ffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000200)=0x7) ioctl$NBD_SET_FLAGS(r1, 0x125f, 0x200) (async) ioctl$NBD_SET_FLAGS(r1, 0x125f, 0x200) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 00:52:45 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0xfffffffffffffff8) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0xfffffffffffffff8) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x58, &(0x7f0000000100)}, 0x10) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x4502, 0x0) 00:52:45 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) 00:52:45 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000000c0)) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) (async) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000000c0)) (async) 00:52:45 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000bc0)) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r3, 0xab03) 00:52:45 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0xfffffffffffffff8) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x58, &(0x7f0000000100)}, 0x10) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x4502, 0x0) 00:52:45 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r1, 0x2b, 0x3, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x40, 0x3, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r1, 0x4, 0x81, 0x1f, 0x4a, 0x4, @mcast1, @mcast1, 0x10, 0x10, 0xffffffff, 0x2}}) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0x125f, 0x0) 00:52:45 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_DO_IT(r0, 0xab03) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) 00:52:45 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xc2801) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) [ 3165.248121][T27130] nbd4: detected capacity change from 0 to 18 00:52:45 executing program 5: ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0x301, 0x0) 00:52:45 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xc2801) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) (async) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) [ 3166.015180][ T6119] block nbd3: Receive control failed (result -32) [ 3166.019575][T27126] block nbd3: shutting down sockets [ 3168.184998][T27130] block nbd4: shutting down sockets [ 3168.189093][T24503] ldm_validate_partition_table(): Disk read failed. [ 3168.190909][T24503] Dev nbd4: unable to read RDB block 0 [ 3168.194481][T24503] nbd4: unable to read partition table [ 3168.195815][T24503] nbd4: partition table beyond EOD, truncated [ 3168.198625][T24503] ldm_validate_partition_table(): Disk read failed. [ 3168.200530][T24503] Dev nbd4: unable to read RDB block 0 [ 3168.201928][T24503] nbd4: unable to read partition table [ 3168.203157][T24503] nbd4: partition table beyond EOD, truncated 00:52:48 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f00000010c0)) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x9) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r3, 0xab03) 00:52:48 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r1, 0x2b, 0x3, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x40, 0x3, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r1, 0x4, 0x81, 0x1f, 0x4a, 0x4, @mcast1, @mcast1, 0x10, 0x10, 0xffffffff, 0x2}}) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0x125f, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r1, 0x2b, 0x3, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x40, 0x3, 0x3}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r1, 0x4, 0x81, 0x1f, 0x4a, 0x4, @mcast1, @mcast1, 0x10, 0x10, 0xffffffff, 0x2}}) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) ioctl$NBD_SET_FLAGS(r2, 0x125f, 0x0) (async) 00:52:48 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x8000000000000001) 00:52:48 executing program 5: ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0x301, 0x0) 00:52:48 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xc2801) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) (async) ioctl$VT_WAITACTIVE(r3, 0x5607) (async) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) 00:52:48 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) 00:52:48 executing program 5: ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0x301, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0x301, 0x0) (async) 00:52:48 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x8000000000000001) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x8000000000000001) (async) 00:52:48 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r1, 0x2b, 0x3, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x40, 0x3, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r1, 0x4, 0x81, 0x1f, 0x4a, 0x4, @mcast1, @mcast1, 0x10, 0x10, 0xffffffff, 0x2}}) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0x125f, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r1, 0x2b, 0x3, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x40, 0x3, 0x3}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r1, 0x4, 0x81, 0x1f, 0x4a, 0x4, @mcast1, @mcast1, 0x10, 0x10, 0xffffffff, 0x2}}) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) ioctl$NBD_SET_FLAGS(r2, 0x125f, 0x0) (async) 00:52:48 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xa001) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) 00:52:48 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x0) 00:52:48 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xa001) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xa001) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) [ 3168.314624][T27170] nbd4: detected capacity change from 0 to 18 [ 3169.065696][T25416] block nbd3: Receive control failed (result -32) [ 3169.072078][T27158] block nbd3: shutting down sockets [ 3171.243711][T27170] block nbd4: shutting down sockets [ 3171.245674][ C0] blk_print_req_error: 60 callbacks suppressed [ 3171.245685][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3171.249052][ C0] buffer_io_error: 60 callbacks suppressed [ 3171.249062][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 