000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x75, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced83054"}) 01:21:32 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x4e, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc"}) 01:21:32 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x83, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c699093"}) 01:21:32 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000380)}) 01:21:32 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x50, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x2, 0x0, &(0x7f0000000380)='l7'}) 01:21:32 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x7d, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a131"}) 01:21:32 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:21:32 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x50, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x2, 0x0, &(0x7f0000000380)='l7'}) 01:21:32 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000380)}) 01:21:32 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x83, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c699093"}) 01:21:32 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8c, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4e, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc"}) 01:21:32 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000380)}) 01:21:32 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x7d, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a131"}) 01:21:32 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x84, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69909356"}) 01:21:32 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x50, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x2, 0x0, &(0x7f0000000380)='l7'}) 01:21:32 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000380)}) 01:21:32 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x7d, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a131"}) 01:21:32 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000380)}) 01:21:32 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8c, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4e, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc"}) 01:21:32 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x84, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69909356"}) 01:21:32 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x43, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff01"}) 01:21:32 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000380)}) 01:21:32 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x50, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0xc, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07"}) 01:21:32 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x81, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69"}) 01:21:32 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x84, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69909356"}) 01:21:33 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x48, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer], 0x4e, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc"}) 01:21:33 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x43, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff01"}) 01:21:33 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000380)='l'}) 01:21:33 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x81, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69"}) 01:21:33 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x50, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x3, 0x0, &(0x7f0000000380)='l7<'}) 01:21:33 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x81, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69"}) 01:21:33 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000380)='l'}) 01:21:33 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000380)}) 01:21:33 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x48, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer], 0x4e, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc"}) 01:21:33 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x81, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69"}) 01:21:33 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x50, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x3, 0x0, &(0x7f0000000380)='l7<'}) 01:21:33 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x81, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69"}) 01:21:33 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000380)}) 01:21:33 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x81, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69"}) 01:21:33 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000380)}) 01:21:33 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x50, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x3, 0x0, &(0x7f0000000380)='l7<'}) 01:21:33 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x83, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c699093"}) 01:21:33 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x48, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer], 0x4e, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc"}) 01:21:33 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000380)}) 01:21:33 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x50, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x8, 0x0, &(0x7f0000000380)="6c373c952be257a3"}) 01:21:33 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x81, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69"}) 01:21:33 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000380)}) 01:21:33 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x83, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c699093"}) 01:21:33 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x80, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4e, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc"}) 01:21:33 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000380)}) 01:21:33 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x50, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x4, 0x0, &(0x7f0000000380)="6c373c95"}) 01:21:33 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x84, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69909356"}) 01:21:33 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x81, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69"}) 01:21:33 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x7c, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4e, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc"}) 01:21:33 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x83, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c699093"}) 01:21:33 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x4e, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc"}) 01:21:33 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x50, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x0, 0x0, &(0x7f0000000380)}) 01:21:33 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x75, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced83054"}) 01:21:33 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x81, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69"}) 01:21:33 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x84, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69909356"}) 01:21:33 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x68, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4e, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc"}) 01:21:33 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x50, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x0, 0x0, &(0x7f0000000380)}) 01:21:33 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x81, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69"}) 01:21:33 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x64, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc"}) 01:21:33 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x54, 0x0, &(0x7f0000000280)=[@request_death, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4e, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc"}) 01:21:33 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x50, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x0, 0x0, 0x0}) 01:21:33 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x84, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69909356"}) 01:21:33 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x81, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69"}) 01:21:34 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x50, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x0, 0x0, &(0x7f0000000380)}) 01:21:34 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8c, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}], 0x85, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69909356f2"}) 01:21:34 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4e, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc"}) 01:21:34 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xac, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, 0x0}}, @dead_binder_done], 0x85, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69909356f2"}) 01:21:34 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x81, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69"}) 01:21:34 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x84, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69909356"}) 01:21:34 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x85, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69909356f2"}) 01:21:34 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x50, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x2, 0x0, &(0x7f0000000380)='l7'}) 01:21:34 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:21:34 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, 0x0}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x85, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69909356f2"}) 01:21:34 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x81, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69"}) 01:21:34 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x98, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x4c, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99"}) 01:21:34 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x50, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x2, 0x0, &(0x7f0000000380)='l7'}) 01:21:34 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:21:34 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x85, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69909356f2"}) 01:21:34 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x50, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x2, 0x0, &(0x7f0000000380)='l7'}) 01:21:34 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x81, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69"}) 01:21:34 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x85, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69909356f2"}) 01:21:34 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x85, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69909356f2"}) 01:21:34 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:21:34 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x50, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x3, 0x0, &(0x7f0000000380)='l7<'}) 01:21:34 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x40, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @increfs_done, @exit_looper, @free_buffer, @dead_binder_done], 0x85, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69909356f2"}) 01:21:34 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x81, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69"}) 01:21:34 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000380)}) 01:21:34 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x81, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69"}) 01:21:34 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x5c, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer], 0x85, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69909356f2"}) 01:21:34 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x98, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x43, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff01"}) 01:21:34 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x81, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69"}) 01:21:34 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000380)}) 01:21:34 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x50, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x3, 0x0, &(0x7f0000000380)='l7<'}) 01:21:34 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x50, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x3, 0x0, &(0x7f0000000380)='l7<'}) 01:21:34 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x98, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x43, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff01"}) 01:21:34 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x0, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x85, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69909356f2"}) 01:21:34 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 01:21:34 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000380)}) 01:21:34 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x5c, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @dead_binder_done], 0x85, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69909356f2"}) 01:21:34 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x50, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x3, 0x0, &(0x7f0000000380)='l7<'}) 01:21:34 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x98, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x43, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff01"}) [ 2974.926593][T19550] binder: 19544:19550 ioctl c0306201 0 returned -14 01:21:34 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x27, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcb"}) 01:21:34 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 01:21:34 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x85, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69909356f2"}) 01:21:35 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x98, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x0, 0x0, 0x0}) 01:21:35 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x98, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x43, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff01"}) 01:21:35 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x88, 0x0, &(0x7f0000000280)=[@acquire_done, @increfs_done, @exit_looper, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x85, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69909356f2"}) 01:21:35 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000380)}) 01:21:35 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 2975.083330][T19565] binder: 19562:19565 ioctl c0306201 0 returned -14 01:21:35 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x5c, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer], 0x85, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69909356f2"}) 01:21:35 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x98, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x0, 0x0, 0x0}) 01:21:35 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x98, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x43, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff01"}) 01:21:35 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000380)}) 01:21:35 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:21:35 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x81, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69"}) [ 2975.255675][T19575] binder: 19574:19575 ioctl c0306201 0 returned -14 01:21:35 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x98, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x43, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff01"}) 01:21:35 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:21:35 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x85, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69909356f2"}) 01:21:35 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x81, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69"}) 01:21:35 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000380)}) 01:21:35 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x98, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x0, 0x0, 0x0}) 01:21:35 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x98, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x43, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff01"}) 01:21:35 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x81, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69"}) 01:21:35 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x98, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x0, 0x0, 0x0}) 01:21:35 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:21:35 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x85, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69909356f2"}) 01:21:35 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x14, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c223"}) 01:21:35 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xb8, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done], 0x81, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69"}) 01:21:35 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x98, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x43, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff01"}) 01:21:35 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:21:35 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000380)='l'}) 01:21:35 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x68, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @dead_binder_done], 0x85, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69909356f2"}) 01:21:35 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x98, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x0, 0x0, 0x0}) 01:21:35 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xac, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done], 0x81, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69"}) 01:21:35 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:21:35 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000380)='l'}) 01:21:35 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x85, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69909356f2"}) 01:21:35 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x98, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x0, 0x0, 0x0}) 01:21:35 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x98, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x43, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff01"}) 01:21:35 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:21:35 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xa0, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}], 0x81, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69"}) 01:21:35 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000380)='l'}) 01:21:35 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x98, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x0, 0x0, 0x0}) 01:21:35 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x0, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x85, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69909356f2"}) 01:21:35 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:21:35 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x5c, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer], 0x81, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69"}) 01:21:35 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x98, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x43, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff01"}) 01:21:36 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x98, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x0, 0x0, 0x0}) 01:21:36 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xb, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c"}) 01:21:36 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x98, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x43, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff01"}) 01:21:36 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:21:36 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x98, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x0, 0x0, 0x0}) 01:21:36 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 01:21:36 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x5c, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer], 0x81, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69"}) 01:21:36 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000380)='l7'}) 01:21:36 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:21:36 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x5c, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer], 0x81, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69"}) 01:21:36 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x98, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x43, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff01"}) [ 2976.257930][T19665] binder: 19663:19665 ioctl c0306201 0 returned -14 01:21:36 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 01:21:36 executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x98, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x0, 0x0, 0x0}) 01:21:36 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000380)='l7'}) 01:21:36 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:21:36 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xa0, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}], 0x81, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69"}) 01:21:36 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000380)='l7'}) 01:21:36 executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x98, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x0, 0x0, 0x0}) 01:21:36 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x98, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x43, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff01"}) 01:21:36 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x98, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x43, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff01"}) [ 2976.438836][T19679] binder: 19676:19679 ioctl c0306201 0 returned -14 01:21:36 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xa0, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}], 0x81, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69"}) 01:21:36 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:21:36 executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x98, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x0, 0x0, 0x0}) 01:21:36 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 01:21:36 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xa0, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}], 0x81, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69"}) 01:21:36 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x98, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x43, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff01"}) 01:21:36 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7, 0x0, &(0x7f0000000380)="6c373c952be257"}) 01:21:36 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 01:21:36 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2976.672651][T19699] binder: 19698:19699 ioctl c0306201 0 returned -14 01:21:36 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 01:21:36 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xa0, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x81, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69"}) 01:21:36 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000380)='l7'}) 01:21:36 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x0, &(0x7f0000000380)='l7<'}) [ 2976.802688][T19710] binder: 19708:19710 ioctl c0306201 0 returned -14 [ 2976.810617][T19712] binder: 19709:19712 ioctl c0306201 0 returned -14 01:21:36 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 01:21:36 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 01:21:36 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x94, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x81, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69"}) 01:21:36 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:21:36 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:21:36 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x0, &(0x7f0000000380)='l7<'}) 01:21:36 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:21:37 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x80, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x81, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69"}) 01:21:37 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 01:21:37 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2977.023948][T19727] binder: 19722:19727 ioctl c0306201 0 returned -14 [ 2977.062917][T19732] binder: 19724:19732 ioctl c0306201 0 returned -14 01:21:37 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 01:21:37 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x43, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff01"}) 01:21:37 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x0, &(0x7f0000000380)='l7<'}) 01:21:37 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x7c, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x81, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69"}) 01:21:37 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 2977.168887][T19738] binder: 19737:19738 ioctl c0306201 0 returned -14 [ 2977.196571][T19741] binder: 19739:19741 ioctl c0306201 0 returned -14 01:21:37 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:21:37 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:21:37 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x43, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff01"}) 01:21:37 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 2977.282616][T19747] binder: 19745:19747 ioctl c0306201 0 returned -14 01:21:37 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x5, 0x0, &(0x7f0000000380)="6c373c952b"}) 01:21:37 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x68, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x81, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69"}) 01:21:37 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x43, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff01"}) 01:21:37 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x98, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x43, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff01"}) 01:21:37 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:21:37 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x0, &(0x7f0000000380)='l7<'}) [ 2977.423945][T19759] binder: 19756:19759 ioctl c0306201 0 returned -14 01:21:37 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x54, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x81, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69"}) 01:21:37 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x5c, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer], 0x81, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69"}) 01:21:37 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8c, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x43, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff01"}) 01:21:37 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xb8, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done], 0x85, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69909356f2"}) 01:21:37 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:21:37 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x0, &(0x7f0000000380)='l7<'}) 01:21:37 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x85, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69909356f2"}) 01:21:37 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x81, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69"}) 01:21:37 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x48, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer], 0x43, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff01"}) 01:21:37 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xb8, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done], 0x85, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69909356f2"}) 01:21:37 executing program 0: r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000400)=@framed, &(0x7f00000004c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000780)=[{0x1, 0x3, 0x1, 0x2}, {0x3, 0x3, 0x3, 0xa}], 0x10, 0x8852}, 0x90) 01:21:37 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x0, &(0x7f0000000380)='l7<'}) 01:21:37 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:21:37 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8c, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:21:37 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x48, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer], 0x43, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff01"}) 01:21:37 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x48) 01:21:37 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x85, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69909356f2"}) 01:21:37 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x48, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer], 0x43, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff01"}) 01:21:37 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f0000000380)="6c373c95"}) 01:21:37 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x85, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69909356f2"}) 01:21:37 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x48, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @free_buffer], 0x0, 0x0, 0x0}) 01:21:37 executing program 5: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) sendto$phonet(r0, &(0x7f00000000c0)="901d7249c33906596e40f6061f9294e170ea8f597346cd6edaac9f1c4779b6f1e2ddb00ed4a642f284b4851dc1f6b26020c1c4a53d2ad648497ad7b1d70c7a4c63bdc45e4e4e1c3a30c8803150de0f97ffb76b477158add5fab0fdc4cda11bfb371b6e1e0b82415ec3a824f6a95ca3c3d06e4d20b60895dbc13332dbe9a9bb30521fa95b6e38967c0838c9fb3978aa33d061f3dc9264b7feae4ab9dd73f69ade665f75c1dc087fc56a58ec507b3f4467b7d5fb479ac723620cbc290d5609241ce7bf87c1548e0ebdc4fe981dfe5489605fc757d3dac04e1e1fc25832384d62d389c3dc16", 0xe4, 0xad493f997ae1ca82, 0xfffffffffffffffc, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "0a8cbfa5625f63bb", "1b4d861413d66c81d6b6fa6375833ca53bbcfeb7aa97f88ef7660e4d86b38d55", "167e7556", "221aefcc90f5f6e1"}, 0x38) 01:21:37 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x48) 01:21:38 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x80, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x43, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff01"}) 01:21:38 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3c, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @exit_looper], 0x0, 0x0, 0x0}) 01:21:38 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x0, &(0x7f0000000380)='l7<'}) 01:21:38 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f0000000380)="6c373c95"}) 01:21:38 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x85, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69909356f2"}) 01:21:38 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x38, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done], 0x0, 0x0, 0x0}) 01:21:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x48) 01:21:38 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x7c, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @increfs_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x43, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff01"}) 01:21:38 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x24, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done], 0x0, 0x0, 0x0}) 01:21:38 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f0000000380)="6c373c95"}) 01:21:38 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x0, &(0x7f0000000380)='l7<'}) 01:21:38 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) sendto$phonet(r0, &(0x7f00000000c0)="901d7249c33906596e40f6061f9294e170ea8f597346cd6edaac9f1c4779b6f1e2ddb00ed4a642f284b4851dc1f6b26020c1c4a53d2ad648497ad7b1d70c7a4c63bdc45e4e4e1c3a30c8803150de0f97ffb76b477158add5fab0fdc4cda11bfb371b6e1e0b82415ec3a824f6a95ca3c3d06e4d20b60895dbc13332dbe9a9bb30521fa95b6e38967c0838c9fb3978aa33d061f3dc9264b7feae4ab9dd73f69ade665f75c1dc087fc56a58ec507b3f4467b7d5fb479ac723620cbc290d5609241ce7bf87c1548e0ebdc4fe981dfe5489605fc757d3dac04e1e1fc25832384d62d389c3dc16", 0xe4, 0xad493f997ae1ca82, 0xfffffffffffffffc, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "0a8cbfa5625f63bb", "1b4d861413d66c81d6b6fa6375833ca53bbcfeb7aa97f88ef7660e4d86b38d55", "167e7556", "221aefcc90f5f6e1"}, 0x38) 01:21:38 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) 01:21:38 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x68, 0x0, &(0x7f0000000280)=[@request_death, @acquire_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x43, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff01"}) 01:21:38 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000280)=[@request_death], 0x0, 0x0, 0x0}) 01:21:38 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x0, &(0x7f0000000380)='l7<'}) 01:21:38 executing program 5: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x10000bb}, 0xffffffffffffffad) openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x40a200, 0x52) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x87, 0x9, 0x1}, 0x11) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x85, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69909356f2"}) 01:21:38 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x54, 0x0, &(0x7f0000000280)=[@request_death, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x43, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff01"}) 01:21:38 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) 01:21:38 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) 01:21:38 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000280)=[@request_death], 0x0, 0x0, 0x0}) 01:21:38 executing program 1: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x10000bb}, 0xffffffffffffffad) openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x40a200, 0x52) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x87, 0x9, 0x1}, 0x11) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x687) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x85, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69909356f2"}) 01:21:38 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x43, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff01"}) 01:21:38 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) 01:21:38 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) 01:21:38 executing program 5: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x10000bb}, 0xffffffffffffffad) openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x40a200, 0x52) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x87, 0x9, 0x1}, 0x11) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0xfc, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x1}, @acquire_done, @increfs_done={0x40106308, 0x1}, @exit_looper, @acquire_done={0x40106309, 0x2}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @fda={0x66646185, 0x3, 0x1, 0x1a}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @dead_binder_done, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x85, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592bd7027a4fcbaaa3adb830bd3410bf8824783c72750fe6f4198cc2db10eb0f94ff0163c28f809299b25d99d7bc8383eb1d892ea098d4a3ca3adfd92f4d80ae5b958cdc3eddbeacea69b59fbc40992ae1ced830543de742729cd9a13108673c69909356f2"}) 01:21:38 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) sendto$phonet(r1, &(0x7f00000000c0)="901d7249c33906596e40f6061f9294e170ea8f597346cd6edaac9f1c4779b6f1e2ddb00ed4a642f284b4851dc1f6b26020c1c4a53d2ad648497ad7b1d70c7a4c63bdc45e4e4e1c3a30c8803150de0f97ffb76b477158add5fab0fdc4cda11bfb371b6e1e0b82415ec3a824f6a95ca3c3d06e4d20b60895dbc13332dbe9a9bb30521fa95b6e38967c0838c9fb3978aa33d061f3dc9264b7feae4ab9dd73f69ade665f75c1dc087fc56a58ec507b3f4467b7d5fb479ac723620cbc290d5609241ce7bf87c1548e0ebdc4fe981dfe5489605fc757d3dac04e1e1fc25832384d62d389c3dc16", 0xe4, 0xad493f997ae1ca82, 0xfffffffffffffffc, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "0a8cbfa5625f63bb", "1b4d861413d66c81d6b6fa6375833ca53bbcfeb7aa97f88ef7660e4d86b38d55", "167e7556", "221aefcc90f5f6e1"}, 0x38) ioctl$SIOCPNADDRESOURCE(r0, 0x5451, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2aa581, 0x0) ioctl$NBD_CLEAR_QUE(r3, 0xab05) 01:21:38 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000280)=[@request_death], 0x0, 0x0, 0x0}) 01:21:38 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:21:38 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) 01:21:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x48) 01:21:38 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x2, 0x0) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x314, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xac}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa679}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_NODE={0x11c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc66601ca}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ID={0x2e, 0x3, "c7ffb991c6efb6c6912ab73910b2874a21d973b4ef94780b8714cec15d7686e6f61f97efa32f8609f5c4"}, @TIPC_NLA_NODE_ID={0xc4, 0x3, "e6406e6b1d0b90ce08886e1deb3af1b76b14cee3231b86ea6734bd59a448a38b3bdb3640261737e8c3e394d00f318061c46c60ed627af01dfaec7d01f87e81de4cda59c455a34ccec55e05368b0f4423f7952a8b67bce7da73d8dbead233476ff6408e6ef97e204bb575f77530c5d04c9eea757b116db8b7f055996eb24b843b8d6255efded873a8d09024659f68f1f0a678e58a2360492062812417f9b2cb29436a1c000822cb7a7877e7891162c2452720c64d047fa424812d2ec82a470eac"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_NODE={0x154, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "c6fa52350bd3806d633ba2ec5938228074f8aa83f5d0ac527170178a80256135f0f60ad15e048f01e3f62c54694f6aced7b56d2320fe1261368fb20476a8b88afc237de44b4e66d66c6daabc93a26ad1b4e67ec33d42b05c50af1a2960f8483339aba60f08dd48c55300c0db0d42d00d21e04a98aef0e589ce7355eaa89e5a9dc3e8a8269e894a601aa3d55782000003719a385a554b163e94e59d7a27c9c6b20bcd6376f394be36570e222a39b540c3d7165162438077ff969ffb90d5fb6e9dd62d74c26b671555964098a9a62e4e36d1221b87e74c56bd8feb50d30972083d759f2bc0d68190194ea2"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xf1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "cf11f5fd1016d7ebbc6285006ac05d410104081661c8e3"}}]}]}, 0x314}, 0x1, 0x0, 0x0, 0x8090}, 0x40000) 01:21:38 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000280)=[@request_death], 0x0, 0x0, 0x0}) 01:21:38 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:21:38 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) sendto$phonet(r1, &(0x7f00000000c0)="901d7249c33906596e40f6061f9294e170ea8f597346cd6edaac9f1c4779b6f1e2ddb00ed4a642f284b4851dc1f6b26020c1c4a53d2ad648497ad7b1d70c7a4c63bdc45e4e4e1c3a30c8803150de0f97ffb76b477158add5fab0fdc4cda11bfb371b6e1e0b82415ec3a824f6a95ca3c3d06e4d20b60895dbc13332dbe9a9bb30521fa95b6e38967c0838c9fb3978aa33d061f3dc9264b7feae4ab9dd73f69ade665f75c1dc087fc56a58ec507b3f4467b7d5fb479ac723620cbc290d5609241ce7bf87c1548e0ebdc4fe981dfe5489605fc757d3dac04e1e1fc25832384d62d389c3dc16", 0xe4, 0xad493f997ae1ca82, 0xfffffffffffffffc, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "0a8cbfa5625f63bb", "1b4d861413d66c81d6b6fa6375833ca53bbcfeb7aa97f88ef7660e4d86b38d55", "167e7556", "221aefcc90f5f6e1"}, 0x38) ioctl$SIOCPNADDRESOURCE(r0, 0x5451, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2aa581, 0x0) ioctl$NBD_CLEAR_QUE(r3, 0xab05) 01:21:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x48) 01:21:38 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000280)=[@request_death], 0x0, 0x0, 0x0}) 01:21:38 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:21:38 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x541b, &(0x7f00000006c0)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x200000, 0x0) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f00000002c0)=0x6) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000000000)=0x4) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) accept$phonet_pipe(r4, 0x0, &(0x7f0000000200)) sendmsg$AUDIT_USER_TTY(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xe8}, 0x1, 0x0, 0x0, 0x81}, 0x40081) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x200, 0x70bd2b, 0x25dfdbf9, {}, ["", "", "", "", "", "", ""]}, 0xfffffffffffffecc}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) memfd_secret(0x0) 01:21:38 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) sendto$phonet(r1, &(0x7f00000000c0)="901d7249c33906596e40f6061f9294e170ea8f597346cd6edaac9f1c4779b6f1e2ddb00ed4a642f284b4851dc1f6b26020c1c4a53d2ad648497ad7b1d70c7a4c63bdc45e4e4e1c3a30c8803150de0f97ffb76b477158add5fab0fdc4cda11bfb371b6e1e0b82415ec3a824f6a95ca3c3d06e4d20b60895dbc13332dbe9a9bb30521fa95b6e38967c0838c9fb3978aa33d061f3dc9264b7feae4ab9dd73f69ade665f75c1dc087fc56a58ec507b3f4467b7d5fb479ac723620cbc290d5609241ce7bf87c1548e0ebdc4fe981dfe5489605fc757d3dac04e1e1fc25832384d62d389c3dc16", 0xe4, 0xad493f997ae1ca82, 0xfffffffffffffffc, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "0a8cbfa5625f63bb", "1b4d861413d66c81d6b6fa6375833ca53bbcfeb7aa97f88ef7660e4d86b38d55", "167e7556", "221aefcc90f5f6e1"}, 0x38) ioctl$SIOCPNADDRESOURCE(r0, 0x5451, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2aa581, 0x0) ioctl$NBD_CLEAR_QUE(r3, 0xab05) 01:21:38 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:21:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x48) 01:21:39 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000280)=[@request_death], 0x0, 0x0, 0x0}) 01:21:39 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000380)}) 01:21:39 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) sendto$phonet(r1, &(0x7f00000000c0)="901d7249c33906596e40f6061f9294e170ea8f597346cd6edaac9f1c4779b6f1e2ddb00ed4a642f284b4851dc1f6b26020c1c4a53d2ad648497ad7b1d70c7a4c63bdc45e4e4e1c3a30c8803150de0f97ffb76b477158add5fab0fdc4cda11bfb371b6e1e0b82415ec3a824f6a95ca3c3d06e4d20b60895dbc13332dbe9a9bb30521fa95b6e38967c0838c9fb3978aa33d061f3dc9264b7feae4ab9dd73f69ade665f75c1dc087fc56a58ec507b3f4467b7d5fb479ac723620cbc290d5609241ce7bf87c1548e0ebdc4fe981dfe5489605fc757d3dac04e1e1fc25832384d62d389c3dc16", 0xe4, 0xad493f997ae1ca82, 0xfffffffffffffffc, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "0a8cbfa5625f63bb", "1b4d861413d66c81d6b6fa6375833ca53bbcfeb7aa97f88ef7660e4d86b38d55", "167e7556", "221aefcc90f5f6e1"}, 0x38) ioctl$SIOCPNADDRESOURCE(r0, 0x5451, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2aa581, 0x0) 01:21:39 executing program 5: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x14, r0, 0x100, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r1, 0x5451, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r1, &(0x7f0000000000)="930e03bad00a9de8ca167f2ad1f1bc287c50d416591e42aa4da3cb94cf13bd1ea73466c3fad6288fd36377ed7da0e5eee45bcd9c1868c16ebc2c693dd6", 0x3d, 0x80, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) 01:21:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x48) 01:21:39 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x541b, &(0x7f00000006c0)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x200000, 0x0) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f00000002c0)=0x6) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000000000)=0x4) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) accept$phonet_pipe(r4, 0x0, &(0x7f0000000200)) sendmsg$AUDIT_USER_TTY(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xe8}, 0x1, 0x0, 0x0, 0x81}, 0x40081) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x200, 0x70bd2b, 0x25dfdbf9, {}, ["", "", "", "", "", "", ""]}, 0xfffffffffffffecc}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) memfd_secret(0x0) 01:21:39 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000280)=[@request_death], 0x0, 0x0, 0x0}) 01:21:39 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000380)}) 01:21:39 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x541b, &(0x7f00000006c0)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x200000, 0x0) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f00000002c0)=0x6) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000000000)=0x4) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) accept$phonet_pipe(r4, 0x0, &(0x7f0000000200)) sendmsg$AUDIT_USER_TTY(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xe8}, 0x1, 0x0, 0x0, 0x81}, 0x40081) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x200, 0x70bd2b, 0x25dfdbf9, {}, ["", "", "", "", "", "", ""]}, 0xfffffffffffffecc}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) memfd_secret(0x0) 01:21:39 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) sendto$phonet(r1, &(0x7f00000000c0)="901d7249c33906596e40f6061f9294e170ea8f597346cd6edaac9f1c4779b6f1e2ddb00ed4a642f284b4851dc1f6b26020c1c4a53d2ad648497ad7b1d70c7a4c63bdc45e4e4e1c3a30c8803150de0f97ffb76b477158add5fab0fdc4cda11bfb371b6e1e0b82415ec3a824f6a95ca3c3d06e4d20b60895dbc13332dbe9a9bb30521fa95b6e38967c0838c9fb3978aa33d061f3dc9264b7feae4ab9dd73f69ade665f75c1dc087fc56a58ec507b3f4467b7d5fb479ac723620cbc290d5609241ce7bf87c1548e0ebdc4fe981dfe5489605fc757d3dac04e1e1fc25832384d62d389c3dc16", 0xe4, 0xad493f997ae1ca82, 0xfffffffffffffffc, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "0a8cbfa5625f63bb", "1b4d861413d66c81d6b6fa6375833ca53bbcfeb7aa97f88ef7660e4d86b38d55", "167e7556", "221aefcc90f5f6e1"}, 0x38) ioctl$SIOCPNADDRESOURCE(r0, 0x5451, 0x0) 01:21:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 01:21:39 executing program 5: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x14, r0, 0x100, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r1, 0x5451, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r1, &(0x7f0000000000)="930e03bad00a9de8ca167f2ad1f1bc287c50d416591e42aa4da3cb94cf13bd1ea73466c3fad6288fd36377ed7da0e5eee45bcd9c1868c16ebc2c693dd6", 0x3d, 0x80, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) 01:21:39 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000280)=[@request_death], 0x0, 0x0, 0x0}) 01:21:39 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x541b, &(0x7f00000006c0)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x200000, 0x0) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f00000002c0)=0x6) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000000000)=0x4) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) accept$phonet_pipe(r4, 0x0, &(0x7f0000000200)) sendmsg$AUDIT_USER_TTY(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xe8}, 0x1, 0x0, 0x0, 0x81}, 0x40081) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x200, 0x70bd2b, 0x25dfdbf9, {}, ["", "", "", "", "", "", ""]}, 0xfffffffffffffecc}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:39 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000380)}) 01:21:39 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) sendto$phonet(r0, &(0x7f00000000c0)="901d7249c33906596e40f6061f9294e170ea8f597346cd6edaac9f1c4779b6f1e2ddb00ed4a642f284b4851dc1f6b26020c1c4a53d2ad648497ad7b1d70c7a4c63bdc45e4e4e1c3a30c8803150de0f97ffb76b477158add5fab0fdc4cda11bfb371b6e1e0b82415ec3a824f6a95ca3c3d06e4d20b60895dbc13332dbe9a9bb30521fa95b6e38967c0838c9fb3978aa33d061f3dc9264b7feae4ab9dd73f69ade665f75c1dc087fc56a58ec507b3f4467b7d5fb479ac723620cbc290d5609241ce7bf87c1548e0ebdc4fe981dfe5489605fc757d3dac04e1e1fc25832384d62d389c3dc16", 0xe4, 0xad493f997ae1ca82, 0xfffffffffffffffc, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "0a8cbfa5625f63bb", "1b4d861413d66c81d6b6fa6375833ca53bbcfeb7aa97f88ef7660e4d86b38d55", "167e7556", "221aefcc90f5f6e1"}, 0x38) 01:21:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 01:21:39 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000280)=[@request_death], 0x0, 0x0, 0x0}) 01:21:39 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x22, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830c22312255e1d6c1fd8af4385f191592b"}) 01:21:39 executing program 5: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x14, r0, 0x100, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r1, 0x5451, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r1, &(0x7f0000000000)="930e03bad00a9de8ca167f2ad1f1bc287c50d416591e42aa4da3cb94cf13bd1ea73466c3fad6288fd36377ed7da0e5eee45bcd9c1868c16ebc2c693dd6", 0x3d, 0x80, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) 01:21:39 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x541b, &(0x7f00000006c0)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x200000, 0x0) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f00000002c0)=0x6) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000000000)=0x4) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) accept$phonet_pipe(r4, 0x0, &(0x7f0000000200)) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x200, 0x70bd2b, 0x25dfdbf9, {}, ["", "", "", "", "", "", ""]}, 0xfffffffffffffecc}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:39 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000280)=[@request_death], 0x0, 0x0, 0x0}) 01:21:39 executing program 0: socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r1, 0x541b, &(0x7f00000006c0)) 01:21:39 