd1: shutting down sockets 07:21:17 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 07:21:17 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1260) 07:21:17 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x301) 07:21:17 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1261) 07:21:17 executing program 3 (fault-call:0 fault-nth:0): prlimit64(0x0, 0x7, &(0x7f0000000240), 0x0) [ 638.181873] block nbd2: shutting down sockets 07:21:17 executing program 0: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x301) 07:21:17 executing program 2: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 07:21:17 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1261) 07:21:17 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1260) [ 638.270717] block nbd1: shutting down sockets 07:21:17 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 07:21:17 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x2) 07:21:17 executing program 3: prlimit64(0x0, 0x7, &(0x7f0000000240), 0x0) 07:21:17 executing program 0: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x301) [ 638.373922] block nbd2: shutting down sockets 07:21:17 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x2) 07:21:17 executing program 2: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) [ 638.421762] block nbd1: shutting down sockets 07:21:17 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 07:21:17 executing program 0: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x301) 07:21:17 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x301) 07:21:17 executing program 3: prlimit64(0x0, 0xf, &(0x7f0000000240), 0x0) 07:21:17 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x301) [ 638.560421] block nbd2: shutting down sockets 07:21:17 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 07:21:17 executing program 2: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 07:21:17 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x125d) [ 638.652758] block nbd1: shutting down sockets 07:21:17 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 07:21:17 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x125d) 07:21:17 executing program 3: prlimit64(0x0, 0x7, &(0x7f0000000240)={0x100000}, 0x0) 07:21:18 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x125e) [ 638.786307] block nbd2: shutting down sockets 07:21:18 executing program 3: prlimit64(0x0, 0x7, &(0x7f0000000240)={0x100000000000}, 0x0) 07:21:18 executing program 2: syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) [ 638.820624] block nbd0: shutting down sockets 07:21:18 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x125f) 07:21:18 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x125e) [ 638.870939] block nbd1: shutting down sockets 07:21:18 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 07:21:18 executing program 0 (fault-call:5 fault-nth:0): r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:18 executing program 3: prlimit64(0x0, 0x7, &(0x7f0000000240)={0x1000000000000}, 0x0) [ 638.990727] block nbd2: shutting down sockets 07:21:18 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1260) 07:21:18 executing program 2 (fault-call:1 fault-nth:0): r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x301) 07:21:18 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x125f) 07:21:18 executing program 3: prlimit64(0x0, 0x7, &(0x7f0000000240)={0x0, 0x100000}, 0x0) [ 639.013175] block nbd1: shutting down sockets [ 639.030426] block nbd0: shutting down sockets 07:21:18 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 07:21:18 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:18 executing program 3: prlimit64(0x0, 0x7, &(0x7f0000000240)={0x0, 0x100000000000}, 0x0) 07:21:18 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x301) 07:21:18 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1262) 07:21:18 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1261) [ 639.231285] block nbd0: shutting down sockets [ 639.236436] block nbd1: shutting down sockets 07:21:18 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1262) 07:21:18 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 07:21:18 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1263) 07:21:18 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0x2) 07:21:18 executing program 3: prlimit64(0x0, 0x7, &(0x7f0000000240)={0x0, 0x1000000000000}, 0x0) 07:21:18 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x2) 07:21:18 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1264) 07:21:18 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1263) 07:21:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="afe13fa0165014a4f3cb567baec02b15afa1d88382db7aca5188fc53bea0f30e3842f8604b85424f9c4e577594a689d4717f43fec00a0513b1786c76b23598f7d2dec69cc72480f2cf9aa5d2136714d7407f34ba42b224dc3344ca0f2ccb16463c9ecd40f20448500200000006197344d1e8150ebe2d146b7817638769f76dae8d9f037b30", @ANYRES16=0x0, @ANYBLOB="000425bd7000fcdbdf250d00000005002900010000000500330000000000050030000000000008003b0001000080050035000500000008003c0001000100"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40000) prlimit64(0x0, 0x7, &(0x7f0000000240), 0x0) [ 639.417494] block nbd1: shutting down sockets [ 639.422549] block nbd0: shutting down sockets 07:21:18 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x125d) 07:21:18 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) [ 639.471547] block nbd0: shutting down sockets 07:21:18 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0x301) 07:21:18 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1265) 07:21:18 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x125e) 07:21:18 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1264) 07:21:18 executing program 3: prlimit64(0xffffffffffffffff, 0x2, &(0x7f0000000240)={0xffffffffffffff7f, 0x3}, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, {{0xecc, 0xa7b, 0x2, 0xffffffffffffffff}}}, 0x28) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x501200, 0x0) r0 = gettid() prlimit64(r0, 0xc94a3c1257f61ef0, 0x0, 0x0) prlimit64(r0, 0x6, &(0x7f00000000c0)={0x0, 0x800}, &(0x7f0000000340)) prlimit64(0xffffffffffffffff, 0x1, &(0x7f0000000080)={0x8d8, 0xc3c}, &(0x7f0000000140)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) write$FUSE_LK(r1, &(0x7f0000000200)={0x28, 0x2f, 0x0, {{0x875d, 0xdc65, 0x2}}}, 0x28) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000040)={0x10, 0x0, r4}, 0x10) write$FUSE_INTERRUPT(r2, &(0x7f0000000380)={0x10, 0x0, r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000001c0), 0x10) prlimit64(0xffffffffffffffff, 0x8, 0xfffffffffffffffd, &(0x7f0000000040)) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r5, 0x0, 0x0) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x5, 0x2, 0x101, 0x1, 0x3f, 0x7fffffff, {0x3, 0x6, 0x1, 0x9, 0xffffffff, 0x6, 0x200, 0xffffffff, 0x4, 0x1000, 0x3, 0xee00, 0xee01, 0x5f, 0x3}}, {0x0, 0x2}}}, 0xa0) [ 639.610642] block nbd1: shutting down sockets 07:21:18 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) [ 639.650754] block nbd0: shutting down sockets 07:21:18 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1267) [ 639.690963] block nbd0: shutting down sockets 07:21:18 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0x125d) 07:21:19 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1265) 07:21:19 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x125f) 07:21:19 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x59d7, 0x242300) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000040)={0x5, 0x0, "461bb9828ea30ea744bb91a489d5668a21640cca7c648627e7e3f7d8b782f63558b37b742add9e8fbbcdb83a5643bb44f8285c6f0a6cb640fb00dccc3d1ec68ac3cfcbd89981a24b68e6bfdc77037154b4462f763a6b06daee95d2fc137f0ef397b5f18a27afc18d7938b309702ffd28e67cb8fdf479f452a24d400f0a75041bdf841f59716666c43d84be1fed26850d0107e3052ebb1a89c5836997a81c6366719dfe0c0dd0f8278961a0ad489c34bb0b6141da95d2cf019bc07564b72efe608f9112e527852141abf5894d8c6195023d371c3e970bc3271df4b84ad83e18ca645ea184f677a79ba62c1155feee09521800a906b0ef133f54a776e0f08be278"}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x4, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, 0x0) read$usbfs(r1, &(0x7f0000000180)=""/12, 0xc) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x4, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, 0x0) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f00000001c0)={0x6, 0x7f}) prlimit64(0x0, 0x9, &(0x7f0000000240), 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x4, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000200)={0x20, 0x12, 0xffff, 0x2, 0xe6, 0xdd3, &(0x7f0000000280)="7a1e30c5295e709fce674a64d981ef0736de445ed010e1229ae475c4fa44d467cfb40df1ed577846b472eb8b29e40792130d46f6d7a305b8d737906da4bc2ae36f6e9c11ac2e16538772a07a4ff7010ee3869c57ae123d5d12189b854b3af0d0816e0e47066f3641db4a400c24e799deb32a42adfc0f9a719d680d09812b1de8be15d2e2a5800d803e3703db04a4a2e7bef5e463ec79e3d4192a847bfaef46c0225c0657a834f32c2f41f1fbf88aefc916765c95275bc9c51552db563e29296e74edf1d8554e8b3ad0c266b4ad12e2238e89eaab3de2ed6cb857c4e0357a1911b4de5ee5d2c7"}) [ 639.791114] block nbd1: shutting down sockets 07:21:19 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1268) 07:21:19 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 07:21:19 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1260) [ 639.860789] block nbd0: shutting down sockets 07:21:19 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1267) [ 639.910243] block nbd0: shutting down sockets 07:21:19 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1269) 07:21:19 executing program 3: r0 = fork() prlimit64(r0, 0xb, &(0x7f0000000000)={0x8, 0x3}, 0x0) 07:21:19 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0x125e) [ 639.987446] block nbd1: shutting down sockets 07:21:19 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1268) 07:21:19 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 07:21:19 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1261) [ 640.083179] block nbd0: shutting down sockets 07:21:19 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1269) 07:21:19 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1274) 07:21:19 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1262) 07:21:19 executing program 3: prlimit64(0x0, 0x7, &(0x7f0000000240), 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000000), 0x4) r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r0, 0x4) r1 = gettid() prlimit64(r1, 0xc94a3c1257f61ef0, 0x0, 0x0) prlimit64(r1, 0x5, &(0x7f0000000100)={0x7fff, 0x10000}, &(0x7f0000000140)) r2 = fork() prlimit64(r2, 0x4, &(0x7f0000000040)={0x3, 0x1}, 0x0) 07:21:19 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) [ 640.140519] block nbd0: shutting down sockets [ 640.150815] block nbd1: shutting down sockets 07:21:19 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0x125f) 07:21:19 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1274) 07:21:19 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1263) 07:21:19 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1276) 07:21:19 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1276) [ 640.330514] block nbd1: shutting down sockets [ 640.342247] block nbd0: shutting down sockets 07:21:19 