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) sendto$phonet(r0, &(0x7f00000000c0)="901d7249c33906596e40f6061f9294e170ea8f597346cd6edaac9f1c4779b6f1e2ddb00ed4a642f284b4851dc1f6b26020c1c4a53d2ad648497ad7b1d70c7a4c63bdc45e4e4e1c3a30c8803150de0f97ffb76b477158add5fab0fdc4cda11bfb371b6e1e0b82415ec3a824f6a95ca3c3d06e4d20b60895dbc13332dbe9a9bb30521fa95b6e38967c0838c9fb3978aa33d061f3dc9264b7feae4ab9dd73f69ade665f75c1dc087fc56a58ec507b3f4467b7d5fb479ac723620cbc290d5609241ce7bf87c1548e0ebdc4fe981dfe5489605fc757d3dac04e1e1fc25832384d62d389c3dc16", 0xe4, 0xad493f997ae1ca82, 0xfffffffffffffffc, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) 01:21:39 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000380)='l'}) 01:21:39 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x541b, &(0x7f00000006c0)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x200000, 0x0) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f00000002c0)=0x6) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000000000)=0x4) r3 = socket$nl_audit(0x10, 0x3, 0x9) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x200, 0x70bd2b, 0x25dfdbf9, {}, ["", "", "", "", "", "", ""]}, 0xfffffffffffffecc}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:39 executing program 5: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x14, r0, 0x100, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r1, 0x5451, 0x0) sendto$phonet(r1, &(0x7f0000000000)="930e03bad00a9de8ca167f2ad1f1bc287c50d416591e42aa4da3cb94cf13bd1ea73466c3fad6288fd36377ed7da0e5eee45bcd9c1868c16ebc2c693dd6", 0x3d, 0x80, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) 01:21:39 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept$phonet_pipe(r0, 0x0, &(0x7f0000000000)) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$SIOCPNADDRESOURCE(r0, 0x2, &(0x7f00000006c0)) r2 = memfd_secret(0x0) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x200) accept$phonet_pipe(r2, 0x0, &(0x7f0000000140)=0x41) 01:21:39 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000280)=[@request_death], 0x0, 0x0, 0x0}) 01:21:39 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000380)='l'}) 01:21:39 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) sendto$phonet(r0, &(0x7f00000000c0)="901d7249c33906596e40f6061f9294e170ea8f597346cd6edaac9f1c4779b6f1e2ddb00ed4a642f284b4851dc1f6b26020c1c4a53d2ad648497ad7b1d70c7a4c63bdc45e4e4e1c3a30c8803150de0f97ffb76b477158add5fab0fdc4cda11bfb371b6e1e0b82415ec3a824f6a95ca3c3d06e4d20b60895dbc13332dbe9a9bb30521fa95b6e38967c0838c9fb3978aa33d061f3dc9264b7feae4ab9dd73f69ade665f75c1dc087fc56a58ec507b3f4467b7d5fb479ac723620cbc290d5609241ce7bf87c1548e0ebdc4fe981dfe5489605fc757d3dac04e1e1fc25832384d62d389c3dc16", 0xe4, 0xad493f997ae1ca82, 0xfffffffffffffffc, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) 01:21:39 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x541b, &(0x7f00000006c0)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x200000, 0x0) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f00000002c0)=0x6) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000000000)=0x4) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x200, 0x70bd2b, 0x25dfdbf9, {}, ["", "", "", "", "", "", ""]}, 0xfffffffffffffecc}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:39 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000280)=[@request_death], 0x0, 0x0, 0x0}) 01:21:39 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x541b, &(0x7f00000006c0)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x200000, 0x0) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f00000002c0)=0x6) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000000000)=0x4) r3 = socket$nl_audit(0x10, 0x3, 0x9) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x200, 0x70bd2b, 0x25dfdbf9, {}, ["", "", "", "", "", "", ""]}, 0xfffffffffffffecc}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:39 executing program 5: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x14, r0, 0x100, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r1, &(0x7f0000000000)="930e03bad00a9de8ca167f2ad1f1bc287c50d416591e42aa4da3cb94cf13bd1ea73466c3fad6288fd36377ed7da0e5eee45bcd9c1868c16ebc2c693dd6", 0x3d, 0x80, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) 01:21:39 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000380)='l'}) 01:21:39 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) sendto$phonet(r0, &(0x7f00000000c0)="901d7249c33906596e40f6061f9294e170ea8f597346cd6edaac9f1c4779b6f1e2ddb00ed4a642f284b4851dc1f6b26020c1c4a53d2ad648497ad7b1d70c7a4c63bdc45e4e4e1c3a30c8803150de0f97ffb76b477158add5fab0fdc4cda11bfb371b6e1e0b82415ec3a824f6a95ca3c3d06e4d20b60895dbc13332dbe9a9bb30521fa95b6e38967c0838c9fb3978aa33d061f3dc9264b7feae4ab9dd73f69ade665f75c1dc087fc56a58ec507b3f4467b7d5fb479ac723620cbc290d5609241ce7bf87c1548e0ebdc4fe981dfe5489605fc757d3dac04e1e1fc25832384d62d389c3dc16", 0xe4, 0xad493f997ae1ca82, 0xfffffffffffffffc, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 01:21:39 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000280)=[@request_death], 0x0, 0x0, 0x0}) 01:21:39 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x541b, &(0x7f00000006c0)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x200000, 0x0) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f00000002c0)=0x6) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000000000)=0x4) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x200, 0x70bd2b, 0x25dfdbf9, {}, ["", "", "", "", "", "", ""]}, 0xfffffffffffffecc}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:39 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept$phonet_pipe(r0, 0x0, &(0x7f0000000000)) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$SIOCPNADDRESOURCE(r0, 0x2, &(0x7f00000006c0)) r2 = memfd_secret(0x0) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x200) accept$phonet_pipe(r2, 0x0, &(0x7f0000000140)=0x41) 01:21:39 executing program 5: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x14, r0, 0x100, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendto$phonet(0xffffffffffffffff, &(0x7f0000000000)="930e03bad00a9de8ca167f2ad1f1bc287c50d416591e42aa4da3cb94cf13bd1ea73466c3fad6288fd36377ed7da0e5eee45bcd9c1868c16ebc2c693dd6", 0x3d, 0x80, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) 01:21:39 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x12, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f6c07c70904a59830"}) 01:21:39 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) sendto$phonet(r0, &(0x7f00000000c0)="901d7249c33906596e40f6061f9294e170ea8f597346cd6edaac9f1c4779b6f1e2ddb00ed4a642f284b4851dc1f6b26020c1c4a53d2ad648497ad7b1d70c7a4c63bdc45e4e4e1c3a30c8803150de0f97ffb76b477158add5fab0fdc4cda11bfb371b6e1e0b82415ec3a824f6a95ca3c3d06e4d20b60895dbc13332dbe9a9bb30521fa95b6e38967c0838c9fb3978aa33d061f3dc9264b7feae4ab9dd73f69ade665f75c1dc087fc56a58ec507b3f4467b7d5fb479ac723620cbc290d5609241ce7bf87c1548e0ebdc4fe981dfe5489605fc757d3dac04e1e1fc25832384d62d389c3dc16", 0xe4, 0xad493f997ae1ca82, 0xfffffffffffffffc, 0x0) 01:21:40 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 01:21:40 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x541b, &(0x7f00000006c0)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x200000, 0x0) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f00000002c0)=0x6) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000000000)=0x4) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x200, 0x70bd2b, 0x25dfdbf9, {}, ["", "", "", "", "", "", ""]}, 0xfffffffffffffecc}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:40 executing program 5: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x14, r0, 0x100, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendto$phonet(0xffffffffffffffff, &(0x7f0000000000)="930e03bad00a9de8ca167f2ad1f1bc287c50d416591e42aa4da3cb94cf13bd1ea73466c3fad6288fd36377ed7da0e5eee45bcd9c1868c16ebc2c693dd6", 0x3d, 0x80, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) 01:21:40 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000380)='l7'}) 01:21:40 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r0, &(0x7f00000000c0)="901d7249c33906596e40f6061f9294e170ea8f597346cd6edaac9f1c4779b6f1e2ddb00ed4a642f284b4851dc1f6b26020c1c4a53d2ad648497ad7b1d70c7a4c63bdc45e4e4e1c3a30c8803150de0f97ffb76b477158add5fab0fdc4cda11bfb371b6e1e0b82415ec3a824f6a95ca3c3d06e4d20b60895dbc13332dbe9a9bb30521fa95b6e38967c0838c9fb3978aa33d061f3dc9264b7feae4ab9dd73f69ade665f75c1dc087fc56a58ec507b3f4467b7d5fb479ac723620cbc290d5609241ce7bf87c1548e0ebdc4fe981dfe5489605fc757d3dac04e1e1fc25832384d62d389c3dc16", 0xe4, 0xad493f997ae1ca82, 0xfffffffffffffffc, 0x0) 01:21:40 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept$phonet_pipe(r0, 0x0, &(0x7f0000000000)) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$SIOCPNADDRESOURCE(r0, 0x2, &(0x7f00000006c0)) r2 = memfd_secret(0x0) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x200) accept$phonet_pipe(r2, 0x0, &(0x7f0000000140)=0x41) [ 2980.189486][T19989] binder: 19986:19989 ioctl c0306201 0 returned -14 01:21:40 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000380)='l7'}) 01:21:40 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 01:21:40 executing program 5: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x14, r0, 0x100, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendto$phonet(0xffffffffffffffff, &(0x7f0000000000)="930e03bad00a9de8ca167f2ad1f1bc287c50d416591e42aa4da3cb94cf13bd1ea73466c3fad6288fd36377ed7da0e5eee45bcd9c1868c16ebc2c693dd6", 0x3d, 0x80, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) 01:21:40 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(0xffffffffffffffff, &(0x7f00000000c0)="901d7249c33906596e40f6061f9294e170ea8f597346cd6edaac9f1c4779b6f1e2ddb00ed4a642f284b4851dc1f6b26020c1c4a53d2ad648497ad7b1d70c7a4c63bdc45e4e4e1c3a30c8803150de0f97ffb76b477158add5fab0fdc4cda11bfb371b6e1e0b82415ec3a824f6a95ca3c3d06e4d20b60895dbc13332dbe9a9bb30521fa95b6e38967c0838c9fb3978aa33d061f3dc9264b7feae4ab9dd73f69ade665f75c1dc087fc56a58ec507b3f4467b7d5fb479ac723620cbc290d5609241ce7bf87c1548e0ebdc4fe981dfe5489605fc757d3dac04e1e1fc25832384d62d389c3dc16", 0xe4, 0xad493f997ae1ca82, 0xfffffffffffffffc, 0x0) 01:21:40 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x541b, &(0x7f00000006c0)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x200000, 0x0) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f00000002c0)=0x6) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000000000)=0x4) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x200, 0x70bd2b, 0x25dfdbf9, {}, ["", "", "", "", "", "", ""]}, 0xfffffffffffffecc}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:40 executing program 5: syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r0, &(0x7f0000000000)="930e03bad00a9de8ca167f2ad1f1bc287c50d416591e42aa4da3cb94cf13bd1ea73466c3fad6288fd36377ed7da0e5eee45bcd9c1868c16ebc2c693dd6", 0x3d, 0x80, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) 01:21:40 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000380)='l7'}) 01:21:40 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000380)='l7'}) 01:21:40 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(0xffffffffffffffff, &(0x7f00000000c0)="901d7249c33906596e40f6061f9294e170ea8f597346cd6edaac9f1c4779b6f1e2ddb00ed4a642f284b4851dc1f6b26020c1c4a53d2ad648497ad7b1d70c7a4c63bdc45e4e4e1c3a30c8803150de0f97ffb76b477158add5fab0fdc4cda11bfb371b6e1e0b82415ec3a824f6a95ca3c3d06e4d20b60895dbc13332dbe9a9bb30521fa95b6e38967c0838c9fb3978aa33d061f3dc9264b7feae4ab9dd73f69ade665f75c1dc087fc56a58ec507b3f4467b7d5fb479ac723620cbc290d5609241ce7bf87c1548e0ebdc4fe981dfe5489605fc757d3dac04e1e1fc25832384d62d389c3dc16", 0xe4, 0xad493f997ae1ca82, 0xfffffffffffffffc, 0x0) [ 2980.394462][T20008] binder: 20005:20008 ioctl c0306201 0 returned -14 01:21:40 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 01:21:40 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x541b, &(0x7f00000006c0)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x200000, 0x0) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f00000002c0)=0x6) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x200, 0x70bd2b, 0x25dfdbf9, {}, ["", "", "", "", "", "", ""]}, 0xfffffffffffffecc}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:40 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r0, &(0x7f0000000000)="930e03bad00a9de8ca167f2ad1f1bc287c50d416591e42aa4da3cb94cf13bd1ea73466c3fad6288fd36377ed7da0e5eee45bcd9c1868c16ebc2c693dd6", 0x3d, 0x80, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) 01:21:40 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) r3 = memfd_secret(0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f0000000440)=0x4) connect$can_bcm(r3, &(0x7f0000000480)={0x1d, r4}, 0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x26, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x3, 0xaf, &(0x7f00000001c0)=""/175, 0x41100, 0x41, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x10, 0xff}, 0x90) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000000)) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r6 = memfd_secret(0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r6) ioctl$SIOCPNADDRESOURCE(r0, 0x2, 0x0) 01:21:40 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(0xffffffffffffffff, &(0x7f00000000c0)="901d7249c33906596e40f6061f9294e170ea8f597346cd6edaac9f1c4779b6f1e2ddb00ed4a642f284b4851dc1f6b26020c1c4a53d2ad648497ad7b1d70c7a4c63bdc45e4e4e1c3a30c8803150de0f97ffb76b477158add5fab0fdc4cda11bfb371b6e1e0b82415ec3a824f6a95ca3c3d06e4d20b60895dbc13332dbe9a9bb30521fa95b6e38967c0838c9fb3978aa33d061f3dc9264b7feae4ab9dd73f69ade665f75c1dc087fc56a58ec507b3f4467b7d5fb479ac723620cbc290d5609241ce7bf87c1548e0ebdc4fe981dfe5489605fc757d3dac04e1e1fc25832384d62d389c3dc16", 0xe4, 0xad493f997ae1ca82, 0xfffffffffffffffc, 0x0) 01:21:40 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xa, 0x0, &(0x7f0000000380)="6c373c952be257a3e50f"}) 01:21:40 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2980.541790][T20019] binder: 20018:20019 ioctl c0306201 0 returned -14 01:21:40 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x541b, &(0x7f00000006c0)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x200000, 0x0) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f00000002c0)=0x6) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x200, 0x70bd2b, 0x25dfdbf9, {}, ["", "", "", "", "", "", ""]}, 0xfffffffffffffecc}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:40 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000380)='l7'}) 01:21:40 executing program 5: socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(0xffffffffffffffff, &(0x7f0000000000)="930e03bad00a9de8ca167f2ad1f1bc287c50d416591e42aa4da3cb94cf13bd1ea73466c3fad6288fd36377ed7da0e5eee45bcd9c1868c16ebc2c693dd6", 0x3d, 0x80, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) 01:21:40 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r0, &(0x7f00000000c0)="901d7249c33906596e40f6061f9294e170ea8f597346cd6edaac9f1c4779b6f1e2ddb00ed4a642f284b4851dc1f6b26020c1c4a53d2ad648497ad7b1d70c7a4c63bdc45e4e4e1c3a30c8803150de0f97ffb76b477158add5fab0fdc4cda11bfb371b6e1e0b82415ec3a824f6a95ca3c3d06e4d20b60895dbc13332dbe9a9bb30521fa95b6e38967c0838c9fb3978aa33d061f3dc9264b7feae4ab9dd73f69ade665f75c1dc087fc56a58ec507b3f4467b7d5fb479ac723620cbc290d5609241ce7bf87c1548e0ebdc4fe981dfe5489605fc757d3dac04e1e1fc25832384d62d389c3dc16", 0xe4, 0xad493f997ae1ca82, 0xfffffffffffffffc, 0x0) [ 2980.697692][T20023] block nbd0: shutting down sockets 01:21:40 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) r3 = memfd_secret(0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f0000000440)=0x4) connect$can_bcm(r3, &(0x7f0000000480)={0x1d, r4}, 0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x26, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x3, 0xaf, &(0x7f00000001c0)=""/175, 0x41100, 0x41, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x10, 0xff}, 0x90) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000000)) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r6 = memfd_secret(0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r6) ioctl$SIOCPNADDRESOURCE(r0, 0x2, 0x0) 01:21:40 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:21:40 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000380)='l7'}) 01:21:40 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x541b, &(0x7f00000006c0)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x200000, 0x0) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f00000002c0)=0x6) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x200, 0x70bd2b, 0x25dfdbf9, {}, ["", "", "", "", "", "", ""]}, 0xfffffffffffffecc}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:40 executing program 5: socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(0xffffffffffffffff, &(0x7f0000000000)="930e03bad00a9de8ca167f2ad1f1bc287c50d416591e42aa4da3cb94cf13bd1ea73466c3fad6288fd36377ed7da0e5eee45bcd9c1868c16ebc2c693dd6", 0x3d, 0x80, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) 01:21:40 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(0xffffffffffffffff, &(0x7f00000000c0)="901d7249c33906596e40f6061f9294e170ea8f597346cd6edaac9f1c4779b6f1e2ddb00ed4a642f284b4851dc1f6b26020c1c4a53d2ad648497ad7b1d70c7a4c63bdc45e4e4e1c3a30c8803150de0f97ffb76b477158add5fab0fdc4cda11bfb371b6e1e0b82415ec3a824f6a95ca3c3d06e4d20b60895dbc13332dbe9a9bb30521fa95b6e38967c0838c9fb3978aa33d061f3dc9264b7feae4ab9dd73f69ade665f75c1dc087fc56a58ec507b3f4467b7d5fb479ac723620cbc290d5609241ce7bf87c1548e0ebdc4fe981dfe5489605fc757d3dac04e1e1fc25832384d62d389c3dc16", 0xe4, 0xad493f997ae1ca82, 0xfffffffffffffffc, 0x0) 01:21:40 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000380)='l7'}) 01:21:40 executing program 5: socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(0xffffffffffffffff, &(0x7f0000000000)="930e03bad00a9de8ca167f2ad1f1bc287c50d416591e42aa4da3cb94cf13bd1ea73466c3fad6288fd36377ed7da0e5eee45bcd9c1868c16ebc2c693dd6", 0x3d, 0x80, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) [ 2980.879511][T20039] block nbd0: shutting down sockets 01:21:40 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x541b, &(0x7f00000006c0)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x200000, 0x0) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f00000002c0)=0x6) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x200, 0x70bd2b, 0x25dfdbf9, {}, ["", "", "", "", "", "", ""]}, 0xfffffffffffffecc}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:40 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:21:40 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) r3 = memfd_secret(0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f0000000440)=0x4) connect$can_bcm(r3, &(0x7f0000000480)={0x1d, r4}, 0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x26, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x3, 0xaf, &(0x7f00000001c0)=""/175, 0x41100, 0x41, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x10, 0xff}, 0x90) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000000)) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r6 = memfd_secret(0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r6) ioctl$SIOCPNADDRESOURCE(r0, 0x2, 0x0) 01:21:40 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(0xffffffffffffffff, &(0x7f00000000c0)="901d7249c33906596e40f6061f9294e170ea8f597346cd6edaac9f1c4779b6f1e2ddb00ed4a642f284b4851dc1f6b26020c1c4a53d2ad648497ad7b1d70c7a4c63bdc45e4e4e1c3a30c8803150de0f97ffb76b477158add5fab0fdc4cda11bfb371b6e1e0b82415ec3a824f6a95ca3c3d06e4d20b60895dbc13332dbe9a9bb30521fa95b6e38967c0838c9fb3978aa33d061f3dc9264b7feae4ab9dd73f69ade665f75c1dc087fc56a58ec507b3f4467b7d5fb479ac723620cbc290d5609241ce7bf87c1548e0ebdc4fe981dfe5489605fc757d3dac04e1e1fc25832384d62d389c3dc16", 0xe4, 0xad493f997ae1ca82, 0xfffffffffffffffc, 0x0) 01:21:40 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r0, 0x0, 0x0, 0x80, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) 01:21:40 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) 01:21:41 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x541b, &(0x7f00000006c0)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x200000, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x200, 0x70bd2b, 0x25dfdbf9, {}, ["", "", "", "", "", "", ""]}, 0xfffffffffffffecc}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:41 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6, 0x0, &(0x7f0000000380)="6c373c952be2"}) 01:21:41 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(0xffffffffffffffff, &(0x7f00000000c0)="901d7249c33906596e40f6061f9294e170ea8f597346cd6edaac9f1c4779b6f1e2ddb00ed4a642f284b4851dc1f6b26020c1c4a53d2ad648497ad7b1d70c7a4c63bdc45e4e4e1c3a30c8803150de0f97ffb76b477158add5fab0fdc4cda11bfb371b6e1e0b82415ec3a824f6a95ca3c3d06e4d20b60895dbc13332dbe9a9bb30521fa95b6e38967c0838c9fb3978aa33d061f3dc9264b7feae4ab9dd73f69ade665f75c1dc087fc56a58ec507b3f4467b7d5fb479ac723620cbc290d5609241ce7bf87c1548e0ebdc4fe981dfe5489605fc757d3dac04e1e1fc25832384d62d389c3dc16", 0xe4, 0xad493f997ae1ca82, 0xfffffffffffffffc, 0x0) [ 2981.109594][T20060] block nbd0: shutting down sockets 01:21:41 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r0, 0x0, 0x0, 0x80, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) 01:21:41 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r0, 0x0, 0x0, 0x80, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) 01:21:41 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) 01:21:41 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x541b, &(0x7f00000006c0)) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x200, 0x70bd2b, 0x25dfdbf9, {}, ["", "", "", "", "", "", ""]}, 0xfffffffffffffecc}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:41 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000380)='l7'}) 01:21:41 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r0, 0x0, 0x0, 0xad493f997ae1ca82, 0xfffffffffffffffc, 0x0) 01:21:41 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r0, 0x0, 0x0, 0x80, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) 01:21:41 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r0, 0x0, 0x0, 0x80, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) 01:21:41 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) 01:21:41 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000380)='l7'}) 01:21:41 executing program 4: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x200, 0x70bd2b, 0x25dfdbf9, {}, ["", "", "", "", "", "", ""]}, 0xfffffffffffffecc}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:41 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r0, 0x0, 0x0, 0x80, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) 01:21:41 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r0, &(0x7f0000000000), 0x0, 0x80, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) 01:21:41 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0) 01:21:41 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000380)='l7'}) 01:21:41 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6, 0x0, &(0x7f0000000380)="6c373c952be2"}) 01:21:41 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x200, 0x70bd2b, 0x25dfdbf9, {}, ["", "", "", "", "", "", ""]}, 0xfffffffffffffecc}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:41 executing program 0: sendto$phonet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) 01:21:41 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r0, &(0x7f0000000000), 0x0, 0x80, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) 01:21:41 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000380)='l7'}) 01:21:41 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) r3 = memfd_secret(0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f0000000440)=0x4) connect$can_bcm(r3, &(0x7f0000000480)={0x1d, r4}, 0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x26, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x3, 0xaf, &(0x7f00000001c0)=""/175, 0x41100, 0x41, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x10, 0xff}, 0x90) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000000)) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r6 = memfd_secret(0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r6) ioctl$SIOCPNADDRESOURCE(r0, 0x2, 0x0) 01:21:41 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f0000000380)="6c373c95"}) 01:21:41 executing program 4: socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x200, 0x70bd2b, 0x25dfdbf9, {}, ["", "", "", "", "", "", ""]}, 0xfffffffffffffecc}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:41 executing program 0: sendto$phonet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) 01:21:41 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r0, &(0x7f0000000000), 0x0, 0x80, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) 01:21:41 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x9, 0x81}, 0x10) r2 = memfd_secret(0x0) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000000000)=0x81) ioctl$SIOCPNADDRESOURCE(r0, 0x541b, 0x0) 01:21:41 executing program 4: socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x200, 0x70bd2b, 0x25dfdbf9, {}, ["", "", "", "", "", "", ""]}, 0xfffffffffffffecc}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:41 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000380)='l7'}) 01:21:41 executing program 0: sendto$phonet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) [ 2981.776865][T20112] block nbd2: shutting down sockets 01:21:41 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) r2 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303}, "efe605fecd94d793", "6a0e4b7227e6b8f5f6c9118444d67da321d580f8a6fa18c1c67f5de5cc109432", "c5a439c1", "e3440f7ef92e6fcd"}, 0x38) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) ioctl$SIOCPNADDRESOURCE(r0, 0x5421, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "e64fc9a23c855eeb", "766636c208e10ecc523feb3db7d78d71", "9a0e1950", "397b3aed38340bad"}, 0x28) 01:21:41 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r0, &(0x7f0000000000)="930e03bad00a9de8ca167f2ad1f1bc287c50d416591e42aa4da3cb94cf13bd", 0x1f, 0x80, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) 01:21:41 executing program 4: socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x200, 0x70bd2b, 0x25dfdbf9, {}, ["", "", "", "", "", "", ""]}, 0xfffffffffffffecc}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:41 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000380)='l7'}) 01:21:41 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000380)='l7'}) 01:21:41 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = memfd_secret(0x80000) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x420, 0x70bd29, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) ioctl$SIOCPNADDRESOURCE(r1, 0x2, &(0x7f0000000040)=0x400001ff) 01:21:41 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000380)='l7'}) 01:21:41 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) 01:21:41 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r0, &(0x7f0000000000)="93", 0x1, 0x80, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) 01:21:42 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, 0x0, 0x44881) 01:21:42 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$SIOCPNADDRESOURCE(r1, 0x2, 0x0) 01:21:42 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r0, &(0x7f0000000000), 0x0, 0x80, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) [ 2982.118146][T20143] block nbd1: shutting down sockets 01:21:42 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, 0x0, 0x44881) 01:21:42 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) 01:21:42 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x0, &(0x7f0000000380)='l7<'}) 01:21:42 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_enable(r1, &(0x7f00000000c0)='1', 0x1) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) write$P9_RRENAMEAT(r2, &(0x7f0000000140)={0x7, 0x4b, 0x1005}, 0x7) ioctl$SIOCPNADDRESOURCE(r0, 0x2, 0x0) r4 = memfd_secret(0x80000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, r4, 0x4, 0x2004, 0x2}, 0x48) 01:21:42 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, 0x0, 0x44881) 01:21:42 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r0, &(0x7f0000000000), 0x0, 0x80, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) 01:21:42 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$SIOCPNADDRESOURCE(r1, 0x2, 0x0) 01:21:42 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) 01:21:42 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x200, 0x70bd2b, 0x25dfdbf9, {}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:42 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_enable(r1, &(0x7f00000000c0)='1', 0x1) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) write$P9_RRENAMEAT(r2, &(0x7f0000000140)={0x7, 0x4b, 0x1005}, 0x7) ioctl$SIOCPNADDRESOURCE(r0, 0x2, 0x0) r4 = memfd_secret(0x80000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, r4, 0x4, 0x2004, 0x2}, 0x48) 01:21:42 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x0, &(0x7f0000000380)='l7<'}) 01:21:42 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) 01:21:42 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, 0x0, 0x44881) 01:21:42 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r0, &(0x7f0000000000), 0x0, 0x80, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) 01:21:42 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x200, 0x70bd2b, 0x25dfdbf9, {}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:42 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) 01:21:42 executing program 1: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x800, 0x70bd26, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x5451, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x70) 01:21:42 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x0, &(0x7f0000000380)='l7<'}) 01:21:42 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) ioctl$SIOCPNADDRESOURCE(r0, 0x5421, 0x0) 01:21:42 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r0, &(0x7f0000000000)="93", 0x1, 0x0, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) 01:21:42 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x200, 0x70bd2b, 0x25dfdbf9, {}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:42 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) 01:21:42 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x5421, 0x0) syz_io_uring_setup(0xe82, &(0x7f0000000000)={0x0, 0x4c92, 0x2000, 0x2, 0x2da}, &(0x7f0000000080), &(0x7f00000000c0)) 01:21:42 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f8, 0x403, 0x70bd2c, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x10080) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SIOCPNADDRESOURCE(r0, 0x541b, 0x0) 01:21:42 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r0, &(0x7f0000000000)="93", 0x1, 0x0, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) 01:21:42 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x200, 0x70bd2b, 0x25dfdbf9, {}, ["", "", "", "", "", "", ""]}, 0xfffffffffffffecc}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:42 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x5421, 0x0) syz_io_uring_setup(0xe82, &(0x7f0000000000)={0x0, 0x4c92, 0x2000, 0x2, 0x2da}, &(0x7f0000000080), &(0x7f00000000c0)) 01:21:42 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r0, 0x0, 0x0, 0x80, 0x0, 0x0) [ 2982.825592][T20194] nbd1: detected capacity change from 0 to 224 [ 2983.505050][T10438] block nbd1: Receive control failed (result -104) [ 2983.506515][T20205] block nbd1: shutting down sockets [ 2983.521627][ C0] blk_print_req_error: 40 callbacks suppressed [ 2983.521645][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2983.537042][ C0] buffer_io_error: 40 callbacks suppressed [ 2983.537058][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read 01:21:43 executing program 1: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x800, 0x70bd26, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x5451, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x70) 01:21:43 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000000)=@sco, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/153, 0x99}, {&(0x7f0000000140)=""/20, 0x14}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/139, 0x8b}, {&(0x7f0000001240)=""/186, 0xba}, {&(0x7f0000001300)=""/59, 0x3b}, {&(0x7f0000001340)=""/128, 0x80}], 0x7, &(0x7f0000001440)=""/152, 0x98}, 0x10040) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x10, 0x3f8, 0x100, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x20000000) ioctl$SIOCPNADDRESOURCE(r0, 0x541b, 0x0) 01:21:43 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r0, &(0x7f0000000000)="93", 0x1, 0x0, &(0x7f0000000040)={0x23, 0x4, 0x7, 0x1f}, 0x10) 01:21:43 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:43 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x5421, 0x0) syz_io_uring_setup(0xe82, &(0x7f0000000000)={0x0, 0x4c92, 0x2000, 0x2, 0x2da}, &(0x7f0000000080), &(0x7f00000000c0)) 01:21:43 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) io_uring_setup(0x4b22, &(0x7f0000000080)={0x0, 0x402f, 0x20, 0x3, 0x2b5}) io_uring_setup(0x2561, &(0x7f0000000000)={0x0, 0x78a2, 0x220, 0x0, 0x9e}) ioctl$SIOCPNADDRESOURCE(r0, 0x541b, &(0x7f00000006c0)) [ 2983.550772][T20206] ldm_validate_partition_table(): Disk read failed. [ 2983.557522][T20206] Dev nbd1: unable to read RDB block 0 [ 2983.563029][T20206] nbd1: unable to read partition table [ 2983.569037][T20206] nbd1: partition table beyond EOD, truncated 01:21:43 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:43 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r0, &(0x7f0000000000)="93", 0x1, 0x80, 0x0, 0x0) 01:21:43 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_setup(0xe82, &(0x7f0000000000)={0x0, 0x4c92, 0x2000, 0x2, 0x2da}, &(0x7f0000000080), &(0x7f00000000c0)) 01:21:43 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) io_uring_setup(0x4b22, &(0x7f0000000080)={0x0, 0x402f, 0x20, 0x3, 0x2b5}) io_uring_setup(0x2561, &(0x7f0000000000)={0x0, 0x78a2, 0x220, 0x0, 0x9e}) ioctl$SIOCPNADDRESOURCE(r0, 0x541b, &(0x7f00000006c0)) 01:21:43 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000000)=@sco, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/153, 0x99}, {&(0x7f0000000140)=""/20, 0x14}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/139, 0x8b}, {&(0x7f0000001240)=""/186, 0xba}, {&(0x7f0000001300)=""/59, 0x3b}, {&(0x7f0000001340)=""/128, 0x80}], 0x7, &(0x7f0000001440)=""/152, 0x98}, 0x10040) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x10, 0x3f8, 0x100, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x20000000) ioctl$SIOCPNADDRESOURCE(r0, 0x541b, 0x0) 01:21:43 executing program 2: syz_io_uring_setup(0xe82, &(0x7f0000000000)={0x0, 0x4c92, 0x2000, 0x2, 0x2da}, &(0x7f0000000080), &(0x7f00000000c0)) [ 2983.761411][T20229] nbd1: detected capacity change from 0 to 224 [ 2984.472836][T10438] block nbd1: Receive control failed (result -104) [ 2984.474181][T20223] block nbd1: shutting down sockets [ 2984.496427][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2984.505598][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2984.513454][T20206] ldm_validate_partition_table(): Disk read failed. 01:21:44 executing program 1: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x800, 0x70bd26, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x5451, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x70) 01:21:44 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:44 executing program 5: socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_setup(0xe82, &(0x7f0000000000)={0x0, 0x4c92, 0x2000, 0x2, 0x2da}, &(0x7f0000000080), &(0x7f00000000c0)) 01:21:44 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) io_uring_setup(0x4b22, &(0x7f0000000080)={0x0, 0x402f, 0x20, 0x3, 0x2b5}) io_uring_setup(0x2561, &(0x7f0000000000)={0x0, 0x78a2, 0x220, 0x0, 0x9e}) ioctl$SIOCPNADDRESOURCE(r0, 0x541b, &(0x7f00000006c0)) 01:21:44 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x4c92, 0x2000, 0x2, 0x2da}, &(0x7f0000000080), &(0x7f00000000c0)) 01:21:44 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000000)=@sco, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/153, 0x99}, {&(0x7f0000000140)=""/20, 0x14}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/139, 0x8b}, {&(0x7f0000001240)=""/186, 0xba}, {&(0x7f0000001300)=""/59, 0x3b}, {&(0x7f0000001340)=""/128, 0x80}], 0x7, &(0x7f0000001440)=""/152, 0x98}, 0x10040) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x10, 0x3f8, 0x100, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x20000000) ioctl$SIOCPNADDRESOURCE(r0, 0x541b, 0x0) [ 2984.521703][T20206] Dev nbd1: unable to read RDB block 0 [ 2984.527404][T20206] nbd1: unable to read partition table [ 2984.533193][T20206] nbd1: partition table beyond EOD, truncated 01:21:44 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:44 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000000)=@sco, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/153, 0x99}, {&(0x7f0000000140)=""/20, 0x14}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/139, 0x8b}, {&(0x7f0000001240)=""/186, 0xba}, {&(0x7f0000001300)=""/59, 0x3b}, {&(0x7f0000001340)=""/128, 0x80}], 0x7, &(0x7f0000001440)=""/152, 0x98}, 0x10040) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x10, 0x3f8, 0x100, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x20000000) 01:21:44 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x4c92, 0x2000, 0x2, 0x2da}, &(0x7f0000000080), &(0x7f00000000c0)) 01:21:44 executing program 5: socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_setup(0xe82, &(0x7f0000000000)={0x0, 0x4c92, 0x2000, 0x2, 0x2da}, &(0x7f0000000080), &(0x7f00000000c0)) 01:21:44 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) io_uring_setup(0x4b22, &(0x7f0000000080)={0x0, 0x402f, 0x20, 0x3, 0x2b5}) io_uring_setup(0x2561, &(0x7f0000000000)={0x0, 0x78a2, 0x220, 0x0, 0x9e}) 01:21:44 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) [ 2984.725720][T20255] nbd1: detected capacity change from 0 to 224 [ 2985.455936][T10438] block nbd1: Receive control failed (result -104) [ 2985.466162][T20250] block nbd1: shutting down sockets [ 2985.471636][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2985.480900][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2985.488885][T20206] ldm_validate_partition_table(): Disk read failed. [ 2985.495874][T20206] Dev nbd1: unable to read RDB block 0 01:21:45 executing program 1: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x800, 0x70bd26, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x5451, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x70) 01:21:45 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000000)=@sco, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/153, 0x99}, {&(0x7f0000000140)=""/20, 0x14}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/139, 0x8b}, {&(0x7f0000001240)=""/186, 0xba}, {&(0x7f0000001300)=""/59, 0x3b}, {&(0x7f0000001340)=""/128, 0x80}], 0x7, &(0x7f0000001440)=""/152, 0x98}, 0x10040) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x10, 0x3f8, 0x100, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x20000000) 01:21:45 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x4c92, 0x2000, 0x2, 0x2da}, &(0x7f0000000080), &(0x7f00000000c0)) 01:21:45 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) io_uring_setup(0x2561, &(0x7f0000000000)={0x0, 0x78a2, 0x220, 0x0, 0x9e}) 01:21:45 executing program 5: socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_setup(0xe82, &(0x7f0000000000)={0x0, 0x4c92, 0x2000, 0x2, 0x2da}, &(0x7f0000000080), &(0x7f00000000c0)) 01:21:45 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) [ 2985.501476][T20206] nbd1: unable to read partition table [ 2985.507545][T20206] nbd1: partition table beyond EOD, truncated 01:21:45 executing program 2: syz_io_uring_setup(0xe82, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:21:45 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x0, 0x70bd2b, 0x25dfdbf9, {}, ["", "", "", "", "", "", ""]}, 0xfffffffffffffecc}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:45 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000000)=@sco, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/153, 0x99}, {&(0x7f0000000140)=""/20, 0x14}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/139, 0x8b}, {&(0x7f0000001240)=""/186, 0xba}, {&(0x7f0000001300)=""/59, 0x3b}, {&(0x7f0000001340)=""/128, 0x80}], 0x7, &(0x7f0000001440)=""/152, 0x98}, 0x10040) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x10, 0x3f8, 0x100, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x20000000) 01:21:45 executing program 2: syz_io_uring_setup(0xe82, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:21:45 executing program 5: syz_io_uring_setup(0xe82, &(0x7f0000000000)={0x0, 0x4c92, 0x2000, 0x2, 0x2da}, &(0x7f0000000080), &(0x7f00000000c0)) 01:21:45 executing program 0: io_uring_setup(0x2561, &(0x7f0000000000)={0x0, 0x78a2, 0x220, 0x0, 0x9e}) [ 2985.736685][T20278] block nbd1: shutting down sockets 01:21:45 executing program 1: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x800, 0x70bd26, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x5451, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x70) 01:21:45 executing program 2: syz_io_uring_setup(0xe82, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:21:45 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x0, 0x0, 0x25dfdbf9, {}, ["", "", "", "", "", "", ""]}, 0xfffffffffffffecc}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:45 executing program 0: io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x78a2, 0x220, 0x0, 0x9e}) 01:21:45 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x4c92, 0x2000, 0x2, 0x2da}, &(0x7f0000000080), &(0x7f00000000c0)) 01:21:45 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000000)=@sco, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/153, 0x99}, {&(0x7f0000000140)=""/20, 0x14}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/139, 0x8b}, {&(0x7f0000001240)=""/186, 0xba}, {&(0x7f0000001300)=""/59, 0x3b}, {&(0x7f0000001340)=""/128, 0x80}], 0x7, &(0x7f0000001440)=""/152, 0x98}, 0x10040) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x10, 0x3f8, 0x100, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x20000000) 01:21:45 executing program 2: syz_io_uring_setup(0xe82, &(0x7f0000000000)={0x0, 0x0, 0x2000, 0x2, 0x2da}, &(0x7f0000000080), &(0x7f00000000c0)) 01:21:45 executing program 0: io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x78a2, 0x220, 0x0, 0x9e}) 01:21:45 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", "", ""]}, 0xfffffffffffffecc}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:45 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x10, 0x3f8, 0x100, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x20000000) 01:21:45 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x4c92, 0x2000, 0x2, 0x2da}, &(0x7f0000000080), &(0x7f00000000c0)) 01:21:45 executing program 2: syz_io_uring_setup(0xe82, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x2da}, &(0x7f0000000080), &(0x7f00000000c0)) [ 2985.967518][T20293] block nbd1: shutting down sockets 01:21:46 executing program 0: io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x78a2, 0x220, 0x0, 0x9e}) 01:21:46 executing program 1: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x800, 0x70bd26, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x5451, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x70) 01:21:46 executing program 2: syz_io_uring_setup(0xe82, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x2da}, &(0x7f0000000080), &(0x7f00000000c0)) 01:21:46 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:46 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x4c92, 0x2000, 0x2, 0x2da}, &(0x7f0000000080), &(0x7f00000000c0)) 01:21:46 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x10, 0x3f8, 0x100, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x20000000) 01:21:46 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:46 executing program 2: syz_io_uring_setup(0xe82, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x2da}, &(0x7f0000000080), &(0x7f00000000c0)) 01:21:46 executing program 5: syz_io_uring_setup(0xe82, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 2986.240428][T20315] block nbd1: shutting down sockets 01:21:46 executing program 0: io_uring_setup(0x2561, 0x0) 01:21:46 executing program 3: socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x10, 0x3f8, 0x100, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x20000000) 01:21:46 executing program 1: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x800, 0x70bd26, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x5451, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x70) 01:21:46 executing program 5: syz_io_uring_setup(0xe82, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:21:46 executing program 2: syz_io_uring_setup(0xe82, &(0x7f0000000000)={0x0, 0x0, 0x2000, 0x0, 0x2da}, &(0x7f0000000080), &(0x7f00000000c0)) 01:21:46 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:46 executing program 0: io_uring_setup(0x2561, 0x0) 01:21:46 executing program 1: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x800, 0x70bd26, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x5451, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x70) 01:21:46 executing program 3: socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x10, 0x3f8, 0x100, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x20000000) 01:21:46 executing program 5: syz_io_uring_setup(0xe82, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:21:46 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:46 executing program 2: syz_io_uring_setup(0xe82, &(0x7f0000000000)={0x0, 0x0, 0x2000}, &(0x7f0000000080), &(0x7f00000000c0)) 01:21:46 executing program 3: socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x10, 0x3f8, 0x100, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x20000000) 01:21:46 executing program 1: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x800, 0x70bd26, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x5451, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x70) 01:21:46 executing program 5: syz_io_uring_setup(0xe82, &(0x7f0000000000)={0x0, 0x0, 0x2000, 0x2, 0x2da}, &(0x7f0000000080), &(0x7f00000000c0)) 01:21:46 executing program 0: io_uring_setup(0x2561, 0x0) 01:21:46 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:46 executing program 2: syz_io_uring_setup(0xe82, &(0x7f0000000000)={0x0, 0x0, 0x2000}, 0x0, &(0x7f00000000c0)) 01:21:46 executing program 0: io_uring_setup(0x2561, &(0x7f0000000000)={0x0, 0x0, 0x220, 0x0, 0x9e}) 01:21:46 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, 0x0, 0x20000000) 01:21:46 executing program 1: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x800, 0x70bd26, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x5451, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x70) 01:21:46 executing program 5: syz_io_uring_setup(0xe82, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x2da}, &(0x7f0000000080), &(0x7f00000000c0)) 01:21:46 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:46 executing program 2: syz_io_uring_setup(0xe82, &(0x7f0000000000)={0x0, 0x0, 0x2000}, 0x0, 0x0) 01:21:46 executing program 0: io_uring_setup(0x2561, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9e}) 01:21:46 executing program 1: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x800, 0x70bd26, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x5451, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x70) 01:21:46 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, 0x0, 0x20000000) 01:21:46 executing program 5: syz_io_uring_setup(0xe82, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x2da}, &(0x7f0000000080), &(0x7f00000000c0)) 01:21:46 executing program 2: syz_io_uring_setup(0xe82, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x2da}, &(0x7f0000000080), &(0x7f00000000c0)) 01:21:46 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:46 executing program 0: io_uring_setup(0x2561, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9e}) 01:21:47 executing program 5: syz_io_uring_setup(0xe82, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x2da}, &(0x7f0000000080), &(0x7f00000000c0)) 01:21:47 executing program 1: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x800, 0x70bd26, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x5451, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x70) 01:21:47 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, 0x0, 0x20000000) 01:21:47 executing program 2: syz_io_uring_setup(0xe82, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x2da}, &(0x7f0000000080), &(0x7f00000000c0)) 01:21:47 executing program 5: syz_io_uring_setup(0xe82, &(0x7f0000000000)={0x0, 0x0, 0x2000, 0x0, 0x2da}, &(0x7f0000000080), &(0x7f00000000c0)) 01:21:47 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:47 executing program 0: io_uring_setup(0x2561, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9e}) 01:21:47 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x10, 0x3f8, 0x100, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x20000000) 01:21:47 executing program 2: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x800, 0x70bd26, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x5451, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x70) 01:21:47 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:47 executing program 5: syz_io_uring_setup(0xe82, &(0x7f0000000000)={0x0, 0x0, 0x2000}, &(0x7f0000000080), &(0x7f00000000c0)) 01:21:47 executing program 1: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x800, 0x70bd26, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x5451, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x70) 01:21:47 executing program 0: io_uring_setup(0x2561, &(0x7f0000000000)={0x0, 0x0, 0x220}) 01:21:47 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x20000000) 01:21:47 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) [ 2987.436288][T20409] block nbd2: shutting down sockets 01:21:47 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x2, &(0x7f00000006c0)) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000140), 