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 07:21:19 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0x1260) [ 640.380438] block nbd0: shutting down sockets 07:21:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000ac0)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000100)={0x4e8, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x8000, 0x55, 0xad, 0x1f}, {0x2, 0x0, 0x2, 0x2}, {0x73, 0xff, 0x3, 0x20}, {0x7, 0x1f, 0x1, 0xfffffffb}, {0x400, 0xf2, 0x9, 0x3}]}}}]}}, {{0x8, 0x1, r3}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x2, 0x40, 0x85, 0x2}, {0x80e, 0x81, 0xff, 0x7}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xbd}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200000}}}]}}]}, 0x4e8}, 0x1, 0x0, 0x0, 0x4000000}, 0x200000c0) 07:21:19 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1264) 07:21:19 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1277) 07:21:19 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1277) [ 640.530417] block nbd1: shutting down sockets 07:21:19 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) [ 640.552798] block nbd0: shutting down sockets 07:21:19 executing program 3: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) getitimer(0x0, &(0x7f0000000080)) 07:21:19 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1265) [ 640.612950] block nbd0: shutting down sockets 07:21:19 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1278) 07:21:19 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1278) 07:21:19 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0x1261) 07:21:19 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1267) 07:21:19 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1279) [ 640.712139] block nbd1: shutting down sockets 07:21:20 executing program 3: prlimit64(0x0, 0x7, &(0x7f0000000240), 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000000)={0x7425, 0x18, [{0x2, 0x1}, {0xb, 0x1}, {0x0, 0x1}, {0x3}, {0xc}, {0x5, 0x1}, {0xb}, {0x4}, {0x3}, {0x4}, {0x0, 0x1}, {0xe}, {0x1, 0x1}, {0xc, 0x1}, {0x54, 0x1}, {0x9, 0x1}, {0x5, 0x1}, {0xf, 0x1}, {0xa}, {0x8, 0x1}, {0xe, 0x1}, {0xd}, {0xc, 0x1}, {0x2, 0x1}]}) 07:21:20 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 07:21:20 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1279) [ 640.810455] block nbd0: shutting down sockets 07:21:20 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1268) 07:21:20 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127a) [ 640.870572] block nbd0: shutting down sockets 07:21:20 executing program 3: prlimit64(0x0, 0x6, &(0x7f0000000000)={0x0, 0xfffffffffffffffd}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) r1 = gettid() prlimit64(r1, 0xc94a3c1257f61ef0, 0x0, 0x0) prlimit64(r1, 0x6, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x8}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r2, &(0x7f00000000c0)={0x60, 0x0, r3, {{0x1, 0x46b, 0x6, 0x0, 0x200, 0x8, 0x4, 0x8001}}}, 0x60) [ 640.911104] block nbd1: shutting down sockets 07:21:20 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0x1262) 07:21:20 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127a) 07:21:20 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 07:21:20 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1269) 07:21:20 executing program 3: prlimit64(0x0, 0x4, &(0x7f0000000240)={0x10000000000000}, 0x0) socketpair(0x25, 0xf, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x5, 0x4) 07:21:20 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127b) 07:21:20 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127b) [ 641.070357] block nbd1: shutting down sockets [ 641.090301] block nbd0: shutting down sockets 07:21:20 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 07:21:20 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1274) [ 641.145028] block nbd0: shutting down sockets 07:21:20 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0x1263) 07:21:20 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127c) 07:21:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) accept(r0, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80) 07:21:20 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127c) 07:21:20 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) [ 641.280520] block nbd0: shutting down sockets 07:21:20 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1276) 07:21:20 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127d) 07:21:20 executing program 3: prlimit64(0x0, 0x7, &(0x7f0000000240), 0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000c79000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/95) [ 641.330429] block nbd0: shutting down sockets 07:21:20 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1277) 07:21:20 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0x1264) 07:21:20 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127d) 07:21:20 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127e) 07:21:20 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 07:21:20 executing program 3: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) prlimit64(r0, 0x7, &(0x7f0000000240), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 07:21:20 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127e) 07:21:20 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127f) [ 641.541237] block nbd0: shutting down sockets 07:21:20 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1278) 07:21:20 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x1) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) [ 641.590104] block nbd0: shutting down sockets 07:21:20 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0x1265) 07:21:20 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127f) 07:21:20 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x5421) 07:21:20 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1279) 07:21:20 executing program 3: r0 = shmget(0x3, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) prlimit64(0x0, 0x7, &(0x7f0000000240), 0x0) shmctl$SHM_LOCK(r0, 0xb) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x7fffffff, 0x2) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000080)=0x3) [ 641.711871] block nbd1: shutting down sockets 07:21:21 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 07:21:21 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x5421) [ 641.780744] block nbd0: shutting down sockets 07:21:21 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x5450) 07:21:21 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127a) [ 641.830599] block nbd0: shutting down sockets 07:21:21 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0x1267) 07:21:21 executing program 3: r0 = fork() prlimit64(r0, 0xf, &(0x7f0000000240)={0x1, 0x1}, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}, &(0x7f0000000080)=0x80, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) fork() 07:21:21 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x5451) [ 641.940632] block nbd1: shutting down sockets 07:21:21 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127b) 07:21:21 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x5450) 07:21:21 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) [ 641.990220] block nbd0: shutting down sockets [ 642.030967] block nbd0: shutting down sockets 07:21:21 executing program 3: prlimit64(0x0, 0x2, &(0x7f0000000000), 0x0) prlimit64(0x0, 0x8, &(0x7f0000000040)={0x3, 0xfe59}, &(0x7f0000000080)) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x2, 0x6, 0x1}) 07:21:21 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0x1268) 07:21:21 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x5452) 07:21:21 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127c) 07:21:21 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x5451) [ 642.150699] block nbd1: shutting down sockets 07:21:21 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 07:21:21 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127d) [ 642.189913] mmap: syz-executor.3 (10059): VmData 37515264 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 642.230268] block nbd0: shutting down sockets 07:21:21 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x5460) 07:21:21 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000c79000/0x1000)=nil) r1 = shmget(0x0, 0x1000, 0x884, &(0x7f0000c79000/0x1000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000100)=""/116) shmctl$SHM_LOCK(r0, 0xb) shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/205) 07:21:21 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x5452) [ 642.280550] block nbd0: shutting down sockets 07:21:21 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0x1269) [ 642.360196] block nbd1: shutting down sockets 07:21:21 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127e) 07:21:21 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 07:21:21 executing program 3: prlimit64(0xffffffffffffffff, 0x7, &(0x7f0000000000), 0x0) 07:21:21 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x40049409) 07:21:21 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x5460) 07:21:21 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x127f) [ 642.504149] block nbd0: shutting down sockets [ 642.550848] block nbd0: shutting down sockets 07:21:21 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x40081271) 07:21:21 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x40049409) 07:21:21 executing program 3: prlimit64(0x0, 0x7, &(0x7f0000000240)={0x20, 0xffffffffffffffff}, 0x0) 07:21:21 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0x1274) 07:21:21 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x5421) 07:21:21 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 07:21:21 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x40101283) 07:21:21 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x40081271) 07:21:22 executing program 3: prlimit64(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x7, 0xfffffffffffffffd}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) 07:21:22 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 07:21:22 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x5450) [ 642.768355] block nbd0: shutting down sockets 07:21:22 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401070c9) [ 642.820447] block nbd0: shutting down sockets 07:21:22 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0x1276) 07:21:22 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x40101283) 07:21:22 executing program 3: prlimit64(0x0, 0x7, &(0x7f0000000240), 0x0) prlimit64(0x0, 0xb, &(0x7f0000000000)={0x8, 0x401}, &(0x7f0000000040)) 07:21:22 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 07:21:22 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x5451) 07:21:22 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401070ca) 07:21:22 executing program 3: sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5e}]}, 0x24}}, 0x40014) prlimit64(0x0, 0x7, &(0x7f0000000240), 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x40) r1 = gettid() prlimit64(r1, 0xc94a3c1257f61ef0, 0x0, 0x0) waitid(0x0, r1, 0x0, 0x40000000, &(0x7f0000000100)) r2 = gettid() wait4(r2, &(0x7f00000001c0), 0x20000000, &(0x7f0000000280)) 07:21:22 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401070c9) [ 643.022677] block nbd0: shutting down sockets 07:21:22 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x5452) 07:21:22 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 643.060657] block nbd1: shutting down sockets [ 643.073619] block nbd0: shutting down sockets 07:21:22 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401070cd) 07:21:22 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401070ca) 07:21:22 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0x1277) 07:21:22 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x4, 0x0) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000040)={0x7, "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"}) prlimit64(0x0, 0x7, &(0x7f0000000240), 0x0) 07:21:22 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x5460) 07:21:22 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401870c8) [ 643.211362] block nbd1: shutting down sockets 07:21:22 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 07:21:22 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401070cd) 07:21:22 executing program 3: prlimit64(0x0, 0x7, &(0x7f0000000240), 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) [ 643.300576] block nbd0: shutting down sockets 07:21:22 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x40049409) 07:21:22 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401870cb) [ 643.340285] block nbd0: shutting down sockets 07:21:22 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0x1278) [ 643.400314] block nbd1: shutting down sockets 07:21:22 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401870c8) 07:21:22 executing program 3: prlimit64(0x0, 0x7, &(0x7f0000000240)={0xfffffffffffffffd}, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x11c984) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000500)) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000000)={0xc223}) 07:21:22 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 07:21:22 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x40081271) 07:21:22 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401870cc) 07:21:22 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401870cb) 07:21:22 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x40101283) [ 643.570185] block nbd0: shutting down sockets [ 643.592128] block nbd1: shutting down sockets 07:21:22 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 07:21:22 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x4020940d) 07:21:22 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x4, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, 0x0) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000040)={{{0x3, 0x1}}, 0xe, 0x0, &(0x7f0000000000)="d1184a78d699a2c1e4234edb628a"}) prlimit64(0x0, 0x7, &(0x7f0000000240), 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) prlimit64(r1, 0xd, &(0x7f0000000080)={0x4, 0x10000000009ea}, &(0x7f00000000c0)) [ 643.649987] block nbd0: shutting down sockets 07:21:22 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0x1279) 07:21:22 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401870cc) 07:21:22 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401070c9) 07:21:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x80081270) [ 643.802465] block nbd1: shutting down sockets 07:21:23 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_POLL(r0, &(0x7f0000000040)={0x18, 0x0, 0x0, {0x6}}, 0x18) read$FUSE(r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r0, &(0x7f0000000000)={0x18, 0x0, r1, {0x8000}}, 0x18) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r0, &(0x7f0000000080)={0x18, 0x0, r2, {0x1ff}}, 0x18) prlimit64(0x0, 0x7, &(0x7f0000000240), 0x0) 07:21:23 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401070ca) 07:21:23 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) [ 643.823666] block nbd0: shutting down sockets 07:21:23 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x4020940d) [ 643.871734] block nbd0: shutting down sockets 07:21:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x80081272) 07:21:23 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0x127a) 07:21:23 executing program 3: prlimit64(0x0, 0x7, &(0x7f0000000240), 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) prlimit64(r0, 0x4, 0x0, &(0x7f0000000040)) 07:21:23 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401070cd) [ 643.970919] block nbd1: shutting down sockets 07:21:23 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x80081270) 07:21:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc0045878) 07:21:23 executing program 3: prlimit64(0x0, 0x7, &(0x7f0000000240), 0x0) syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x309001) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x20010, 0xffffffffffffffff, 0x80000000) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x10640, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000040), 0x2, &(0x7f00000000c0)) 07:21:23 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 07:21:23 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401870c8) [ 644.120316] block nbd0: shutting down sockets [ 644.159595] block nbd0: shutting down sockets 07:21:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc0045878) 07:21:23 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x80081272) [ 644.180356] block nbd1: shutting down sockets 07:21:23 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0x127b) 07:21:23 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 07:21:23 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000240)={0x7d}, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = getuid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002300)={&(0x7f00000022c0)='jbd2_update_log_tail\x00'}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) accept4(r3, &(0x7f0000000080)=@can, &(0x7f0000002340)=0x80, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$FUSE_INTERRUPT(r4, &(0x7f0000000200)={0x10, 0x0, r0}, 0x10) prlimit64(r1, 0x0, &(0x7f0000002380)={0x40}, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000100)={0xb0, 0x0, r0, [{{0x5, 0x0, 0x7, 0x6, 0x5, 0xffffffff, {0x4, 0x1, 0x80, 0x2, 0xff, 0x7ffffffe, 0x9, 0x5, 0x1000, 0xc000, 0x404000, r2, 0x0, 0x0, 0x2}}, {0x2, 0x1, 0x2, 0xfff, '}('}}]}, 0xb0) 07:21:23 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401870cb) 07:21:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc0101282) 07:21:23 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc0045878) 07:21:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc0189436) 07:21:23 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x401870cc) [ 644.360706] block nbd0: shutting down sockets [ 644.371372] block nbd1: shutting down sockets 07:21:23 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 07:21:23 executing program 3: prlimit64(0x0, 0x7, &(0x7f0000000240), 0x0) prlimit64(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x3, 0x2}, &(0x7f0000000040)) [ 644.419893] block nbd0: shutting down sockets 07:21:23 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc0045878) 07:21:23 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0x127c) 07:21:23 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) 07:21:23 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x4020940d) 07:21:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc020660b) [ 644.570104] block nbd1: shutting down sockets 07:21:23 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000000000000000000000000000080000"], &(0x7f0000000080)='GPL\x00', 0x50d, 0x61, &(0x7f00000000c0)=""/97, 0x41100, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0xd, 0x810000, 0x6}, 0x10}, 0x78) socketpair(0xa, 0x3, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) prlimit64(0x0, 0x7, &(0x7f0000000240)={0x7}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x1a, 0x5, 0x8, 0x80000000, 0x510, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x40) bpf$LINK_DETACH(0x22, &(0x7f0000000280), 0x4) 07:21:23 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc0101282) 07:21:23 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 644.684569] block nbd0: shutting down sockets 07:21:23 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x80081270) 07:21:24 executing program 3: prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10, 0x0, r3}, 0x10) write$FUSE_OPEN(r1, &(0x7f00000000c0)={0x20, 0xfffffffffffffff5, r3, {0x0, 0x1}}, 0x20) prlimit64(r0, 0xe, &(0x7f0000000000)={0x7ffffffd, 0x20}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000500)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000500)) ioctl$PPPIOCGDEBUG(r5, 0x80047441, &(0x7f0000000080)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000500)) ioctl$PPPIOCCONNECT(r6, 0x4004743a, &(0x7f0000000040)=0x6) [ 644.729970] block nbd0: shutting down sockets 07:21:24 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc0481273) 07:21:24 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0x127d) 07:21:24 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc0189436) [ 644.807275] block nbd1: shutting down sockets 07:21:24 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 07:21:24 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x80081272) 07:21:24 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x20140) ioctl$NBD_CLEAR_SOCK(r0, 0x1261) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000080)="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") r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) 07:21:24 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc020660b) [ 644.910285] block nbd0: shutting down sockets 07:21:24 executing program 3: prlimit64(0x0, 0x7, &(0x7f0000000240), 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x4, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x20, 0x16, 0xf6f6, 0x1, 0x1000, 