0x301040, 0x2) recvfrom$phonet(r1, &(0x7f0000000000)=""/201, 0xc9, 0x40, &(0x7f0000000100)={0x23, 0x8, 0xff, 0xe7}, 0x10) 01:21:47 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x20000000) 01:21:47 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) r2 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) r3 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[r3], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) ioctl$SIOCPNADDRESOURCE(r0, 0x5421, 0x0) 01:21:47 executing program 5: syz_io_uring_setup(0xe82, &(0x7f0000000000)={0x0, 0x0, 0x2000}, 0x0, &(0x7f00000000c0)) 01:21:47 executing program 1: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x800, 0x70bd26, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x5451, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x70) 01:21:47 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:47 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x20000000) 01:21:47 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) r2 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) r3 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[r3], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) ioctl$SIOCPNADDRESOURCE(r0, 0x5421, 0x0) 01:21:47 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x541b, &(0x7f00000006c0)=0xfffffdfd) 01:21:47 executing program 5: syz_io_uring_setup(0xe82, &(0x7f0000000000)={0x0, 0x0, 0x2000}, 0x0, 0x0) 01:21:47 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:47 executing program 1: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x800, 0x70bd26, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x5451, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x70) 01:21:47 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={0x0}}, 0x20000000) 01:21:47 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xaffd) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x0, 0x4, 0x80}, 0x10) prctl$PR_GET_DUMPABLE(0x3) memfd_secret(0x80000) ioctl$SIOCPNADDRESOURCE(r0, 0x5451, 0x0) 01:21:47 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) r2 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) r3 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[r3], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) ioctl$SIOCPNADDRESOURCE(r0, 0x5421, 0x0) 01:21:47 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:47 executing program 5: write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000100)={0x34, r1, 0x200, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x234af0a3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x4}]}, 0x34}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xffffffffffffffab, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64=r1, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) memfd_secret(0x80000) r5 = accept$phonet_pipe(r4, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$SIOCPNADDRESOURCE(r5, 0x5421, 0x0) 01:21:47 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={0x0}}, 0x20000000) 01:21:47 executing program 1: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x800, 0x70bd26, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) r1 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x70) 01:21:47 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xaffd) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x0, 0x4, 0x80}, 0x10) prctl$PR_GET_DUMPABLE(0x3) memfd_secret(0x80000) ioctl$SIOCPNADDRESOURCE(r0, 0x5451, 0x0) 01:21:47 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) r2 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) r3 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[r3], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:47 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:47 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) r2 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[r3], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:47 executing program 5: write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000100)={0x34, r1, 0x200, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x234af0a3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x4}]}, 0x34}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xffffffffffffffab, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64=r1, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) memfd_secret(0x80000) r5 = accept$phonet_pipe(r4, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$SIOCPNADDRESOURCE(r5, 0x5421, 0x0) 01:21:47 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={0x0}}, 0x20000000) 01:21:48 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xaffd) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x0, 0x4, 0x80}, 0x10) prctl$PR_GET_DUMPABLE(0x3) memfd_secret(0x80000) ioctl$SIOCPNADDRESOURCE(r0, 0x5451, 0x0) 01:21:48 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) [ 2988.096339][T20463] nbd1: detected capacity change from 0 to 224 01:21:48 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x10, 0x3f8, 0x0, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x20000000) 01:21:48 executing program 5: write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000100)={0x34, r1, 0x200, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x234af0a3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x4}]}, 0x34}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xffffffffffffffab, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64=r1, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) memfd_secret(0x80000) r5 = accept$phonet_pipe(r4, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$SIOCPNADDRESOURCE(r5, 0x5421, 0x0) 01:21:48 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0xaffd) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x0, 0x4, 0x80}, 0x10) prctl$PR_GET_DUMPABLE(0x3) memfd_secret(0x80000) [ 2988.821749][T10438] block nbd1: Receive control failed (result -104) [ 2988.828245][T20469] block nbd1: shutting down sockets [ 2988.833723][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2988.842842][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2988.850928][T20206] ldm_validate_partition_table(): Disk read failed. [ 2988.858059][T20206] Dev nbd1: unable to read RDB block 0 [ 2988.863678][T20206] nbd1: unable to read partition table 01:21:48 executing program 1: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x70) 01:21:48 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) r2 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:48 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:48 executing program 5: write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000100)={0x34, r1, 0x200, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x234af0a3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x4}]}, 0x34}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xffffffffffffffab, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64=r1, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) memfd_secret(0x80000) accept$phonet_pipe(r4, &(0x7f0000000040), &(0x7f0000000080)=0x10) 01:21:48 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x10, 0x3f8, 0x0, 0x0, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x20000000) 01:21:48 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0xaffd) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x0, 0x4, 0x80}, 0x10) prctl$PR_GET_DUMPABLE(0x3) [ 2988.869914][T20206] nbd1: partition table beyond EOD, truncated 01:21:48 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:48 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0xaffd) prctl$PR_GET_DUMPABLE(0x3) 01:21:48 executing program 5: write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000100)={0x34, r1, 0x200, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x234af0a3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x4}]}, 0x34}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xffffffffffffffab, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64=r1, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) socket$phonet_pipe(0x23, 0x5, 0x2) memfd_secret(0x80000) 01:21:49 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x20000000) 01:21:49 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:49 executing program 5: write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000100)={0x34, r1, 0x200, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x234af0a3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x4}]}, 0x34}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xffffffffffffffab, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64=r1, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) socket$phonet_pipe(0x23, 0x5, 0x2) [ 2989.069149][T20505] nbd1: detected capacity change from 0 to 224 [ 2989.778078][T10438] block nbd1: Receive control failed (result -104) [ 2989.779158][T20496] block nbd1: shutting down sockets [ 2989.790542][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2989.799662][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2989.807736][T20206] ldm_validate_partition_table(): Disk read failed. [ 2989.814377][T20206] Dev nbd1: unable to read RDB block 0 [ 2989.821986][T20206] nbd1: unable to read partition table 01:21:49 executing program 1: memfd_secret(0x0) r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x70) 01:21:49 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:49 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40) prctl$PR_GET_DUMPABLE(0x3) 01:21:49 executing program 5: write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000100)={0x34, r1, 0x200, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x234af0a3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x4}]}, 0x34}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xffffffffffffffab, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64=r1, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:21:49 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", "", "", "", ""]}, 0x10}}, 0x20000000) 01:21:49 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) [ 2989.828752][T20206] nbd1: partition table beyond EOD, truncated 01:21:49 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:49 executing program 5: write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000100)={0x34, r1, 0x200, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x234af0a3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x4}]}, 0x34}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xffffffffffffffab, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64=r1, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:21:49 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", "", "", ""]}, 0x10}}, 0x20000000) 01:21:49 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:49 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) prctl$PR_GET_DUMPABLE(0x3) [ 2990.001432][T20519] nbd1: detected capacity change from 0 to 224 01:21:50 executing program 5: write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000100)={0x34, r1, 0x200, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x234af0a3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x4}]}, 0x34}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xffffffffffffffab, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64=r1, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) [ 2990.729430][T10438] block nbd1: Receive control failed (result -104) [ 2990.732862][T20524] block nbd1: shutting down sockets [ 2990.742292][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2990.751445][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2990.759342][T20206] ldm_validate_partition_table(): Disk read failed. [ 2990.767107][T20206] Dev nbd1: unable to read RDB block 0 [ 2990.772684][T20206] nbd1: unable to read partition table 01:21:50 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x70) 01:21:50 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:50 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:50 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", "", ""]}, 0x10}}, 0x20000000) 01:21:50 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) prctl$PR_GET_DUMPABLE(0x3) 01:21:50 executing program 5: write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000100)={0x34, r1, 0x200, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x234af0a3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x4}]}, 0x34}}, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xffffffffffffffab, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64=r1, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) [ 2990.778784][T20206] nbd1: partition table beyond EOD, truncated 01:21:50 executing program 0: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 01:21:50 executing program 2: prctl$PR_GET_DUMPABLE(0x3) 01:21:50 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x44881) 01:21:50 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", ""]}, 0x10}}, 0x20000000) 01:21:50 executing program 5: write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000100)={0x34, r1, 0x200, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x234af0a3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x4}]}, 0x34}}, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xffffffffffffffab, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64=r1, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:21:50 executing program 0: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) [ 2990.949953][T20551] nbd1: detected capacity change from 0 to 224 [ 2991.691045][T10438] block nbd1: Receive control failed (result -104) [ 2991.692348][T20547] block nbd1: shutting down sockets [ 2991.703802][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2991.712969][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2991.720922][T20206] ldm_validate_partition_table(): Disk read failed. [ 2991.728475][T20206] Dev nbd1: unable to read RDB block 0 [ 2991.734078][T20206] nbd1: unable to read partition table [ 2991.740136][T20206] nbd1: partition table beyond EOD, truncated 01:21:51 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x70) 01:21:51 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", ""]}, 0x10}}, 0x20000000) 01:21:51 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:51 executing program 0: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 01:21:51 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", "", ""]}, 0xfffffffffffffecc}}, 0x44881) 01:21:51 executing program 5: write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000100)={0x34, r1, 0x200, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x234af0a3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x4}]}, 0x34}}, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xffffffffffffffab, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64=r1, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:21:51 executing program 5: write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xffffffffffffffab, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64=r1, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:21:51 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:51 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", [""]}, 0x10}}, 0x20000000) 01:21:51 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x3fa, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", "", ""]}, 0xfffffffffffffecc}}, 0x0) 01:21:51 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:51 executing program 5: write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xffffffffffffffab, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:21:51 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x70) 01:21:51 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x10}, 0x10}}, 0x20000000) 01:21:51 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:52 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x70) 01:21:52 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:52 executing program 5: write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xffffffffffffffab, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:21:52 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x10}, 0x10}}, 0x0) 01:21:52 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:52 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x70) 01:21:52 executing program 4: write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000100)={0x34, r1, 0x200, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x234af0a3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x4}]}, 0x34}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xffffffffffffffab, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64=r1, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) socket$phonet_pipe(0x23, 0x5, 0x2) memfd_secret(0x80000) 01:21:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xffffffffffffffab, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:21:52 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:52 executing program 3: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x800, 0x70bd26, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) r1 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x70) 01:21:52 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x70) 01:21:52 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:52 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, &(0x7f0000000000), &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:52 executing program 4: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x800, 0x70bd26, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x5451, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x70) 01:21:52 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xffffffffffffffab, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:21:52 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, &(0x7f0000000000), &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:52 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) [ 2992.411667][T20617] nbd3: detected capacity change from 0 to 224 01:21:52 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x70) 01:21:52 executing program 2: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 01:21:52 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x608}, "60e0af5c5ba9872a", "76a8e085177699b0d605c2532334e377", "8cbca98a", "a420c9e12dd56ac6"}, 0x28) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0xa0af7229c09fd592}, "8eea96fe8e18cb0b", "2a96fec1e4a71036f07e75671c061a35", "b19f802e", "69a147047fd37535"}, 0x28) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r2, 0x5451, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000000c0)="08fb5409acd1198362feeabe8862fa2f", 0x10) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x4) 01:21:52 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xffffffffffffffab, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) [ 2993.136428][T10438] block nbd3: Receive control failed (result -104) [ 2993.137950][T20610] block nbd3: shutting down sockets [ 2993.150257][ C1] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2993.159395][ C1] Buffer I/O error on dev nbd3, logical block 0, async page read [ 2993.167334][T20620] ldm_validate_partition_table(): Disk read failed. [ 2993.173987][T20620] Dev nbd3: unable to read RDB block 0 [ 2993.179919][T20620] nbd3: unable to read partition table 01:21:53 executing program 3: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "d0a21aa38ff86fab", "e69d2a04e37cbfa90ca4d1179e5791d5", "7520f2c2", "0231a43a4487468f"}, 0x28) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x4104, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000040)=0x10000, 0x4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) r5 = memfd_secret(0x0) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000040}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250f0000002ce20280080002000000000008000200f9ffffff0800010007004000080002000000008008000100715c00000c00098008000200000800002c000780080002000200000008000100001200000c00040020000000000000000c000300080000000000000004000680"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x40005) ioctl$SIOCPNADDRESOURCE(r3, 0x541b, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4008, r0}, 0x18) eventfd(0x9) 01:21:53 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, &(0x7f0000000000), &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:53 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x608}, "60e0af5c5ba9872a", "76a8e085177699b0d605c2532334e377", "8cbca98a", "a420c9e12dd56ac6"}, 0x28) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0xa0af7229c09fd592}, "8eea96fe8e18cb0b", "2a96fec1e4a71036f07e75671c061a35", "b19f802e", "69a147047fd37535"}, 0x28) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r2, 0x5451, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000000c0)="08fb5409acd1198362feeabe8862fa2f", 0x10) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x4) 01:21:53 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x70) 01:21:53 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xffffffffffffffab, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:21:53 executing program 2: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) [ 2993.189227][T20620] nbd3: partition table beyond EOD, truncated 01:21:53 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, 0x0, 0x4000015) 01:21:53 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x70) 01:21:53 executing program 2: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 01:21:53 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x608}, "60e0af5c5ba9872a", "76a8e085177699b0d605c2532334e377", "8cbca98a", "a420c9e12dd56ac6"}, 0x28) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0xa0af7229c09fd592}, "8eea96fe8e18cb0b", "2a96fec1e4a71036f07e75671c061a35", "b19f802e", "69a147047fd37535"}, 0x28) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r2, 0x5451, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000000c0)="08fb5409acd1198362feeabe8862fa2f", 0x10) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x4) 01:21:53 executing program 3: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "d0a21aa38ff86fab", "e69d2a04e37cbfa90ca4d1179e5791d5", "7520f2c2", "0231a43a4487468f"}, 0x28) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x4104, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000040)=0x10000, 0x4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) r5 = memfd_secret(0x0) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000040}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250f0000002ce20280080002000000000008000200f9ffffff0800010007004000080002000000008008000100715c00000c00098008000200000800002c000780080002000200000008000100001200000c00040020000000000000000c000300080000000000000004000680"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x40005) ioctl$SIOCPNADDRESOURCE(r3, 0x541b, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4008, r0}, 0x18) eventfd(0x9) 01:21:53 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:53 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], 0x0, 0xffffffff, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:53 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x608}, "60e0af5c5ba9872a", "76a8e085177699b0d605c2532334e377", "8cbca98a", "a420c9e12dd56ac6"}, 0x28) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0xa0af7229c09fd592}, "8eea96fe8e18cb0b", "2a96fec1e4a71036f07e75671c061a35", "b19f802e", "69a147047fd37535"}, 0x28) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r2, 0x5451, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f00000000c0)="08fb5409acd1198362feeabe8862fa2f", 0x10) 01:21:53 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x70) 01:21:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, 0x0, 0x4000015) 01:21:53 executing program 3: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "d0a21aa38ff86fab", "e69d2a04e37cbfa90ca4d1179e5791d5", "7520f2c2", "0231a43a4487468f"}, 0x28) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x4104, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000040)=0x10000, 0x4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) r5 = memfd_secret(0x0) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000040}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250f0000002ce20280080002000000000008000200f9ffffff0800010007004000080002000000008008000100715c00000c00098008000200000800002c000780080002000200000008000100001200000c00040020000000000000000c000300080000000000000004000680"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x40005) ioctl$SIOCPNADDRESOURCE(r3, 0x541b, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4008, r0}, 0x18) eventfd(0x9) 01:21:53 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:53 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], 0x0, 0xffffffff, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:53 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x70) 01:21:53 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x608}, "60e0af5c5ba9872a", "76a8e085177699b0d605c2532334e377", "8cbca98a", "a420c9e12dd56ac6"}, 0x28) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0xa0af7229c09fd592}, "8eea96fe8e18cb0b", "2a96fec1e4a71036f07e75671c061a35", "b19f802e", "69a147047fd37535"}, 0x28) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r2, 0x5451, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 01:21:53 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:53 executing program 3: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "d0a21aa38ff86fab", "e69d2a04e37cbfa90ca4d1179e5791d5", "7520f2c2", "0231a43a4487468f"}, 0x28) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x4104, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000040)=0x10000, 0x4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) r5 = memfd_secret(0x0) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000040}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250f0000002ce20280080002000000000008000200f9ffffff0800010007004000080002000000008008000100715c00000c00098008000200000800002c000780080002000200000008000100001200000c00040020000000000000000c000300080000000000000004000680"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x40005) ioctl$SIOCPNADDRESOURCE(r3, 0x541b, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4008, r0}, 0x18) 01:21:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, 0x0, 0x4000015) 01:21:53 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], 0x0, 0xffffffff, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:53 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x608}, "60e0af5c5ba9872a", "76a8e085177699b0d605c2532334e377", "8cbca98a", "a420c9e12dd56ac6"}, 0x28) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0xa0af7229c09fd592}, "8eea96fe8e18cb0b", "2a96fec1e4a71036f07e75671c061a35", "b19f802e", "69a147047fd37535"}, 0x28) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r2, 0x5451, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 01:21:53 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x70) 01:21:53 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, &(0x7f0000000000), &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:21:53 executing program 3: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "d0a21aa38ff86fab", "e69d2a04e37cbfa90ca4d1179e5791d5", "7520f2c2", "0231a43a4487468f"}, 0x28) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x4104, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000040)=0x10000, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) r4 = memfd_secret(0x0) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000040}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250f0000002ce20280080002000000000008000200f9ffffff0800010007004000080002000000008008000100715c00000c00098008000200000800002c000780080002000200000008000100001200000c00040020000000000000000c000300080000000000000004000680"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x40005) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4008, r0}, 0x18) 01:21:53 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x608}, "60e0af5c5ba9872a", "76a8e085177699b0d605c2532334e377", "8cbca98a", "a420c9e12dd56ac6"}, 0x28) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0xa0af7229c09fd592}, "8eea96fe8e18cb0b", "2a96fec1e4a71036f07e75671c061a35", "b19f802e", "69a147047fd37535"}, 0x28) socket$phonet_pipe(0x23, 0x5, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) 01:21:53 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, &(0x7f0000000000), &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:53 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:53 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x70) 01:21:53 executing program 3: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "d0a21aa38ff86fab", "e69d2a04e37cbfa90ca4d1179e5791d5", "7520f2c2", "0231a43a4487468f"}, 0x28) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x4104, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000040)=0x10000, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) memfd_secret(0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4008, r0}, 0x18) 01:21:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:21:54 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, &(0x7f0000000000), &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:54 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x608}, "60e0af5c5ba9872a", "76a8e085177699b0d605c2532334e377", "8cbca98a", "a420c9e12dd56ac6"}, 0x28) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0xa0af7229c09fd592}, "8eea96fe8e18cb0b", "2a96fec1e4a71036f07e75671c061a35", "b19f802e", "69a147047fd37535"}, 0x28) socket$inet_smc(0x2b, 0x1, 0x0) 01:21:54 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:54 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x70) 01:21:54 executing program 3: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "d0a21aa38ff86fab", "e69d2a04e37cbfa90ca4d1179e5791d5", "7520f2c2", "0231a43a4487468f"}, 0x28) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x4104, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000040)=0x10000, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4008, r0}, 0x18) 01:21:54 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:54 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x608}, "60e0af5c5ba9872a", "76a8e085177699b0d605c2532334e377", "8cbca98a", "a420c9e12dd56ac6"}, 0x28) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 01:21:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:21:54 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:54 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x70) 01:21:54 executing program 3: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "d0a21aa38ff86fab", "e69d2a04e37cbfa90ca4d1179e5791d5", "7520f2c2", "0231a43a4487468f"}, 0x28) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x4104, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000040)=0x10000, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4008, r0}, 0x18) 01:21:54 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], 0x0, 0xffffffff, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:54 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x608}, "60e0af5c5ba9872a", "76a8e085177699b0d605c2532334e377", "8cbca98a", "a420c9e12dd56ac6"}, 0x28) memfd_secret(0x0) socket$inet_smc(0x2b, 0x1, 0x0) 01:21:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xffffffffffffffab, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) [ 2994.376415][T20722] block nbd1: shutting down sockets 01:21:54 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:54 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], 0x0, 0xffffffff, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:54 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x70) 01:21:54 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x608}, "60e0af5c5ba9872a", "76a8e085177699b0d605c2532334e377", "8cbca98a", "a420c9e12dd56ac6"}, 0x28) socket$inet_smc(0x2b, 0x1, 0x0) 01:21:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:21:54 executing program 3: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "d0a21aa38ff86fab", "e69d2a04e37cbfa90ca4d1179e5791d5", "7520f2c2", "0231a43a4487468f"}, 0x28) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x4104, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000040)=0x10000, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) memfd_secret(0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4008, r0}, 0x18) 01:21:54 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], 0x0, 0xffffffff, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:54 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:54 executing program 4: socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 01:21:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:21:54 executing program 3: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "d0a21aa38ff86fab", "e69d2a04e37cbfa90ca4d1179e5791d5", "7520f2c2", "0231a43a4487468f"}, 0x28) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x4104, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000040)=0x10000, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4008, r0}, 0x18) 01:21:54 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xd4, &(0x7f0000000080)=""/212, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) [ 2994.696667][T20745] block nbd1: shutting down sockets 01:21:54 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:54 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x70) 01:21:54 executing program 3: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "d0a21aa38ff86fab", "e69d2a04e37cbfa90ca4d1179e5791d5", "7520f2c2", "0231a43a4487468f"}, 0x28) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x4104, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000040)=0x10000, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4008, r0}, 0x18) 01:21:54 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:54 executing program 4: socket$inet_smc(0x2b, 0x1, 0x0) 01:21:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:21:54 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) [ 2994.877342][T20766] block nbd1: shutting down sockets 01:21:54 executing program 4: socket$inet_smc(0x2b, 0x1, 0x0) 01:21:54 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x70) 01:21:54 executing program 3: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "d0a21aa38ff86fab", "e69d2a04e37cbfa90ca4d1179e5791d5", "7520f2c2", "0231a43a4487468f"}, 0x28) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x4104, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4008, r0}, 0x18) 01:21:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:21:54 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:54 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:55 executing program 4: socket$inet_smc(0x2b, 0x1, 0x0) 01:21:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:21:55 executing program 3: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "d0a21aa38ff86fab", "e69d2a04e37cbfa90ca4d1179e5791d5", "7520f2c2", "0231a43a4487468f"}, 0x28) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4008, r0}, 0x18) 01:21:55 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90) 01:21:55 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:55 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:55 executing program 3: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4008, r0}, 0x18) 01:21:55 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='syzkaller\x00'}, 0x90) 01:21:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:21:55 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:55 executing program 3: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4008, r0}, 0x18) 01:21:55 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:55 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x70) [ 2995.868677][T10438] block nbd1: Receive control failed (result -32) [ 2995.869716][T20787] block nbd1: shutting down sockets 01:21:55 executing program 3: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4008, r0}, 0x18) 01:21:55 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:55 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:55 executing program 3: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4008, r0}, 0x18) 01:21:55 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x80000001, 0xf47d}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:21:56 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90) 01:21:56 executing program 4: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 01:21:56 executing program 0: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "d0a21aa38ff86fab", "e69d2a04e37cbfa90ca4d1179e5791d5", "7520f2c2", "0231a43a4487468f"}, 0x28) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x4104, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000040)=0x10000, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) memfd_secret(0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4008, r0}, 0x18) 01:21:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:21:56 executing program 3: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) memfd_secret(0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4008, r0}, 0x18) 01:21:56 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x70) 01:21:56 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='syzkaller\x00'}, 0x90) 01:21:56 executing program 4: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 01:21:56 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x608}, "60e0af5c5ba9872a", "76a8e085177699b0d605c2532334e377", "8cbca98a", "a420c9e12dd56ac6"}, 0x28) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0xa0af7229c09fd592}, "8eea96fe8e18cb0b", "2a96fec1e4a71036f07e75671c061a35", "b19f802e", "69a147047fd37535"}, 0x28) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r2, 0x5451, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f00000000c0)="08fb5409acd1198362feeabe8862fa2f", 0x10) 01:21:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:21:56 executing program 3: r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4008, r0}, 0x18) [ 2996.835477][T10438] block nbd1: Receive control failed (result -32) [ 2996.836622][T20821] block nbd1: shutting down sockets 01:21:56 executing program 4: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 01:21:56 executing program 3: r0 = memfd_secret(0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4008, r0}, 0x18) 01:21:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:21:56 executing program 2: socket$isdn(0x22, 0x3, 0x10) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000)='THAWED\x00', 0x7) ioctl$SIOCPNADDRESOURCE(r0, 0x5451, 0x0) 01:21:56 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000500)=0x1000) bind$phonet(r1, &(0x7f0000000280)={0x23, 0x20, 0x4, 0x40}, 0x10) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="fc000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xfc}}, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) memfd_secret(0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f00000008c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0x1c4, r3, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7fff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x9f, 0x3, "f7daa239c1d522ae29c79c7e2f1fe8241996cdb87ac708b96b4aea1cd01506f39f080b5b185123c1a93750091bae2f5513a5b1a97ffc94b46f651c4ad4def0f9cc73662964731d929f304b62b5f5fd60e02f6c772dd5db37b75ddfed6fea4bd3c1f23bf5e4813cd8946fdbd10d94aaf78f1724611f3135db757030ddad211b97804b2f1ebf846b62118eff4760e8eae9ec6634d6fa2a47f987efd8"}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @empty, 0x1ff}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x34b}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4000080}, 0x801) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf25020000003000078008000100040000000c0004000100008000000000080001000100010008000100ffffffff0800010000000000240009800800020000000080080001000700000008000112080000000800020001f8ffff"], 0x68}, 0x1, 0x0, 0x0, 0x40050}, 0x401c810) ioctl$SIOCPNADDRESOURCE(r0, 0x2, 0x0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400a9520b60bc4f0c2e38138c819fbd514300001ce9bd0401c24efe29a9925739683a3b8dcfe6e67a136fdecf9de1e994a10f7038f577286d35d0af6bc867c5a03f1401f7705431cfd9f5afa9d79a1a21d0d6ec1608b64e193dbee84d0d0d5b576df0e43a942eb6f3c6dce8ac440d3e6bdbd4f9af62fc090038c5c879838a8da67f878ee7980800000000000000321927bcf848e21598b3d033c6cb5f946c5b89cd1c82f72c2f7127689e3e0984a474de74efd63651a3ba98b6e2074599c8d372ca086f975fdb56387ded26e1ec", @ANYRES16=0x0, @ANYBLOB="020026bd7000fbdbcf250d000000"], 0x14}, 0x1, 0x0, 0x0, 0x8804}, 0x800) 01:21:57 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:57 executing program 2: socket$isdn(0x22, 0x3, 0x10) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000)='THAWED\x00', 0x7) ioctl$SIOCPNADDRESOURCE(r0, 0x5451, 0x0) 01:21:57 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4008}, 0x18) 01:21:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:21:57 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:57 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000500)=0x1000) bind$phonet(r1, &(0x7f0000000280)={0x23, 0x20, 0x4, 0x40}, 0x10) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="fc000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xfc}}, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) memfd_secret(0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f00000008c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0x1c4, r3, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7fff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x9f, 0x3, "f7daa239c1d522ae29c79c7e2f1fe8241996cdb87ac708b96b4aea1cd01506f39f080b5b185123c1a93750091bae2f5513a5b1a97ffc94b46f651c4ad4def0f9cc73662964731d929f304b62b5f5fd60e02f6c772dd5db37b75ddfed6fea4bd3c1f23bf5e4813cd8946fdbd10d94aaf78f1724611f3135db757030ddad211b97804b2f1ebf846b62118eff4760e8eae9ec6634d6fa2a47f987efd8"}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @empty, 0x1ff}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x34b}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4000080}, 0x801) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf25020000003000078008000100040000000c0004000100008000000000080001000100010008000100ffffffff0800010000000000240009800800020000000080080001000700000008000112080000000800020001f8ffff"], 0x68}, 0x1, 0x0, 0x0, 0x40050}, 0x401c810) ioctl$SIOCPNADDRESOURCE(r0, 0x2, 0x0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400a9520b60bc4f0c2e38138c819fbd514300001ce9bd0401c24efe29a9925739683a3b8dcfe6e67a136fdecf9de1e994a10f7038f577286d35d0af6bc867c5a03f1401f7705431cfd9f5afa9d79a1a21d0d6ec1608b64e193dbee84d0d0d5b576df0e43a942eb6f3c6dce8ac440d3e6bdbd4f9af62fc090038c5c879838a8da67f878ee7980800000000000000321927bcf848e21598b3d033c6cb5f946c5b89cd1c82f72c2f7127689e3e0984a474de74efd63651a3ba98b6e2074599c8d372ca086f975fdb56387ded26e1ec", @ANYRES16=0x0, @ANYBLOB="020026bd7000fbdbcf250d000000"], 0x14}, 0x1, 0x0, 0x0, 0x8804}, 0x800) 01:21:57 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) [ 2997.751559][T10438] block nbd1: Receive control failed (result -32) [ 2997.762077][T20854] block nbd1: shutting down sockets 01:21:57 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4008}, 0x18) 01:21:57 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:21:57 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000500)=0x1000) bind$phonet(r1, &(0x7f0000000280)={0x23, 0x20, 0x4, 0x40}, 0x10) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="fc000000", @ANYRES16=0x0, @ANYBLOB="00082bbd7000fedbdf2508000000380002800400040004000400040004000400040008000100050000001c00038008000100080000000800020002000000f7ff0100010000001c0006800400050008000600070000000400020008000600fffbffff2c0009800800010005000000080001000500000008000100f8ffffff0800010008000000080001000200000064000580140002800800020006000000080001000a0000004c0002800800010011000000080001000600000008000300a70000000800010010000000080000020044000000080003008000000008000200db0000000800020005000000040004803ba8b84ffd0d8aecd53f4a48a0c478411b2851e6050f6db790286ff77e0c0cc57f2f93661b4462a204696590c046994432653a5519c8b15b52a9d083290e02aa75d3"], 0xfc}}, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) memfd_secret(0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f00000008c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0x1c4, r3, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7fff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x9f, 0x3, "f7daa239c1d522ae29c79c7e2f1fe8241996cdb87ac708b96b4aea1cd01506f39f080b5b185123c1a93750091bae2f5513a5b1a97ffc94b46f651c4ad4def0f9cc73662964731d929f304b62b5f5fd60e02f6c772dd5db37b75ddfed6fea4bd3c1f23bf5e4813cd8946fdbd10d94aaf78f1724611f3135db757030ddad211b97804b2f1ebf846b62118eff4760e8eae9ec6634d6fa2a47f987efd8"}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @empty, 0x1ff}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x34b}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4000080}, 0x801) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf25020000003000078008000100040000000c0004000100008000000000080001000100010008000100ffffffff0800010000000000240009800800020000000080080001000700000008000112080000000800020001f8ffff"], 0x68}, 0x1, 0x0, 0x0, 0x40050}, 0x401c810) ioctl$SIOCPNADDRESOURCE(r0, 0x2, 0x0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400a9520b60bc4f0c2e38138c819fbd514300001ce9bd0401c24efe29a9925739683a3b8dcfe6e67a136fdecf9de1e994a10f7038f577286d35d0af6bc867c5a03f1401f7705431cfd9f5afa9d79a1a21d0d6ec1608b64e193dbee84d0d0d5b576df0e43a942eb6f3c6dce8ac440d3e6bdbd4f9af62fc090038c5c879838a8da67f878ee7980800000000000000321927bcf848e21598b3d033c6cb5f946c5b89cd1c82f72c2f7127689e3e0984a474de74efd63651a3ba98b6e2074599c8d372ca086f975fdb56387ded26e1ec", @ANYRES16=0x0, @ANYBLOB="020026bd7000fbdbcf250d000000"], 0x14}, 0x1, 0x0, 0x0, 0x8804}, 0x800) 01:21:57 executing program 2: socket$isdn(0x22, 0x3, 0x10) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000)='THAWED\x00', 0x7) ioctl$SIOCPNADDRESOURCE(r0, 0x5451, 0x0) 01:21:57 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4008}, 0x18) 01:21:57 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000500)=0x1000) bind$phonet(r1, &(0x7f0000000280)={0x23, 0x20, 0x4, 0x40}, 0x10) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="fc000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xfc}}, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) memfd_secret(0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f00000008c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0x1c4, r3, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7fff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x9f, 0x3, "f7daa239c1d522ae29c79c7e2f1fe8241996cdb87ac708b96b4aea1cd01506f39f080b5b185123c1a93750091bae2f5513a5b1a97ffc94b46f651c4ad4def0f9cc73662964731d929f304b62b5f5fd60e02f6c772dd5db37b75ddfed6fea4bd3c1f23bf5e4813cd8946fdbd10d94aaf78f1724611f3135db757030ddad211b97804b2f1ebf846b62118eff4760e8eae9ec6634d6fa2a47f987efd8"}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @empty, 0x1ff}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x34b}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4000080}, 0x801) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf25020000003000078008000100040000000c0004000100008000000000080001000100010008000100ffffffff0800010000000000240009800800020000000080080001000700000008000112080000000800020001f8ffff"], 0x68}, 0x1, 0x0, 0x0, 0x40050}, 0x401c810) ioctl$SIOCPNADDRESOURCE(r0, 0x2, 0x0) 01:21:58 executing program 2: socket$isdn(0x22, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000)='THAWED\x00', 0x7) 01:21:58 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, &(0x7f0000000000), &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:21:58 executing program 3: memfd_secret(0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 01:21:58 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 01:21:58 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000500)=0x1000) bind$phonet(r0, &(0x7f0000000280)={0x23, 0x20, 0x4, 0x40}, 0x10) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="fc000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xfc}}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) memfd_secret(0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f00000008c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0x1c4, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7fff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x9f, 0x3, "f7daa239c1d522ae29c79c7e2f1fe8241996cdb87ac708b96b4aea1cd01506f39f080b5b185123c1a93750091bae2f5513a5b1a97ffc94b46f651c4ad4def0f9cc73662964731d929f304b62b5f5fd60e02f6c772dd5db37b75ddfed6fea4bd3c1f23bf5e4813cd8946fdbd10d94aaf78f1724611f3135db757030ddad211b97804b2f1ebf846b62118eff4760e8eae9ec6634d6fa2a47f987efd8"}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @empty, 0x1ff}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x34b}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4000080}, 0x801) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf25020000003000078008000100040000000c0004000100008000000000080001000100010008000100ffffffff0800010000000000240009800800020000000080080001000700000008000112080000000800020001f8ffff"], 0x68}, 0x1, 0x0, 0x0, 0x40050}, 0x401c810) 01:21:58 executing program 2: socket$isdn(0x22, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) 01:21:58 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, &(0x7f0000000000), &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:21:58 executing program 3: memfd_secret(0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) [ 2998.637939][T10438] block nbd1: Receive control failed (result -32) [ 2998.647855][T20869] block nbd1: shutting down sockets 01:21:58 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000500)=0x1000) bind$phonet(r0, &(0x7f0000000280)={0x23, 0x20, 0x4, 0x40}, 0x10) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="fc000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xfc}}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) memfd_secret(0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f00000008c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0x1c4, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7fff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x9f, 