0x7, &(0x7f0000000280)="0e245fec228fb04a82ee1b56c59e86b0b1e3d678a23422b71d0d46c36f0c7eaee9cb40da7e993eb30043fec5583de62f9f561b7390b5b0c5efb8caa5c51d2afd2f75911e4d3f9d53bf7d1f80cb74947a2cb31a5dc50a5d18392057fe1a2299e41bdf2618e8054bf490d17605882da83e21f3621947ea92be4ad20022a8ea3aab2c01a1d3474253d00371267313d648993fadcc861f06e1e873188b007252ad1c641be3cf18f3542f92a06f97d1e8edb8a32f323b6bbb85e861ffcb64e84997dddaeddbf0fc8973e68a2b1fab0542432114b829a08e26f2fc5e093853e4266f7b90d1c771e0d05272db642a988235ce5c060d26eead1d143d348781f1cf933a90c0693eb428565d62ee8737bd5e144ca50c080bbc73412cb4e9fbeea3e2a01e661ddcc7e18c35261e9b3fb32ae5304aad8272984792c75470f1af1a137d907e203d3fc38a39f9a344ec2d13bc6b4bdcddc14d076825e78861f7d8e0e97ee6db78e0e75c351b8eccacbb71e3aca660826d5b5762608a5059310a8e129a8a555b9fb740180a80201467312856878fab824e81aa06c28b907576501881033e326bb6c26060d5ae618a4b3c7f3d003da4dbc94c9c42f8c91eec62f551f080a002d896d032158d1ceb76f43733cdc84bb90d5b3cbbcbbbaed5a933e8046a1d34b16f9fdfc6ce7d9f66d93d889fd37072081a2510ebf53c269c0211129f9e7c8056cab358fb07bf46937c5a6c120b3a2ac91387ad59b4adbb769db4326e061dbd2b2e081c441b8984944f126a05c872a4d1ad9d867dbaa29a3b2616bf804664f7f83f810ccefdf821aedceb25d1771d5c5ddbac103c50fd81b0be3ae1ccd9cb1e61f5eb01203a2af8d6310a50132ea58705978c5cb65ffe6a3d46e9ba023552b9240e6c399b31e1f9c904597509536ad87185fbf6d2b3a9c031e60420fbcd1ba5b9a9b2c312c8540228e334f46f984c77d3ad986addbd25df0c79c46b937e5823d689f7a872b52bfe15137c346c5679ae4841fa8a334c5d77afa9c0c7385676b385643a5cdd8e13fe01a6ada40f777ef47c4baf4cab4cee84814f4c5513a045c220257e41f3bb0d307acc94b282366f656d0e6ee28a36727bcc7bdd5a3777f483c1a7ee75894ab0372e5c27df521a0b5f004c43c046e4a9af7790ae1ca259ad99144d3d6e4eee9b72edae017be918c89ac655468e33bdab1636eb1173a6c246b096ed9b164ef07953df12adc1188a38df6b0602f40cdcad6b248b1a063eb71146a66cb4692498ec33915ce2286d2c1a8303d191ded2e2c4a84e39f509901cd1fb5691c33ab95deca26375d23133b8396781966a00ca7bee3b8a8adb0cd4591732534c8d7fc613d9b4abb935364f4024b8a644e44e0bd2407c58461e0a4606e1ce09e8f83aa23dcd7d8b16dbe91dbfe52236d4e6e463a019a47478f6c52512b6b160330d0fac80fb4f0fcc8bcb9314ddea9ee9711b84ec842c1cddc1e6a202d7723d04dfa1f817535ef2c0b3112800c2ae911de3a94145f886e161452c4a704ebccfa02b098fc3841089b4184eef12ccb6b33a5e29638b143774ffc0a11966981e6579ad4195f3033e929157247ee1ed10c41e9af5cafcabeff193451cc73547630e7323460f966142bb37f520cfb05be3f344f33123c632285aa81b626ed12413c284de5fdcca0472843a5ec680ad782ed603a1ff8ab7de9d619d579f0bfed69a5c6d988a3af473c46d95dbef3b7ae01dcadfa844dfc47d17fa9573376ba1f948c7127d7f80eccc0980b2bc275eb1de525404decbee4cfdfe648f37d7b638649ecbe897f8adb8a24288a96c665e728a895ef89deacdd26008c9d4381f49eb38b3739692e4d0afeb9a4098112e3d1cb01fb4388e12ed558f0208b388eb679eb34813cc7ac1385443fa2c8e0654a3c864cb077eedd6567d48065fd5092cee35d5ecdb317c51e471bb8f0309b142d789cb062dd35c3878076ed0ba70eb8f9b7364afb7b393233f7a33da4c19739736d29548b05134692bb946d8d26a5497797d496f3030b24120be391fd65c23057b376beb680912111c87e13a5e96ad0589c75e0f1c7219f0ef040abeaf0f5f6f2944dd41a05f62a567e8609850879b19a64cc0878a7e49cdddccf80f73ddbde0648525fd1a58f1506245941a4275bc4c4430ac35e3173e9828dbef617436c16a8fefa0e63536e962749cf32dcd64b641bf76a4ded5ec7763fda7860cc1fe0a875f6da4def857e49eb6112b44e05ea357341eebba07ad723150bbd31a19e39ca5ab4dc0e91cf9b0dd6152f9b87222542b675a79c5fe158e9a5752cd57d3eba19d40cb1f74d64c4c003e699ed76cc5f05345affc080b0d74544fcc6661906d81138f5e21f6cc9b5dd4683800153b9245bd08858f64e8db5bc32db0c9cf8cebb844aa4633fdaa8e5916cc35f6ae1e97fd3c6b1456d065164aa80420c573cbb6ba2ce677d7232db667e4ed9bf4fc51f42b27a571a7ecb5c4a6713bc82a1bd045a86bca022fb3cb7eb06c930ff452b78f3f2cb28999e881f8b7cd1b66b71954a13c3dfabd5e82398517c94f077850fecbd6cd696589fc54cdc02357e76160c2a853f1bba0946ebd7e3057287bbe81a13536752959b66bf176d6658a831bacf69d86010813703fbee678617e4eb937aa50ba52de0feb8cd2b4f25e9604948161df88b29df2e4d8bd9bff5c6cb85a962b0c0aeb89797f920a69301db02a03de6f7ef32d70f5ceb041992062aadfce6e141958e9b243a634c2465d9529ac322ca341e6e9856c5097e3d6b2b24175b629a59617a67980320e2e26e03e8887c4f9b7d0d9d5c6361a84a4c14ec3b073f07fe3b745569f4b268fd6c1daa75e20754015c48c61fa3ab9583de92dd12b82a0fd8524dd22e8147260e47dbfd02bcd2fcbafda95bb641d7402f1940ad354fca116b002a7c60458cd7bf4537607ce5ac527605e3a001247a72a5cb672280cb880b1e85ec2fa3d7b271eed074c0d23208a325e5f159afb4e56d0c3e3c639aa1f9e5d21b2e9cb31b5495457fc7ea13c6daf2e6e6cbb49427ef620c2bb1766fa893162e51720482842d0bac435fffd03f3c41b9535936a592d5777eaef07e72fdc6ee43c12d6284c5bb0d65db4cb701d7df9e851b0be0336732cc32d7324bee72264a54ef76d4e44ff324eac72700a040fcd8a144633587299f5085b7b261fa8265f31bea8241f84c23f259118169e8f16d481ed65cbd5b4c042f22a339543df5e35b1d25b8194e6899fa23399ad5b82f4512de83e6887681b111cef3e948c06217b4e62ac1700cfbaeeda183c3c0ff41a706dcc6a2e8d3ddc7bfa315c3763a2c256171c8b85e071b9335cee0227aef036d350f691c98dfd6d2ef29c9e73df1d177342c29e8bc7239437d8c97bb0e19f6239f3ff5eefe388903782da6ec6cda9b4beadf9443a24afcc7b4aee83df6f4d5ceaf30a3908dbe8bcb18e39f58d2779c1746650cbabbdc30f9949edc154926b4a886581c314df3bbd9a6ebdd61549bed7b5a4390c039c132200ff781fd2bac27ca4c685d7aa0b4129d7f0eaabcedcc25ea5f8961e32bcd1f12cff718c99d649ab04ceb0b2d59415537280bfb17bc17d5e84e89a464e7d185bf4043887c8bfef128bd9f3b944070137208378e64befd0391ef7c300e5e2089b2a4042d07c1c14cb1b331e3c81dd36e93f929c67ffec82e49a532412c1cdd9636b51bc0c03958418036cdba9ed7f1a2b1270461cd4533091345975d4b3b2a16fce12705c6e9fad4de3221c5759f0e59897286cd34f05dd4178e9f5a624f43c560b2cd6517594276edc1e0c34454c6b57f6d70060abeb27ce0dd252cd3446560fdb9f958503b04804f4d3c56665a60c19df5d2cb4faffb109a8a9176b8e45948511f26b3b7851b76d052311f456451a0943c2ba8f86cd43f4de8adda51fd34e12e39b25e9a9d2cf867a3a2e2a888bea296816ee7974c8b2b89040e186da21efc52ad0358b21983e7747d599584984f1441e22785c46b0e254b8dad1610889063385cdf5e8f14ffe9dc3323ef758577cfda486bb69f0244373fcdadb425c069f760fd0abb2068f02576687b9efe7758d1b559685514fe3f4bacad5c75d3dd409bacd450af377564882be1c98de5b1ccdb38cbe5105e875c1289c46cf335729aad472af64a9e343204dae4554233461d0b7513d880db418567e85f8aa9114b6069fb4e5d9280f9c22fb1e04631c5a31b48502773d096520c8bb46b672512e893b43f1a9d8dd959a61eafda708074e17d6cc07ec6031082105751bfe684b190611965431459afed4292de7e9c3e681079000a01d91b211239444edcb05dae74c9a847356d8430bdf123b1d1204f56516de8933e7a74ad5e070f41c80e19cf55da6f14496424a16092c861b3db17c6d49b2de237078c4c5b3aea3965a5070b42a48a8fd1613554039d04741ad8cb1d6715912f6cf81277384ee874000cd076d00d0821f8e1e4e113ff57f94be8f0c643f0b2a3d452c55e2488f6679821d7dc064b7f8f3cf8ecd22fc40dd5bba8351108e12e9670e1764966528baa1d35715f10dc53c090d498ca3393159ea61a197112fe11810fa02ae7b3f2d565493d817cefca1839873d4aca9126eabde630dcc411422d26c5e7d27e373dbdad4f24e2cfc8a6de1f8dd3dd6c5308fe1932832ad97855d086d5492f18526a237003ab6f82dd8176b9f36a2946359278817b2316b81f4657ae1a00ad243bde9bbe5357d923afa9bf07c9e221f9c8c4e75182d7537e21067eab3fe26c81859fd0b10f9e3d14fbb5b967a49592296953a28ddc584d9fb9e53b1bfec8f871df3f26188233367d2c63684e32b5aa3c0b2fc355dd959178c5f45efa598ea64fef393ad5a651f97966b7391f7332e1da4e1e65298b77975d53d615b7eaf387ef2656f3db737fddf57b00422ba13c11ef499bd8e425ac33f8a7f281bd28e5f996f97f3fb2fb2bedf6c1ae9af5e1aee7904c3c1ec72ed7134339caf2d41e978bc216a3a0af2ad9665f5ece99582d107606b03c18a1f2816828dcc42be1f81ebf2ee1cae15da3eb947649e2412ee477da18da721c03b63561129e25e19e3dc3f07b42b156e3e890360f5bc385724b97ea06ca4a7e763ed3ccbaa10c6a3dddcd02b40a2016a7480788e3df4a6bb1bf998259c4187e5f4d4df64d9dfbcfbb30bfc6a452ad927f4e39f6c259622c608972f9a67302e0f738c18997db150696b8b762f8430a618b63f764f7533508985e7e3006e2a79afeb0ce18ce04849970170f7f3d153847cade9272e9f1ee55e71910479b8c3acb1ea44e8d450b1c2fbf13c3a35a2e320fd8f0f62313f5b0248a9f0dc70d8651787babebf231e774426f48b6fd1c193293b6f906a3298eb94a3fccfb79ab9614796c575fea7f307d650a49a369dc593be635d773d088f53084ccc690d8e2b1f7698777cd5ca7645b6340cf0f5f8e1bbfd7654147b240dca65f68db789e81a23d7f4d14c564574178fa4b6a1e16114487f7cdab119395618f2be811ab2955cd0849592a72e10149bfc1410adeb1e4b3e79871fabcc0d3df04b5b32559f5fc46db2f1d9254e21608b110466136a725751eb1344f01f539319a2cc088eaa12bbd3a5be452b77585fdc1d0487acb0fb5a6c368aa8cedd31483cdec3e05b928e880b7c624231c323ccf3cfa54a0119216caa2434d41dacbb9a8635a6264cdffae79f197dd6e827ee90844aa7e09355db636c1372edd956558f92093b5a22a914b2a7e6c2f2e905406ffa471352354eaaff289fffcec2545658f82a906465b82a36"}) 07:21:24 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc0045878) 07:21:24 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0x127e) 07:21:24 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc0481273) [ 645.054997] block nbd1: shutting down sockets 07:21:24 executing program 3: prlimit64(0x0, 0x7, &(0x7f0000000240), 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0xc0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x5, 0x1}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, 0x6, 0x6}, &(0x7f00000000c0)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x6}}, 0x10) 07:21:24 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc0045878) 07:21:24 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 645.080325] block nbd0: shutting down sockets 07:21:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000000)) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0x1260) [ 645.120900] block nbd4: shutting down sockets [ 645.129382] block nbd0: shutting down sockets 07:21:24 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc0101282) 07:21:24 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x2}}, 0x18) prlimit64(0x0, 0x7, &(0x7f0000000240), 0x0) [ 645.200476] block nbd4: Device being setup by another task [ 645.206947] block nbd4: shutting down sockets 07:21:24 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)='/\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0xa, &(0x7f00000000c0)='/dev/nbd#\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) ioctl$NBD_CLEAR_SOCK(r0, 0x1261) 07:21:24 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0x127f) [ 645.272950] block nbd1: shutting down sockets 07:21:24 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x618441) ioctl$NBD_CLEAR_SOCK(r0, 0x1260) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x29, 0x6, 0x1, 0x5, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x8, 0x7, 0x3, 0x100}}) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) ioctl$NBD_CLEAR_QUE(r0, 0xab05) ioctl$NBD_CLEAR_QUE(r0, 0xab05) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x9, 0x7, 0x8}, 0x40) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', r3}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', r2, 0x4, 0x16, 0x4, 0x8, 0x28, @private2, @private2, 0x8000, 0x7, 0xfffffffe, 0xaad}}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0xa, &(0x7f0000000100)=ANY=[@ANYBLOB="182b0000", @ANYRES32=0x1, @ANYBLOB="e3ff000018170000", @ANYRES32=0x1, @ANYBLOB="0000000000000000182a0000", @ANYRES32=r3, @ANYBLOB="00000000ff0300001831000002000000000000000000000018000000080000000000000004000000"], &(0x7f0000000180)='syzkaller\x00', 0x8d8629d, 0x0, 0x0, 0x40f00, 0x2, '\x00', r4, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x8, 0x8001, 0x8a3}, 0x10, 0xffffffffffffffff}, 0x78) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x9, 0x7, 0x8}, 0x40) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', r5}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={&(0x7f0000000380)="20d6b1e89b5fbc5c38186928d64a9c3d92cf4caca6fa42ef9f8862fe35276b1a630bf7b0c29dfd52a39ce0cf877f2675ee50700fe6e568ca0608211257e1443d441214e4f8846f4dd9c9ecc552dd8ddc3c8759dc338a8d06bfd5ce39f2c757a47f0e20a174b5d74c8ae476fa76f496df1b4a99e26b0f2086cd1f0f0ee784af10e2f0", &(0x7f0000000440)=""/155, &(0x7f0000000500)="aa8c4b4ff128b8ffb3539052dbe08cd33cf7c1b8c914dd27134487e45a8dadcc53f3af2a4cc52e6f1b9df546d2f5016a0f416dd907de70de8c076749fba3d7bb38582dc9be05a504a534682f78c4f6e8f9b0685580816d575a4c9490bc6754d6ce4274010db856825df9a80577c158c723543102b143848433c6a2fe2ab2ebbcfbaffc3cf0455a0f7a3e85f62508d60f71036fcd77dccc09d938f3f06cd93f768eb112d88019b67621d4ac4fe2ffdc5692bf26295d48556cd114c0d828ad3b6331e9521260637ddae0fd69064c639f6ef78bf9e5d29d50df0be3584c781f1f767b9676dc3f9cabba9b7686ff9c", &(0x7f0000000600)="db8e6e51c4e0e9be258184345b46ef3894557a1e4aa18cc2581d4f34af62401338ef29d620927a8f258e5c62281ace5dbdbfb6f0639d0a487f589fbcb1657ed7089763b93ef1cb45725ac5559e31adda52a23904", 0xcd0d, r5}, 0x38) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 07:21:24 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc0189436) 07:21:24 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 07:21:24 executing program 3: r0 = fork() prlimit64(r0, 0x4, &(0x7f0000000000)={0x0, 0x582e}, &(0x7f0000000040)) [ 645.389956] block nbd0: shutting down sockets 07:21:24 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40d02) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r0, 0x1261) 07:21:24 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc020660b) [ 645.430582] block nbd0: shutting down sockets 07:21:24 executing program 5: read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f00000021c0)={0xa0, 0xfffffffffffffffe, 0x0, {{0x1, 0x1, 0x8000000007ff, 0x8, 0x7fffffff, 0x7e2, {0x0, 0x1, 0x85, 0xfffffbffffffff01, 0x100000001, 0xffffffff00000000, 0x800, 0x400, 0x7f, 0x2000, 0x7, r0, 0xee00, 0x6ad, 0x20}}, {0x0, 0x1e}}}, 0xa0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x1260) [ 645.460476] block nbd1: shutting down sockets 07:21:24 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0x5421) 07:21:24 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 07:21:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x100000001, 0x400103) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x7fff}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x400, 0x0, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x145a, 0x4500) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000040)={0xfffffffffffffffe, r1}) [ 645.580042] block nbd4: shutting down sockets 07:21:24 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc0481273) [ 645.610327] block nbd4: shutting down sockets [ 645.615772] block nbd1: shutting down sockets 07:21:24 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$NBD_CLEAR_SOCK(r0, 0x1260) 07:21:24 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) ioctl$NBD_CLEAR_SOCK(r0, 0x1261) 07:21:24 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 07:21:24 executing program 3: prlimit64(0x0, 0x7, &(0x7f0000000240), 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) [ 645.719895] block nbd0: shutting down sockets 07:21:25 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0xd46) ioctl$NBD_CLEAR_SOCK(r0, 0x301) [ 645.759929] block nbd0: shutting down sockets 07:21:25 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0x5450) 07:21:25 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1260) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DISCONNECT(r1, 0xab08) 07:21:25 executing program 3: prlimit64(0x0, 0x5, &(0x7f0000000000)={0x3}, 0x0) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f0000000040)) [ 645.822261] block nbd1: shutting down sockets 07:21:25 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 07:21:25 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xc0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x401, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x9, 0x2}, 0x0, 0x0, &(0x7f0000000080)={0x1, 0x4, 0x9, 0x8}, &(0x7f00000000c0)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x80}}, 0x10) ioctl$NBD_CLEAR_SOCK(r0, 0x301) [ 645.880085] block nbd4: shutting down sockets 07:21:25 executing program 3: prlimit64(0x0, 0x7, &(0x7f0000000240), 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = gettid() prlimit64(r1, 0xc94a3c1257f61ef0, 0x0, 0x0) prlimit64(r1, 0x4, &(0x7f0000000040)={0x2, 0x7f}, &(0x7f0000000080)) read$FUSE(r0, 0x0, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x8}}, 0x18) [ 645.930128] block nbd0: shutting down sockets [ 645.934904] block nbd5: NBD_DISCONNECT [ 645.939516] block nbd5: Disconnected due to user request. [ 645.946479] block nbd4: Device being setup by another task [ 645.960476] block nbd1: shutting down sockets [ 645.969282] block nbd4: shutting down sockets [ 645.972728] block nbd5: shutting down sockets 07:21:25 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 07:21:25 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x4, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x4, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, &(0x7f0000000040)) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0x6) ioctl$NBD_CLEAR_SOCK(r0, 0x1261) [ 646.020103] block nbd5: shutting down sockets [ 646.039863] block nbd0: shutting down sockets 07:21:25 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x301) 07:21:25 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x48902) ioctl$NBD_CLEAR_SOCK(r0, 0x1260) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x22cc00) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x9) r4 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x20041) ioctl$NBD_SET_SOCK(r4, 0xab00, r2) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x0) 07:21:25 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0x5451) 07:21:25 executing program 3: prlimit64(0x0, 0x1, &(0x7f0000000240)={0x1, 0x1d}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x7ff, 0x0}, 0x8) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r0}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r1, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=0x7, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x3, 0x2}, 0x0, 0x0, &(0x7f0000000100)={0x4, 0x1, 0x4, 0x5}, &(0x7f0000000140)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0xe0f}}, 0x10) [ 646.170759] block nbd1: shutting down sockets 07:21:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) accept(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x313341) ioctl$NBD_CLEAR_SOCK(r1, 0x1261) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x0, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r2}, 0x4) 07:21:25 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 07:21:25 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x640400) ioctl$NBD_CLEAR_SOCK(r0, 0x301) [ 646.230304] block nbd5: shutting down sockets [ 646.246842] block nbd0: shutting down sockets [ 646.252617] block nbd5: shutting down sockets 07:21:25 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x14000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x86eb) ioctl$NBD_CLEAR_SOCK(r0, 0x1260) 07:21:25 executing program 3: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x688}, 0x8) prlimit64(0x0, 0x7, &(0x7f0000000240), 0x0) [ 646.300042] block nbd0: shutting down sockets 07:21:25 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0x5452) 07:21:25 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1261) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x9, 0x7, 0x8}, 0x40) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000000)="a8903920118edac97b6422280bd119c9ed935591acd3ddea5f7764a56538184a3133287c0b8d74e86ad6be70d863a42355a1882fdaad303cc60df36355967953909c226813752dea7f66e4d7603004650ff7a62a92cb8311d19f14c4dc2801fc5b0dd9106bed69cad8e061fda33276d7eb10257828cd07745460b49fc9", &(0x7f0000000080)=@udp, 0x1}, 0x20) 07:21:25 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x301) [ 646.380881] block nbd1: shutting down sockets 07:21:25 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 07:21:25 executing program 3: prlimit64(0x0, 0x7, &(0x7f0000000240)={0x0, 0xfffffffffffffff7}, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0xe0902) 07:21:25 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x301) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x40000) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 07:21:25 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x80080) ioctl$NBD_CLEAR_SOCK(r0, 0x1260) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000040)=0x20a0800) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) 07:21:25 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1ff801) ioctl$NBD_CLEAR_SOCK(r0, 0x1261) [ 646.530463] block nbd0: shutting down sockets 07:21:25 executing program 3: prlimit64(0x0, 0x7, &(0x7f0000000240), 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) [ 646.570833] block nbd2: shutting down sockets [ 646.581144] block nbd0: shutting down sockets 07:21:25 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0x5460) 07:21:25 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000080)=@raw=[@ldst={0x2, 0x1, 0x1, 0x1, 0x4, 0x2, 0xfffffffffffffff0}, @alu={0xa, 0x0, 0xb, 0xa, 0x6, 0x4, 0xfffffffffffffffd}, @exit, @map={0x18, 0x9, 0x1, 0x0, r1}], &(0x7f00000000c0)='syzkaller\x00', 0x8001, 0xd1, &(0x7f0000000180)=""/209, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0xb, 0x2fb0, 0x80000000}, 0x10}, 0x78) ioctl$NBD_CLEAR_SOCK(r0, 0x1260) 07:21:25 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) [ 646.621167] block nbd1: shutting down sockets [ 646.637257] block nbd2: shutting down sockets 07:21:25 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) read$FUSE(r0, &(0x7f0000000380)={0x2020}, 0x2020) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0xaaca8c2a205e795b, 0xe1, 0x6, 0x0, 0x4, @empty, @empty, 0x700, 0x7, 0x6, 0x4276}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r1, 0x2f, 0x80, 0x1d, 0x401, 0x40, @private0, @mcast2, 0x7, 0x40}}) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x40) 07:21:25 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x69d) ioctl$NBD_CLEAR_SOCK(r0, 0x1261) 07:21:26 executing program 3: r0 = gettid() prlimit64(r0, 0xc94a3c1257f61ef0, 0x0, 0x0) prlimit64(r0, 0x7, &(0x7f0000000240), 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, r1, {0x7f, 0x4, 0x4, 0x5}}, 0x20) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, r1, {0x2}}, 0x18) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000040)) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000380)) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x6f0, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) [ 646.770280] block nbd0: shutting down sockets 07:21:26 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1260) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0xedd, 0x8400) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) [ 646.816510] block nbd1: shutting down sockets 07:21:26 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 07:21:26 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000240), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000500), 0x4, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000200)) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x6, 0x101) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000000000)={0x9000000, 0x6}) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x5, 0xf23c5a50a1e2228e) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000540)=0x7) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f0000000140)={0x1}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000280)={0x2, 0x3, "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"}) ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000040)=0x1000) r5 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x5, 0x42) ioctl$USBDEVFS_DISCSIGNAL(r5, 0x8010550e, &(0x7f00000004c0)={0x3, &(0x7f0000000400)="378714e2e1f2db371fc74769cdbc57089d8311affc29575059cfb845fc4fc4af6c695e065c97eef3470635e5ea2ded372b6834f88ea516b156fd0312eb989f8330d5fab831d92907378186fefd4603654213fe0350dcc3e4db535b0ca5b74fcdaf64a63fdeabc71c817d4bffd2ca43469baeea93933228ac8bbc1754ef1a71965e9903b6a5d8ed33"}) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000080)=0x3ff) [ 646.837410] block nbd0: shutting down sockets [ 646.850204] block nbd4: shutting down sockets 07:21:26 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab00) [ 646.891494] block nbd4: shutting down sockets 07:21:26 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0xa0000) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x20000) ioctl$NBD_DISCONNECT(r3, 