0x3, "f7daa239c1d522ae29c79c7e2f1fe8241996cdb87ac708b96b4aea1cd01506f39f080b5b185123c1a93750091bae2f5513a5b1a97ffc94b46f651c4ad4def0f9cc73662964731d929f304b62b5f5fd60e02f6c772dd5db37b75ddfed6fea4bd3c1f23bf5e4813cd8946fdbd10d94aaf78f1724611f3135db757030ddad211b97804b2f1ebf846b62118eff4760e8eae9ec6634d6fa2a47f987efd8"}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @empty, 0x1ff}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x34b}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4000080}, 0x801) 01:21:58 executing program 3: memfd_secret(0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 01:21:58 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, &(0x7f0000000000), &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:58 executing program 2: socket$isdn(0x22, 0x3, 0x10) 01:21:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff080001000600000008000100000000000800020003"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:21:58 executing program 3: r0 = memfd_secret(0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={0x0, 0x0, 0x4008, r0}, 0x18) 01:21:59 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 01:21:59 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000500)=0x1000) bind$phonet(r0, &(0x7f0000000280)={0x23, 0x20, 0x4, 0x40}, 0x10) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="fc000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xfc}}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) memfd_secret(0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) 01:21:59 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff080001000600000008000100000000000800020003"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:21:59 executing program 2: socket$isdn(0x22, 0x3, 0x0) 01:21:59 executing program 3: r0 = memfd_secret(0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={0x0, 0x0, 0x4008, r0}, 0x18) [ 2999.538796][T10438] block nbd1: Receive control failed (result -32) [ 2999.540718][T20911] block nbd1: shutting down sockets 01:21:59 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000500)=0x1000) bind$phonet(r0, &(0x7f0000000280)={0x23, 0x20, 0x4, 0x40}, 0x10) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="fc000000", @ANYRES16=0x0, @ANYBLOB="00082bbd7000fedbdf2508000000380002800400040004000400040004000400040008000100050000001c00038008000100080000000800020002000000f7ff0100010000001c0006800400050008000600070000000400020008000600fffbffff2c0009800800010005000000080001000500000008000100f8ffffff0800010008000000080001000200000064000580140002800800020006000000080001000a0000004c0002800800010011000000080001000600000008000300a70000000800010010000000080000020044000000080003008000000008000200db0000000800020005000000040004803ba8b84ffd0d8aecd53f4a48a0c478411b2851e6050f6db790286ff77e0c0cc57f2f93661b4462a204696590c046994432653a5519c8b15b52a9d083290e02aa75d3"], 0xfc}}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) memfd_secret(0x0) 01:21:59 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:21:59 executing program 2: socket$isdn(0x22, 0x3, 0x0) 01:21:59 executing program 3: r0 = memfd_secret(0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={0x0, 0x0, 0x4008, r0}, 0x18) 01:21:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff080001000600000008000100000000000800020003"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:21:59 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000500)=0x1000) bind$phonet(r0, &(0x7f0000000280)={0x23, 0x20, 0x4, 0x40}, 0x10) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="fc000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xfc}}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) 01:22:00 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000500)=0x1000) bind$phonet(r0, &(0x7f0000000280)={0x23, 0x20, 0x4, 0x40}, 0x10) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="fc000000", @ANYRES16=0x0, @ANYBLOB="00082bbd7000fedbdf2508000000380002800400040004000400040004000400040008000100050000001c00038008000100080000000800020002000000f7ff0100010000001c0006800400050008000600070000000400020008000600fffbffff2c0009800800010005000000080001000500000008000100f8ffffff0800010008000000080001000200000064000580140002800800020006000000080001000a0000004c0002800800010011000000080001000600000008000300a70000000800010010000000080000020044000000080003008000000008000200db0000000800020005000000040004803ba8b84ffd0d8aecd53f4a48a0c478411b2851e6050f6db790286ff77e0c0cc57f2f93661b4462a204696590c046994432653a5519c8b15b52a9d083290e02aa75d3"], 0xfc}}, 0x0) 01:22:00 executing program 3: r0 = memfd_secret(0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, r0}, 0x18) 01:22:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a6"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:00 executing program 2: socket$isdn(0x22, 0x3, 0x0) 01:22:00 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) [ 3000.434299][T10438] block nbd1: Receive control failed (result -32) [ 3000.439516][T20940] block nbd1: shutting down sockets 01:22:00 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 01:22:00 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7}, {0xfffffff7, 0x4, 0x5}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x8}, 0x90) 01:22:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a6"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:00 executing program 3: r0 = memfd_secret(0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, r0}, 0x18) 01:22:00 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4008}, 0x18) 01:22:00 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90) 01:22:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a6"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:00 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000500)=0x1000) bind$phonet(r0, &(0x7f0000000280)={0x23, 0x20, 0x4, 0x40}, 0x10) 01:22:00 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4008}, 0x18) 01:22:00 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000500)=0x1000) 01:22:00 executing program 3: r0 = memfd_secret(0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, r0}, 0x18) 01:22:00 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='syzkaller\x00'}, 0x90) 01:22:01 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 01:22:01 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4008}, 0x18) 01:22:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e98"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:01 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x5451, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x78800, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8010000", @ANYRES16=r3, @ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x400c1}, 0x44) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x8, 0xba, 0x3f}, 0x10) 01:22:01 executing program 3: memfd_secret(0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4008}, 0x18) 01:22:01 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0) [ 3001.428990][T10438] block nbd1: Receive control failed (result -32) [ 3001.433123][T20968] block nbd1: shutting down sockets 01:22:01 executing program 3: memfd_secret(0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4008}, 0x18) 01:22:01 executing program 4: openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x82c1, 0x18) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x541b, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)={0x3ac, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x359874ef}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd4b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf32e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb4d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_LINK={0x114, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbae}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xca15}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xba}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe7d}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x75b}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xede2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}]}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x4004}, 0x4) connect$phonet_pipe(r1, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000040)=0x2) 01:22:01 executing program 3: memfd_secret(0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4008}, 0x18) 01:22:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e98"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:01 executing program 2: bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 01:22:01 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0) 01:22:02 executing program 2: bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 01:22:02 executing program 4: openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x82c1, 0x18) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x541b, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)={0x3ac, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x359874ef}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd4b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf32e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb4d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_LINK={0x114, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbae}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xca15}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xba}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe7d}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x75b}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xede2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}]}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x4004}, 0x4) connect$phonet_pipe(r1, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000040)=0x2) 01:22:02 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0) 01:22:02 executing program 3: memfd_secret(0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4008}, 0x18) 01:22:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e98"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) [ 3002.379497][T10438] block nbd1: Receive control failed (result -32) [ 3002.381194][T21000] block nbd1: shutting down sockets 01:22:02 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 01:22:02 executing program 3: openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x82c1, 0x18) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x541b, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)={0x3ac, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x359874ef}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd4b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf32e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb4d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_LINK={0x114, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbae}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xca15}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xba}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe7d}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x75b}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xede2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}]}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x4004}, 0x4) connect$phonet_pipe(r1, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000040)=0x2) 01:22:02 executing program 4: openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x82c1, 0x18) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x541b, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)={0x3ac, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x359874ef}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd4b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf32e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb4d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_LINK={0x114, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbae}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xca15}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xba}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe7d}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x75b}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xede2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}]}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x4004}, 0x4) connect$phonet_pipe(r1, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000040)=0x2) 01:22:02 executing program 2: bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 01:22:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec9"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:02 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "04f19daee205022e", "aca5d2d6caad973de4bfe4c61a81e189", "269a0b11", "5dffa41640cfcc1d"}, 0x28) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x68, 0x0, &(0x7f0000000480)=[@exit_looper, @increfs_done={0x40106308, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000400)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fda={0x66646185, 0x2, 0x2, 0x24}, @fd={0x66642a85, 0x0, r4}}, &(0x7f00000002c0)={0x0, 0x18, 0x38}}}, @dead_binder_done], 0x89, 0x0, &(0x7f0000000500)="ce4415a196fe36583927f7e5b2948662ebf9a0c85d8f1dfed72cdfbc4d72058bbe435b1f48cc5d03dd09433d9266e303882333ca1cf1340a1d4d814ce652a529b8d47cc4e2a358e2b39e5ebc550bab1d67a1277a52171991812c8e294b120d8efb9ef9b76637ca94bd6102a3595df8433c27d3fe789efd28fbc7aab0ef08e8005002409fec2201c806"}) ioctl$SIOCPNADDRESOURCE(r0, 0x5451, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x7fff, 0x4) 01:22:02 executing program 0: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0) 01:22:02 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={0x0, 0x0, 0x4008}, 0x18) 01:22:02 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "04f19daee205022e", "aca5d2d6caad973de4bfe4c61a81e189", "269a0b11", "5dffa41640cfcc1d"}, 0x28) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x68, 0x0, &(0x7f0000000480)=[@exit_looper, @increfs_done={0x40106308, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000400)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fda={0x66646185, 0x2, 0x2, 0x24}, @fd={0x66642a85, 0x0, r4}}, &(0x7f00000002c0)={0x0, 0x18, 0x38}}}, @dead_binder_done], 0x89, 0x0, &(0x7f0000000500)="ce4415a196fe36583927f7e5b2948662ebf9a0c85d8f1dfed72cdfbc4d72058bbe435b1f48cc5d03dd09433d9266e303882333ca1cf1340a1d4d814ce652a529b8d47cc4e2a358e2b39e5ebc550bab1d67a1277a52171991812c8e294b120d8efb9ef9b76637ca94bd6102a3595df8433c27d3fe789efd28fbc7aab0ef08e8005002409fec2201c806"}) ioctl$SIOCPNADDRESOURCE(r0, 0x5451, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x7fff, 0x4) 01:22:02 executing program 0: openat$iommufd(0xffffffffffffff9c, 0x0, 0x24000, 0x0) 01:22:02 executing program 4: openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x82c1, 0x18) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x541b, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)={0x3ac, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x359874ef}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd4b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf32e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb4d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_LINK={0x114, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbae}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xca15}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xba}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe7d}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x75b}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xede2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}]}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x4004}, 0x4) connect$phonet_pipe(r1, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) 01:22:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec9"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:03 executing program 0: openat$iommufd(0xffffffffffffff9c, 0x0, 0x24000, 0x0) 01:22:03 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "04f19daee205022e", "aca5d2d6caad973de4bfe4c61a81e189", "269a0b11", "5dffa41640cfcc1d"}, 0x28) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x68, 0x0, &(0x7f0000000480)=[@exit_looper, @increfs_done={0x40106308, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000400)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fda={0x66646185, 0x2, 0x2, 0x24}, @fd={0x66642a85, 0x0, r4}}, &(0x7f00000002c0)={0x0, 0x18, 0x38}}}, @dead_binder_done], 0x89, 0x0, &(0x7f0000000500)="ce4415a196fe36583927f7e5b2948662ebf9a0c85d8f1dfed72cdfbc4d72058bbe435b1f48cc5d03dd09433d9266e303882333ca1cf1340a1d4d814ce652a529b8d47cc4e2a358e2b39e5ebc550bab1d67a1277a52171991812c8e294b120d8efb9ef9b76637ca94bd6102a3595df8433c27d3fe789efd28fbc7aab0ef08e8005002409fec2201c806"}) ioctl$SIOCPNADDRESOURCE(r0, 0x5451, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x7fff, 0x4) 01:22:03 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={0x0, 0x0, 0x4008}, 0x18) 01:22:03 executing program 4: openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x82c1, 0x18) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x541b, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)={0x3ac, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x359874ef}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd4b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf32e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb4d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_LINK={0x114, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbae}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xca15}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xba}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe7d}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x75b}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xede2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}]}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x4004}, 0x4) 01:22:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec9"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:03 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) [ 3003.342568][T10438] block nbd1: Receive control failed (result -32) [ 3003.344118][T21026] block nbd1: shutting down sockets 01:22:03 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={0x0, 0x0, 0x4008}, 0x18) 01:22:03 executing program 0: openat$iommufd(0xffffffffffffff9c, 0x0, 0x24000, 0x0) 01:22:03 executing program 4: openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x82c1, 0x18) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x541b, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)={0x3ac, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x359874ef}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd4b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf32e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb4d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_LINK={0x114, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbae}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xca15}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xba}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe7d}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x75b}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xede2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}]}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x4004}, 0x4) 01:22:03 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "04f19daee205022e", "aca5d2d6caad973de4bfe4c61a81e189", "269a0b11", "5dffa41640cfcc1d"}, 0x28) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x68, 0x0, &(0x7f0000000480)=[@exit_looper, @increfs_done={0x40106308, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000400)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fda={0x66646185, 0x2, 0x2, 0x24}, @fd={0x66642a85, 0x0, r4}}, &(0x7f00000002c0)={0x0, 0x18, 0x38}}}, @dead_binder_done], 0x89, 0x0, &(0x7f0000000500)="ce4415a196fe36583927f7e5b2948662ebf9a0c85d8f1dfed72cdfbc4d72058bbe435b1f48cc5d03dd09433d9266e303882333ca1cf1340a1d4d814ce652a529b8d47cc4e2a358e2b39e5ebc550bab1d67a1277a52171991812c8e294b120d8efb9ef9b76637ca94bd6102a3595df8433c27d3fe789efd28fbc7aab0ef08e8005002409fec2201c806"}) ioctl$SIOCPNADDRESOURCE(r0, 0x5451, 0x0) 01:22:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:03 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00'}, 0x18) [ 3003.525483][T21054] block nbd1: shutting down sockets 01:22:03 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 01:22:03 executing program 4: openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x82c1, 0x18) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)={0x3ac, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x359874ef}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd4b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf32e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb4d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_LINK={0x114, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbae}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xca15}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xba}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe7d}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x75b}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xede2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}]}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x4004}, 0x4) 01:22:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:03 executing program 0: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 01:22:03 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00'}, 0x18) 01:22:03 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "04f19daee205022e", "aca5d2d6caad973de4bfe4c61a81e189", "269a0b11", "5dffa41640cfcc1d"}, 0x28) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x68, 0x0, &(0x7f0000000480)=[@exit_looper, @increfs_done={0x40106308, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000400)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fda={0x66646185, 0x2, 0x2, 0x24}, @fd={0x66642a85, 0x0, r3}}, &(0x7f00000002c0)={0x0, 0x18, 0x38}}}, @dead_binder_done], 0x89, 0x0, &(0x7f0000000500)="ce4415a196fe36583927f7e5b2948662ebf9a0c85d8f1dfed72cdfbc4d72058bbe435b1f48cc5d03dd09433d9266e303882333ca1cf1340a1d4d814ce652a529b8d47cc4e2a358e2b39e5ebc550bab1d67a1277a52171991812c8e294b120d8efb9ef9b76637ca94bd6102a3595df8433c27d3fe789efd28fbc7aab0ef08e8005002409fec2201c806"}) [ 3003.725782][T21072] block nbd1: shutting down sockets 01:22:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:03 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00'}, 0x18) 01:22:03 executing program 4: openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x82c1, 0x18) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)={0x3ac, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x359874ef}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd4b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf32e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb4d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_LINK={0x114, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbae}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xca15}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xba}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe7d}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x75b}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xede2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}]}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x4004}, 0x4) 01:22:03 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 01:22:03 executing program 0: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 01:22:03 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "04f19daee205022e", "aca5d2d6caad973de4bfe4c61a81e189", "269a0b11", "5dffa41640cfcc1d"}, 0x28) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) 01:22:03 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "04f19daee205022e", "aca5d2d6caad973de4bfe4c61a81e189", "269a0b11", "5dffa41640cfcc1d"}, 0x28) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x68, 0x0, &(0x7f0000000480)=[@exit_looper, @increfs_done={0x40106308, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000400)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fda={0x66646185, 0x2, 0x2, 0x24}, @fd={0x66642a85, 0x0, r3}}, &(0x7f00000002c0)={0x0, 0x18, 0x38}}}, @dead_binder_done], 0x89, 0x0, &(0x7f0000000500)="ce4415a196fe36583927f7e5b2948662ebf9a0c85d8f1dfed72cdfbc4d72058bbe435b1f48cc5d03dd09433d9266e303882333ca1cf1340a1d4d814ce652a529b8d47cc4e2a358e2b39e5ebc550bab1d67a1277a52171991812c8e294b120d8efb9ef9b76637ca94bd6102a3595df8433c27d3fe789efd28fbc7aab0ef08e8005002409fec2201c806"}) 01:22:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) [ 3003.937040][T21089] block nbd1: shutting down sockets 01:22:03 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "04f19daee205022e", "aca5d2d6caad973de4bfe4c61a81e189", "269a0b11", "5dffa41640cfcc1d"}, 0x28) socket$phonet_pipe(0x23, 0x5, 0x2) 01:22:03 executing program 0: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 01:22:03 executing program 4: openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x82c1, 0x18) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)={0x3ac, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x359874ef}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd4b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf32e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb4d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_LINK={0x114, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbae}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xca15}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xba}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe7d}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x75b}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xede2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}]}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x4004}, 0x4) 01:22:03 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "04f19daee205022e", "aca5d2d6caad973de4bfe4c61a81e189", "269a0b11", "5dffa41640cfcc1d"}, 0x28) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) 01:22:03 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 01:22:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:04 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r2 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) accept$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$SIOCPNADDRESOURCE(r0, 0x2, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) connect$phonet_pipe(r3, &(0x7f00000000c0)={0x23, 0x9, 0x5}, 0x10) r4 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioprio_set$uid(0x3, 0x0, 0x2000) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x8) 01:22:04 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$SIOCPNADDRESOURCE(r0, 0x5421, 0x0) 01:22:04 executing program 4: openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x82c1, 0x18) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)={0x3ac, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x359874ef}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd4b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf32e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb4d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_LINK={0x114, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbae}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xca15}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xba}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe7d}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x75b}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xede2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}]}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x4004}, 0x4) 01:22:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:04 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "04f19daee205022e", "aca5d2d6caad973de4bfe4c61a81e189", "269a0b11", "5dffa41640cfcc1d"}, 0x28) 01:22:04 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 01:22:04 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)={0x3ac, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x359874ef}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd4b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf32e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb4d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_LINK={0x114, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbae}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xca15}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xba}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe7d}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x75b}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xede2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}]}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x4004}, 0x4) 01:22:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:04 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 01:22:04 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 01:22:04 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) socket$nl_generic(0x10, 0x3, 0x10) [ 3004.332713][T21113] block nbd2: shutting down sockets 01:22:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:04 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r2 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) accept$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$SIOCPNADDRESOURCE(r0, 0x2, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) connect$phonet_pipe(r3, &(0x7f00000000c0)={0x23, 0x9, 0x5}, 0x10) r4 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioprio_set$uid(0x3, 0x0, 0x2000) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x8) 01:22:04 executing program 4: socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)={0x3ac, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x359874ef}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd4b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf32e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb4d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_LINK={0x114, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbae}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xca15}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xba}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe7d}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x75b}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xede2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}]}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x4004}, 0x4) 01:22:04 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 01:22:04 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "04f19daee205022e", "aca5d2d6caad973de4bfe4c61a81e189", "269a0b11", "5dffa41640cfcc1d"}, 0x28) socket$phonet_pipe(0x23, 0x5, 0x2) 01:22:04 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:04 executing program 4: socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)={0x3ac, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x359874ef}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd4b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf32e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb4d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_LINK={0x114, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbae}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xca15}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xba}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe7d}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x75b}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xede2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}]}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x4004}, 0x4) [ 3004.582422][T21135] block nbd2: shutting down sockets 01:22:04 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:04 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r2 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) accept$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$SIOCPNADDRESOURCE(r0, 0x2, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) connect$phonet_pipe(r3, &(0x7f00000000c0)={0x23, 0x9, 0x5}, 0x10) r4 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioprio_set$uid(0x3, 0x0, 0x2000) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x8) 01:22:04 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 01:22:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB, @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:04 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "04f19daee205022e", "aca5d2d6caad973de4bfe4c61a81e189", "269a0b11", "5dffa41640cfcc1d"}, 0x28) socket$phonet_pipe(0x23, 0x5, 0x2) 01:22:04 executing program 4: socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)={0x3ac, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x359874ef}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd4b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf32e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb4d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_LINK={0x114, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbae}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xca15}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xba}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe7d}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x75b}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xede2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}]}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x4004}, 0x4) 01:22:04 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 01:22:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB, @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:04 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:04 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r2 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) accept$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$SIOCPNADDRESOURCE(r0, 0x2, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) connect$phonet_pipe(r3, &(0x7f00000000c0)={0x23, 0x9, 0x5}, 0x10) r4 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioprio_set$uid(0x3, 0x0, 0x2000) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) [ 3004.808937][T21151] block nbd2: shutting down sockets 01:22:04 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "04f19daee205022e", "aca5d2d6caad973de4bfe4c61a81e189", "269a0b11", "5dffa41640cfcc1d"}, 0x28) socket$phonet_pipe(0x23, 0x5, 0x2) 01:22:04 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_NL_MEDIA_GET(r0, 0x0, 0x4) 01:22:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB, @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:04 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x0) 01:22:04 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:05 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "04f19daee205022e", "aca5d2d6caad973de4bfe4c61a81e189", "269a0b11", "5dffa41640cfcc1d"}, 0x28) 01:22:05 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_NL_MEDIA_GET(r0, 0x0, 0x4) 01:22:05 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x0) [ 3005.063492][T21167] block nbd2: shutting down sockets 01:22:05 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:05 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r2 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) accept$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$SIOCPNADDRESOURCE(r0, 0x2, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) connect$phonet_pipe(r3, &(0x7f00000000c0)={0x23, 0x9, 0x5}, 0x10) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioprio_set$uid(0x3, 0x0, 0x2000) 01:22:05 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_NL_MEDIA_GET(r0, 0x0, 0x4) 01:22:05 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) socket$nl_generic(0x10, 0x3, 0x10) 01:22:05 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) memfd_secret(0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:05 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x0) 01:22:05 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r2 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) accept$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$SIOCPNADDRESOURCE(r0, 0x2, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) connect$phonet_pipe(r3, &(0x7f00000000c0)={0x23, 0x9, 0x5}, 0x10) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x2000) 01:22:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:05 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 01:22:05 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:05 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x3ac, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x359874ef}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd4b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf32e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb4d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_LINK={0x114, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbae}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xca15}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xba}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe7d}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x75b}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xede2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}]}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x4004}, 0x4) 01:22:05 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:05 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r2 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) accept$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$SIOCPNADDRESOURCE(r0, 0x2, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) connect$phonet_pipe(r3, &(0x7f00000000c0)={0x23, 0x9, 0x5}, 0x10) ioprio_set$uid(0x3, 0x0, 0x2000) 01:22:05 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x4) 01:22:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401c", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:05 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:05 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 01:22:05 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:05 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x4) 01:22:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401c", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:05 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:05 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 01:22:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401c", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:05 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:05 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r2 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) accept$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$SIOCPNADDRESOURCE(r0, 0x2, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) ioprio_set$uid(0x3, 0x0, 0x2000) 01:22:05 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:05 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x4) 01:22:05 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:05 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r2 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) accept$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$SIOCPNADDRESOURCE(r0, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) ioprio_set$uid(0x3, 0x0, 0x2000) 01:22:05 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 01:22:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:05 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x4) 01:22:05 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r2 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) accept$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$SIOCPNADDRESOURCE(r0, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x2000) 01:22:05 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 01:22:05 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:05 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:05 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:06 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x4) 01:22:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:06 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioprio_set$uid(0x3, 0x0, 0x2000) 01:22:06 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) memfd_secret(0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:06 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 01:22:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5a", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:06 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:06 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:06 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 01:22:06 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioprio_set$uid(0x3, 0x0, 0x2000) 01:22:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5a", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:06 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 01:22:06 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:06 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:06 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x2000) 01:22:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5a", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:06 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:06 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 01:22:06 executing program 4: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioprio_set$uid(0x3, 0x0, 0x2000) 01:22:06 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:06 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 01:22:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc68", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:06 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 01:22:06 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) memfd_secret(0x0) ioprio_set$uid(0x3, 0x0, 0x2000) 01:22:06 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:06 executing program 4: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioprio_set$uid(0x3, 0x0, 0x2000) 01:22:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc68", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) [ 3006.639527][T21310] binder: 21304:21310 ioctl c0306201 0 returned -14 01:22:06 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 01:22:06 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 01:22:06 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:06 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) ioprio_set$uid(0x3, 0x0, 0x2000) 01:22:06 executing program 4: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioprio_set$uid(0x3, 0x0, 0x2000) 01:22:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc68", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:06 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 3006.826070][T21326] binder: 21323:21326 ioctl c0306201 0 returned -14 01:22:06 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:06 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 01:22:06 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) ioprio_set$uid(0x3, 0x0, 0x2000) 01:22:06 executing program 4: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x2000) 01:22:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:06 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) ioprio_set$uid(0x3, 0x0, 0x2000) 01:22:07 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) [ 3007.009533][T21339] binder: 21334:21339 ioctl c0306201 0 returned -14 01:22:07 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:07 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 01:22:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:07 executing program 4: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) memfd_secret(0x0) ioprio_set$uid(0x3, 0x0, 0x2000) 01:22:07 executing program 2: ioprio_set$uid(0x3, 0x0, 0x2000) 01:22:07 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:07 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 01:22:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:07 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:07 executing program 4: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) ioprio_set$uid(0x3, 0x0, 0x2000) 01:22:07 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:07 executing program 2: ioprio_set$uid(0x0, 0x0, 0x2000) 01:22:07 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) [ 3007.338939][T21361] block nbd1: shutting down sockets 01:22:07 executing program 4: socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) ioprio_set$uid(0x3, 0x0, 0x2000) 01:22:07 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x58, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f58861", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:07 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 01:22:07 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 01:22:07 executing program 2: ioprio_set$uid(0x0, 0x0, 0x2000) 01:22:07 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f58861", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:07 executing program 4: socket$phonet_pipe(0x23, 0x5, 0x2) ioprio_set$uid(0x3, 0x0, 0x2000) [ 3007.598272][T21378] block nbd1: shutting down sockets 01:22:07 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 01:22:07 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:07 executing program 2: ioprio_set$uid(0x0, 0x0, 0x2000) [ 3007.656289][T21390] binder: 21385:21390 ioctl c0306201 0 returned -14 01:22:07 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 01:22:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f58861", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:07 executing program 4: ioprio_set$uid(0x3, 0x0, 0x2000) 01:22:07 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 3007.767981][T21398] binder: 21397:21398 ioctl c0306201 0 returned -14 [ 3007.800624][T21394] block nbd1: shutting down sockets 01:22:07 executing program 4: ioprio_set$uid(0x0, 0x0, 0x2000) 01:22:07 executing program 2: ioprio_set$uid(0x3, 0x0, 0x0) 01:22:07 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x0) 01:22:07 executing program 2: ioprio_set$uid(0x3, 0x0, 0x0) 01:22:07 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240), 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:07 executing program 4: ioprio_set$uid(0x0, 0x0, 0x2000) 01:22:07 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) [ 3007.966228][T21412] binder: 21406:21412 ioctl c0306201 0 returned -14 01:22:08 executing program 2: ioprio_set$uid(0x3, 0x0, 0x0) 01:22:08 executing program 4: ioprio_set$uid(0x0, 0x0, 0x2000) 01:22:08 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240), 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) 01:22:08 executing program 2: ioprio_set$uid(0x3, 0x0, 0x2000) 01:22:08 executing program 4: ioprio_set$uid(0x3, 0x0, 0x0) 01:22:08 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x0) 01:22:08 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240), 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:08 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:08 executing program 4: ioprio_set$uid(0x3, 0x0, 0x0) 01:22:08 executing program 2: ioprio_set$uid(0x3, 0x0, 0x2000) 01:22:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000015) [ 3008.854806][T10438] block nbd1: Receive control failed (result -32) [ 3008.856041][T21416] block nbd1: shutting down sockets 01:22:08 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:08 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) ioprio_set$uid(0x3, 0x0, 0x2000) 01:22:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xffffffffffffffab, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}}, 0x4000015) 01:22:08 executing program 4: ioprio_set$uid(0x3, 0x0, 0x0) 01:22:08 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:09 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r1 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x2000) 01:22:09 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x0) 01:22:09 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:09 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x58, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:09 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @acquire, @acquire={0x40046305, 0x3}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:09 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)}, 0x40}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xffffffffffffffab, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="880528d28d815496d3f534e7ff0055a269b6538ca2215812a06230a483a32a7b25d2cab7295e20bb15b0a778592ca97f807a3399284c6c09a7d9999e2b05f0da60803f9f591d35245f96d787bd2136248cb38ddd3806800c1470cdc55cf32bc6002fe85ae045a7cf9fb46e628f042e7da2c07c146fda104d94deba97a4f510e1ff62961ff10d915fbf72f82007c8a2c607285e0cf5411775b5387347f16da236f0401ce6178cb0e4b8418aa451d2512c7967594f00518dc70f90085c14d3c19e1eec28fcf6211102bac56f5aeb888306a1bc685ff6f5886190", @ANYBLOB="000427bd7000fddbdf250f1300002c0009800800020001000000080001000500000008000200c85e0000080001000004000008000100ff0f000038000280040004000800010009000000040004002400038008000100c279ffff08000100060000000800010000000000080002000300000061486bb969705b10382f9b0ed0e8a637f40f063122552e9893bb157ec930b5ad44"], 0x78}}, 0x0) [ 3009.764849][T10438] block nbd1: Receive control failed (result -32) [ 3009.773702][T21448] block nbd1: shutting down sockets 01:22:09 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:09 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r2 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) accept$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$SIOCPNADDRESOURCE(r0, 0x2, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) ioprio_set$uid(0x3, 0x0, 0x2000) 01:22:09 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r2 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) accept$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$SIOCPNADDRESOURCE(r0, 0x2, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) connect$phonet_pipe(r3, &(0x7f00000000c0)={0x23, 0x9, 0x5}, 0x10) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioprio_set$uid(0x3, 0x0, 0x2000) 01:22:09 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:09 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r2 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) accept$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$SIOCPNADDRESOURCE(r0, 0x2, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) connect$phonet_pipe(r3, &(0x7f00000000c0)={0x23, 0x9, 0x5}, 0x10) r4 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioprio_set$uid(0x3, 0x0, 0x2000) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) 01:22:09 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) [ 3010.127985][T21485] block nbd4: shutting down sockets 01:22:10 executing program 4: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) memfd_secret(0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x101802, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000002a80)={0x23, 0x0, 0x9, 0x2}, 0x10) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000000c0)=0x2, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r3, 0x5421, 0x0) recvmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@l2tp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/10, 0xa}], 0x2, &(0x7f0000000300)=""/168, 0xa8}, 0x2102) 01:22:10 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:10 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:10 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_io_uring_setup(0x374c, &(0x7f0000000180)={0x0, 0x31, 0x21, 0x0, 0x1b7}, &(0x7f0000000200), &(0x7f0000000240)) r2 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x4) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x415}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x49fd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) 01:22:10 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) memfd_secret(0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x101802, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000002a80)={0x23, 0x0, 0x9, 0x2}, 0x10) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000000c0)=0x2, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r3, 0x5421, 0x0) recvmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@l2tp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/10, 0xa}], 0x2, &(0x7f0000000300)=""/168, 0xa8}, 0x2102) 01:22:10 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) memfd_secret(0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x101802, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000002a80)={0x23, 0x0, 0x9, 0x2}, 0x10) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000000c0)=0x2, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r3, 0x5421, 0x0) recvmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@l2tp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/10, 0xa}], 0x2, &(0x7f0000000300)=""/168, 0xa8}, 0x2102) [ 3010.648959][T10438] block nbd1: Receive control failed (result -32) [ 3010.650165][T21468] block nbd1: shutting down sockets 01:22:10 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240), 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:10 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) memfd_secret(0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x101802, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000002a80)={0x23, 0x0, 0x9, 0x2}, 0x10) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000000c0)=0x2, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r3, 0x5421, 0x0) recvmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@l2tp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/10, 0xa}], 0x2, &(0x7f0000000300)=""/168, 0xa8}, 0x2102) 01:22:10 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x401c5820, &(0x7f00000006c0)) 01:22:10 executing program 4: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) memfd_secret(0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x101802, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000002a80)={0x23, 0x0, 0x9, 0x2}, 0x10) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000000c0)=0x2, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r3, 0x5421, 0x0) recvmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@l2tp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/10, 0xa}], 0x2, &(0x7f0000000300)=""/168, 0xa8}, 0x2102) 01:22:10 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240), 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:10 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) memfd_secret(0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x101802, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000002a80)={0x23, 0x0, 0x9, 0x2}, 0x10) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000000c0)=0x2, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r3, 0x5421, 0x0) recvmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@l2tp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/10, 0xa}], 0x2, &(0x7f0000000300)=""/168, 0xa8}, 0x2102) [ 3010.887338][T21498] block nbd5: shutting down sockets 01:22:10 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240), 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:10 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_io_uring_setup(0x374c, &(0x7f0000000180)={0x0, 0x31, 0x21, 0x0, 0x1b7}, &(0x7f0000000200), &(0x7f0000000240)) r2 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x4) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x415}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x49fd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) 01:22:10 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x89a0, &(0x7f00000006c0)) 01:22:10 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x89ed, 0x0) 01:22:10 executing program 4: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) memfd_secret(0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x101802, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000002a80)={0x23, 0x0, 0x9, 0x2}, 0x10) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000000c0)=0x2, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r3, 0x5421, 0x0) recvmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@l2tp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/10, 0xa}], 0x2, &(0x7f0000000300)=""/168, 0xa8}, 0x2102) 01:22:10 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) memfd_secret(0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x101802, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000002a80)={0x23, 0x0, 0x9, 0x2}, 0x10) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000000c0)=0x2, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r3, 0x5421, 0x0) recvmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@l2tp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/10, 0xa}], 0x2, &(0x7f0000000300)=""/168, 0xa8}, 0x2102) 01:22:11 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, 0x3e}, @fd, @fda={0x66646185, 0x7, 0x2, 0x1}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:11 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x89ed, 0x0) [ 3011.076947][T21516] block nbd5: shutting down sockets 01:22:11 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x89a0, &(0x7f00000006c0)) 01:22:11 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (fail_nth: 1) 01:22:11 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_io_uring_setup(0x374c, &(0x7f0000000180)={0x0, 0x31, 0x21, 0x0, 0x1b7}, &(0x7f0000000200), &(0x7f0000000240)) r2 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x4) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x415}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x49fd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) 01:22:11 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) memfd_secret(0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x101802, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000002a80)={0x23, 0x0, 0x9, 0x2}, 0x10) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000000c0)=0x2, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) recvmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@l2tp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/10, 0xa}], 0x2, &(0x7f0000000300)=""/168, 0xa8}, 0x2102) 01:22:11 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x89ed, 0x0) 01:22:11 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)}, 0x40}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:11 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x89a0, &(0x7f00000006c0)) [ 3011.272101][T21538] FAULT_INJECTION: forcing a failure. [ 3011.272101][T21538] name failslab, interval 1, probability 0, space 0, times 0 [ 3011.289014][T21538] CPU: 1 PID: 21538 Comm: syz-executor.4 Not tainted 6.7.0-rc1-syzkaller-00012-g9bacdd8996c7 #0 [ 3011.299506][T21538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3011.309600][T21538] Call Trace: [ 3011.312923][T21538] [ 3011.315898][T21538] dump_stack_lvl+0x1e7/0x2d0 01:22:11 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) 01:22:11 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xab, 0x0, &(0x7f0000000340)="d5afd78467164ace19a673b801eb19aeda475bc63532bb4f17a8b713dd888a0c1037d020d9d9628dc12ec215595784c038d85cf71f9c6a356eb5b01dbdc69429e8c8be06f9a6629279bfca58695026133d82dce5156aabb5cf808395d8f32ba4ed7c04db60f4df5d5ba2d86b972adebbcb6b653c25e1f4335ea64b227d9255cc1af727e4721547e36eef4e6a124bdb856a2258ab2cf3f2d790db9cc37e12d317f7dcc002e6ae1751bd5883"}) [ 3011.320650][T21538] ? nf_tcp_handle_invalid+0x650/0x650 [ 3011.326170][T21538] ? panic+0x850/0x850 [ 3011.330408][T21538] should_fail_ex+0x3aa/0x4e0 [ 3011.335151][T21538] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 3011.340928][T21538] should_failslab+0x9/0x20 [ 3011.345528][T21538] __kmem_cache_alloc_node+0x6d/0x300 [ 3011.351055][T21538] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 3011.356833][T21538] __kmalloc+0xa2/0x1a0 [ 3011.361045][T21538] ? rcu_is_watching+0x15/0xb0 [ 3011.365871][T21538] tomoyo_realpath_from_path+0xcf/0x5e0 [ 3011.371491][T21538] tomoyo_path_number_perm+0x23a/0x870 [ 3011.377006][T21538] ? tomoyo_path_number_perm+0x208/0x870 [ 3011.382708][T21538] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 3011.388264][T21538] ? file_end_write+0x250/0x250 [ 3011.393194][T21538] ? __fget_files+0x29/0x480 [ 3011.397883][T21538] ? __fget_files+0x3fe/0x480 [ 3011.402628][T21538] ? __fget_files+0x29/0x480 [ 3011.407310][T21538] security_file_ioctl+0x71/0xa0 [ 3011.412299][T21538] __se_sys_ioctl+0x47/0x170 [ 3011.416950][T21538] do_syscall_64+0x45/0x110 01:22:11 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:11 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (fail_nth: 1) [ 3011.421510][T21538] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3011.427458][T21538] RIP: 0033:0x7f906627cae9 [ 3011.431917][T21538] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3011.451571][T21538] RSP: 002b:00007f9066fb60c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3011.460049][T21538] RAX: ffffffffffffffda RBX: 00007f906639bf80 RCX: 00007f906627cae9 [ 3011.468069][T21538] RDX: 0000000020000300 RSI: 00000000c0306201 RDI: 0000000000000003 [ 3011.476089][T21538] RBP: 00007f9066fb6120 R08: 0000000000000000 R09: 0000000000000000 [ 3011.484113][T21538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3011.492222][T21538] R13: 000000000000000b R14: 00007f906639bf80 R15: 00007ffc7581af48 [ 3011.499154][T21553] FAULT_INJECTION: forcing a failure. [ 3011.499154][T21553] name failslab, interval 1, probability 0, space 0, times 0 [ 3011.500238][T21538] 01:22:11 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (fail_nth: 1) 01:22:11 executing program 1: ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89a0, &(0x7f00000006c0)) [ 3011.542380][T21538] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3011.549355][T21553] CPU: 1 PID: 21553 Comm: syz-executor.0 Not tainted 6.7.0-rc1-syzkaller-00012-g9bacdd8996c7 #0 [ 3011.559833][T21553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3011.569965][T21553] Call Trace: [ 3011.573289][T21553] [ 3011.576263][T21553] dump_stack_lvl+0x1e7/0x2d0 [ 3011.581004][T21553] ? nf_tcp_handle_invalid+0x650/0x650 [ 3011.586526][T21553] ? panic+0x850/0x850 [ 3011.590688][T21553] should_fail_ex+0x3aa/0x4e0 [ 3011.595434][T21553] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 3011.601214][T21553] should_failslab+0x9/0x20 [ 3011.605791][T21553] __kmem_cache_alloc_node+0x6d/0x300 [ 3011.611236][T21553] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 3011.617018][T21553] __kmalloc+0xa2/0x1a0 [ 3011.621221][T21553] ? rcu_is_watching+0x15/0xb0 [ 3011.626068][T21553] tomoyo_realpath_from_path+0xcf/0x5e0 [ 3011.631750][T21553] tomoyo_path_number_perm+0x23a/0x870 [ 3011.637269][T21553] ? tomoyo_path_number_perm+0x208/0x870 [ 3011.642930][T21553] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 3011.648423][T21553] ? file_end_write+0x250/0x250 [ 3011.653303][T21553] ? __fget_files+0x29/0x480 [ 3011.657912][T21553] ? __fget_files+0x3fe/0x480 [ 3011.662630][T21553] ? __fget_files+0x29/0x480 [ 3011.667247][T21553] security_file_ioctl+0x71/0xa0 [ 3011.672207][T21553] __se_sys_ioctl+0x47/0x170 [ 3011.676822][T21553] do_syscall_64+0x45/0x110 [ 3011.681342][T21553] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3011.687253][T21553] RIP: 0033:0x7f95e947cae9 [ 3011.691681][T21553] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3011.711311][T21553] RSP: 002b:00007f95ea1330c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3011.719768][T21553] RAX: ffffffffffffffda RBX: 00007f95e959bf80 RCX: 00007f95e947cae9 [ 3011.727755][T21553] RDX: 0000000020000300 RSI: 00000000c0306201 RDI: 0000000000000003 [ 3011.735745][T21553] RBP: 00007f95ea133120 R08: 0000000000000000 R09: 0000000000000000 [ 3011.743821][T21553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3011.751819][T21553] R13: 000000000000000b R14: 00007f95e959bf80 R15: 00007fffff514ef8 [ 3011.759831][T21553] [ 3011.780731][T21553] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3011.789211][T21533] block nbd5: shutting down sockets 01:22:11 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (fail_nth: 2) [ 3011.816263][T21556] FAULT_INJECTION: forcing a failure. [ 3011.816263][T21556] name failslab, interval 1, probability 0, space 0, times 0 [ 3011.832568][T21556] CPU: 0 PID: 21556 Comm: syz-executor.3 Not tainted 6.7.0-rc1-syzkaller-00012-g9bacdd8996c7 #0 [ 3011.843152][T21556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3011.853436][T21556] Call Trace: [ 3011.856753][T21556] [ 3011.859722][T21556] dump_stack_lvl+0x1e7/0x2d0 [ 3011.864472][T21556] ? nf_tcp_handle_invalid+0x650/0x650 [ 3011.869985][T21556] ? panic+0x850/0x850 [ 3011.874111][T21556] should_fail_ex+0x3aa/0x4e0 [ 3011.878861][T21556] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 3011.884640][T21556] should_failslab+0x9/0x20 [ 3011.889288][T21556] __kmem_cache_alloc_node+0x6d/0x300 [ 3011.894751][T21556] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 3011.900622][T21556] __kmalloc+0xa2/0x1a0 [ 3011.904828][T21556] ? rcu_is_watching+0x15/0xb0 [ 3011.906272][T21561] FAULT_INJECTION: forcing a failure. [ 3011.906272][T21561] name failslab, interval 1, probability 0, space 0, times 0 [ 3011.909638][T21556] tomoyo_realpath_from_path+0xcf/0x5e0 [ 3011.909695][T21556] tomoyo_path_number_perm+0x23a/0x870 [ 3011.933434][T21556] ? tomoyo_path_number_perm+0x208/0x870 [ 3011.939112][T21556] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 3011.944623][T21556] ? file_end_write+0x250/0x250 [ 3011.949522][T21556] ? __fget_files+0x29/0x480 [ 3011.954137][T21556] ? __fget_files+0x3fe/0x480 [ 3011.958838][T21556] ? __fget_files+0x29/0x480 [ 3011.963458][T21556] security_file_ioctl+0x71/0xa0 [ 3011.968419][T21556] __se_sys_ioctl+0x47/0x170 [ 3011.973029][T21556] do_syscall_64+0x45/0x110 [ 3011.977548][T21556] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3011.983459][T21556] RIP: 0033:0x7fda0247cae9 [ 3011.987890][T21556] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3012.007594][T21556] RSP: 002b:00007fda031800c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3012.016046][T21556] RAX: ffffffffffffffda RBX: 00007fda0259bf80 RCX: 00007fda0247cae9 [ 3012.024031][T21556] RDX: 0000000000000000 RSI: 000000000000ab07 RDI: 0000000000000003 [ 3012.032095][T21556] RBP: 00007fda03180120 R08: 0000000000000000 R09: 0000000000000000 [ 3012.040076][T21556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3012.048060][T21556] R13: 000000000000000b R14: 00007fda0259bf80 R15: 00007ffd631ad938 [ 3012.056059][T21556] [ 3012.064224][T21561] CPU: 0 PID: 21561 Comm: syz-executor.4 Not tainted 6.7.0-rc1-syzkaller-00012-g9bacdd8996c7 #0 [ 3012.074695][T21561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3012.084792][T21561] Call Trace: [ 3012.088100][T21561] [ 3012.091108][T21561] dump_stack_lvl+0x1e7/0x2d0 [ 3012.095815][T21561] ? nf_tcp_handle_invalid+0x650/0x650 [ 3012.101313][T21561] ? panic+0x850/0x850 [ 3012.105429][T21561] ? __might_sleep+0xe0/0xe0 [ 3012.110075][T21561] ? prepend_path+0xa10/0xbe0 [ 3012.114798][T21561] should_fail_ex+0x3aa/0x4e0 [ 3012.119521][T21561] ? tomoyo_encode+0x26f/0x530 [ 3012.124305][T21561] should_failslab+0x9/0x20 [ 3012.128826][T21561] __kmem_cache_alloc_node+0x6d/0x300 [ 3012.134220][T21561] ? d_absolute_path+0x1c6/0x300 [ 3012.139177][T21561] ? tomoyo_encode+0x26f/0x530 [ 3012.143960][T21561] __kmalloc+0xa2/0x1a0 [ 3012.148136][T21561] tomoyo_encode+0x26f/0x530 [ 3012.152746][T21561] tomoyo_realpath_from_path+0x598/0x5e0 [ 3012.158405][T21561] tomoyo_path_number_perm+0x23a/0x870 [ 3012.163879][T21561] ? tomoyo_path_number_perm+0x208/0x870 [ 3012.169528][T21561] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 3012.175017][T21561] ? file_end_write+0x250/0x250 [ 3012.179902][T21561] ? __fget_files+0x29/0x480 [ 3012.184514][T21561] ? __fget_files+0x3fe/0x480 [ 3012.189206][T21561] ? __fget_files+0x29/0x480 [ 3012.193821][T21561] security_file_ioctl+0x71/0xa0 [ 3012.198775][T21561] __se_sys_ioctl+0x47/0x170 [ 3012.203387][T21561] do_syscall_64+0x45/0x110 [ 3012.207909][T21561] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3012.213821][T21561] RIP: 0033:0x7f906627cae9 [ 3012.218256][T21561] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3012.237975][T21561] RSP: 002b:00007f9066fb60c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3012.246409][T21561] RAX: ffffffffffffffda RBX: 00007f906639bf80 RCX: 00007f906627cae9 [ 3012.254486][T21561] RDX: 0000000020000300 RSI: 00000000c0306201 RDI: 0000000000000003 [ 3012.262484][T21561] RBP: 00007f9066fb6120 R08: 0000000000000000 R09: 0000000000000000 [ 3012.270577][T21561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3012.278731][T21561] R13: 000000000000000b R14: 00007f906639bf80 R15: 00007ffc7581af48 [ 3012.286726][T21561] [ 3012.299416][T21556] ERROR: Out of memory at tomoyo_realpath_from_path. 01:22:12 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_io_uring_setup(0x374c, &(0x7f0000000180)={0x0, 0x31, 0x21, 0x0, 0x1b7}, &(0x7f0000000200), &(0x7f0000000240)) r2 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x4) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x415}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x49fd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4) 01:22:12 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (fail_nth: 2) 01:22:12 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) memfd_secret(0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x101802, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000002a80)={0x23, 0x0, 0x9, 0x2}, 0x10) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000000c0)=0x2, 0x4) recvmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@l2tp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/10, 0xa}], 0x2, &(0x7f0000000300)=""/168, 0xa8}, 0x2102) 01:22:12 executing program 1: ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89a0, &(0x7f00000006c0)) 01:22:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (fail_nth: 3) [ 3012.313957][T21561] ERROR: Out of memory at tomoyo_realpath_from_path. 01:22:12 executing program 1: ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89a0, &(0x7f00000006c0)) 01:22:12 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) memfd_secret(0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x101802, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000002a80)={0x23, 0x0, 0x9, 0x2}, 0x10) recvmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@l2tp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/10, 0xa}], 0x2, &(0x7f0000000300)=""/168, 0xa8}, 0x2102) 01:22:12 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (fail_nth: 2) [ 3012.453276][T21570] FAULT_INJECTION: forcing a failure. [ 3012.453276][T21570] name failslab, interval 1, probability 0, space 0, times 0 [ 3012.467548][T21557] block nbd3: shutting down sockets [ 3012.488339][T21563] block nbd5: shutting down sockets [ 3012.519110][T21570] CPU: 1 PID: 21570 Comm: syz-executor.0 Not tainted 6.7.0-rc1-syzkaller-00012-g9bacdd8996c7 #0 [ 3012.529685][T21570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3012.539852][T21570] Call Trace: [ 3012.543149][T21570] [ 3012.546119][T21570] dump_stack_lvl+0x1e7/0x2d0 [ 3012.550828][T21570] ? nf_tcp_handle_invalid+0x650/0x650 [ 3012.556322][T21570] ? panic+0x850/0x850 [ 3012.560505][T21570] ? __might_sleep+0xe0/0xe0 [ 3012.565110][T21570] ? prepend_path+0xa10/0xbe0 [ 3012.569818][T21570] should_fail_ex+0x3aa/0x4e0 [ 3012.574520][T21570] ? tomoyo_encode+0x26f/0x530 [ 3012.579311][T21570] should_failslab+0x9/0x20 [ 3012.583822][T21570] __kmem_cache_alloc_node+0x6d/0x300 [ 3012.589208][T21570] ? d_absolute_path+0x1c6/0x300 [ 3012.594171][T21570] ? tomoyo_encode+0x26f/0x530 [ 3012.598955][T21570] __kmalloc+0xa2/0x1a0 [ 3012.603125][T21570] tomoyo_encode+0x26f/0x530 [ 3012.607736][T21570] tomoyo_realpath_from_path+0x598/0x5e0 [ 3012.613394][T21570] tomoyo_path_number_perm+0x23a/0x870 [ 3012.618870][T21570] ? tomoyo_path_number_perm+0x208/0x870 [ 3012.624509][T21570] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 3012.629993][T21570] ? file_end_write+0x250/0x250 [ 3012.634886][T21570] ? __fget_files+0x29/0x480 [ 3012.639494][T21570] ? __fget_files+0x3fe/0x480 [ 3012.644205][T21570] ? __fget_files+0x29/0x480 [ 3012.648815][T21570] security_file_ioctl+0x71/0xa0 [ 3012.653766][T21570] __se_sys_ioctl+0x47/0x170 [ 3012.658383][T21570] do_syscall_64+0x45/0x110 [ 3012.662945][T21570] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3012.668868][T21570] RIP: 0033:0x7f95e947cae9 [ 3012.673292][T21570] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3012.692909][T21570] RSP: 002b:00007f95ea1330c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3012.701337][T21570] RAX: ffffffffffffffda RBX: 00007f95e959bf80 RCX: 00007f95e947cae9 [ 3012.709322][T21570] RDX: 0000000020000300 RSI: 00000000c0306201 RDI: 0000000000000003 01:22:12 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_io_uring_setup(0x374c, &(0x7f0000000180)={0x0, 0x31, 0x21, 0x0, 0x1b7}, &(0x7f0000000200), &(0x7f0000000240)) r2 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) [ 3012.717304][T21570] RBP: 00007f95ea133120 R08: 0000000000000000 R09: 0000000000000000 [ 3012.725283][T21570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3012.733260][T21570] R13: 000000000000000b R14: 00007f95e959bf80 R15: 00007fffff514ef8 [ 3012.741253][T21570] [ 3012.749864][T21570] ERROR: Out of memory at tomoyo_realpath_from_path. 01:22:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:12 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) memfd_secret(0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x101802, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) recvmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@l2tp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/10, 0xa}], 0x2, &(0x7f0000000300)=""/168, 0xa8}, 0x2102) 01:22:12 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (fail_nth: 3) 01:22:12 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89a0, &(0x7f00000006c0)) [ 3012.867376][T21575] block nbd5: shutting down sockets 01:22:12 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_io_uring_setup(0x374c, &(0x7f0000000180)={0x0, 0x31, 0x21, 0x0, 0x1b7}, &(0x7f0000000200), &(0x7f0000000240)) r2 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x4) 01:22:12 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89a0, &(0x7f00000006c0)) 01:22:12 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) memfd_secret(0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x101802, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) recvmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@l2tp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/10, 0xa}], 0x2, &(0x7f0000000300)=""/168, 0xa8}, 0x2102) 01:22:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3012.925542][T21587] FAULT_INJECTION: forcing a failure. [ 3012.925542][T21587] name failslab, interval 1, probability 0, space 0, times 0 [ 3012.965301][T21587] CPU: 1 PID: 21587 Comm: syz-executor.0 Not tainted 6.7.0-rc1-syzkaller-00012-g9bacdd8996c7 #0 [ 3012.975784][T21587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3012.985855][T21587] Call Trace: [ 3012.989142][T21587] [ 3012.992079][T21587] dump_stack_lvl+0x1e7/0x2d0 [ 3012.996808][T21587] ? nf_tcp_handle_invalid+0x650/0x650 [ 3013.002279][T21587] ? panic+0x850/0x850 [ 3013.006368][T21587] ? __might_sleep+0xe0/0xe0 [ 3013.010982][T21587] should_fail_ex+0x3aa/0x4e0 [ 3013.015683][T21587] ? binder_get_thread+0x1bd/0x6c0 [ 3013.020891][T21587] should_failslab+0x9/0x20 [ 3013.025399][T21587] __kmem_cache_alloc_node+0x6d/0x300 [ 3013.030790][T21587] ? do_raw_spin_unlock+0x13b/0x8b0 [ 3013.036009][T21587] ? binder_get_thread+0x1bd/0x6c0 [ 3013.041133][T21587] kmalloc_trace+0x2a/0x60 [ 3013.045562][T21587] binder_get_thread+0x1bd/0x6c0 [ 3013.050536][T21587] binder_ioctl+0x2a9/0x1c20 [ 3013.055137][T21587] ? tomoyo_path_number_perm+0x68d/0x870 [ 3013.060782][T21587] ? tomoyo_path_number_perm+0x71a/0x870 [ 3013.066631][T21587] ? tomoyo_path_number_perm+0x208/0x870 [ 3013.072283][T21587] ? smack_log+0x123/0x540 [ 3013.076719][T21587] ? binder_poll+0x3b0/0x3b0 [ 3013.081377][T21587] ? smk_access+0x4e0/0x4e0 [ 3013.085907][T21587] ? smk_access+0x4ab/0x4e0 [ 3013.090515][T21587] ? smk_tskacc+0x2ff/0x360 [ 3013.095029][T21587] ? smack_file_ioctl+0x2fa/0x3a0 [ 3013.100066][T21587] ? smack_file_alloc_security+0xe0/0xe0 [ 3013.105714][T21587] ? __fget_files+0x3fe/0x480 [ 3013.110505][T21587] ? bpf_lsm_file_ioctl+0x9/0x10 [ 3013.115456][T21587] ? security_file_ioctl+0x81/0xa0 [ 3013.120577][T21587] ? binder_poll+0x3b0/0x3b0 [ 3013.125187][T21587] __se_sys_ioctl+0xf8/0x170 [ 3013.129822][T21587] do_syscall_64+0x45/0x110 [ 3013.134342][T21587] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3013.140247][T21587] RIP: 0033:0x7f95e947cae9 [ 3013.144667][T21587] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3013.164315][T21587] RSP: 002b:00007f95ea1330c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3013.172793][T21587] RAX: ffffffffffffffda RBX: 00007f95e959bf80 RCX: 00007f95e947cae9 [ 3013.180791][T21587] RDX: 0000000020000300 RSI: 00000000c0306201 RDI: 0000000000000003 [ 3013.188787][T21587] RBP: 00007f95ea133120 R08: 0000000000000000 R09: 0000000000000000 [ 3013.196775][T21587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3013.204867][T21587] R13: 000000000000000b R14: 00007f95e959bf80 R15: 00007fffff514ef8 [ 3013.212867][T21587] [ 3013.230340][T21587] binder: 21583:21587 ioctl c0306201 20000300 returned -12 [ 3013.238584][T21582] FAULT_INJECTION: forcing a failure. [ 3013.238584][T21582] name failslab, interval 1, probability 0, space 0, times 0 [ 3013.265457][T21582] CPU: 0 PID: 21582 Comm: syz-executor.3 Not tainted 6.7.0-rc1-syzkaller-00012-g9bacdd8996c7 #0 [ 3013.275972][T21582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3013.286074][T21582] Call Trace: [ 3013.289397][T21582] [ 3013.292390][T21582] dump_stack_lvl+0x1e7/0x2d0 [ 3013.297131][T21582] ? nf_tcp_handle_invalid+0x650/0x650 [ 3013.302641][T21582] ? panic+0x850/0x850 [ 3013.306789][T21582] ? __might_sleep+0xe0/0xe0 [ 3013.311426][T21582] ? prepend_path+0xa10/0xbe0 [ 3013.316158][T21582] should_fail_ex+0x3aa/0x4e0 [ 3013.320901][T21582] ? tomoyo_encode+0x26f/0x530 [ 3013.325714][T21582] should_failslab+0x9/0x20 01:22:13 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (fail_nth: 4) 01:22:13 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x10, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3013.330259][T21582] __kmem_cache_alloc_node+0x6d/0x300 [ 3013.335689][T21582] ? d_absolute_path+0x1c6/0x300 [ 3013.340678][T21582] ? tomoyo_encode+0x26f/0x530 [ 3013.345487][T21582] __kmalloc+0xa2/0x1a0 [ 3013.349706][T21582] tomoyo_encode+0x26f/0x530 [ 3013.354356][T21582] tomoyo_realpath_from_path+0x598/0x5e0 [ 3013.360045][T21582] tomoyo_path_number_perm+0x23a/0x870 [ 3013.365564][T21582] ? tomoyo_path_number_perm+0x208/0x870 [ 3013.371264][T21582] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 3013.376787][T21582] ? file_end_write+0x250/0x250 [ 3013.381725][T21582] ? __fget_files+0x29/0x480 [ 3013.386375][T21582] ? __fget_files+0x3fe/0x480 [ 3013.391105][T21582] ? __fget_files+0x29/0x480 [ 3013.395758][T21582] security_file_ioctl+0x71/0xa0 [ 3013.400750][T21582] __se_sys_ioctl+0x47/0x170 [ 3013.405394][T21582] do_syscall_64+0x45/0x110 [ 3013.409960][T21582] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3013.415901][T21582] RIP: 0033:0x7fda0247cae9 [ 3013.420360][T21582] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3013.440009][T21582] RSP: 002b:00007fda031800c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3013.448000][T21598] FAULT_INJECTION: forcing a failure. [ 3013.448000][T21598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3013.448449][T21582] RAX: ffffffffffffffda RBX: 00007fda0259bf80 RCX: 00007fda0247cae9 [ 3013.448469][T21582] RDX: 0000000000000000 RSI: 000000000000ab07 RDI: 0000000000000003 [ 3013.448484][T21582] RBP: 00007fda03180120 R08: 0000000000000000 R09: 0000000000000000 [ 3013.448498][T21582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3013.485036][T21601] binder: 21599:21601 ioctl 10 20000300 returned -22 [ 3013.485543][T21582] R13: 000000000000000b R14: 00007fda0259bf80 R15: 00007ffd631ad938 [ 3013.485587][T21582] [ 3013.511471][T21598] CPU: 1 PID: 21598 Comm: syz-executor.0 Not tainted 6.7.0-rc1-syzkaller-00012-g9bacdd8996c7 #0 [ 3013.522013][T21598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3013.532092][T21598] Call Trace: [ 3013.535390][T21598] [ 3013.538330][T21598] dump_stack_lvl+0x1e7/0x2d0 [ 3013.543045][T21598] ? nf_tcp_handle_invalid+0x650/0x650 [ 3013.548540][T21598] ? panic+0x850/0x850 [ 3013.552633][T21598] ? __lock_acquire+0x1fd0/0x1fd0 [ 3013.557682][T21598] ? validate_chain+0x11c/0x59f0 [ 3013.562652][T21598] should_fail_ex+0x3aa/0x4e0 [ 3013.567358][T21598] _copy_from_user+0x2f/0xe0 [ 3013.571967][T21598] binder_ioctl_write_read+0x13b/0x8d50 [ 3013.577534][T21598] ? is_bpf_text_address+0x26/0x2a0 [ 3013.582891][T21598] ? is_bpf_text_address+0x28d/0x2a0 [ 3013.588326][T21598] ? is_bpf_text_address+0x26/0x2a0 [ 3013.593551][T21598] ? reacquire_held_locks+0x690/0x690 [ 3013.598938][T21598] ? kernel_text_address+0xa3/0xe0 [ 3013.604075][T21598] ? unwind_get_return_address+0x91/0xc0 [ 3013.609766][T21598] ? entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3013.615857][T21598] ? arch_stack_walk+0x162/0x1a0 [ 3013.620815][T21598] ? stack_trace_save+0x117/0x1c0 [ 3013.625860][T21598] ? mark_lock+0x9a/0x350 [ 3013.630207][T21598] ? stack_trace_snprint+0xf0/0xf0 [ 3013.635342][T21598] ? binder_debug+0x1c0/0x1c0 [ 3013.640075][T21598] ? __lock_acquire+0x1345/0x1fd0 [ 3013.645149][T21598] ? binder_get_thread+0x56d/0x6c0 [ 3013.650290][T21598] ? __lock_acquire+0x1fd0/0x1fd0 [ 3013.655424][T21598] ? do_raw_spin_unlock+0x13b/0x8b0 [ 3013.660641][T21598] ? _raw_spin_unlock+0x28/0x40 [ 3013.665613][T21598] ? binder_get_thread+0x58c/0x6c0 [ 3013.670738][T21598] binder_ioctl+0x42d/0x1c20 [ 3013.675341][T21598] ? tomoyo_path_number_perm+0x68d/0x870 [ 3013.680996][T21598] ? tomoyo_path_number_perm+0x71a/0x870 [ 3013.686658][T21598] ? tomoyo_path_number_perm+0x208/0x870 [ 3013.692308][T21598] ? smack_log+0x123/0x540 [ 3013.696754][T21598] ? binder_poll+0x3b0/0x3b0 [ 3013.701368][T21598] ? smk_access+0x4e0/0x4e0 [ 3013.705890][T21598] ? smk_access+0x4ab/0x4e0 [ 3013.710419][T21598] ? smk_tskacc+0x2ff/0x360 [ 3013.714940][T21598] ? smack_file_ioctl+0x2fa/0x3a0 [ 3013.719975][T21598] ? smack_file_alloc_security+0xe0/0xe0 [ 3013.725669][T21598] ? __fget_files+0x3fe/0x480 [ 3013.730469][T21598] ? bpf_lsm_file_ioctl+0x9/0x10 [ 3013.735425][T21598] ? security_file_ioctl+0x81/0xa0 [ 3013.740546][T21598] ? binder_poll+0x3b0/0x3b0 [ 3013.745157][T21598] __se_sys_ioctl+0xf8/0x170 [ 3013.749772][T21598] do_syscall_64+0x45/0x110 [ 3013.754290][T21598] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3013.760200][T21598] RIP: 0033:0x7f95e947cae9 [ 3013.764628][T21598] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3013.784250][T21598] RSP: 002b:00007f95ea1330c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3013.792690][T21598] RAX: ffffffffffffffda RBX: 00007f95e959bf80 RCX: 00007f95e947cae9 [ 3013.801370][T21598] RDX: 0000000020000300 RSI: 00000000c0306201 RDI: 0000000000000003 [ 3013.809352][T21598] RBP: 00007f95ea133120 R08: 0000000000000000 R09: 0000000000000000 [ 3013.817328][T21598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3013.825303][T21598] R13: 000000000000000b R14: 00007f95e959bf80 R15: 00007fffff514ef8 [ 3013.833298][T21598] 01:22:13 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 01:22:13 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89a0, &(0x7f00000006c0)) 01:22:13 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:13 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) memfd_secret(0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x101802, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) recvmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@l2tp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/10, 0xa}], 0x2, &(0x7f0000000300)=""/168, 0xa8}, 0x2102) [ 3013.855358][T21589] block nbd3: shutting down sockets [ 3013.858240][T21582] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3013.890347][T21598] binder: 21597:21598 ioctl c0306201 20000300 returned -14 01:22:13 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (fail_nth: 5) 01:22:13 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_io_uring_setup(0x374c, &(0x7f0000000180)={0x0, 0x31, 0x21, 0x0, 0x1b7}, &(0x7f0000000200), &(0x7f0000000240)) r2 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) [ 3013.946682][T21602] block nbd5: shutting down sockets [ 3013.962495][T21609] binder: 21606:21609 ioctl 541b 20000300 returned -22 01:22:13 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x89a0, 0x0) 01:22:13 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:14 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) memfd_secret(0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x101802, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) recvmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@l2tp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/10, 0xa}], 0x2, &(0x7f0000000300)=""/168, 0xa8}, 0x2102) 01:22:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3014.142015][T21622] FAULT_INJECTION: forcing a failure. [ 3014.142015][T21622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3014.160022][T21622] CPU: 0 PID: 21622 Comm: syz-executor.0 Not tainted 6.7.0-rc1-syzkaller-00012-g9bacdd8996c7 #0 [ 3014.170521][T21622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3014.180625][T21622] Call Trace: [ 3014.183997][T21622] [ 3014.186968][T21622] dump_stack_lvl+0x1e7/0x2d0 [ 3014.191732][T21622] ? nf_tcp_handle_invalid+0x650/0x650 [ 3014.197262][T21622] ? panic+0x850/0x850 [ 3014.201397][T21622] ? __lock_acquire+0x1fd0/0x1fd0 [ 3014.206485][T21622] ? validate_chain+0x11c/0x59f0 [ 3014.212189][T21622] should_fail_ex+0x3aa/0x4e0 [ 3014.217711][T21622] _copy_from_user+0x2f/0xe0 [ 3014.222368][T21622] binder_ioctl_write_read+0xcf7/0x8d50 [ 3014.227942][T21622] ? is_bpf_text_address+0x26/0x2a0 [ 3014.233881][T21622] ? stack_trace_save+0x117/0x1c0 [ 3014.238943][T21622] ? binder_debug+0x1c0/0x1c0 [ 3014.243637][T21622] ? __lock_acquire+0x1345/0x1fd0 [ 3014.248714][T21622] ? __lock_acquire+0x1fd0/0x1fd0 [ 3014.253848][T21622] ? do_raw_spin_unlock+0x13b/0x8b0 [ 3014.259076][T21622] ? _raw_spin_unlock+0x28/0x40 [ 3014.263951][T21622] ? binder_get_thread+0x58c/0x6c0 [ 3014.269175][T21622] binder_ioctl+0x42d/0x1c20 [ 3014.273784][T21622] ? tomoyo_path_number_perm+0x68d/0x870 [ 3014.279483][T21622] ? tomoyo_path_number_perm+0x71a/0x870 [ 3014.285152][T21622] ? tomoyo_path_number_perm+0x208/0x870 [ 3014.290815][T21622] ? smack_log+0x123/0x540 [ 3014.295271][T21622] ? binder_poll+0x3b0/0x3b0 [ 3014.299925][T21622] ? smk_access+0x4e0/0x4e0 [ 3014.304456][T21622] ? smk_access+0x4ab/0x4e0 [ 3014.308981][T21622] ? smk_tskacc+0x2ff/0x360 [ 3014.313524][T21622] ? smack_file_ioctl+0x2fa/0x3a0 [ 3014.318584][T21622] ? smack_file_alloc_security+0xe0/0xe0 [ 3014.324355][T21622] ? __fget_files+0x3fe/0x480 [ 3014.329067][T21622] ? bpf_lsm_file_ioctl+0x9/0x10 [ 3014.334037][T21622] ? security_file_ioctl+0x81/0xa0 [ 3014.339180][T21622] ? binder_poll+0x3b0/0x3b0 [ 3014.343890][T21622] __se_sys_ioctl+0xf8/0x170 [ 3014.348523][T21622] do_syscall_64+0x45/0x110 [ 3014.353091][T21622] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3014.359095][T21622] RIP: 0033:0x7f95e947cae9 [ 3014.363540][T21622] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3014.383244][T21622] RSP: 002b:00007f95ea1330c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 01:22:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3014.391707][T21622] RAX: ffffffffffffffda RBX: 00007f95e959bf80 RCX: 00007f95e947cae9 [ 3014.399883][T21622] RDX: 0000000020000300 RSI: 00000000c0306201 RDI: 0000000000000003 [ 3014.407878][T21622] RBP: 00007f95ea133120 R08: 0000000000000000 R09: 0000000000000000 [ 3014.415866][T21622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3014.424132][T21622] R13: 000000000000000b R14: 00007f95e959bf80 R15: 00007fffff514ef8 [ 3014.432142][T21622] 01:22:14 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) memfd_secret(0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x101802, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) recvmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@l2tp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/10, 0xa}], 0x2, &(0x7f0000000300)=""/168, 0xa8}, 0x2102) [ 3014.453053][T21622] binder: 21614:21622 ioctl c0306201 20000300 returned -14 [ 3014.501553][T21612] block nbd5: shutting down sockets 01:22:14 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x2, 0x0) 01:22:14 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x89a0, 0x0) 01:22:14 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (fail_nth: 6) 01:22:14 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) memfd_secret(0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x101802, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000002a80)={0x23, 0x0, 0x9}, 0x10) recvmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@l2tp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/10, 0xa}], 0x2, &(0x7f0000000300)=""/168, 0xa8}, 0x2102) 01:22:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:14 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_io_uring_setup(0x374c, &(0x7f0000000180)={0x0, 0x31, 0x21, 0x0, 0x1b7}, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) [ 3014.829512][T10438] block nbd3: Receive control failed (result -32) [ 3014.830742][T21611] block nbd3: shutting down sockets [ 3014.921113][T21638] FAULT_INJECTION: forcing a failure. [ 3014.921113][T21638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3014.934472][T21638] CPU: 0 PID: 21638 Comm: syz-executor.0 Not tainted 6.7.0-rc1-syzkaller-00012-g9bacdd8996c7 #0 [ 3014.944937][T21638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3014.955036][T21638] Call Trace: [ 3014.958363][T21638] [ 3014.961340][T21638] dump_stack_lvl+0x1e7/0x2d0 [ 3014.966080][T21638] ? nf_tcp_handle_invalid+0x650/0x650 [ 3014.971594][T21638] ? panic+0x850/0x850 [ 3014.975731][T21638] ? __lock_acquire+0x1fd0/0x1fd0 [ 3014.980809][T21638] ? validate_chain+0x11c/0x59f0 [ 3014.985811][T21638] should_fail_ex+0x3aa/0x4e0 [ 3014.990903][T21638] _copy_to_user+0x2f/0xa0 [ 3014.995377][T21638] binder_ioctl_write_read+0x83b4/0x8d50 [ 3015.001055][T21638] ? is_bpf_text_address+0x26/0x2a0 [ 3015.006312][T21638] ? stack_trace_save+0x117/0x1c0 [ 3015.011378][T21638] ? binder_debug+0x1c0/0x1c0 [ 3015.016077][T21638] ? __lock_acquire+0x1345/0x1fd0 [ 3015.021185][T21638] ? __lock_acquire+0x1fd0/0x1fd0 [ 3015.026252][T21638] ? do_raw_spin_unlock+0x13b/0x8b0 [ 3015.031505][T21638] ? _raw_spin_unlock+0x28/0x40 [ 3015.036395][T21638] ? binder_get_thread+0x58c/0x6c0 [ 3015.041532][T21638] binder_ioctl+0x42d/0x1c20 [ 3015.046154][T21638] ? tomoyo_path_number_perm+0x68d/0x870 [ 3015.051812][T21638] ? tomoyo_path_number_perm+0x71a/0x870 [ 3015.057466][T21638] ? tomoyo_path_number_perm+0x208/0x870 [ 3015.063113][T21638] ? smack_log+0x123/0x540 [ 3015.067551][T21638] ? binder_poll+0x3b0/0x3b0 [ 3015.072181][T21638] ? smk_access+0x4e0/0x4e0 [ 3015.076707][T21638] ? smk_access+0x4ab/0x4e0 [ 3015.081233][T21638] ? smk_tskacc+0x2ff/0x360 [ 3015.085765][T21638] ? smack_file_ioctl+0x2fa/0x3a0 [ 3015.090810][T21638] ? smack_file_alloc_security+0xe0/0xe0 [ 3015.096464][T21638] ? __fget_files+0x3fe/0x480 [ 3015.101171][T21638] ? bpf_lsm_file_ioctl+0x9/0x10 [ 3015.106137][T21638] ? security_file_ioctl+0x81/0xa0 [ 3015.111261][T21638] ? binder_poll+0x3b0/0x3b0 [ 3015.115885][T21638] __se_sys_ioctl+0xf8/0x170 [ 3015.120502][T21638] do_syscall_64+0x45/0x110 [ 3015.125051][T21638] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3015.130997][T21638] RIP: 0033:0x7f95e947cae9 [ 3015.135443][T21638] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3015.155079][T21638] RSP: 002b:00007f95ea1330c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3015.163528][T21638] RAX: ffffffffffffffda RBX: 00007f95e959bf80 RCX: 00007f95e947cae9 01:22:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:15 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x89a0, 0x0) [ 3015.171538][T21638] RDX: 0000000020000300 RSI: 00000000c0306201 RDI: 0000000000000003 [ 3015.179531][T21638] RBP: 00007f95ea133120 R08: 0000000000000000 R09: 0000000000000000 [ 3015.187520][T21638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3015.195507][T21638] R13: 000000000000000b R14: 00007f95e959bf80 R15: 00007fffff514ef8 [ 3015.203515][T21638] 01:22:15 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x8933, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:15 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) memfd_secret(0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x101802, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) recvmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@l2tp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/10, 0xa}], 0x2, &(0x7f0000000300)=""/168, 0xa8}, 0x2102) [ 3015.272611][T21631] block nbd5: shutting down sockets 01:22:15 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_io_uring_setup(0x374c, &(0x7f0000000180)={0x0, 0x31, 0x21, 0x0, 0x1b7}, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) 01:22:15 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400448c9, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3015.310162][T21647] binder: 21646:21647 ioctl 8933 20000300 returned -22 [ 3015.330833][T21638] binder: 21635:21638 ioctl c0306201 20000300 returned -14 [ 3015.401554][T21654] binder: 21650:21654 ioctl 400448c9 20000300 returned -22 [ 3015.470123][T21653] block nbd5: shutting down sockets 01:22:15 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x10, 0x0) 01:22:15 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (fail_nth: 7) 01:22:15 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:15 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400448dd, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:15 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) memfd_secret(0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x101802, 0x0) recvmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@l2tp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/10, 0xa}], 0x2, &(0x7f0000000300)=""/168, 0xa8}, 0x2102) 01:22:15 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_io_uring_setup(0x374c, &(0x7f0000000180)={0x0, 0x31, 0x21, 0x0, 0x1b7}, &(0x7f0000000200), &(0x7f0000000240)) [ 3015.723777][T10438] block nbd3: Receive control failed (result -32) [ 3015.732485][T21641] block nbd3: shutting down sockets 01:22:15 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:15 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400454ca, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3015.807415][T21665] binder: 21661:21665 ioctl 400448dd 20000300 returned -22 [ 3015.841973][T21666] FAULT_INJECTION: forcing a failure. [ 3015.841973][T21666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3015.864451][T21666] CPU: 1 PID: 21666 Comm: syz-executor.0 Not tainted 6.7.0-rc1-syzkaller-00012-g9bacdd8996c7 #0 [ 3015.868005][T21657] block nbd5: shutting down sockets [ 3015.875021][T21666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3015.875042][T21666] Call Trace: [ 3015.875053][T21666] [ 3015.875065][T21666] dump_stack_lvl+0x1e7/0x2d0 [ 3015.875104][T21666] ? nf_tcp_handle_invalid+0x650/0x650 [ 3015.906879][T21666] ? panic+0x850/0x850 [ 3015.911025][T21666] ? snprintf+0xda/0x120 [ 3015.915318][T21666] should_fail_ex+0x3aa/0x4e0 [ 3015.920058][T21666] _copy_to_user+0x2f/0xa0 [ 3015.924620][T21666] simple_read_from_buffer+0xca/0x150 [ 3015.930049][T21666] proc_fail_nth_read+0x1e9/0x250 [ 3015.935141][T21666] ? proc_fault_inject_write+0x3c0/0x3c0 [ 3015.940837][T21666] ? fsnotify_perm+0x43e/0x5a0 [ 3015.945665][T21666] ? proc_fault_inject_write+0x3c0/0x3c0 [ 3015.951450][T21666] vfs_read+0x289/0xb00 [ 3015.955676][T21666] ? __fdget_pos+0x2b0/0x340 [ 3015.960336][T21666] ? kernel_read+0x1f0/0x1f0 [ 3015.965350][T21666] ? __fget_files+0x3fe/0x480 [ 3015.970097][T21666] ? __fget_files+0x29/0x480 [ 3015.971211][T21671] binder: 21670:21671 ioctl 400454ca 20000300 returned -22 [ 3015.974736][T21666] ? __fdget_pos+0x2b0/0x340 [ 3015.974776][T21666] ? ksys_read+0x7b/0x2c0 [ 3015.974810][T21666] ksys_read+0x1a0/0x2c0 [ 3015.995949][T21666] ? print_irqtrace_events+0x220/0x220 [ 3016.001485][T21666] ? vfs_write+0xb20/0xb20 [ 3016.006156][T21666] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 3016.013236][T21666] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 3016.019482][T21666] do_syscall_64+0x45/0x110 [ 3016.024237][T21666] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3016.030280][T21666] RIP: 0033:0x7f95e947b78c [ 3016.034751][T21666] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 3016.054421][T21666] RSP: 002b:00007f95ea1330c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 01:22:15 executing program 5: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) syz_io_uring_setup(0x374c, &(0x7f0000000180)={0x0, 0x31, 0x21, 0x0, 0x1b7}, &(0x7f0000000200), &(0x7f0000000240)) 01:22:15 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:15 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) memfd_secret(0x0) recvmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@l2tp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/10, 0xa}], 0x2, &(0x7f0000000300)=""/168, 0xa8}, 0x2102) 01:22:16 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3016.062946][T21666] RAX: ffffffffffffffda RBX: 00007f95e959bf80 RCX: 00007f95e947b78c [ 3016.070976][T21666] RDX: 000000000000000f RSI: 00007f95ea133130 RDI: 0000000000000004 [ 3016.079092][T21666] RBP: 00007f95ea133120 R08: 0000000000000000 R09: 0000000000000000 [ 3016.087126][T21666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3016.095150][T21666] R13: 000000000000000b R14: 00007f95e959bf80 R15: 00007fffff514ef8 [ 3016.103193][T21666] 01:22:16 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x301, 0x0) 01:22:16 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) recvmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@l2tp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/10, 0xa}], 0x2, &(0x7f0000000300)=""/168, 0xa8}, 0x2102) 01:22:16 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:16 executing program 5: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) syz_io_uring_setup(0x374c, &(0x7f0000000180)={0x0, 0x31, 0x21, 0x0, 0x1b7}, &(0x7f0000000200), &(0x7f0000000240)) 01:22:16 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:16 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3016.626360][T10438] block nbd3: Receive control failed (result -32) [ 3016.627650][T21668] block nbd3: shutting down sockets 01:22:16 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5452, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:16 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = memfd_secret(0x0) recvmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@l2tp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/10, 0xa}], 0x2, &(0x7f0000000300)=""/168, 0xa8}, 0x2102) 01:22:16 executing program 5: syz_io_uring_setup(0x374c, &(0x7f0000000180)={0x0, 0x31, 0x21, 0x0, 0x1b7}, &(0x7f0000000200), &(0x7f0000000240)) 01:22:16 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:16 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:16 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5452, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:17 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x31, 0x21, 0x0, 0x1b7}, &(0x7f0000000200), &(0x7f0000000240)) 01:22:17 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@l2tp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/10, 