0xab08) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x81) ioctl$NBD_CLEAR_SOCK(r0, 0x1260) 07:21:26 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200a01) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x7) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400000) ioctl$NBD_CLEAR_SOCK(r0, 0x1261) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80) ioctl$NBD_SET_SIZE(r2, 0xab02, 0x30) 07:21:26 executing program 3: prlimit64(0x0, 0x7, &(0x7f0000000240), 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0xdc1, 0x2) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x3, 0x0, 0x10001}) [ 647.003778] block nbd5: NBD_DISCONNECT [ 647.022161] block nbd1: shutting down sockets [ 647.024745] block nbd0: shutting down sockets 07:21:26 executing program 4: connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xf5}, 0xa) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40) ioctl$NBD_CLEAR_SOCK(r0, 0x1261) [ 647.050331] block nbd5: Disconnected due to user request. [ 647.056117] block nbd5: shutting down sockets [ 647.063795] block nbd0: shutting down sockets [ 647.067904] block nbd5: NBD_DISCONNECT 07:21:26 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) [ 647.110747] block nbd5: Disconnected due to user request. [ 647.117168] block nbd5: shutting down sockets [ 647.230609] block nbd1: shutting down sockets 07:21:26 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x343100) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x5, 0x1) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000000140)={0x1, 0x6749}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) r4 = socket$inet_udplite(0x2, 0x2, 0x88) accept(r4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x10000) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000000180)={0xffffffff, 0x364}) ioctl$NBD_CLEAR_SOCK(r0, 0x301) 07:21:26 executing program 3: prlimit64(0x0, 0xa, &(0x7f0000000000)={0x0, 0x1}, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5d9e) 07:21:26 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab01) 07:21:26 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1278) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0x1260) 07:21:26 executing program 4: socketpair(0x9, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept(r0, &(0x7f0000000180)=@ieee802154, &(0x7f0000000080)=0x80) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000100)={'team_slave_0\x00'}) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x1261) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x480201) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) read$FUSE(r5, &(0x7f0000000380)={0x2020}, 0x2020) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x80, 0x2, 0x10, @mcast1, @private2, 0x8, 0x8, 0x81, 0x3}}) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 07:21:26 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 07:21:26 executing program 5: shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000000080)=""/56) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) socketpair(0x15, 0x8000a, 0x22, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000040)) 07:21:26 executing program 3: prlimit64(0x0, 0x7, &(0x7f0000000240), 0x0) r0 = gettid() prlimit64(r0, 0xc94a3c1257f61ef0, 0x0, 0x0) prlimit64(r0, 0x1, &(0x7f0000000000)={0x1, 0x401}, 0x0) [ 647.695578] block nbd0: shutting down sockets 07:21:27 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1260) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x6) 07:21:27 executing program 3: prlimit64(0x0, 0x7, &(0x7f0000000240), 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x4, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, 0x0) ioctl$USBDEVFS_RESET(r1, 0x5514) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'bond_slave_1\x00'}) [ 647.741501] block nbd0: shutting down sockets [ 647.762951] block nbd1: shutting down sockets 07:21:27 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 07:21:27 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab02) [ 647.870200] block nbd0: shutting down sockets [ 647.910351] block nbd1: shutting down sockets [ 648.504707] block nbd2: Receive control failed (result -32) 07:21:27 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x301) 07:21:27 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x4, 0x0) getuid() ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000000)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) write$FUSE_GETXATTR(r1, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x7ff}}, 0x18) prlimit64(0x0, 0x7, &(0x7f0000000240), 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000040)=0x1) 07:21:27 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x31b801) ioctl$NBD_CLEAR_SOCK(r0, 0x1260) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x3, 0x0, 0x2}) 07:21:27 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab03) 07:21:27 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 07:21:27 executing program 4: bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000100)={&(0x7f0000000000)="828ed442b5575851e615574a186b41d63484f1896c415d5060fc6a4b2225215b1d9baaff18e02422945fcbb488b5be163b574d775cbcef2ca46ecc24530dace87e670bed4f02989bbac1252538f4f0dbd740fd5b5ae462599c0bc69f3ac7a5746c44ef7b0959dac695aaf4d04aa43d7095359317cbbb9de58c5789d4b8b3a41c3c812d8a262c5797571bdea9e14bd04a2968e46d27c3d127c163609b6084881cd1d6b18b2b756904e4616a833ac3c9c43c4c66a1eb17efe56dbd0117c9e38f24e6ffea2c81fc3951dc", &(0x7f0000000180)=""/190, &(0x7f0000000240)="7d9314deae18fbf83f84751da0eb114cfd5edf1408cd7f5b3abe9109db8fdd682f90fcbd625dc4b08b8ab160d9ee7902ee42fd848b85684b0a760ced0179c9d927ca5d4a5919a4b3f1120e1d7790c1ebc868c5dd3294e1a27fcf23f777b393944f7f8af488ce05cff1338710ef0a416256c8dd5e9380f3b370801616f3bb4269a5510a8c8fd06f235161375fecd1beb7079a42fc9446c584cfddaf5cdf13e12e0af1414406870d03a3ff209c1a8d6609a96a1efcf53720d3fbd03c0122aacf8cce7af2f5655a1fd863afbba2f52e4f66f2e534c94a4b6ea23580b897f974d8fc897eaf8d4ee15f4fa94aa7068ffa47dd0fb28352f4f50ad4d72064afe42e66e9bd913edbfeef0a0aee9289825d6b79604239dfa523c3335ef557ff771df1f49af6bf96f83cd194209b44d710252921543a4ec95db9c7ffce8da705f70571f50634ea82f96b45a1c32e16433416da4aedbecabdc9aa0752c9d791813cdb648ca15a48648f54d7609e27688513cdc0712e8784784213a48ab393b6c0b889e7438572ee1fa505e6ed9aaea3dd0a2f27700bec33264d41e629c00966b98278581395ec8c8bcc68d5a416e5cb47fb7f04353c4ba59c415ce7ac309703cbd425d04b7d4500b79559b2264d786a9d60552f56b80a3586e04468f2ba9324d4e1daea1e2a3d32e28f242faec73e414658d1c11a4d69cd6e2b96a7bb25e4533f78503337b77345469a1eb093ef602ea9396897d283263fbec8012b47a26109703363a83bc38aab1d4dcde7955b1f58b79ad8a17a106bcc712123b13a9804fdaf5b4be9f3e59086b56b48d1b7e53c4aa81cc1e9011aed33d5ae7b677ff29f254b0177d264c880d3a86ce2a6ff914d4cae2227edb089003a5c6d5cd4329b5db87160a2aa29a0bf8341daa0d855163e451699a703e931c87073aa2a6e31f710ba91df84f80198d5497e7f67e69a1ad3188430123943dbfdb169be604a7824e608c2bfae129984bbd69a250f61b69d641e14badf6632a145235f4b154c6596cd8e81901c9799fc0a15c115b1b48b441cca84c1b299a226c5802f77d5eab47da4ee9e256bb2ef243fab1175b3a4aa5f2505f05906b73de12291413bd13f838ec09c30cbe33824a0fe193424232003aa521cac6661b20e2ea9be7568983b89cadbd7f0b00fb09e038e1b5abf038201e4e2ac033e5692c6029713d9a96153a58f05a1fa8d4b28d2bfab2b0ed39d86716e8428a7a86df133a6016078cc2f1504f5e84dc4cb141c87a6499632983ef0f4cedf35c9978ac3fe63ef88e1faa2a0a6e2bd433c1c0b9c0a1e1c4a6adef0cb315f0e54efa8bacee6c06293132986baaf71ac55545f959edb9e246140be95c0e89f8c6b1b9080204120083418aec999154a5324d79ea222eca49064c8653102e7143aab99b0b88da38630306303fcda7594abd54dfd19c52e8eb2514c984c79009948ece91d2aa0ef3bcadbec6e5c5fd54263f0da1529513483e1d9269aedf88cfcf95dfd85fb3af02ed584f9798c16db97cf26fd865080dd4c618b4d99974602c70b2130c27229fd08d0fd47f166bfa8e638212553728d4a3947deadf759f44306beafdb62251dabf9fe69f40ffee528d277f55c0a51a9b5bd521fae45b3c471244ea0e89c6d8e2cf273bab8564a7989f9cb8e9014817da98feaa4f429cc5a85e32c6660fe050cb7f751f1f8e5466fbed1845955677a1e9767930b00f6cf864cfdbe5a787c4c4628dbd880ce9d92c75b4658feccbe3ba9c100a44a0fb9861eaf538f6abe7ea18c54b415030ff3d362faf8cecb8a1da9ba2679cfaeb0cbe996f548ad2f065f375da12c401c10ace2c59de7a20bac9830c325aa116400fbcf12fc396177abb97c5cf37aa641253ce7538f598b7aee1a1c9536fb44979aaa2d175af76253e8b020f3a6a3cc900323844bc4a7b5a9469b74614e3cb3e272fa96111ecdec287b2b0baf6f6cca89197f36dd8303a3ee7bbe9a49bea913338e1830028f7bef235bbebd5fd85e7bc78747813c8f4cfc3e51f74d0b92bb0dcd79bcd84c5d6ba6cecde6a6477f41a2c34e557d72e98b8426f4ab26d8cc62235fc5966bb8de43f92c02c358adc598c80cd72f0bd47b344a82268c98d4ec71720b190d8e86963b7b219556823a0db0898544b1592d006d97cc86c91aabaa70fe7fe100be05c2084cbe7344ec907a890de3d836859908a19e028e9bfe13fbc58d81daa56dcb642a52be9b2cb871e42edf2a12c995e55d505e38154ddc690184df6fa6563fcf67c904242aa6a7c01b672ba79a9685a2ac05cdaf5102754f8259f418294f9d85e50c949fc7713c639d18189f50cf596b5482bec63da57d3f325145f1230778c2d97c61a17377f98b78942e0cac1a2e0c9a5ea1edaaac3e9bab39eac9611f8d83049b6d2c00c3214b1463b855bee07b8032958dcb223f74f181c71f50bba84ac078a73a608919c9d2d1cbcc186fc37b948b55385636546c0d6b17b776528af47cf8c9d5331f931bc5c6602c2b616386178061ca0b3516d32cc9f7557daf110bdf102dd3f8ca8bd6d1a3fb61f76528707dd64762a125ee6383f70e940dd9a7bdd196c7fc177edbe126eed4465c1f6c6dc911bc281e7dd7d679728878eee399e84439ecba1db6b7d9311d1687ef627ab939c736958f42d461cd39eb16db72832d7aeb5934d30f885f177bc27604c50b143b6c87184137f735620eae7c189b20e256a5b5fa6980ba0171b9d9926b2d0b5b071c65f74fbb900c3086bc2bc8b7da318804fcb28a9dcb9fe53e78caedece56b522bba44b4c875256f88c7452b4f54f29a4e1ebd09f62eeee35d4c5039cff186cec31b95b61f2363887be4fe5a30a0c60a0f7a799415f4b3456ce6df3fbdd3c784c9f408262a6c9fad80d42ea5e73aafe383263097f2dc5e536d6bbba4d32c83f56a9554c7a4f064a334c65a268dd0e04ec0d07364657d9c281cbf1a6b3de57c3906e14a23a316afce9861df5f69adf303048cddbe75ff11e42afb0dbda03dc6e9b2d1b841e7d16284a11c9669ef21807c4113f509d32f64db5647cfee12f81c361c8a5cc36f0d9b5bdd094450aa32d77965be45b46df0691990eed98fe230053fa604ee0fb75d2302f5984838c16cdac3d1218921f663502897b164c55f3d7dde8ed1ac038c131a213f3290f33d8a6b505ec05a0b2604d9c287a06795faa9c0461c0ce4fbae736d2134a33d734148b4604a24bc092d18aedc1ca9f1ab755fac6169b167244054905f7e56b0415e4b57cc1f362108ea4cb7b311392aec8663bae27911f153d667cddf1a8dbb764c1eecfb9ca5f6dde16dc2356e01dfcaea08656ba4f927aab8d18b0740d4366df632627403db1469b6bfdc762ec58c41c2f0c57465ce9813d5482cdadb7f79bdceac1dd71685c983ccbea3067f0313fb915f9f56c3a3b51af737b25be9eb54a996cfc9b3fe18a1da9e51348a2f236663bd18fbe9368dddc28b446adba209dcbd28cb753f2b6121a5c7918e40197c87abb27ba6a2f966b0ccf657318a13ae8dd7498db76838c2a5bb8ceb2a95e4b53756ff52c5d7d7770192035b67e87104b902b5dc0066fc167665b5b0e427fbc70e6b7f9c4fd1c541747899394834984772a985a7e8b15d1b3b04efe039ced749439d27c99d838764ebe97d0fbb3f7b5664794178fd0900371be881c54a2a2b6ac68b68d3ecb017325c150145f53e1a6c5b106ab11374e51d8e3c9f6c17f7ee1f14f341beb62b690b023fd5566d5c4b5d6b747b72d4499a95658bef339b994697234de952a1886d6b4d6d743161d8ccda2aa1cb71ae602737081a98945fcf1b0457928e1209cf94483c44f14e20cdeb0f82d011b11cff75134b52c29d2894d7afc77cfaefb42710e4a208772915305dafe577cd32f7e7b5ee7084fb5a3288d1e39c9fcf65c4d4f3948515c82746089e2805e188d7cb2a961d2b6f826c74f8d64a939c33bb1ba66aea262ec2d8b3dabf44ffd0d85a5f21f24f636adbe962e0e6fd0cd1e6038576820a1fc71809017801683d81279219fc43e16f11ee56d243dfe2eb5f2302bf1a15e532ca5cefe77fce69de07d31c3336d5d43b892daf2112e80c18d06f17127d264d41cf912fcc954e9e60723f988ad5628a13ec8b8d0a7e96754af1d736544d5a8ce93cf2bd13b626010d706bd64e3e2e63492fdb3767cfd9aca414aa30dd525a4fe1c1ec249b9fa451714dc4f1870caba8b2f204cdc54f92785045c0d62581ce0e27209bee780414516d962817c7cbadda686fc61a30953371aa77d76c89bb8b6b0968bbaeb61c73268c336f9818c2ed946f2466fdb2762b058bc3f984c001b873e0b7b3ed471601b307bc67a8fa47088b90edbf5019cc5647efb24b7efc5988a31b5ac10c74758e73d4555f9e6cbd3828c5abb3429fe52e38be3dd3ec69f1734573736c553f434799e5a13b2368bc308b4ae87a4116e246dcd55da423eef978494dd5c376e4ba595ab59e7757c97098615231afcbfea4df923c873cdc1b11394e7391fb47cc86d4faef8b6ad53f558575756a023de83f20ed8d7644578666718a784a74d175813c34bc0fc6bda5c270e88c802e031c89beb845b20b7a1cf017ade78849712a10acfdedcbb7941fc017349917543788be9b389e56e8caa03437fb48dca028f2fc6f5d1276e985cdb1f29486a2fc1b7dd220cab81b457868ac0b29d9617386ca9d86aed59c741584361503c6a254dc821fc6c92f02ac1cd00b2caa940717d581777b3cbebde54366b248f82816b4f49446592b12a3bb23725f52be3d8ed3fa4a3e0e331a47149e17ff0f9fb4f6dfe14d158edb35185d57cad2a757b90dc12d1bd62646acadb80345e148dcb328bf2556cbb7662c9ca1fdcd4b7ab8296a3bb044ff0c1c13631956d85ff3a95f62e8ce8aac69c05a128e29ef543ab83fd159eabcb6a8fff46193778e5b3aac13a6fa96e35e8e55052b27d93acc10b1b71db0fa996a281f2b844b96507f7b2b99731554efc086f6eec4010ce27a4c00708bd467edafc0a9a90a2c3708ce98802b241307f8cba81372bca7c6d82700d45672c697ba212392187c0ccc841355bd1cdd2f38d55d16d6f395739a9752443c246191cce09670335f581a73e87de5941a5b21476ab4e825b3962a6efff21d5160e4c56b10086ce55e823cd4e560f3c2e3a48b8571764399f714ccd4a0cf73ef5667e327f84fc896989dc1589ed25e3744795edafa711d16f9f82cb45ccd8464367535339be43e8bbb8b3b0dbb06744063ddadda967238cb59e64f83484ca4661cccb72711d2454e629536f6e51fe085a0ba126fcc03937d5d9885817107a58781d71cde503db944f37d82f049d32e62e366e8ae9f78fc64a7676167a88acdefbc95bae1dac3bb75825999406167f0c26b73c9bda60d9c4d1fed61b39d795811ca9ff5898935006523397a4c88480f8c558476e22179da694424f729bd9bc13d45664e5949825a03a2ab2a935aae86de5478981a8a7bcf0f8a4823baa81f782e70ba831444da12fa9c9d1bf720f186a3f35dff423d31d32500a3faa481f189cc23562b5623f72418366c29500ab5d23992aa436546bf19f89944ba9163ca7df33e5c4fdf5175aedcd4de3c9266a4c6ad7beb6aca79f410512e77aeae6c0dc5b2ce37d7f818a4a653136d85678257eb585dfcae053ca0ae7a67bfec00c98d769a9261e82d46f34a402b159cca62bae459b040fc72a907a3e5e1947b503cc48c57cc1e172caeab9510c8c0be39c69b342d51a463458d44841588108388959c1f3093c45d86734f0c91", &(0x7f0000001240)="ef0fd7266cb7c436d9e8188a06904a12b51899fac7aa057f104c4a9905ed90ba47a838c75bb05aba3e1ad07849c8a4b70c0da7aff76a28e085c94a257819b77f2b88419fa45284c27ce0edee85b74363f41e20c6dd16b9f4ba6461c3eba10c707fb8d6aea5", 0x4}, 0x38) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) ioctl$NBD_CLEAR_SOCK(r0, 0x1261) [ 648.549886] block nbd2: shutting down sockets 07:21:27 executing program 2: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x4, 0x3c9b2811, 0x1, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, 0x80, 0x7, 0x29c, 0x4}}) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x301) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000180)={0x2020}, 0x2020) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000000c0)=0x5, 0x4) 07:21:27 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x59bf) ioctl$NBD_CLEAR_SOCK(r0, 0x1260) 07:21:27 executing program 3: prlimit64(0x0, 0x2, &(0x7f0000000000), 0x0) [ 648.597932] block nbd4: NBD_DISCONNECT [ 648.608998] block nbd4: NBD_DISCONNECT [ 648.629960] block nbd0: shutting down sockets 07:21:27 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x22280) ioctl$NBD_CLEAR_SOCK(r0, 0x1261) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 648.685498] block nbd1: shutting down sockets [ 648.690392] block nbd0: shutting down sockets [ 648.695185] block nbd5: shutting down sockets 07:21:27 executing program 2: ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0x301) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x241) r0 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000000)={0x0, 0x400}) 07:21:28 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab05) [ 648.730017] block nbd5: shutting down sockets 07:21:28 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab03) 07:21:28 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2721c0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x103640) ioctl$NBD_CLEAR_SOCK(r0, 0x1260) 07:21:28 executing program 4: prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r0, &(0x7f0000000000)={0x28, 0x0, r1, {{0x2, 0x7, 0x0, 0xffffffffffffffff}}}, 0x28) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000005480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r3, &(0x7f0000000100)={0x20, 0xffffffffffffffda, r4, {0x0, 0xa}}, 0x20) ioctl$NBD_CLEAR_SOCK(r2, 0x1261) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r6, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r6, &(0x7f0000000040)={0x10, 0x0, r7}, 0x10) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) read$FUSE(r3, &(0x7f00000074c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r8, &(0x7f0000002200)={0x18, 0x0, r9, {0x100000001}}, 0x18) write$FUSE_IOCTL(r5, &(0x7f0000000080)={0x20, 0x8a2a3580d8b49bfe, r7, {0x0, 0x4, 0x8, 0x9}}, 0x20) 07:21:28 executing program 2: sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000380), 0x0, 0x60000) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0xa4480) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100) ioctl$NBD_CLEAR_SOCK(r1, 0x301) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x9, 0x7, 0x8}, 0x40) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', r2}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={&(0x7f0000000180)="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", &(0x7f0000000280)=""/248, &(0x7f0000000080)="1235e2f6c1e910c99f12b340f70b872af6b47d12cc5056831557c3d97171103a751d2d1ead0dbe35ae4cfc1ddf6d6d95995b11367d9336c1bef0785e184d31549f947bcdc8321354cdca6fc380b9e0cbe153c08cf93a2652207904d76c87af1ea1a752bb04e01d7fe4d919d63f9c768c", &(0x7f00000003c0)="6d199d0ca5c7d6524a6f560b119b4ed13e24dd2a9d41c66b0af11f10bde95ed876e20eb938f5921872672a25810a03fc6ada32912c5457453fab9ba3e1c06f29258d670800223ff85c2da7c23ffb5e874e4706fcb408c8f4160c869b370cbb28917804f091ef705fb24a681f117b734d72617d638254e0e99fdf62aee6c18b0469afb000a40b2bb99f3ced770422be8c16aed43837e8e99535ea", 0x1, r2}, 0x38) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 07:21:28 executing program 3: prlimit64(0x0, 0x4, &(0x7f0000000240)={0xfffffffffffffffd}, 0x0) 07:21:28 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1260) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x2, 0x60000) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000040)={0x0, 0xf2a}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x4, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f0000000080)) [ 648.849995] block nbd1: shutting down sockets [ 648.869857] block nbd0: shutting down sockets 07:21:28 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab03) 07:21:28 executing program 3: shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) r0 = gettid() prlimit64(r0, 0xc94a3c1257f61ef0, 0x0, 0x0) prlimit64(r0, 0x9, &(0x7f0000000000)={0x0, 0x8000000000802}, 0x0) [ 648.920526] block nbd0: shutting down sockets 07:21:28 executing program 4: ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x7f, 0x1, 0x5, 0x8}, {0x2d, 0xf8, 0x3}]}) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1261) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x100, 0x650e80) ioctl$NBD_CLEAR_QUE(r0, 0xab05) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000180)) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x28000) 07:21:28 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_QUE(r1, 0xab05) ioctl$NBD_CLEAR_SOCK(r0, 0x1260) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1f) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) ioctl$NBD_DO_IT(r0, 0xab03) 07:21:28 executing program 2: socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x123801) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x300) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x100000000) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x205000) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) inotify_rm_watch(0xffffffffffffffff, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x301) 07:21:28 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab06) [ 648.984413] block nbd1: shutting down sockets 07:21:28 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0x0, r1}, 0x10) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, r1, {0x9, 0x0, 0x8}}, 0x20) prlimit64(0x0, 0x7, &(0x7f0000000240)={0x2, 0x5}, 0x0) 07:21:28 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab03) 07:21:28 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x301) ioctl$NBD_CLEAR_QUE(r0, 0xab05) 07:21:28 executing program 3: ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000000)=0x4) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000100)=0x4) accept4(r0, &(0x7f0000000040)=@ieee802154={0x24, @short}, &(0x7f00000000c0)=0x80, 0x180800) prlimit64(0x0, 0x7, &(0x7f0000000240), 0x0) 07:21:28 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x4e3302) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xfffd}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040840}, 0x40060) ioctl$NBD_CLEAR_SOCK(r0, 0x1261) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x4, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, 0x0) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f00000001c0)={0x401, 0x7}) [ 649.090220] block nbd0: shutting down sockets [ 649.129927] block nbd0: shutting down sockets 07:21:28 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab07) 07:21:28 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x14002, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x301) [ 649.151898] block nbd1: shutting down sockets 07:21:28 executing program 3: prlimit64(0x0, 0x8, &(0x7f0000000240)={0x100000, 0x1}, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x20041, 0x0) 07:21:28 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r0, 0xab03) [ 649.291778] block nbd0: shutting down sockets [ 649.329884] block nbd0: shutting down sockets [ 650.090018] block nbd1: Receive control failed (result -32) [ 650.097517] block nbd1: shutting down sockets [ 652.009731] block nbd5: shutting down sockets [ 687.039498] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.045107] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.475715] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.481574] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.512045] INFO: task systemd-udevd:10683 blocked for more than 140 seconds. [ 803.519518] Not tainted 4.19.202-syzkaller #0 [ 803.525204] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 803.533457] systemd-udevd D26624 10683 4697 0x00000100 [ 803.539116] Call Trace: [ 803.541798] __schedule+0x887/0x2040 [ 803.545615] ? io_schedule_timeout+0x140/0x140 [ 803.550309] schedule+0x8d/0x1b0 [ 803.553757] io_schedule+0xb5/0x120 [ 803.557396] wait_on_page_bit+0x2c5/0x3f0 [ 803.561534] ? wake_page_function+0x1b0/0x1b0 [ 803.566110] ? __bread_gfp+0x300/0x300 [ 803.570000] ? add_to_page_cache_lru+0x680/0x680 [ 803.575475] do_read_cache_page+0x8ed/0x1170 [ 