0xa}], 0x2, &(0x7f0000000300)=""/168, 0xa8}, 0x2102) 01:22:17 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x10, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:17 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:17 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5452, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:17 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x125d, 0x0) [ 3017.555513][T10438] block nbd3: Receive control failed (result -32) [ 3017.563761][T21693] block nbd3: shutting down sockets 01:22:17 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40086602, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:17 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x31, 0x21, 0x0, 0x1b7}, &(0x7f0000000200), &(0x7f0000000240)) 01:22:17 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:17 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3017.673449][T21717] binder: 21715:21717 ioctl 40086602 20000300 returned -22 [ 3017.704111][T21718] binder: 21711:21718 ioctl 10 20000300 returned -22 01:22:17 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:17 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@l2tp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/10, 0xa}], 0x2, &(0x7f0000000300)=""/168, 0xa8}, 0x2102) 01:22:17 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:17 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x31, 0x21, 0x0, 0x1b7}, &(0x7f0000000200), &(0x7f0000000240)) [ 3017.793943][T21725] binder: 21724:21725 ioctl 400c620e 20000300 returned -22 01:22:17 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3017.834200][T21728] binder: 21727:21728 ioctl 541b 20000300 returned -22 01:22:17 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:17 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@l2tp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/10, 0xa}], 0x2, &(0x7f0000000300)=""/168, 0xa8}, 0x2102) 01:22:18 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x125e, 0x0) 01:22:18 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:18 executing program 5: syz_io_uring_setup(0x374c, 0x0, &(0x7f0000000200), &(0x7f0000000240)) 01:22:18 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40186366, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:18 executing program 2: r0 = memfd_secret(0x0) recvmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@l2tp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/10, 0xa}], 0x2, &(0x7f0000000300)=""/168, 0xa8}, 0x2102) 01:22:18 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3018.576129][T10438] block nbd3: Receive control failed (result -32) [ 3018.584010][T21721] block nbd3: shutting down sockets 01:22:18 executing program 5: syz_io_uring_setup(0x374c, 0x0, &(0x7f0000000200), &(0x7f0000000240)) 01:22:18 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5452, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:18 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:18 executing program 2: memfd_secret(0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@l2tp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/10, 0xa}], 0x2, &(0x7f0000000300)=""/168, 0xa8}, 0x2102) 01:22:18 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3018.714537][T21753] binder: 21748:21753 ioctl 40186366 20000300 returned -22 01:22:18 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3018.891156][T21767] binder: 21766:21767 ioctl 401c5820 20000300 returned -22 01:22:19 executing program 5: syz_io_uring_setup(0x374c, 0x0, &(0x7f0000000200), &(0x7f0000000240)) 01:22:19 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5452, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:19 executing program 2: memfd_secret(0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@l2tp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/10, 0xa}], 0x2, &(0x7f0000000300)=""/168, 0xa8}, 0x2102) 01:22:19 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:19 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:19 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x125f, 0x0) [ 3019.496572][T10438] block nbd3: Receive control failed (result -32) [ 3019.498559][T21750] block nbd3: shutting down sockets 01:22:19 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x8933, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:19 executing program 5: syz_io_uring_setup(0x374c, &(0x7f0000000180)={0x0, 0x0, 0x21, 0x0, 0x1b7}, &(0x7f0000000200), &(0x7f0000000240)) 01:22:19 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x80086301, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:19 executing program 2: memfd_secret(0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@l2tp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/10, 0xa}], 0x2, &(0x7f0000000300)=""/168, 0xa8}, 0x2102) 01:22:19 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5452, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:19 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400448c9, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3019.669768][T21781] binder: 21780:21781 ioctl 8933 20000300 returned -22 01:22:19 executing program 5: syz_io_uring_setup(0x374c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1b7}, &(0x7f0000000200), &(0x7f0000000240)) 01:22:19 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x80086601, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3019.745730][T21786] binder: 21785:21786 ioctl 80086301 20000300 returned -22 01:22:19 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, 0x0) 01:22:19 executing program 2: r0 = memfd_secret(0x0) recvmsg$can_bcm(r0, 0x0, 0x2102) 01:22:19 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400448dd, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3019.836965][T21792] binder: 21790:21792 ioctl 400448c9 20000300 returned -22 [ 3019.896998][T21798] binder: 21795:21798 ioctl 80086601 20000300 returned -22 [ 3019.968820][T21802] binder: 21801:21802 ioctl 400448dd 20000300 returned -22 01:22:20 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1260, 0x0) 01:22:20 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, 0x0) 01:22:20 executing program 5: syz_io_uring_setup(0x374c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1b7}, &(0x7f0000000200), &(0x7f0000000240)) 01:22:20 executing program 2: r0 = memfd_secret(0x0) recvmsg$can_bcm(r0, 0x0, 0x0) 01:22:20 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x801c581f, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:20 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400454ca, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3020.418332][T10438] block nbd3: Receive control failed (result -32) [ 3020.429017][T21778] block nbd3: shutting down sockets 01:22:20 executing program 5: syz_io_uring_setup(0x374c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1b7}, &(0x7f0000000200), &(0x7f0000000240)) 01:22:20 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:20 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x125f, 0x0) [ 3020.490455][T21804] binder: 21803:21804 ioctl 801c581f 20000300 returned -22 [ 3020.528496][T21810] binder: 21805:21810 ioctl 400454ca 20000300 returned -22 01:22:20 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:20 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, 0x0) 01:22:20 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3020.709289][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.716029][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 01:22:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1261, 0x0) 01:22:21 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:21 executing program 5: syz_io_uring_setup(0x374c, &(0x7f0000000180)={0x0, 0x0, 0x21}, &(0x7f0000000200), &(0x7f0000000240)) 01:22:21 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:22:21 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3021.389941][T10438] block nbd3: Receive control failed (result -32) [ 3021.391052][T21814] block nbd3: shutting down sockets 01:22:21 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:21 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:21 executing program 5: syz_io_uring_setup(0x374c, &(0x7f0000000180)={0x0, 0x0, 0x21}, 0x0, &(0x7f0000000240)) [ 3021.499616][T21824] block nbd2: shutting down sockets 01:22:21 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x125f, 0x0) 01:22:21 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:22:21 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3021.601670][T21844] binder: 21843:21844 ioctl c00c620f 20000300 returned -22 01:22:21 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c6211, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:22 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:22:22 executing program 5: syz_io_uring_setup(0x374c, &(0x7f0000000180)={0x0, 0x0, 0x21}, 0x0, 0x0) 01:22:22 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:22 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:22 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1262, 0x0) [ 3022.281918][T10438] block nbd3: Receive control failed (result -32) [ 3022.285017][T21831] block nbd3: shutting down sockets 01:22:22 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0}) 01:22:22 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40086602, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:22 executing program 5: syz_io_uring_setup(0x374c, &(0x7f0000000180)={0x0, 0x0, 0x21}, 0x0, 0x0) 01:22:22 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x125f, 0x0) 01:22:22 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:22 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:22 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:22 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0}) [ 3022.477066][T21870] binder: 21867:21870 ioctl 40086602 20000300 returned -22 [ 3022.496652][ T565] block nbd2: Receive control failed (result -32) [ 3022.503267][T21851] block nbd2: shutting down sockets 01:22:22 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:22 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:22 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3022.577118][T21874] binder: 21873:21874 ioctl 400c620e 20000300 returned -22 [ 3022.583292][T21878] binder: 21876:21878 ioctl c018620c 20000300 returned -22 01:22:23 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:23 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0}) 01:22:23 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40186366, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:23 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3023.198155][T10438] block nbd3: Receive control failed (result -32) [ 3023.205623][T21863] block nbd3: shutting down sockets [ 3023.270139][T21896] binder: 21894:21896 ioctl 40186366 20000300 returned -22 01:22:23 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x125f, 0x0) 01:22:23 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:23 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1263, 0x0) 01:22:23 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620b, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:23 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306202, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:23 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1262, 0x0) [ 3023.482169][ T565] block nbd2: Receive control failed (result -32) [ 3023.486126][T21888] block nbd2: shutting down sockets 01:22:23 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620b, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:23 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306203, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3023.558514][T21902] binder: 21898:21902 ioctl 401c5820 20000300 returned -22 [ 3023.568023][T21903] binder: 21899:21903 ioctl c0306202 20000300 returned -22 01:22:23 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:23 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620b, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3023.646244][T21908] block nbd2: shutting down sockets 01:22:23 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x125f, 0x0) 01:22:23 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x80086301, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3023.697029][T21916] binder: 21911:21916 ioctl c0306203 20000300 returned -22 01:22:23 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306204, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:23 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x125f, 0x0) [ 3023.770130][T21923] binder: 21921:21923 ioctl 80086301 20000300 returned -22 [ 3023.842208][T21927] binder: 21924:21927 ioctl c0306204 20000300 returned -22 01:22:24 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1264, 0x0) 01:22:24 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x80086601, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:24 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:24 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x125f, 0x0) 01:22:24 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306205, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:24 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1262, 0x0) [ 3024.379558][ T565] block nbd1: Receive control failed (result -32) [ 3024.381439][T21904] block nbd1: shutting down sockets [ 3024.397064][T10438] block nbd3: Receive control failed (result -32) [ 3024.399906][T21907] block nbd3: shutting down sockets 01:22:24 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:24 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:24 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x801c581f, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3024.509033][T21934] binder: 21930:21934 ioctl 80086601 20000300 returned -22 [ 3024.521672][T21936] binder: 21935:21936 ioctl c0306205 20000300 returned -22 01:22:24 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620b, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:24 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306207, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:24 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x125f, 0x0) [ 3024.673879][T21950] binder: 21949:21950 ioctl 801c581f 20000300 returned -22 [ 3024.694819][T21953] binder: 21952:21953 ioctl c0306207 20000300 returned -22 [ 3025.303397][T10438] block nbd1: Receive control failed (result -32) [ 3025.304575][T21941] block nbd1: shutting down sockets 01:22:25 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1265, 0x0) 01:22:25 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620b, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:25 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306208, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:25 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:25 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x125f, 0x0) 01:22:25 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1262, 0x0) [ 3025.367378][ T565] block nbd3: Receive control failed (result -32) [ 3025.368108][T21942] block nbd3: shutting down sockets 01:22:25 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x125f, 0x0) 01:22:25 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620b, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:25 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306218, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3025.440252][T21962] binder: 21960:21962 ioctl c0306208 20000300 returned -22 01:22:25 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:25 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x125f, 0x0) 01:22:25 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 3025.615947][T21978] binder: 21972:21978 ioctl c0306218 20000300 returned -22 [ 3025.663980][T21980] binder: 21979:21980 ioctl c018620b 0 returned -14 [ 3026.245394][ T565] block nbd1: Receive control failed (result -32) [ 3026.246804][T21968] block nbd1: shutting down sockets 01:22:26 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:26 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x125f, 0x0) 01:22:26 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x2, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:26 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 01:22:26 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1262, 0x0) 01:22:26 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1267, 0x0) [ 3026.353830][T10438] block nbd3: Receive control failed (result -32) [ 3026.354575][T21973] block nbd3: shutting down sockets 01:22:26 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 01:22:26 executing program 2: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x125f, 0x0) 01:22:26 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x3, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3026.427052][T21987] binder: 21985:21987 ioctl c018620b 0 returned -14 [ 3026.462246][T21990] binder: 21984:21990 unknown command 16456 [ 3026.469238][T21990] binder: 21984:21990 ioctl c0306201 20000300 returned -22 01:22:26 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3026.526655][T21988] block nbd1: shutting down sockets 01:22:26 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c6211, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:26 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1262, 0x0) [ 3026.558182][T21999] binder: 21995:21999 ioctl c00c620f 20000300 returned -22 [ 3026.589757][T21998] binder: 21994:21998 unknown command 64 [ 3026.596101][T22001] binder: 21996:22001 ioctl c018620b 0 returned -14 01:22:26 executing program 2: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x125f, 0x0) 01:22:26 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 3026.610225][T21998] binder: 21994:21998 ioctl c0306201 20000300 returned -22 01:22:26 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x4, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:26 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:26 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1262, 0x0) [ 3026.806902][T22013] binder: 22009:22013 unknown command 0 [ 3026.812689][T22013] binder: 22009:22013 ioctl c0306201 20000300 returned -22 01:22:27 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1268, 0x0) 01:22:27 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:27 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:27 executing program 2: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x125f, 0x0) 01:22:27 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x5, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:27 executing program 1: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x1262, 0x0) [ 3027.273528][T10438] block nbd3: Receive control failed (result -32) [ 3027.282064][T21993] block nbd3: shutting down sockets 01:22:27 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:27 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1267, 0x0) 01:22:27 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x4, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:27 executing program 1: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x1262, 0x0) [ 3027.361667][T22019] binder: 22017:22019 ioctl c018620c 20000300 returned -22 [ 3027.382083][T22026] binder: 22022:22026 unknown command 0 [ 3027.400298][T22026] binder: 22022:22026 ioctl c0306201 20000300 returned -22 01:22:27 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x6, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:27 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3027.492567][T22035] binder: 22033:22035 unknown command 0 [ 3027.507792][T22035] binder: 22033:22035 ioctl c0306201 20000300 returned -22 [ 3027.521636][T22037] binder: 22036:22037 unknown command 0 [ 3027.527508][T22037] binder: 22036:22037 ioctl c0306201 20000300 returned -22 01:22:28 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x7, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:28 executing program 1: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x1262, 0x0) 01:22:28 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x4, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:28 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1269, 0x0) 01:22:28 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306202, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3028.231565][T10438] block nbd3: Receive control failed (result -32) [ 3028.233878][T22027] block nbd3: shutting down sockets [ 3028.280161][ T565] block nbd2: Receive control failed (result -32) [ 3028.280565][T22030] block nbd2: shutting down sockets [ 3028.319649][T22048] binder: 22042:22048 unknown command 0 01:22:28 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1262, 0x0) 01:22:28 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1267, 0x0) [ 3028.329580][T22049] binder: 22046:22049 unknown command 0 [ 3028.342448][T22047] binder: 22044:22047 ioctl c0306202 20000300 returned -22 [ 3028.367071][T22048] binder: 22042:22048 ioctl c0306201 20000300 returned -22 01:22:28 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306203, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3028.374580][T22049] binder: 22046:22049 ioctl c0306201 20000300 returned -22 01:22:28 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306204, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:28 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x8, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3028.421674][T22055] binder: 22052:22055 ioctl c0306203 20000300 returned -22 01:22:28 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x4, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:28 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1262, 0x0) [ 3028.511401][T22060] binder: 22059:22060 ioctl c0306204 20000300 returned -22 01:22:28 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306205, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:28 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1262, 0x0) [ 3028.551649][T22064] binder: 22061:22064 unknown command 0 [ 3028.564651][T22064] binder: 22061:22064 ioctl c0306201 20000300 returned -22 [ 3028.584939][T22067] binder: 22063:22067 unknown command 0 [ 3028.604334][T22067] binder: 22063:22067 ioctl c0306201 20000300 returned -22 [ 3028.640695][T22069] binder: 22068:22069 ioctl c0306205 20000300 returned -22 01:22:29 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x4, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:29 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x9, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:29 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306207, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:29 executing program 1: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x1262, 0x0) [ 3029.171168][ T565] block nbd3: Receive control failed (result -32) [ 3029.171871][T22051] block nbd3: shutting down sockets [ 3029.247683][T22054] block nbd2: shutting down sockets 01:22:29 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1267, 0x0) 01:22:29 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1274, 0x0) 01:22:29 executing program 1: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x1262, 0x0) 01:22:29 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xa, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:29 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306218, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:29 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x4, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3029.278939][T22077] binder: 22073:22077 ioctl c0306207 20000300 returned -22 [ 3029.295379][T22078] binder: 22072:22078 unknown command 0 [ 3029.301041][T22078] binder: 22072:22078 ioctl c0306201 20000300 returned -22 01:22:29 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x2, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:29 executing program 1: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x1262, 0x0) 01:22:29 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x4, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3029.411389][T22088] binder: 22085:22088 ioctl c0306218 20000300 returned -22 [ 3029.414895][T22089] binder: 22082:22089 unknown command 0 [ 3029.435325][T22089] binder: 22082:22089 ioctl c0306201 20000300 returned -22 01:22:29 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xb, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:29 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x4, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:29 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1269, 0x0) [ 3029.557960][T22097] binder: 22093:22097 unknown command 16456 [ 3029.587404][T22097] binder: 22093:22097 ioctl c0306201 20000300 returned -22 [ 3029.611390][T22104] binder: 22100:22104 unknown command 0 [ 3029.623684][T22104] binder: 22100:22104 ioctl c0306201 20000300 returned -22 01:22:30 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1267, 0x0) 01:22:30 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x3, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:30 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x4, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:30 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xc, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:30 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1275, 0x0) [ 3030.202859][T10438] block nbd3: Receive control failed (result -32) [ 3030.204098][T22081] block nbd3: shutting down sockets [ 3030.224648][ T565] block nbd2: Receive control failed (result -32) [ 3030.226021][T22086] block nbd2: shutting down sockets 01:22:30 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x4, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3030.308126][T22114] binder: 22111:22114 unknown command 0 [ 3030.325869][T22114] binder: 22111:22114 ioctl c0306201 20000300 returned -22 [ 3030.336387][T22116] binder: 22112:22116 unknown command 64 01:22:30 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xd, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:30 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x4, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:30 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1267, 0x0) [ 3030.352746][T22116] binder: 22112:22116 ioctl c0306201 20000300 returned -22 [ 3030.355832][T22108] block nbd2: shutting down sockets [ 3030.442728][T22123] binder: 22120:22123 unknown command 0 [ 3030.453297][T22123] binder: 22120:22123 ioctl c0306201 20000300 returned -22 [ 3030.460836][T21829] block nbd1: Receive control failed (result -32) [ 3030.469433][T22106] block nbd1: shutting down sockets [ 3030.473731][T22125] binder: 22124:22125 unknown command 0 01:22:30 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x4, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:30 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1267, 0x0) 01:22:30 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1269, 0x0) [ 3030.490855][T22125] binder: 22124:22125 ioctl c0306201 20000300 returned -22 01:22:30 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x4, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:30 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xe, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:30 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x5, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:30 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x4, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3030.662226][T22138] binder: 22135:22138 unknown command 0 [ 3030.665895][T22139] binder: 22134:22139 unknown command 0 [ 3030.673623][T22139] binder: 22134:22139 ioctl c0306201 20000300 returned -22 [ 3030.675909][T22138] binder: 22135:22138 ioctl c0306201 20000300 returned -22 01:22:31 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 01:22:31 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x1267, 0x0) 01:22:31 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x6, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:31 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x10, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:31 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1276, 0x0) [ 3031.122637][ T565] block nbd3: Receive control failed (result -32) [ 3031.136452][T22109] block nbd3: shutting down sockets [ 3031.214116][T22143] binder: 22141:22143 unknown command 0 [ 3031.250993][T22143] binder: 22141:22143 ioctl c0306201 20000300 returned -22 [ 3031.252896][T22148] binder: 22146:22148 unknown command 0 01:22:31 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x1267, 0x0) 01:22:31 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 3031.258611][T22147] binder: 22142:22147 ioctl c0306201 0 returned -14 [ 3031.288568][T22148] binder: 22146:22148 ioctl c0306201 20000300 returned -22 [ 3031.412422][T22155] binder: 22152:22155 ioctl c0306201 0 returned -14 [ 3031.477476][T21829] block nbd1: Receive control failed (result -32) [ 3031.484863][T22136] block nbd1: shutting down sockets 01:22:31 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1269, 0x0) 01:22:31 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x7, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:31 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x11, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:31 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x1267, 0x0) 01:22:31 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 01:22:31 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1267, 0x0) [ 3031.596968][T22163] binder: 22156:22163 unknown command 0 [ 3031.613690][T22164] binder: 22158:22164 ioctl c0306201 0 returned -14 [ 3031.625618][T22162] binder: 22160:22162 unknown command 0 [ 3031.631399][T22163] binder: 22156:22163 ioctl c0306201 20000300 returned -22 [ 3031.638937][T22162] binder: 22160:22162 ioctl c0306201 20000300 returned -22 01:22:31 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0}) 01:22:31 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x12, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:31 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x8, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3031.777294][T22171] binder: 22168:22171 unknown command 0 [ 3031.789601][T22174] binder: 22169:22174 unknown command 0 [ 3031.792120][T22171] binder: 22168:22171 ioctl c0306201 20000300 returned -22 [ 3031.818700][T22174] binder: 22169:22174 ioctl c0306201 20000300 returned -22 01:22:32 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1267, 0x0) 01:22:32 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0}) 01:22:32 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x9, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3032.114542][ T565] block nbd3: Receive control failed (result -32) [ 3032.122167][T22150] block nbd3: shutting down sockets [ 3032.186248][T22180] binder: 22177:22180 unknown command 0 [ 3032.192033][T22180] binder: 22177:22180 ioctl c0306201 20000300 returned -22 01:22:32 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1269, 0x0) 01:22:32 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x18, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:32 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1277, 0x0) 01:22:32 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1267, 0x0) 01:22:32 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0}) 01:22:32 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xa, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3032.439479][T21829] block nbd1: Receive control failed (result -32) [ 3032.442679][T22165] block nbd1: shutting down sockets [ 3032.486211][T22185] binder: 22182:22185 unknown command 0 [ 3032.491840][T22185] binder: 22182:22185 ioctl c0306201 20000300 returned -22 [ 3032.514632][T22186] binder: 22184:22186 unknown command 0 01:22:32 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x25, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:32 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000240), 0x0, 0x0, 0x0}) 01:22:32 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xb, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:32 executing program 2: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x1267, 0x0) [ 3032.543409][T22186] binder: 22184:22186 ioctl c0306201 20000300 returned -22 01:22:32 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1269, 0x0) [ 3032.600133][T22190] block nbd1: shutting down sockets 01:22:32 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000240), 0x0, 0x0, 0x0}) 01:22:32 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x5c, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3032.666507][T22199] binder: 22196:22199 unknown command 0 [ 3032.673078][T22198] binder: 22195:22198 unknown command 0 [ 3032.681172][T22199] binder: 22196:22199 ioctl c0306201 20000300 returned -22 [ 3032.688673][T22198] binder: 22195:22198 ioctl c0306201 20000300 returned -22 01:22:32 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1269, 0x0) 01:22:33 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1278, 0x0) 01:22:33 executing program 2: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x1267, 0x0) 01:22:33 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xc, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:33 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000240), 0x0, 0x0, 0x0}) 01:22:33 executing program 1: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x1269, 0x0) 01:22:33 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x300, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3033.312194][T21829] block nbd3: Receive control failed (result -32) [ 3033.320415][T22183] block nbd3: shutting down sockets 01:22:33 executing program 2: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x1267, 0x0) 01:22:33 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1277, 0x0) 01:22:33 executing program 1: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x1269, 0x0) 01:22:33 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x5c, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3033.431854][T22216] binder: 22211:22216 unknown command 0 [ 3033.467418][T22216] binder: 22211:22216 ioctl c0306201 20000300 returned -22 01:22:33 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x500, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:33 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xd, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3033.619491][T22235] binder: 22231:22235 unknown command 0 [ 3033.631954][T22235] binder: 22231:22235 ioctl c0306201 20000300 returned -22 01:22:34 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1279, 0x0) 01:22:34 executing program 1: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x1269, 0x0) 01:22:34 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x5c, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:34 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x600, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:34 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xe, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3034.298719][T21829] block nbd3: Receive control failed (result -32) [ 3034.301978][T22224] block nbd3: shutting down sockets 01:22:34 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x5c, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:34 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x10, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3034.351279][T22241] binder: 22239:22241 unknown command 0 [ 3034.357092][T22241] binder: 22239:22241 ioctl c0306201 20000300 returned -22 [ 3034.369722][ T565] block nbd5: Receive control failed (result -32) [ 3034.370100][T22226] block nbd5: shutting down sockets 01:22:34 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1277, 0x0) 01:22:34 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x700, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:34 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1269, 0x0) [ 3034.496061][T22249] binder: 22247:22249 unknown command 0 [ 3034.511998][T22249] binder: 22247:22249 ioctl c0306201 20000300 returned -22 01:22:34 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x11, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:34 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x900, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3034.625516][T22260] binder: 22258:22260 unknown command 0 [ 3034.640173][T22260] binder: 22258:22260 ioctl c0306201 20000300 returned -22 01:22:35 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1269, 0x0) 01:22:35 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x5c, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:35 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xa00, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:35 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x12, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:35 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127a, 0x0) [ 3035.273577][ T565] block nbd3: Receive control failed (result -32) [ 3035.281980][T22246] block nbd3: shutting down sockets 01:22:35 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1277, 0x0) [ 3035.346744][T21829] block nbd5: Receive control failed (result -32) [ 3035.347229][T22253] block nbd5: shutting down sockets [ 3035.368081][T22269] binder: 22265:22269 unknown command 0 [ 3035.373699][T22269] binder: 22265:22269 ioctl c0306201 20000300 returned -22 01:22:35 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x5c, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:35 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xb00, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:35 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1269, 0x0) 01:22:35 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x18, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:35 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x5c, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:35 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xc00, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:35 executing program 1: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x1269, 0x0) 01:22:35 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xd00, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3035.560854][T22286] binder: 22280:22286 unknown command 0 [ 3035.568978][T22286] binder: 22280:22286 ioctl c0306201 20000300 returned -22 01:22:35 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x25, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:35 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x5c, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3035.690836][T22294] binder: 22293:22294 unknown command 0 [ 3035.705892][T22294] binder: 22293:22294 ioctl c0306201 20000300 returned -22 01:22:36 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xe00, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3036.208837][T21829] block nbd3: Receive control failed (result -32) [ 3036.218645][T22275] block nbd3: shutting down sockets 01:22:36 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1277, 0x0) 01:22:36 executing program 1: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x1269, 0x0) 01:22:36 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x5c, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:36 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x5c, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:36 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127b, 0x0) 01:22:36 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x1100, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3036.283000][ T565] block nbd5: Receive control failed (result -32) [ 3036.283715][T22276] block nbd5: shutting down sockets 01:22:36 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x5c, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:36 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x300, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:36 executing program 1: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x1269, 0x0) 01:22:36 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x1200, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:36 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x500, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3036.442584][T22309] block nbd5: shutting down sockets 01:22:36 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1277, 0x0) 01:22:36 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x1800, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:36 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x5c, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:36 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127a, 0x0) 01:22:36 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x600, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:37 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x2500, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:37 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1277, 0x0) 01:22:37 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x5c, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:37 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x700, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:37 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127c, 0x0) [ 3037.214871][ T565] block nbd3: Receive control failed (result -32) [ 3037.216595][T22311] block nbd3: shutting down sockets 01:22:37 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x5c00, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:37 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x1277, 0x0) 01:22:37 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x900, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:37 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x5c, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:37 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x1277, 0x0) 01:22:37 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 01:22:37 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xa00, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:37 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x1277, 0x0) 01:22:37 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x1000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:37 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127a, 0x0) [ 3037.501795][T21829] block nbd1: Receive control failed (result -32) [ 3037.502321][T22330] block nbd1: shutting down sockets 01:22:37 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x2000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3037.570515][T22356] binder: 22355:22356 ioctl c0306201 0 returned -14 01:22:38 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1277, 0x0) 01:22:38 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 01:22:38 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xb00, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:38 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x3000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:38 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127d, 0x0) [ 3038.107010][ T565] block nbd3: Receive control failed (result -32) [ 3038.115106][T22338] block nbd3: shutting down sockets 01:22:38 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xc00, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:38 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1277, 0x0) 01:22:38 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x4000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3038.214675][T22373] binder: 22370:22373 ioctl c0306201 0 returned -14 01:22:38 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 01:22:38 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xd00, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3038.350360][T22387] binder: 22384:22387 ioctl c0306201 0 returned -14 01:22:38 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x5000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:38 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1277, 0x0) 01:22:38 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x5c, 0x0, 0x0, 0x0, 0x0}) 01:22:38 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xe00, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:38 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127a, 0x0) [ 3038.428171][T21829] block nbd1: Receive control failed (result -32) [ 3038.436950][T22361] block nbd1: shutting down sockets 01:22:38 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x5c, 0x0, 0x0, 0x0, 0x0}) 01:22:39 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x1100, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:39 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127e, 0x0) 01:22:39 executing program 5: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x1277, 0x0) 01:22:39 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x6000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:39 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x5c, 0x0, 0x0, 0x0, 0x0}) [ 3039.047352][ T565] block nbd3: Receive control failed (result -32) [ 3039.048463][T22378] block nbd3: shutting down sockets 01:22:39 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x7000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:39 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x5c, &(0x7f0000000240), 0x0, 0x0, 0x0}) 01:22:39 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x1200, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:39 executing program 5: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x1277, 0x0) 01:22:39 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x5c, &(0x7f0000000240), 0x0, 0x0, 0x0}) 01:22:39 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x5c, &(0x7f0000000240), 0x0, 0x0, 0x0}) 01:22:39 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x1800, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:39 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x8000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3039.389146][T21829] block nbd1: Receive control failed (result -32) [ 3039.389599][T22398] block nbd1: shutting down sockets 01:22:39 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127f, 0x0) 01:22:39 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127a, 0x0) 01:22:39 executing program 5: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x1277, 0x0) 01:22:39 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x2500, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:39 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x9000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:39 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x5c, &(0x7f0000000240), 0x0, 0x0, 0x0}) [ 3039.955939][ T565] block nbd3: Receive control failed (result -32) [ 3039.958392][T22409] block nbd3: shutting down sockets 01:22:40 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x5c00, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:40 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xa000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:40 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127e, 0x0) 01:22:40 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x1000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:40 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127d, 0x0) [ 3040.116446][T22433] block nbd1: shutting down sockets 01:22:40 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127a, 0x0) 01:22:40 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x541b, 0x0) 01:22:40 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x2000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:40 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xb000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:40 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127a, 0x0) [ 3040.872514][ T565] block nbd3: Receive control failed (result -32) [ 3040.874613][T22437] block nbd3: shutting down sockets 01:22:40 executing program 1: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127a, 0x0) 01:22:40 executing program 1: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127a, 0x0) 01:22:40 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xc000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:40 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x3000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:41 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127e, 0x0) 01:22:41 executing program 1: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127a, 0x0) 01:22:41 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127d, 0x0) [ 3041.009274][T22450] block nbd5: shutting down sockets [ 3041.025100][T10438] block nbd2: Receive control failed (result -32) [ 3041.026471][T22453] block nbd2: shutting down sockets 01:22:41 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xd000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:41 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5421, 0x0) 01:22:41 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x4000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:41 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127a, 0x0) 01:22:41 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xe000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3041.793842][T10438] block nbd3: Receive control failed (result -32) [ 3041.796961][T22464] block nbd3: shutting down sockets 01:22:41 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127a, 0x0) 01:22:41 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x5000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:41 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x10000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:41 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127e, 0x0) 01:22:41 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127a, 0x0) [ 3041.938372][T21829] block nbd2: Receive control failed (result -32) [ 3041.958881][ T565] block nbd5: Receive control failed (result -32) [ 3041.965910][T22472] block nbd2: shutting down sockets [ 3041.966438][T22475] block nbd5: shutting down sockets 01:22:41 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127d, 