803.579904] ? blkdev_writepages+0x20/0x20 [ 803.584204] read_dev_sector+0xbf/0x500 [ 803.588207] ? adfspart_check_ADFS+0x8e0/0x8e0 [ 803.592943] adfspart_check_ICS+0x114/0xe70 [ 803.597275] ? adfspart_check_ADFS+0x8e0/0x8e0 [ 803.602014] ? snprintf+0xbb/0xf0 [ 803.605572] ? vsprintf+0x30/0x30 [ 803.609025] ? _raw_spin_unlock+0x29/0x40 [ 803.613244] ? __get_vm_area_node+0x2e2/0x3a0 [ 803.617774] ? adfspart_check_ADFS+0x8e0/0x8e0 [ 803.622556] check_partition+0x390/0x690 [ 803.626632] rescan_partitions+0x1b5/0x970 [ 803.630911] ? nbd_open+0x4cc/0x6f0 [ 803.634631] ? nbd_add_socket+0x840/0x840 [ 803.638892] bdev_disk_changed+0x179/0x1b0 [ 803.643263] __blkdev_get+0x1282/0x1480 [ 803.647252] ? bdev_disk_changed+0x1b0/0x1b0 [ 803.651823] ? mark_held_locks+0xf0/0xf0 [ 803.655884] ? mark_held_locks+0xf0/0xf0 [ 803.659944] blkdev_get+0xb0/0x940 [ 803.663570] ? bd_acquire+0x245/0x440 [ 803.667446] ? __blkdev_get+0x1480/0x1480 [ 803.671636] ? lock_downgrade+0x720/0x720 [ 803.675865] ? lock_acquire+0x170/0x3c0 [ 803.679852] ? bd_acquire+0x21/0x440 [ 803.683631] ? do_raw_spin_unlock+0x171/0x230 [ 803.688142] blkdev_open+0x202/0x290 [ 803.691927] do_dentry_open+0x4aa/0x1160 [ 803.696380] ? blkdev_get_by_dev+0x70/0x70 [ 803.700601] ? chown_common+0x550/0x550 [ 803.705271] ? inode_permission+0x3d/0x140 [ 803.709535] path_openat+0x793/0x2df0 [ 803.713418] ? path_lookupat+0x8d0/0x8d0 [ 803.717476] ? __put_seccomp_filter+0xa0/0xa0 [ 803.722043] ? mark_held_locks+0xf0/0xf0 [ 803.726216] do_filp_open+0x18c/0x3f0 [ 803.730173] ? may_open_dev+0xf0/0xf0 [ 803.734326] ? lock_downgrade+0x720/0x720 [ 803.738684] ? lock_acquire+0x170/0x3c0 [ 803.742733] ? __alloc_fd+0x34/0x570 [ 803.746462] ? do_raw_spin_unlock+0x171/0x230 [ 803.750959] ? _raw_spin_unlock+0x29/0x40 [ 803.755175] ? __alloc_fd+0x28d/0x570 [ 803.758988] do_sys_open+0x3b3/0x520 [ 803.762772] ? filp_open+0x70/0x70 [ 803.766319] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 803.771870] ? trace_hardirqs_off_caller+0x6e/0x210 [ 803.776897] ? do_syscall_64+0x21/0x620 [ 803.780870] do_syscall_64+0xf9/0x620 [ 803.784746] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 803.790773] RIP: 0033:0x7f2d474d7840 [ 803.794582] Code: Bad RIP value. [ 803.797936] RSP: 002b:00007fff0f30d968 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 803.805704] RAX: ffffffffffffffda RBX: 000055ffaf052160 RCX: 00007f2d474d7840 [ 803.813044] RDX: 000055ffad8dafe3 RSI: 00000000000a0800 RDI: 000055ffaf053f30 [ 803.820304] RBP: 00007fff0f30dae0 R08: 000055ffad8da670 R09: 0000000000000010 [ 803.827609] R10: 000055ffad8dad0c R11: 0000000000000246 R12: 00007fff0f30da30 [ 803.835422] R13: 000055ffaf050880 R14: 0000000000000003 R15: 000000000000000e [ 803.842861] INFO: task syz-executor.5:10725 blocked for more than 140 seconds. [ 803.850210] Not tainted 4.19.202-syzkaller #0 [ 803.855351] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 803.863392] syz-executor.5 D28648 10725 8132 0x00000004 [ 803.869023] Call Trace: [ 803.871601] __schedule+0x887/0x2040 [ 803.875384] ? io_schedule_timeout+0x140/0x140 [ 803.879969] ? lock_downgrade+0x720/0x720 [ 803.884179] ? __mutex_lock+0x415/0x1200 [ 803.888356] schedule+0x8d/0x1b0 [ 803.891809] schedule_preempt_disabled+0xf/0x20 [ 803.897496] __mutex_lock+0x604/0x1200 [ 803.901396] ? blkdev_put+0x30/0x520 [ 803.905193] ? mutex_trylock+0x1a0/0x1a0 [ 803.909249] ? lock_downgrade+0x720/0x720 [ 803.913459] ? locks_remove_file+0x286/0x450 [ 803.917866] ? locks_check_ctx_file_list+0x1d/0x110 [ 803.922948] ? _raw_spin_unlock+0x29/0x40 [ 803.927091] ? locks_remove_file+0x2cd/0x450 [ 803.931489] ? __do_page_fault+0x6d1/0xd60 [ 803.935810] ? blkdev_put+0x520/0x520 [ 803.939607] blkdev_put+0x30/0x520 [ 803.943210] ? blkdev_put+0x520/0x520 [ 803.947017] blkdev_close+0x86/0xb0 [ 803.950658] __fput+0x2ce/0x890 [ 803.954104] task_work_run+0x148/0x1c0 [ 803.957994] exit_to_usermode_loop+0x251/0x2a0 [ 803.963538] do_syscall_64+0x538/0x620 [ 803.967431] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 803.972811] RIP: 0033:0x4193fb [ 803.976000] Code: 8b 5c 24 2c 89 de 87 59 10 4c 8b 44 24 60 4c 8b 4c 24 40 48 89 ca 89 f3 4c 89 c9 4c 89 c0 85 db 0f 86 5a 02 00 00 ff cb 0f 1f <80> 00 00 00 00 48 83 fb 65 0f 83 fb 02 00 00 89 5c 24 2c 48 8d 34 [ 803.996134] RSP: 002b:00007ffdb5018e60 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 804.003927] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000004193fb [ 804.011280] RDX: 0000001b2ff23348 RSI: ffffffff83770691 RDI: 0000000000000004 [ 804.018620] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b2ff21e7c [ 804.025965] R10: 0000000000000d7d R11: 0000000000000293 R12: 000000000056cb00 [ 804.034036] R13: 000000000056cb00 R14: 000000000056bf80 R15: 000000000009e773 [ 804.041520] ? check_preemption_disabled+0x41/0x280 [ 804.050163] INFO: task syz-executor.5:10735 blocked for more than 140 seconds. [ 804.058801] Not tainted 4.19.202-syzkaller #0 [ 804.068031] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 804.076491] syz-executor.5 D28560 10735 8132 0x00000006 [ 804.085136] Call Trace: [ 804.087741] __schedule+0x887/0x2040 [ 804.091445] ? io_schedule_timeout+0x140/0x140 [ 804.097011] ? lock_downgrade+0x720/0x720 [ 804.101165] ? __mutex_lock+0x415/0x1200 [ 804.106382] schedule+0x8d/0x1b0 [ 804.109753] schedule_preempt_disabled+0xf/0x20 [ 804.115294] __mutex_lock+0x604/0x1200 [ 804.119289] ? blkdev_put+0x30/0x520 [ 804.123835] ? mutex_trylock+0x1a0/0x1a0 [ 804.127895] ? lock_downgrade+0x720/0x720 [ 804.133211] ? locks_remove_file+0x286/0x450 [ 804.137625] ? locks_check_ctx_file_list+0x1d/0x110 [ 804.143445] ? _raw_spin_unlock+0x29/0x40 [ 804.147586] ? locks_remove_file+0x2cd/0x450 [ 804.152972] ? blkdev_put+0x520/0x520 [ 804.156779] blkdev_put+0x30/0x520 [ 804.160305] ? blkdev_put+0x520/0x520 [ 804.165591] blkdev_close+0x86/0xb0 [ 804.169226] __fput+0x2ce/0x890 [ 804.173242] task_work_run+0x148/0x1c0 [ 804.177132] get_signal+0x1b64/0x1f70 [ 804.180939] ? alloc_empty_file+0xd7/0x170 [ 804.186215] ? futex_exit_release+0x220/0x220 [ 804.190743] do_signal+0x8f/0x1670 [ 804.195609] ? block_ioctl+0xe9/0x130 [ 804.200473] ? blkdev_fallocate+0x3f0/0x3f0 [ 804.205588] ? do_vfs_ioctl+0x110/0x12e0 [ 804.209643] ? setup_sigcontext+0x820/0x820 [ 804.214722] ? ioctl_preallocate+0x200/0x200 [ 804.219120] ? __fget+0x356/0x510 [ 804.223685] ? check_preemption_disabled+0x41/0x280 [ 804.228717] ? kick_process+0xe4/0x170 [ 804.234720] ? task_work_add+0x93/0x100 [ 804.238829] ? exit_to_usermode_loop+0x36/0x2a0 [ 804.244640] exit_to_usermode_loop+0x204/0x2a0 [ 804.249253] do_syscall_64+0x538/0x620 [ 804.253962] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 804.259146] RIP: 0033:0x4665e9 [ 804.263341] Code: Bad RIP value. [ 804.266702] RSP: 002b:00007f7fca28f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 804.275287] RAX: fffffffffffffe00 RBX: 000000000056bf80 RCX: 00000000004665e9 [ 804.283895] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 804.291163] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 804.299288] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 804.307972] R13: 00007ffdb5018dff R14: 00007f7fca28f300 R15: 0000000000022000 [ 804.316135] [ 804.316135] Showing all locks held in the system: [ 804.323075] 1 lock held by khungtaskd/1570: [ 804.327384] #0: 00000000b26e8ddf (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 [ 804.336185] 1 lock held by in:imklog/7805: [ 804.340411] #0: 0000000063110532 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x26f/0x310 [ 804.348730] 1 lock held by systemd-udevd/10683: [ 804.353591] #0: 00000000adb9b5d3 (&bdev->bd_mutex){+.+.}, at: __blkdev_get+0x1d0/0x1480 [ 804.362068] 1 lock held by syz-executor.5/10725: [ 804.366911] #0: 00000000adb9b5d3 (&bdev->bd_mutex){+.+.}, at: blkdev_put+0x30/0x520 [ 804.375140] 1 lock held by syz-executor.5/10735: [ 804.379913] #0: 00000000adb9b5d3 (&bdev->bd_mutex){+.+.}, at: blkdev_put+0x30/0x520 [ 804.388091] [ 804.389718] ============================================= [ 804.389718] [ 804.397600] NMI backtrace for cpu 0 [ 804.401234] CPU: 0 PID: 1570 Comm: khungtaskd Not tainted 4.19.202-syzkaller #0 [ 804.408757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 804.418100] Call Trace: [ 804.420770] dump_stack+0x1fc/0x2ef [ 804.424381] nmi_cpu_backtrace.cold+0x63/0xa2 [ 804.428859] ? lapic_can_unplug_cpu+0x80/0x80 [ 804.433334] nmi_trigger_cpumask_backtrace+0x1a6/0x1f0 [ 804.438602] watchdog+0x991/0xe60 [ 804.442039] ? reset_hung_task_detector+0x30/0x30 [ 804.446901] kthread+0x33f/0x460 [ 804.450267] ? kthread_park+0x180/0x180 [ 804.454431] ret_from_fork+0x24/0x30 [ 804.459298] Sending NMI from CPU 0 to CPUs 1: [ 804.464390] NMI backtrace for cpu 1 [ 804.464396] CPU: 1 PID: 103 Comm: kworker/u4:2 Not tainted 4.19.202-syzkaller #0 [ 804.464403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 804.464407] Workqueue: phy2 ieee80211_iface_work [ 804.464414] RIP: 0010:skb_release_head_state+0xf4/0x2c0 [ 804.464427] Code: 89 ee e8 df 13 f2 fa 45 84 ed 0f 85 55 01 00 00 e8 a1 12 f2 fa 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 <0f> 85 93 01 00 00 4c 8d 6b 60 48 c7 43 68 00 00 00 00 48 b8 00 00 [ 804.464431] RSP: 0018:ffff8880b53cfc80 EFLAGS: 00000246 [ 804.464439] RAX: dffffc0000000000 RBX: ffff8880a0077a40 RCX: ffffffff86706f4b [ 804.464444] RDX: 1ffff1101400ef55 RSI: ffffffff86706fef RDI: 0000000000000007 [ 804.464450] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 804.464455] R10: 0000000000000007 R11: 0000000000000000 R12: ffff8880a0077aa8 [ 804.464461] R13: 0000000000000080 R14: ffffffff879b1239 R15: dffffc0000000000 [ 804.464467] FS: 0000000000000000(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 [ 804.464472] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 804.464477] CR2: 00007f695795e018 CR3: 00000000a12c8000 CR4: 00000000001406e0 [ 804.464482] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 804.464488] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 804.464490] Call Trace: [ 804.464494] kfree_skb+0xe1/0x3d0 [ 804.464498] ieee80211_iface_work+0x289/0x8a0 [ 804.464501] process_one_work+0x864/0x1570 [ 804.464505] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 804.464509] worker_thread+0x64c/0x1130 [ 804.464513] ? __kthread_parkme+0x133/0x1e0 [ 804.464516] ? process_one_work+0x1570/0x1570 [ 804.464520] kthread+0x33f/0x460 [ 804.464523] ? kthread_park+0x180/0x180 [ 804.464527] ret_from_fork+0x24/0x30 [ 804.465583] Kernel panic - not syncing: hung_task: blocked tasks [ 804.641594] CPU: 0 PID: 1570 Comm: khungtaskd Not tainted 4.19.202-syzkaller #0 [ 804.649030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 804.658433] Call Trace: [ 804.661144] dump_stack+0x1fc/0x2ef [ 804.664763] panic+0x26a/0x50e [ 804.667941] ? __warn_printk+0xf3/0xf3 [ 804.671811] ? lapic_can_unplug_cpu+0x80/0x80 [ 804.676288] ? ___preempt_schedule+0x16/0x18 [ 804.680697] ? watchdog+0x991/0xe60 [ 804.684316] ? nmi_trigger_cpumask_backtrace+0x15e/0x1f0 [ 804.689748] watchdog+0x9a2/0xe60 [ 804.693183] ? reset_hung_task_detector+0x30/0x30 [ 804.698040] kthread+0x33f/0x460 [ 804.701387] ? kthread_park+0x180/0x180 [ 804.705344] ret_from_fork+0x24/0x30 [ 804.710632] Kernel Offset: disabled [ 804.714263] Rebooting in 86400 seconds..