0x0) 01:22:41 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x6000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:42 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x7000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:42 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5450, 0x0) 01:22:42 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x11000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:42 executing program 1: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127a, 0x0) 01:22:42 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x8000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3042.698838][T10438] block nbd3: Receive control failed (result -32) [ 3042.700206][T22489] block nbd3: shutting down sockets 01:22:42 executing program 1: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127a, 0x0) 01:22:42 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x9000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:42 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x12000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:42 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127e, 0x0) 01:22:42 executing program 1: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127a, 0x0) [ 3042.931898][ T565] block nbd5: Receive control failed (result -32) [ 3042.932902][T22506] block nbd5: shutting down sockets [ 3042.942221][T21829] block nbd2: Receive control failed (result -32) [ 3042.944788][T22507] block nbd2: shutting down sockets 01:22:42 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127d, 0x0) 01:22:42 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xa000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:42 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x18000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3043.075849][T22531] block nbd2: shutting down sockets [ 3043.147150][T22532] block nbd5: shutting down sockets 01:22:43 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xb000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:43 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5451, 0x0) 01:22:43 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127e, 0x0) 01:22:43 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x25000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:43 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127d, 0x0) 01:22:43 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x12000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3043.628614][T10438] block nbd3: Receive control failed (result -32) [ 3043.637167][T22517] block nbd3: shutting down sockets 01:22:43 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x5c000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:43 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x541b, 0x0) 01:22:43 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127e, 0x0) 01:22:43 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127d, 0x0) 01:22:43 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xfcffffff, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:43 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xc000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:43 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127e, 0x0) 01:22:44 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5452, 0x0) 01:22:44 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xfdfdffff, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:44 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127d, 0x0) 01:22:44 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xd000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:44 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127e, 0x0) [ 3044.581255][T10438] block nbd3: Receive control failed (result -32) [ 3044.591111][T22552] block nbd3: shutting down sockets 01:22:44 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xfffffdfd, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3044.653323][T21829] block nbd1: Receive control failed (result -32) [ 3044.666058][T22553] block nbd1: shutting down sockets 01:22:44 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x541b, 0x0) 01:22:44 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xe000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:44 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127e, 0x0) 01:22:44 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127d, 0x0) 01:22:44 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xffffff7f, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:44 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x10000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:45 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5460, 0x0) 01:22:45 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xfffffffc, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:45 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127e, 0x0) 01:22:45 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127d, 0x0) 01:22:45 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x11000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3045.513938][T21829] block nbd3: Receive control failed (result -32) [ 3045.515302][T22572] block nbd3: shutting down sockets 01:22:45 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127d, 0x0) [ 3045.616233][T10438] block nbd1: Receive control failed (result -32) [ 3045.616716][T22582] block nbd1: shutting down sockets 01:22:45 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x541b, 0x0) 01:22:45 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x7f906627cae9, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:45 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x12000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:45 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127e, 0x0) 01:22:45 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127d, 0x0) 01:22:45 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127e, 0x0) 01:22:46 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x8933, 0x0) 01:22:46 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x1000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:46 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127d, 0x0) 01:22:46 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x18000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:46 executing program 5: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127e, 0x0) [ 3046.437347][T10438] block nbd3: Receive control failed (result -32) [ 3046.442627][T22600] block nbd3: shutting down sockets 01:22:46 executing program 5: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127e, 0x0) 01:22:46 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x100000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:46 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x25000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:46 executing program 2: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127d, 0x0) 01:22:46 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x541b, 0x0) 01:22:46 executing program 5: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127e, 0x0) [ 3046.633892][T21829] block nbd1: Receive control failed (result -32) [ 3046.635901][T22612] block nbd1: shutting down sockets 01:22:46 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x18000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3046.806232][T22636] block nbd1: shutting down sockets 01:22:47 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab00, 0x0) 01:22:47 executing program 2: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127d, 0x0) 01:22:47 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x200000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:47 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x5c000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:47 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x12000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:47 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x541b, 0x0) [ 3047.331752][T10438] block nbd3: Receive control failed (result -32) [ 3047.341523][T22621] block nbd3: shutting down sockets 01:22:47 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xfcffffff, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:47 executing program 2: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127d, 0x0) 01:22:47 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xe000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:47 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x300000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:47 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x541b, 0x0) 01:22:47 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127e, 0x0) 01:22:48 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x400000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:48 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xfdfdffff, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:48 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127f, 0x0) 01:22:48 executing program 1: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x541b, 0x0) 01:22:48 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab01, 0x0) 01:22:48 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x1000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3048.286740][T10438] block nbd3: Receive control failed (result -32) [ 3048.295071][T22652] block nbd3: shutting down sockets 01:22:48 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xfffffdfd, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:48 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x500000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:48 executing program 1: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x541b, 0x0) 01:22:48 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x3000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:48 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xffffff7f, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:48 executing program 1: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x541b, 0x0) 01:22:48 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x600000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:48 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127c, 0x0) 01:22:49 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127f, 0x0) 01:22:49 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x541b, 0x0) 01:22:49 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xfffffffc, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:49 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab02, 0x0) 01:22:49 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x700000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3049.184615][T10438] block nbd5: Receive control failed (result -32) [ 3049.193132][T22671] block nbd5: shutting down sockets [ 3049.217762][T21829] block nbd3: Receive control failed (result -32) [ 3049.225460][T22679] block nbd3: shutting down sockets 01:22:49 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x1000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:49 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x541b, 0x0) 01:22:49 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x800000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:49 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x541b, 0x0) 01:22:49 executing program 1: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x541b, 0x0) 01:22:49 executing program 1: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x541b, 0x0) [ 3049.476696][T22695] block nbd2: shutting down sockets 01:22:49 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127c, 0x0) 01:22:50 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x100000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:50 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x900000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:50 executing program 1: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x541b, 0x0) [ 3050.197335][T21829] block nbd5: Receive control failed (result -32) [ 3050.198575][T22717] block nbd5: shutting down sockets [ 3050.239464][ T565] block nbd3: Receive control failed (result -32) [ 3050.248748][T22718] block nbd3: shutting down sockets 01:22:50 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab03, 0x0) 01:22:50 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127f, 0x0) 01:22:50 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x200000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:50 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xa00000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:50 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x800000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:50 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xb00000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:50 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x300000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3050.408372][T22722] block nbd2: shutting down sockets 01:22:50 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127c, 0x0) 01:22:50 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xc00000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:50 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xb00000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:50 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab01, 0x0) 01:22:50 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x400000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:51 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab04, 0x0) 01:22:51 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xd00000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:51 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x500000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:51 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127f, 0x0) [ 3051.209419][T10438] block nbd5: Receive control failed (result -32) [ 3051.212775][T22736] block nbd5: shutting down sockets [ 3051.231608][ T565] block nbd3: Receive control failed (result -32) [ 3051.232136][T22737] block nbd3: shutting down sockets 01:22:51 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xe00000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:51 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x600000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:51 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x1000000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3051.369558][T22761] block nbd5: shutting down sockets [ 3051.414573][T22753] block nbd1: shutting down sockets [ 3051.422455][T22752] block nbd2: shutting down sockets 01:22:51 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127c, 0x0) 01:22:51 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x700000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:51 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127f, 0x0) 01:22:51 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab03, 0x0) [ 3051.460153][T22772] block nbd3: shutting down sockets 01:22:51 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x1100000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:51 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab05, 0x0) 01:22:51 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127c, 0x0) [ 3051.575700][T22776] block nbd2: shutting down sockets 01:22:51 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127f, 0x0) 01:22:51 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x800000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:51 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x1200000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:51 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127f, 0x0) 01:22:51 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127c, 0x0) 01:22:51 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x1800000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:51 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x900000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:51 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127c, 0x0) 01:22:52 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab03, 0x0) 01:22:52 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127f, 0x0) [ 3052.342158][ T565] block nbd1: Receive control failed (result -32) [ 3052.342812][T22775] block nbd1: shutting down sockets 01:22:52 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab06, 0x0) 01:22:52 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x2500000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:52 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xa00000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:52 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127c, 0x0) 01:22:52 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127f, 0x0) [ 3052.456270][T22456] block nbd3: Receive control failed (result -32) [ 3052.457675][T22786] block nbd3: shutting down sockets 01:22:52 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127f, 0x0) 01:22:52 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127c, 0x0) 01:22:52 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xb00000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:52 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x5c00000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:52 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127c, 0x0) 01:22:53 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127f, 0x0) 01:22:53 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab03, 0x0) [ 3053.229854][ T565] block nbd1: Receive control failed (result -32) [ 3053.231558][T22809] block nbd1: shutting down sockets 01:22:53 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xe9ca2766907f0000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:53 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xc00000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:53 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127c, 0x0) 01:22:53 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127f, 0x0) 01:22:53 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab08, 0x0) [ 3053.373461][T22456] block nbd3: Receive control failed (result -32) [ 3053.373963][T22819] block nbd3: shutting down sockets 01:22:53 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127c, 0x0) 01:22:53 executing program 5: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127f, 0x0) 01:22:53 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xd00000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:53 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xfcffffff00000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:53 executing program 5: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127f, 0x0) [ 3053.581416][T22853] block nbd3: NBD_DISCONNECT 01:22:54 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab03, 0x0) 01:22:54 executing program 2: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127c, 0x0) 01:22:54 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xe00000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:54 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xfdfdffff00000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:54 executing program 5: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127f, 0x0) [ 3054.129682][ T565] block nbd1: Receive control failed (result -32) [ 3054.133979][T22835] block nbd1: shutting down sockets 01:22:54 executing program 2: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127c, 0x0) 01:22:54 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xe00000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:54 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x1000000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:54 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xffffff7f00000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:54 executing program 2: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127c, 0x0) [ 3054.306398][T22456] block nbd3: Disconnected due to user request. 01:22:54 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab09, 0x0) 01:22:54 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x1100000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:55 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab03, 0x0) 01:22:55 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xe00000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:55 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xffffffff00000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:55 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab08, 0x0) 01:22:55 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x1200000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3055.079623][ T565] block nbd1: Receive control failed (result -32) [ 3055.080434][T22867] block nbd1: shutting down sockets 01:22:55 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xfdfdffff00000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:55 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:55 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x1800000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:55 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xa00000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3055.236406][T22879] block nbd3: shutting down sockets 01:22:55 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab0a, 0x0) 01:22:55 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x2500000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3055.262524][T22898] block nbd2: NBD_DISCONNECT [ 3055.275500][T22897] binder: 22896:22897 unknown command 0 [ 3055.288767][T22897] binder: 22896:22897 ioctl c0306201 20000300 returned -22 01:22:55 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3055.383631][T22907] binder: 22906:22907 unknown command 0 [ 3055.391381][T22907] binder: 22906:22907 ioctl c0306201 20000300 returned -22 01:22:55 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x630d, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:55 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:55 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x5c00000000000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:55 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:55 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab03, 0x0) [ 3055.966919][T21829] block nbd2: Disconnected due to user request. [ 3055.974508][ T565] block nbd1: Receive control failed (result -32) [ 3055.982127][T22889] block nbd1: shutting down sockets 01:22:56 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3056.056764][T22916] binder: 22915:22916 unknown command 0 [ 3056.062579][T22916] binder: 22915:22916 ioctl c0306201 20000300 returned -22 [ 3056.079959][T22917] binder: 22910:22917 unknown command 0 [ 3056.091095][T22918] binder: 22911:22918 unknown command 0 01:22:56 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xfcffffff00000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:56 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3056.110215][T22918] binder: 22911:22918 ioctl c0306201 20000300 returned -22 [ 3056.123285][T22917] binder: 22910:22917 ioctl c0306201 20000300 returned -22 [ 3056.127295][T22921] binder: 22920:22921 unknown command 0 [ 3056.139148][T22921] binder: 22920:22921 ioctl c0306201 20000300 returned -22 01:22:56 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3056.176289][T22903] block nbd3: shutting down sockets 01:22:56 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x400448c9, 0x0) 01:22:56 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40046302, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:56 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xfdfdffff00000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3056.263258][T22927] binder: 22924:22927 unknown command 0 [ 3056.269866][T22927] binder: 22924:22927 ioctl c0306201 20000300 returned -22 [ 3056.282542][T22929] binder: 22925:22929 unknown command 0 01:22:56 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3056.303623][T22929] binder: 22925:22929 ioctl c0306201 20000300 returned -22 [ 3056.338545][T22932] binder: BC_ACQUIRE_RESULT not supported [ 3056.344337][T22932] binder: 22928:22932 ioctl c0306201 20000300 returned -22 01:22:56 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:56 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40046304, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:56 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xffffff7f00000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3056.440107][T22938] binder: 22937:22938 unknown command 0 [ 3056.453288][T22938] binder: 22937:22938 ioctl c0306201 20000300 returned -22 [ 3056.468166][T22940] binder: 22939:22940 unknown command 0 [ 3056.485861][T22940] binder: 22939:22940 ioctl c0306201 20000300 returned -22 01:22:56 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab03, 0x0) 01:22:56 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:56 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:56 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0xffffffff00000000, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:56 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40046305, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3056.867433][T21829] block nbd1: Receive control failed (result -32) [ 3056.869618][T22914] block nbd1: shutting down sockets [ 3056.962713][T22952] binder: 22948:22952 unknown command 0 [ 3056.974589][T22952] binder: 22948:22952 ioctl c0306201 20000300 returned -22 01:22:57 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x400448dd, 0x0) 01:22:57 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab03, 0x0) 01:22:57 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:57 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:57 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:57 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3057.138325][T22456] block nbd3: Receive control failed (result -32) [ 3057.146531][T22931] block nbd3: shutting down sockets 01:22:57 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:57 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:57 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:57 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab03, 0x0) [ 3057.233942][T22962] binder: 22958:22962 unknown command 0 [ 3057.244758][T22964] binder: 22960:22964 unknown command 0 [ 3057.245790][T22962] binder: 22958:22962 ioctl c0306201 20000300 returned -22 [ 3057.261926][T22964] binder: 22960:22964 ioctl c0306201 20000300 returned -22 01:22:57 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:57 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40046307, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3057.389693][T22974] binder: 22972:22974 unknown command 0 [ 3057.395579][T22974] binder: 22972:22974 ioctl c0306201 20000300 returned -22 [ 3057.451189][T22978] binder: 22975:22978 unknown command 0 [ 3057.457432][T22978] binder: 22975:22978 ioctl c0306201 20000300 returned -22 01:22:58 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x400454ca, 0x0) 01:22:58 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:58 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:58 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x630d, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:58 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab03, 0x0) 01:22:58 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3058.109397][T22456] block nbd3: Receive control failed (result -32) [ 3058.115577][T22967] block nbd3: shutting down sockets 01:22:58 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40046302, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:58 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3058.187458][T22990] binder: 22982:22990 unknown command 0 [ 3058.193312][T22990] binder: 22982:22990 ioctl c0306201 20000300 returned -22 [ 3058.216613][T22989] binder: 22987:22989 unknown command 0 01:22:58 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:58 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab03, 0x0) [ 3058.245373][T22989] binder: 22987:22989 ioctl c0306201 20000300 returned -22 01:22:58 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:58 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x4008630a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3058.297400][T22996] binder: BC_ACQUIRE_RESULT not supported [ 3058.303262][T22996] binder: 22993:22996 ioctl c0306201 20000300 returned -22 [ 3058.414157][T23005] binder: BC_ATTEMPT_ACQUIRE not supported [ 3058.422101][T23005] binder: 23002:23005 ioctl c0306201 20000300 returned -22 01:22:58 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40049409, 0x0) 01:22:58 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:58 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40046304, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:58 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:58 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab03, 0x0) 01:22:58 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40086310, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3059.007664][T22456] block nbd3: Receive control failed (result -32) [ 3059.010414][T22988] block nbd3: shutting down sockets 01:22:59 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab03, 0x0) [ 3059.107489][T23014] binder: 23010:23014 unknown command 0 [ 3059.113137][T23014] binder: 23010:23014 ioctl c0306201 20000300 returned -22 [ 3059.135394][T23015] binder: 23011:23015 unknown command 0 01:22:59 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:59 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3059.151037][T23015] binder: 23011:23015 ioctl c0306201 20000300 returned -22 01:22:59 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x400c630e, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:59 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40046305, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:59 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 3059.283628][T23026] binder: 23025:23026 unknown command 0 [ 3059.299983][T23026] binder: 23025:23026 ioctl c0306201 20000300 returned -22 [ 3059.342333][T23031] binder: 23028:23031 unknown command 0 [ 3059.355450][T23030] binder: 23029:23030 ioctl c0306201 0 returned -14 [ 3059.360237][T23031] binder: 23028:23031 ioctl c0306201 20000300 returned -22 01:22:59 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40081271, 0x0) 01:22:59 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab03, 0x0) 01:22:59 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:59 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:59 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x400c630f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:22:59 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 3059.949867][T22456] block nbd3: Receive control failed (result -32) [ 3059.951742][T23018] block nbd3: shutting down sockets 01:22:59 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 01:22:59 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab03, 0x0) 01:23:00 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 01:23:00 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3060.044450][T23040] binder: 23039:23040 ioctl c0306201 0 returned -14 [ 3060.053386][T23041] binder: 23035:23041 unknown command 0 [ 3060.061483][T23041] binder: 23035:23041 ioctl c0306201 20000300 returned -22 [ 3060.064420][T23043] binder: 23034:23043 unknown command 0 [ 3060.111330][T23043] binder: 23034:23043 ioctl c0306201 20000300 returned -22 01:23:00 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40046307, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:00 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 3060.161934][T23050] binder: 23046:23050 ioctl c0306201 0 returned -14 [ 3060.203114][T23051] binder: 23047:23051 ioctl c0306201 0 returned -14 [ 3060.234332][T23055] binder: 23048:23055 unknown command 0 [ 3060.254931][T23055] binder: 23048:23055 ioctl c0306201 20000300 returned -22 [ 3060.278657][T23057] binder: 23056:23057 unknown command 0 [ 3060.284454][T23057] binder: 23056:23057 ioctl c0306201 20000300 returned -22 01:23:00 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:23:00 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab03, 0x0) 01:23:00 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 01:23:00 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40106309, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:00 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:00 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40086602, 0x0) [ 3060.913270][T22456] block nbd3: Receive control failed (result -32) [ 3060.924231][T23044] block nbd3: shutting down sockets 01:23:00 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab03, 0x0) 01:23:01 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:23:01 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 3061.010739][T23067] binder: 23063:23067 unknown command 0 [ 3061.026115][T23069] binder: 23062:23069 unknown command 0 [ 3061.035578][T23066] binder: 23064:23066 ioctl c0306201 0 returned -14 [ 3061.036710][T23067] binder: 23063:23067 ioctl c0306201 20000300 returned -22 [ 3061.044710][T23069] binder: 23062:23069 ioctl c0306201 20000300 returned -22 01:23:01 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x4008630a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:01 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab03, 0x0) 01:23:01 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:01 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0}) [ 3061.191042][T23077] binder: 23076:23077 ioctl c0306201 0 returned -14 [ 3061.228288][T23080] binder: BC_ATTEMPT_ACQUIRE not supported 01:23:01 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:01 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 3061.240368][T23080] binder: 23074:23080 ioctl c0306201 20000300 returned -22 01:23:01 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab03, 0x0) 01:23:01 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40086310, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3061.383683][T23092] binder: 23090:23092 unknown command 0 [ 3061.389857][T23092] binder: 23090:23092 ioctl c0306201 20000300 returned -22 01:23:01 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:01 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0}) 01:23:01 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:23:01 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab03, 0x0) 01:23:01 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x400c630e, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:01 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40101283, 0x0) [ 3061.811424][T22456] block nbd3: Receive control failed (result -32) [ 3061.813238][T23061] block nbd3: shutting down sockets 01:23:01 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0}) 01:23:01 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486313, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:01 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 3061.897819][T23104] binder: 23101:23104 unknown command 0 [ 3061.903925][T23104] binder: 23101:23104 ioctl c0306201 20000300 returned -22 01:23:01 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x400c630f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:01 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab03, 0x0) 01:23:02 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab03, 0x0) [ 3062.024864][T23108] binder: 23106:23108 unknown command 1078485779 [ 3062.035246][T23111] binder: 23109:23111 unknown command 0 [ 3062.049954][T23111] binder: 23109:23111 ioctl c0306201 20000300 returned -22 [ 3062.053681][T23108] binder: 23106:23108 ioctl c0306201 20000300 returned -22 01:23:02 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:02 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:02 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0}) 01:23:02 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486327, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:02 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab03, 0x0) [ 3062.192818][T23123] binder: 23121:23123 unknown command 0 [ 3062.203892][T23123] binder: 23121:23123 ioctl c0306201 20000300 returned -22 [ 3062.257080][T23126] binder: 23125:23126 unknown command 1078485799 [ 3062.274941][T23126] binder: 23125:23126 ioctl c0306201 20000300 returned -22 01:23:02 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40101286, 0x0) 01:23:02 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0}) 01:23:02 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:02 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40106309, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:02 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab03, 0x0) 01:23:02 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x4048632a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3062.715850][T22456] block nbd3: Receive control failed (result -32) [ 3062.723148][T23102] block nbd3: shutting down sockets 01:23:02 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab03, 0x0) 01:23:02 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3062.771945][T23134] binder: 23133:23134 unknown command 1078485802 [ 3062.782167][T23134] binder: 23133:23134 ioctl c0306201 20000300 returned -22 01:23:02 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:02 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0}) 01:23:02 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:02 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:03 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40101287, 0x0) 01:23:03 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:03 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab03, 0x0) 01:23:03 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:03 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40101283, 0x0) 01:23:03 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3063.650474][T22456] block nbd3: Receive control failed (result -32) [ 3063.651491][T23142] block nbd3: shutting down sockets 01:23:03 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:03 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:03 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab03, 0x0) 01:23:03 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:03 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab03, 0x0) 01:23:03 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486313, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3063.938825][T23179] binder: 23178:23179 unknown command 1078485779 [ 3063.946178][T23179] binder: 23178:23179 ioctl c0306201 20000300 returned -22 01:23:04 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40101288, 0x0) 01:23:04 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40101283, 0x0) 01:23:04 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:04 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:04 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486327, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3064.549079][T22456] block nbd2: Receive control failed (result -32) [ 3064.552081][T23160] block nbd2: shutting down sockets [ 3064.565580][T21829] block nbd3: Receive control failed (result -32) [ 3064.575455][T23163] block nbd3: shutting down sockets 01:23:04 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:04 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:04 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x4048632a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3064.662419][T23185] binder: 23182:23185 unknown command 1078485799 [ 3064.685388][T23185] binder: 23182:23185 ioctl c0306201 20000300 returned -22 01:23:04 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3064.771814][T23180] block nbd1: shutting down sockets 01:23:04 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:04 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab03, 0x0) 01:23:04 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3064.820570][T23199] binder: 23195:23199 unknown command 1078485802 [ 3064.856395][T23199] binder: 23195:23199 ioctl c0306201 20000300 returned -22 [ 3065.504298][T21829] block nbd2: Receive control failed (result -32) [ 3065.506702][T23188] block nbd2: shutting down sockets 01:23:05 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:05 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070c9, 0x0) 01:23:05 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40101283, 0x0) 01:23:05 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:05 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3065.552555][ T565] block nbd3: Receive control failed (result -32) [ 3065.553900][T23198] block nbd3: shutting down sockets 01:23:05 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:05 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:05 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:05 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:05 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3065.742566][T22456] block nbd1: Receive control failed (result -32) [ 3065.742982][T23204] block nbd1: shutting down sockets 01:23:05 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab03, 0x0) 01:23:05 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:05 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3066.446947][ T565] block nbd2: Receive control failed (result -32) [ 3066.448078][T23213] block nbd2: shutting down sockets 01:23:06 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070ca, 0x0) 01:23:06 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:06 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:06 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:06 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40101283, 0x0) [ 3066.496928][T21829] block nbd3: Receive control failed (result -32) [ 3066.503538][T23216] block nbd3: shutting down sockets 01:23:06 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 01:23:06 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:06 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3066.629624][T23237] block nbd2: shutting down sockets 01:23:06 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40101283, 0x0) [ 3066.654574][T23246] binder: 23245:23246 ioctl c0306201 0 returned -14 01:23:06 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab03, 0x0) 01:23:06 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:06 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3066.761245][T23234] block nbd1: shutting down sockets 01:23:07 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40101283, 0x0) 01:23:07 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 01:23:07 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:07 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:07 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070cd, 0x0) [ 3067.409084][T21829] block nbd3: Receive control failed (result -32) [ 3067.410233][T23243] block nbd3: shutting down sockets 01:23:07 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:07 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x40101283, 0x0) 01:23:07 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3067.507379][T23269] binder: 23262:23269 ioctl c0306201 0 returned -14 01:23:07 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 01:23:07 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:07 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x40101283, 0x0) 01:23:07 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:07 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:23:07 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab03, 0x0) [ 3067.648650][T23279] binder: 23278:23279 ioctl c0306201 0 returned -14 [ 3067.666189][T22456] block nbd1: Receive control failed (result -32) [ 3067.666607][T23259] block nbd1: shutting down sockets 01:23:07 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x40101283, 0x0) 01:23:07 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:08 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:08 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:23:08 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:08 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40186366, 0x0) 01:23:08 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40101283, 0x0) [ 3068.314487][T21829] block nbd3: Receive control failed (result -32) [ 3068.315908][T23267] block nbd3: shutting down sockets 01:23:08 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:23:08 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:08 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40101283, 0x0) 01:23:08 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:08 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:08 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab03, 0x0) 01:23:08 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0}) 01:23:08 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40101283, 0x0) 01:23:08 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3068.572132][T22456] block nbd1: Receive control failed (result -32) [ 3068.572826][T23286] block nbd1: shutting down sockets 01:23:08 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:09 executing program 2: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x40101283, 0x0) 01:23:09 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:09 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0}) 01:23:09 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:09 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870c8, 0x0) [ 3069.224104][T21829] block nbd3: Receive control failed (result -32) [ 3069.232359][T23303] block nbd3: shutting down sockets 01:23:09 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0}) 01:23:09 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:09 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:09 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:09 executing program 2: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x40101283, 0x0) 01:23:09 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070cd, 0x0) 01:23:09 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070ca, 0x0) [ 3069.546578][T22456] block nbd1: Receive control failed (result -32) [ 3069.555597][T23325] block nbd1: shutting down sockets 01:23:09 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:09 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:09 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:09 executing program 2: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x40101283, 0x0) 01:23:10 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870cb, 0x0) 01:23:10 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:10 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:10 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070ca, 0x0) [ 3070.185265][T21829] block nbd3: Receive control failed (result -32) [ 3070.194885][T23338] block nbd3: shutting down sockets 01:23:10 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:10 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xb00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:10 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070cd, 0x0) 01:23:10 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070ca, 0x0) 01:23:10 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:10 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3070.467685][T22456] block nbd5: Receive control failed (result -32) [ 3070.474093][T23347] block nbd5: shutting down sockets [ 3070.484319][ T565] block nbd1: Receive control failed (result -32) [ 3070.491938][T23354] block nbd1: shutting down sockets 01:23:10 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:10 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:11 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:11 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:11 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870cc, 0x0) 01:23:11 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3071.085427][T21829] block nbd2: Receive control failed (result -32) [ 3071.086720][T23367] block nbd2: shutting down sockets [ 3071.118500][T23369] block nbd3: shutting down sockets 01:23:11 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:11 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:11 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070cd, 0x0) [ 3071.389079][ T565] block nbd5: Receive control failed (result -32) [ 3071.390161][T23380] block nbd5: shutting down sockets 01:23:11 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070ca, 0x0) 01:23:11 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870cb, 0x0) 01:23:11 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:11 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3071.434061][T22456] block nbd1: Receive control failed (result -32) [ 3071.434639][T23384] block nbd1: shutting down sockets 01:23:11 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x1800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:11 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:11 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x2500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:12 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xb00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:12 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401c5820, 0x0) 01:23:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x5c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3072.043459][T10438] block nbd3: Receive control failed (result -32) [ 3072.044694][T23397] block nbd3: shutting down sockets 01:23:12 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:12 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070cd, 0x0) [ 3072.278436][T22456] block nbd5: Receive control failed (result -32) [ 3072.286834][T23404] block nbd5: shutting down sockets [ 3072.327874][ T565] block nbd2: Receive control failed (result -32) [ 3072.328633][T23407] block nbd2: shutting down sockets [ 3072.364656][T21829] block nbd1: Receive control failed (result -32) [ 3072.367034][T23413] block nbd1: shutting down sockets 01:23:12 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070ca, 0x0) 01:23:12 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070cd, 0x0) 01:23:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:12 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:12 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870cb, 0x0) [ 3072.385713][T23431] block nbd5: shutting down sockets 01:23:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:12 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070cd, 0x0) 01:23:12 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3072.556725][T23439] block nbd1: shutting down sockets 01:23:12 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070ca, 0x0) 01:23:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:12 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401070cd, 0x0) 01:23:12 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:12 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x4020940d, 0x0) [ 3072.945837][T10438] block nbd3: Receive control failed (result -32) [ 3072.946973][T23427] block nbd3: shutting down sockets 01:23:12 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401070cd, 0x0) 01:23:13 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:13 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870cb, 0x0) 01:23:13 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401070cd, 0x0) 01:23:13 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070ca, 0x0) 01:23:13 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:13 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x1800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3073.286465][T21829] block nbd2: Receive control failed (result -32) [ 3073.287503][T23440] block nbd2: shutting down sockets 01:23:13 executing program 1: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401070ca, 0x0) 01:23:13 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x2500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:13 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070cd, 0x0) 01:23:13 executing program 1: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401070ca, 0x0) 01:23:13 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:13 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070cd, 0x0) 01:23:13 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x5c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3073.873949][T10438] block nbd3: Receive control failed (result -32) [ 3073.882320][T23459] block nbd3: shutting down sockets 01:23:14 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070cd, 0x0) 01:23:14 executing program 1: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401070ca, 0x0) 01:23:14 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:14 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80041284, 0x0) 01:23:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870cb, 0x0) [ 3074.172982][T21829] block nbd2: Receive control failed (result -32) [ 3074.174093][T23473] block nbd2: shutting down sockets 01:23:14 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070ca, 0x0) 01:23:14 executing program 5: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401070cd, 0x0) 01:23:14 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870cb, 0x0) [ 3074.306368][T23501] block nbd2: shutting down sockets 01:23:14 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070ca, 0x0) 01:23:14 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x9000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:14 executing program 5: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401070cd, 0x0) 01:23:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870cb, 0x0) 01:23:15 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:15 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80041285, 0x0) 01:23:15 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401870cb, 0x0) 01:23:15 executing program 5: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401070cd, 0x0) 01:23:15 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:15 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070ca, 0x0) [ 3075.093263][T21829] block nbd3: Receive control failed (result -32) [ 3075.094429][T23502] block nbd3: shutting down sockets 01:23:15 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:15 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xb000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:15 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401870cb, 0x0) 01:23:15 executing program 1: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401070ca, 0x0) 01:23:15 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80041284, 0x0) 01:23:15 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:15 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xc000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:16 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081270, 0x0) 01:23:16 executing program 1: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401070ca, 0x0) 01:23:16 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401870cb, 0x0) 01:23:16 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xd000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:16 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3076.061386][T21829] block nbd3: Receive control failed (result -32) [ 3076.078294][T23537] block nbd3: shutting down sockets 01:23:16 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870cb, 0x0) 01:23:16 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:16 executing program 1: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401070ca, 0x0) 01:23:16 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xe000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3076.221106][T10438] block nbd5: Receive control failed (result -32) [ 3076.225577][T23549] block nbd5: shutting down sockets 01:23:16 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80041284, 0x0) 01:23:16 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870cb, 0x0) 01:23:16 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x9000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:17 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870cb, 0x0) 01:23:17 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80041285, 0x0) 01:23:17 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:17 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:17 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081272, 0x0) [ 3077.030650][T10438] block nbd3: Receive control failed (result -32) [ 3077.038828][T23563] block nbd3: shutting down sockets 01:23:17 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:17 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xb000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:17 executing program 2: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401870cb, 0x0) 01:23:17 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3077.231100][T21829] block nbd5: Receive control failed (result -32) [ 3077.237804][T23577] block nbd5: shutting down sockets 01:23:17 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80041284, 0x0) 01:23:17 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x18000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:17 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xc000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:17 executing program 2: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401870cb, 0x0) 01:23:17 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80041285, 0x0) 01:23:17 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:17 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xd000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3077.918564][T10438] block nbd1: Receive control failed (result -32) [ 3077.927003][T23584] block nbd1: shutting down sockets 01:23:17 executing program 2: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401870cb, 0x0) 01:23:17 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x5c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:17 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xe000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:18 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081280, 0x0) [ 3078.011448][T21829] block nbd3: Receive control failed (result -32) [ 3078.020100][T23599] block nbd3: shutting down sockets 01:23:18 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:18 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80041284, 0x0) 01:23:18 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081270, 0x0) 01:23:18 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:18 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xfcffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3078.228879][ T565] block nbd5: Receive control failed (result -32) [ 3078.230955][T23606] block nbd5: shutting down sockets [ 3078.356374][T23631] block nbd5: shutting down sockets 01:23:18 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80041285, 0x0) 01:23:18 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:18 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:18 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80041284, 0x0) [ 3078.819083][T21829] block nbd1: Receive control failed (result -32) [ 3078.820418][T23614] block nbd1: shutting down sockets 01:23:18 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80041284, 0x0) 01:23:18 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3078.905657][T10438] block nbd3: Receive control failed (result -32) [ 3078.906143][T23618] block nbd3: shutting down sockets 01:23:18 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x18000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:18 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:18 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80041284, 0x0) 01:23:18 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80086301, 0x0) 01:23:19 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081270, 0x0) 01:23:19 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3079.149323][ T565] block nbd2: Receive control failed (result -32) [ 3079.150257][T23635] block nbd2: shutting down sockets 01:23:19 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:19 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80041284, 0x0) 01:23:19 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:19 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80041285, 0x0) [ 3079.772234][T10438] block nbd1: Receive control failed (result -32) [ 3079.780941][T23645] block nbd1: shutting down sockets 01:23:19 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:19 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x5c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:19 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80041284, 0x0) [ 3079.919728][T23671] block nbd1: shutting down sockets 01:23:19 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80041285, 0x0) [ 3079.944735][T23657] block nbd3: shutting down sockets 01:23:19 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:19 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80086601, 0x0) 01:23:20 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081270, 0x0) 01:23:20 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xfcffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:20 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80041284, 0x0) 01:23:20 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80041285, 0x0) [ 3080.038499][ T565] block nbd2: Receive control failed (result -32) [ 3080.039050][T23663] block nbd2: shutting down sockets 01:23:20 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:20 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80041284, 0x0) 01:23:20 executing program 1: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80041285, 0x0) 01:23:20 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:20 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:20 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80041284, 0x0) 01:23:20 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:20 executing program 1: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80041285, 0x0) [ 3080.929813][ T565] block nbd3: Receive control failed (result -32) [ 3080.931033][T23684] block nbd3: shutting down sockets 01:23:21 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081270, 0x0) 01:23:21 executing program 5: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80041284, 0x0) 01:23:21 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:21 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x801c581f, 0x0) 01:23:21 executing program 1: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80041285, 0x0) [ 3081.114020][T21829] block nbd2: Receive control failed (result -32) [ 3081.115052][T23698] block nbd2: shutting down sockets 01:23:21 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:21 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:21 executing program 5: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80041284, 0x0) 01:23:21 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80041285, 0x0) 01:23:21 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3081.272331][T23720] block nbd2: shutting down sockets 01:23:21 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081270, 0x0) 01:23:21 executing program 5: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80041284, 0x0) 01:23:21 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:21 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:21 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80041285, 0x0) 01:23:21 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081270, 0x0) 01:23:21 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081270, 0x0) 01:23:21 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80041285, 0x0) 01:23:21 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:21 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0045878, 0x0) [ 3081.995496][T21829] block nbd3: Receive control failed (result -32) [ 3082.003766][T23724] block nbd3: shutting down sockets 01:23:22 executing program 1: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80041285, 0x0) 01:23:22 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:22 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80081270, 0x0) 01:23:22 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:22 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3082.160244][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 3082.167954][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 01:23:22 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:22 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:22 executing program 1: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80041285, 0x0) 01:23:22 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80081270, 0x0) 01:23:22 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xfcffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:22 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:22 executing program 1: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80041285, 0x0) 01:23:22 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:22 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0045878, 0x0) 01:23:22 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081280, 0x0) 01:23:22 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80081270, 0x0) 01:23:22 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3082.943835][T21829] block nbd3: Receive control failed (result -32) [ 3082.945003][T23757] block nbd3: shutting down sockets 01:23:22 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081270, 0x0) 01:23:23 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0045878, 0x0) 01:23:23 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:23 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:23 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081270, 0x0) 01:23:23 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:23 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:23 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3083.834990][T21829] block nbd5: Receive control failed (result -32) [ 3083.835004][T23786] block nbd5: shutting down sockets 01:23:23 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0101282, 0x0) 01:23:23 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081270, 0x0) 01:23:23 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:23 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:23 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081280, 0x0) [ 3083.887538][ T565] block nbd3: Receive control failed (result -32) [ 3083.895473][T23790] block nbd3: shutting down sockets [ 3083.965565][T10438] block nbd1: Receive control failed (result -32) [ 3083.984894][T23797] block nbd1: shutting down sockets 01:23:23 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:23 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:23 executing program 2: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80081270, 0x0) 01:23:23 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:24 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:24 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:24 executing program 2: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80081270, 0x0) [ 3084.798174][T10438] block nbd5: Receive control failed (result -32) [ 3084.807484][T23818] block nbd5: shutting down sockets 01:23:24 executing program 2: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80081270, 0x0) 01:23:24 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0189436, 0x0) 01:23:24 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081280, 0x0) 01:23:24 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:24 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:24 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3084.854593][ T565] block nbd3: Receive control failed (result -32) [ 3084.863005][T23821] block nbd3: shutting down sockets 01:23:24 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:24 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0101282, 0x0) 01:23:24 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x5c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:24 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:24 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:25 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870cc, 0x0) 01:23:25 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:25 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc020660b, 0x0) 01:23:25 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081280, 0x0) 01:23:25 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:25 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3085.801332][ T565] block nbd5: Receive control failed (result -32) [ 3085.804230][T23848] block nbd5: shutting down sockets [ 3085.813616][T10438] block nbd3: Receive control failed (result -32) [ 3085.815014][T23849] block nbd3: shutting down sockets [ 3085.893822][T23855] block nbd1: shutting down sockets 01:23:25 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0101282, 0x0) 01:23:25 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:25 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3085.968029][T23874] block nbd5: shutting down sockets 01:23:25 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:25 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081280, 0x0) [ 3086.028768][T22456] block nbd2: Receive control failed (result -32) [ 3086.042872][T23865] block nbd2: shutting down sockets 01:23:26 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081280, 0x0) 01:23:26 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870cc, 0x0) 01:23:26 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:26 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0481273, 0x0) 01:23:26 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:26 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80081280, 0x0) 01:23:26 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3086.736430][T21829] block nbd3: Receive control failed (result -32) [ 3086.743951][T23872] block nbd3: shutting down sockets 01:23:26 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0101282, 0x0) 01:23:26 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3086.792952][T10438] block nbd1: Receive control failed (result -32) [ 3086.801503][T23877] block nbd1: shutting down sockets 01:23:26 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80081280, 0x0) 01:23:26 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:26 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:26 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80081280, 0x0) 01:23:26 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870cc, 0x0) 01:23:26 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3086.958994][T22456] block nbd2: Receive control failed (result -32) [ 3086.967991][T23888] block nbd2: shutting down sockets 01:23:27 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x2) 01:23:27 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081280, 0x0) 01:23:27 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:27 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3087.651803][T10438] block nbd3: Receive control failed (result -32) [ 3087.653055][T23902] block nbd3: shutting down sockets 01:23:27 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0101282, 0x0) 01:23:27 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:27 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:27 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081280, 0x0) [ 3087.766046][T22456] block nbd1: Receive control failed (result -32) [ 3087.767626][T23910] block nbd1: shutting down sockets 01:23:27 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081280, 0x0) 01:23:27 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3087.822234][T23931] nbd3: detected capacity change from 0 to 4 [ 3087.887056][T21829] block nbd2: Receive control failed (result -32) [ 3087.897179][T23919] block nbd2: shutting down sockets 01:23:27 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870cc, 0x0) 01:23:27 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3087.978066][T23939] block nbd1: shutting down sockets [ 3088.048532][T23945] block nbd2: shutting down sockets [ 3088.562853][T10438] block nbd3: Receive control failed (result -104) [ 3088.569028][T23928] block nbd3: shutting down sockets [ 3088.581986][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3088.591110][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 3088.599289][T21945] ldm_validate_partition_table(): Disk read failed. [ 3088.606303][T21945] Dev nbd3: unable to read RDB block 0 01:23:28 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x3) 01:23:28 executing program 5: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80081280, 0x0) 01:23:28 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:28 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:28 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0101282, 0x0) 01:23:28 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870cc, 0x0) [ 3088.611807][T21945] nbd3: unable to read partition table [ 3088.618094][T21945] nbd3: partition table beyond EOD, truncated 01:23:28 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870cc, 0x0) 01:23:28 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:28 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:23:28 executing program 5: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80081280, 0x0) 01:23:28 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0101282, 0x0) 01:23:28 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 3088.842172][T23956] nbd3: detected capacity change from 0 to 6 [ 3089.527766][T10438] block nbd3: Receive control failed (result -104) [ 3119.266850][ T1015] block nbd3: Possible stuck request ffff88801cb88400: control (read@0,3072B). Runtime 30 seconds [ 3143.591291][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.597798][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 01:24:23 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:24:23 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x2500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:24:23 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401870cc, 0x0) 01:24:23 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x4) 01:24:23 executing program 5: syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80081280, 0x0) 01:24:23 executing program 1: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xc0101282, 0x0) 01:24:23 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401870cc, 0x0) 01:24:23 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:24:23 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:24:23 executing program 1: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xc0101282, 0x0) 01:24:23 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x5c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:24:23 executing program 1: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xc0101282, 0x0) 01:24:23 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401870cc, 0x0) 01:24:23 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:24:23 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0481273, 0x0) [ 3144.834930][T10438] block nbd5: Receive control failed (result -32) [ 3144.844932][T23997] block nbd5: shutting down sockets [ 3145.548397][T21829] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 3145.556879][T21829] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 3145.564711][T21829] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 3145.576077][T21829] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 3145.583889][T21829] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 3145.592056][T21829] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 3145.771257][T24002] chnl_net:caif_netlink_parms(): no params data found [ 3145.849721][T24002] bridge0: port 1(bridge_slave_0) entered blocking state [ 3145.857596][T24002] bridge0: port 1(bridge_slave_0) entered disabled state [ 3145.864806][T24002] bridge_slave_0: entered allmulticast mode [ 3145.872164][T24002] bridge_slave_0: entered promiscuous mode [ 3145.883390][T24002] bridge0: port 2(bridge_slave_1) entered blocking state [ 3145.891021][T24002] bridge0: port 2(bridge_slave_1) entered disabled state [ 3145.898992][T24002] bridge_slave_1: entered allmulticast mode [ 3145.906836][T24002] bridge_slave_1: entered promiscuous mode [ 3145.947728][T24002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3145.960011][T24002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3146.003350][T24002] team0: Port device team_slave_0 added [ 3146.011624][T24002] team0: Port device team_slave_1 added [ 3146.046577][T24002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3146.053644][T24002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3146.079731][T24002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3146.095014][T24002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3146.102087][T24002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3146.129031][T24002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3146.182183][T24002] hsr_slave_0: entered promiscuous mode [ 3146.190579][T24002] hsr_slave_1: entered promiscuous mode [ 3146.197202][T24002] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3146.204797][T24002] Cannot create hsr debugfs directory [ 3146.348842][T24002] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3146.420389][T24002] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3146.515950][T24002] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3146.612958][T24002] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3146.771136][T24002] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3146.781253][T24002] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3146.793643][T24002] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3146.811427][T24002] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3146.915462][T24002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3146.941462][T24002] 8021q: adding VLAN 0 to HW filter on device team0 [ 3146.967926][T23117] bridge0: port 1(bridge_slave_0) entered blocking state [ 3146.976020][T23117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3146.985066][T23117] bridge0: port 2(bridge_slave_1) entered blocking state [ 3146.992283][T23117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3147.201453][T24002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3147.252320][T24002] veth0_vlan: entered promiscuous mode [ 3147.268252][T24002] veth1_vlan: entered promiscuous mode [ 3147.303893][T24002] veth0_macvtap: entered promiscuous mode [ 3147.317674][T24002] veth1_macvtap: entered promiscuous mode [ 3147.339210][T24002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3147.350256][T24002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3147.361169][T24002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3147.371833][T24002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3147.381777][T24002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3147.396191][T24002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3147.406165][T24002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3147.417482][T24002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3147.427611][T24002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3147.439375][T24002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3147.449327][T24002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3147.460049][T24002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3147.472353][T24002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3147.489207][T24002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3147.501096][T24002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3147.517836][T24002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3147.528601][T24002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3147.538951][T24002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3147.550844][T24002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3147.561227][T24002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3147.575194][T24002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3147.585038][T24002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3147.597879][T24002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3147.608084][T24002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3147.620843][T24002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3147.637502][T24002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3147.656036][T24002] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3147.664772][T24002] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3147.665581][T21829] Bluetooth: hci6: command 0x0409 tx timeout [ 3147.676000][T24002] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3147.690404][T24002] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3147.776732][T23117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3147.784579][T23117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3147.831835][T20092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3147.842235][T20092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3149.356049][ T1015] block nbd3: Possible stuck request ffff88801cb88400: control (read@0,3072B). Runtime 60 seconds [ 3149.745309][T21829] Bluetooth: hci6: command 0x041b tx timeout [ 3150.811177][ T4512] udevd[4512]: worker [21945] /devices/virtual/block/nbd3 is taking a long time [ 3151.825331][T21829] Bluetooth: hci6: command 0x040f tx timeout [ 3153.905369][T21829] Bluetooth: hci6: command 0x0419 tx timeout [ 3179.427686][ T1015] block nbd3: Possible stuck request ffff88801cb88400: control (read@0,3072B). Runtime 90 seconds 01:25:22 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x5) 01:25:22 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870cc, 0x0) 01:25:22 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:25:22 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:25:22 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0101282, 0x0) 01:25:22 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0481273, 0x0) 01:25:22 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:25:22 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0101282, 0x0) 01:25:22 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:25:22 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870cc, 0x0) 01:25:23 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:25:23 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870cc, 0x0) [ 3203.767491][T21829] block nbd5: Receive control failed (result -32) [ 3203.774805][T24035] block nbd5: shutting down sockets [ 3204.277148][T10438] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 3204.286073][T10438] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 3204.293772][T10438] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 3204.302748][T10438] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 3204.311927][T10438] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 3204.320377][T10438] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 3204.508254][T24049] chnl_net:caif_netlink_parms(): no params data found [ 3204.594499][T24049] bridge0: port 1(bridge_slave_0) entered blocking state [ 3204.601846][T24049] bridge0: port 1(bridge_slave_0) entered disabled state [ 3204.609648][T24049] bridge_slave_0: entered allmulticast mode [ 3204.617638][T24049] bridge_slave_0: entered promiscuous mode [ 3204.627313][T24049] bridge0: port 2(bridge_slave_1) entered blocking state [ 3204.634478][T24049] bridge0: port 2(bridge_slave_1) entered disabled state [ 3204.641998][T24049] bridge_slave_1: entered allmulticast mode [ 3204.649344][T24049] bridge_slave_1: entered promiscuous mode [ 3204.690993][T24049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3204.703003][T24049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3204.745625][T24049] team0: Port device team_slave_0 added [ 3204.754238][T24049] team0: Port device team_slave_1 added [ 3204.790373][T24049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3204.797456][T24049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3204.823546][T24049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3204.836265][T24049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3204.843236][T24049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3204.872645][T24049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3204.923824][T24049] hsr_slave_0: entered promiscuous mode [ 3204.930751][T24049] hsr_slave_1: entered promiscuous mode [ 3204.937187][T24049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3204.944772][T24049] Cannot create hsr debugfs directory [ 3205.030882][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 3205.037390][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 [ 3205.116840][T24049] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3205.197394][T24049] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3205.318705][T24049] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3205.417744][T24049] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3205.598165][T24049] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3205.612297][T24049] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3205.622720][T24049] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3205.634323][T24049] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3205.729977][T24049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3205.758030][T24049] 8021q: adding VLAN 0 to HW filter on device team0 [ 3205.772821][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state [ 3205.780232][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3205.802772][T30752] bridge0: port 2(bridge_slave_1) entered blocking state [ 3205.809993][T30752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3205.855866][T24049] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3206.024357][T24049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3206.074359][T24049] veth0_vlan: entered promiscuous mode [ 3206.093053][T24049] veth1_vlan: entered promiscuous mode [ 3206.134753][T24049] veth0_macvtap: entered promiscuous mode [ 3206.147860][T24049] veth1_macvtap: entered promiscuous mode [ 3206.166351][T24049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3206.177371][T24049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3206.189198][T24049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3206.200931][T24049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3206.211549][T24049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3206.225280][T24049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3206.237066][T24049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3206.247942][T24049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3206.258194][T24049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3206.268964][T24049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3206.279347][T24049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3206.290096][T24049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3206.303089][T24049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3206.315243][T24049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3206.328989][T24049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3206.349618][T24049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3206.360735][T24049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3206.371573][T24049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3206.385373][T24049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3206.385425][T10438] Bluetooth: hci7: command 0x0409 tx timeout [ 3206.403748][T24049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3206.414329][T24049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3206.424368][T24049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3206.435353][T24049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3206.446711][T24049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3206.457959][T24049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3206.468589][T24049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3206.479765][T24049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3206.490085][T24049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3206.502468][T24049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3206.513874][T24049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3206.531333][T24049] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3206.540778][T24049] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3206.553196][T24049] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3206.562167][T24049] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3206.647425][T22980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3206.661534][T22980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3206.700107][T23609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3206.711674][T23609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3208.466681][T10438] Bluetooth: hci7: command 0x041b tx timeout [ 3209.516980][ T1015] block nbd3: Possible stuck request ffff88801cb88400: control (read@0,3072B). Runtime 120 seconds [ 3210.545568][T10438] Bluetooth: hci7: command 0x040f tx timeout [ 3212.625955][T10438] Bluetooth: hci7: command 0x0419 tx timeout [ 3237.026260][ T29] INFO: task syz-executor.3:23959 blocked for more than 143 seconds. [ 3237.034681][ T29] Not tainted 6.7.0-rc1-syzkaller-00012-g9bacdd8996c7 #0 [ 3237.048573][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3237.057969][ T29] task:syz-executor.3 state:D stack:26192 pid:23959 tgid:23948 ppid:5085 flags:0x00004006 [ 3237.068479][ T29] Call Trace: [ 3237.071786][ T29] [ 3237.074732][ T29] __schedule+0x1961/0x4ab0 [ 3237.079658][ T29] ? release_firmware_map_entry+0x190/0x190 [ 3237.085897][ T29] ? __lock_acquire+0x1fd0/0x1fd0 [ 3237.090969][ T29] ? __mutex_trylock_common+0x91/0x2e0 [ 3237.096713][ T29] ? schedule+0x8e/0x260 [ 3237.101014][ T29] schedule+0x149/0x260 [ 3237.105503][ T29] schedule_preempt_disabled+0x13/0x20 [ 3237.111005][ T29] __mutex_lock+0x6a3/0xd60 [ 3237.118918][ T29] ? __mutex_lock+0x526/0xd60 [ 3237.123636][ T29] ? blkdev_put+0xff/0x770 [ 3237.128179][ T29] ? mutex_lock_nested+0x20/0x20 [ 3237.133180][ T29] ? __fsnotify_parent+0x4d6/0x730 [ 3237.138383][ T29] blkdev_put+0xff/0x770 [ 3237.142664][ T29] ? __rwlock_init+0x150/0x150 [ 3237.149182][ T29] bdev_release+0x57/0x70 [ 3237.153555][ T29] blkdev_release+0x3b/0x40 [ 3237.159182][ T29] ? blkdev_open+0x3c0/0x3c0 [ 3237.163835][ T29] __fput+0x3cc/0xa10 [ 3237.167939][ T29] task_work_run+0x24a/0x300 [ 3237.172573][ T29] ? kasan_save_stack+0x3f/0x60 [ 3237.177505][ T29] ? __kasan_record_aux_stack+0xad/0xc0 [ 3237.183195][ T29] ? task_work_cancel+0x2b0/0x2b0 [ 3237.188477][ T29] get_signal+0x166e/0x1840 [ 3237.193347][ T29] ? ptrace_notify+0x380/0x380 [ 3237.198311][ T29] arch_do_signal_or_restart+0x96/0x860 [ 3237.203945][ T29] ? get_sigframe_size+0x20/0x20 [ 3237.208956][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 3237.214978][ T29] ? blkdev_ioctl+0x5cf/0x730 [ 3237.222402][ T29] ? exit_to_user_mode_loop+0x39/0x100 [ 3237.228824][ T29] exit_to_user_mode_loop+0x6a/0x100 [ 3237.234119][ T29] exit_to_user_mode_prepare+0xb1/0x150 [ 3237.239780][ T29] syscall_exit_to_user_mode+0x69/0x2a0 [ 3237.245460][ T29] do_syscall_64+0x52/0x110 [ 3237.249997][ T29] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3237.257030][ T29] RIP: 0033:0x7fda0247cae9 [ 3237.261599][ T29] RSP: 002b:00007fda0315f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3237.271176][ T29] RAX: 0000000000000000 RBX: 00007fda0259c050 RCX: 00007fda0247cae9 [ 3237.279280][ T29] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 3237.287320][ T29] RBP: 00007fda024c847a R08: 0000000000000000 R09: 0000000000000000 [ 3237.295380][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3237.303380][ T29] R13: 000000000000006e R14: 00007fda0259c050 R15: 00007ffd631ad938 [ 3237.311446][ T29] [ 3237.314523][ T29] [ 3237.314523][ T29] Showing all locks held in the system: [ 3237.324591][ T29] 1 lock held by khungtaskd/29: [ 3237.329694][ T29] #0: ffffffff8d92d060 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 3237.339878][ T29] 2 locks held by getty/4816: [ 3237.344681][ T29] #0: ffff8880259ec0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 3237.354844][ T29] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b4/0x1e10 [ 3237.365268][ T29] 1 lock held by udevd/21945: [ 3237.369994][ T29] #0: ffff88801cafb4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x123/0x480 [ 3237.383320][ T29] 3 locks held by kworker/u4:7/23609: [ 3237.388961][ T29] #0: ffff8880b993c358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 3237.399274][ T29] #1: ffffc9001596fd20 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 3237.412700][ T29] #2: ffff8880b9929718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 3237.423957][ T29] 1 lock held by syz-executor.3/23959: [ 3237.433647][ T29] #0: ffff88801cafb4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xff/0x770 [ 3237.447191][ T29] 1 lock held by syz-executor.3/24017: [ 3237.452683][ T29] #0: ffff88801cafb4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x123/0x480 [ 3237.463099][ T29] 1 lock held by syz-executor.3/24063: [ 3237.468799][ T29] #0: ffff88801cafb4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x123/0x480 [ 3237.479231][ T29] [ 3237.481574][ T29] ============================================= [ 3237.481574][ T29] [ 3237.492402][ T29] NMI backtrace for cpu 1 [ 3237.496751][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.7.0-rc1-syzkaller-00012-g9bacdd8996c7 #0 [ 3237.506662][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3237.516717][ T29] Call Trace: [ 3237.519993][ T29] [ 3237.523354][ T29] dump_stack_lvl+0x1e7/0x2d0 [ 3237.528052][ T29] ? nf_tcp_handle_invalid+0x650/0x650 [ 3237.533528][ T29] ? panic+0x850/0x850 [ 3237.537603][ T29] ? vprintk_emit+0x607/0x720 [ 3237.542285][ T29] ? printk_sprint+0x480/0x480 [ 3237.547094][ T29] nmi_cpu_backtrace+0x498/0x4d0 [ 3237.552104][ T29] ? nmi_trigger_cpumask_backtrace+0x310/0x310 [ 3237.558299][ T29] ? _printk+0xd5/0x120 [ 3237.562464][ T29] ? panic+0x850/0x850 [ 3237.566558][ T29] ? __wake_up_klogd+0xcc/0x100 [ 3237.571419][ T29] ? panic+0x850/0x850 [ 3237.575670][ T29] ? __rcu_read_unlock+0x98/0x100 [ 3237.580716][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 3237.586811][ T29] nmi_trigger_cpumask_backtrace+0x198/0x310 [ 3237.592817][ T29] watchdog+0xfaf/0xff0 [ 3237.597024][ T29] ? watchdog+0x1e9/0xff0 [ 3237.601411][ T29] kthread+0x2d3/0x370 [ 3237.605513][ T29] ? hungtask_pm_notify+0x90/0x90 [ 3237.610573][ T29] ? kthread_blkcg+0xd0/0xd0 [ 3237.615164][ T29] ret_from_fork+0x48/0x80 [ 3237.619581][ T29] ? kthread_blkcg+0xd0/0xd0 [ 3237.624171][ T29] ret_from_fork_asm+0x11/0x20 [ 3237.629007][ T29] [ 3237.633594][ T29] Sending NMI from CPU 1 to CPUs 0: [ 3237.639177][ C0] NMI backtrace for cpu 0 [ 3237.639189][ C0] CPU: 0 PID: 954 Comm: kworker/u4:6 Not tainted 6.7.0-rc1-syzkaller-00012-g9bacdd8996c7 #0 [ 3237.639211][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3237.639222][ C0] Workqueue: bat_events batadv_nc_worker [ 3237.639329][ C0] RIP: 0010:kasan_check_range+0x1b7/0x290 [ 3237.639357][ C0] Code: f5 4d 01 fb 48 8d 5d 07 48 85 ed 48 0f 49 dd 48 83 e3 f8 48 29 dd 74 12 41 80 3b 00 0f 85 a2 00 00 00 49 ff c3 48 ff cd 75 ee <5b> 41 5c 41 5e 41 5f 5d c3 40 84 ed 75 5f f7 c5 00 ff 00 00 75 5c [ 3237.639374][ C0] RSP: 0018:ffffc90003fd7908 EFLAGS: 00000056 [ 3237.639389][ C0] RAX: 0000000000000001 RBX: 1ffffffff21ba887 RCX: ffffffff816d967a [ 3237.639404][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90dd4438 [ 3237.639417][ C0] RBP: 0000000000000000 R08: ffffffff90dd443f R09: 1ffffffff21ba887 [ 3237.639431][ C0] R10: dffffc0000000000 R11: fffffbfff21ba888 R12: ffff88801d1a0b08 [ 3237.639446][ C0] R13: dffffc0000000000 R14: dffffc0000000001 R15: fffffbfff21ba888 [ 3237.639462][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 3237.639479][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3237.639493][ C0] CR2: 0000555555f35788 CR3: 000000000d730000 CR4: 00000000003506f0 [ 3237.639510][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3237.639522][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3237.639535][ C0] Call Trace: [ 3237.639543][ C0] [ 3237.639550][ C0] ? nmi_cpu_backtrace+0x3be/0x4d0 [ 3237.639576][ C0] ? read_lock_is_recursive+0x20/0x20 [ 3237.639602][ C0] ? nmi_trigger_cpumask_backtrace+0x310/0x310 [ 3237.639635][ C0] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 3237.639662][ C0] ? nmi_handle+0x14c/0x570 [ 3237.639685][ C0] ? nmi_handle+0x2a/0x570 [ 3237.639709][ C0] ? kasan_check_range+0x1b7/0x290 [ 3237.639731][ C0] ? default_do_nmi+0x63/0x150 [ 3237.639755][ C0] ? exc_nmi+0x121/0x210 [ 3237.639778][ C0] ? end_repeat_nmi+0xf/0x2a [ 3237.639807][ C0] ? mark_lock+0x9a/0x350 [ 3237.639830][ C0] ? kasan_check_range+0x1b7/0x290 [ 3237.639853][ C0] ? kasan_check_range+0x1b7/0x290 [ 3237.639876][ C0] ? kasan_check_range+0x1b7/0x290 [ 3237.639899][ C0] [ 3237.639905][ C0] [ 3237.639913][ C0] mark_lock+0x9a/0x350 [ 3237.639938][ C0] lockdep_hardirqs_on_prepare+0x281/0x780 [ 3237.639963][ C0] ? print_irqtrace_events+0x220/0x220 [ 3237.639988][ C0] ? rcu_is_watching+0x15/0xb0 [ 3237.640016][ C0] trace_hardirqs_on+0x28/0x40 [ 3237.640043][ C0] __local_bh_enable_ip+0x168/0x1f0 [ 3237.640062][ C0] ? batadv_nc_purge_paths+0x309/0x3a0 [ 3237.640088][ C0] ? _local_bh_enable+0xb0/0xb0 [ 3237.640107][ C0] ? batadv_nc_purge_paths+0xe8/0x3a0 [ 3237.640133][ C0] ? batadv_nc_purge_paths+0x3a0/0x3a0 [ 3237.640160][ C0] batadv_nc_purge_paths+0x309/0x3a0 [ 3237.640191][ C0] batadv_nc_worker+0x328/0x610 [ 3237.640216][ C0] ? batadv_nc_worker+0xcb/0x610 [ 3237.640242][ C0] ? process_scheduled_works+0x825/0x1420 [ 3237.640266][ C0] process_scheduled_works+0x90f/0x1420 [ 3237.640302][ C0] ? assign_work+0x3d0/0x3d0 [ 3237.640328][ C0] ? assign_work+0x364/0x3d0 [ 3237.640353][ C0] worker_thread+0xa5f/0x1000 [ 3237.640387][ C0] kthread+0x2d3/0x370 [ 3237.640405][ C0] ? pr_cont_work+0x5e0/0x5e0 [ 3237.640427][ C0] ? kthread_blkcg+0xd0/0xd0 [ 3237.640446][ C0] ret_from_fork+0x48/0x80 [ 3237.640467][ C0] ? kthread_blkcg+0xd0/0xd0 [ 3237.640486][ C0] ret_from_fork_asm+0x11/0x20 [ 3237.640519][ C0] [ 3237.658888][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 3237.658907][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.7.0-rc1-syzkaller-00012-g9bacdd8996c7 #0 [ 3237.658931][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3237.658945][ T29] Call Trace: [ 3237.658954][ T29] [ 3237.658963][ T29] dump_stack_lvl+0x1e7/0x2d0 [ 3237.658999][ T29] ? nf_tcp_handle_invalid+0x650/0x650 [ 3237.659026][ T29] ? panic+0x850/0x850 [ 3237.659064][ T29] ? vscnprintf+0x5d/0x80 [ 3237.659088][ T29] panic+0x349/0x850 [ 3237.659120][ T29] ? nmi_trigger_cpumask_backtrace+0x244/0x310 [ 3237.659151][ T29] ? __memcpy_flushcache+0x2b0/0x2b0 [ 3237.659187][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 3237.659221][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 3237.659255][ T29] ? nmi_trigger_cpumask_backtrace+0x244/0x310 [ 3237.659283][ T29] ? nmi_trigger_cpumask_backtrace+0x2c7/0x310 [ 3237.659313][ T29] ? nmi_trigger_cpumask_backtrace+0x2cc/0x310 [ 3237.659345][ T29] watchdog+0xfee/0xff0 [ 3237.659380][ T29] ? watchdog+0x1e9/0xff0 [ 3237.659420][ T29] kthread+0x2d3/0x370 [ 3237.659442][ T29] ? hungtask_pm_notify+0x90/0x90 [ 3238.104106][ T29] ? kthread_blkcg+0xd0/0xd0 [ 3238.108723][ T29] ret_from_fork+0x48/0x80 [ 3238.113154][ T29] ? kthread_blkcg+0xd0/0xd0 [ 3238.117751][ T29] ret_from_fork_asm+0x11/0x20 [ 3238.122545][ T29] [ 3238.125853][ T29] Kernel Offset: disabled [ 3238.130185][ T29] Rebooting in 86400 seconds..