3171.252028][ T24] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3171.253995][ T24] Buffer I/O error on dev nbd4, logical block 0, async page read [ 3171.255812][ T54] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3171.257800][ T54] Buffer I/O error on dev nbd4, logical block 0, async page read [ 3171.259710][ T54] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3171.261685][ T54] Buffer I/O error on dev nbd4, logical block 0, async page read [ 3171.263502][ T54] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3171.265429][ T54] Buffer I/O error on dev nbd4, logical block 0, async page read [ 3171.267151][ T54] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3171.269144][ T54] Buffer I/O error on dev nbd4, logical block 0, async page read [ 3171.270898][ T54] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3171.272736][ T54] Buffer I/O error on dev nbd4, logical block 0, async page read [ 3171.274502][ T24] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3171.276435][ T24] Buffer I/O error on dev nbd4, logical block 0, async page read [ 3171.278083][T24503] ldm_validate_partition_table(): Disk read failed. [ 3171.279715][ T24] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3171.281659][ T24] Buffer I/O error on dev nbd4, logical block 0, async page read [ 3171.283440][ T24] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3171.285471][ T24] Buffer I/O error on dev nbd4, logical block 0, async page read [ 3171.287305][T24503] Dev nbd4: unable to read RDB block 0 [ 3171.289745][T24503] nbd4: unable to read partition table [ 3171.291007][T24503] nbd4: partition table beyond EOD, truncated [ 3171.293719][T24503] ldm_validate_partition_table(): Disk read failed. [ 3171.295504][T24503] Dev nbd4: unable to read RDB block 0 [ 3171.296916][T24503] nbd4: unable to read partition table [ 3171.298138][T24503] nbd4: partition table beyond EOD, truncated 00:52:51 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f00000010c0)) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x9) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 00:52:51 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x0) 00:52:51 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x8000000000000001) (async) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x8000000000000001) 00:52:51 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xa001) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) 00:52:51 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$NBD_PRINT_DEBUG(r3, 0xab06) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x100000, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r4, 0x8010500d, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) 00:52:51 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) 00:52:51 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 00:52:51 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) 00:52:51 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x0) 00:52:51 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000000040)) 00:52:51 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$NBD_PRINT_DEBUG(r3, 0xab06) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x100000, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r4, 0x8010500d, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000c00)) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) (async) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) (async) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) (async) ioctl$NBD_PRINT_DEBUG(r3, 0xab06) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x100000, 0x0) (async) ioctl$SNDCTL_DSP_GETISPACE(r4, 0x8010500d, &(0x7f0000000100)) (async) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) (async) [ 3171.397262][T27188] block nbd4: shutting down sockets 00:52:51 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x80, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={'nr', 0x0}, 0x7, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400480) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x4af5) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000080)) 00:52:51 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f00000010c0)) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x9) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 00:52:51 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$NBD_PRINT_DEBUG(r3, 0xab06) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x100000, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r4, 0x8010500d, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000c00)) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) (async) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) (async) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) (async) ioctl$NBD_PRINT_DEBUG(r3, 0xab06) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x100000, 0x0) (async) ioctl$SNDCTL_DSP_GETISPACE(r4, 0x8010500d, &(0x7f0000000100)) (async) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) (async) 00:52:51 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 00:52:51 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000000040)) 00:52:51 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x80, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={'nr', 0x0}, 0x7, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400480) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x4af5) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000080)) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x80, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={'nr', 0x0}, 0x7, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400480) (async) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x4af5) (async) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000080)) (async) [ 3171.513968][T27219] block nbd4: shutting down sockets [ 3172.167014][ T6119] block nbd3: Receive control failed (result -32) [ 3172.167791][T27197] block nbd3: shutting down sockets 00:52:52 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000c00)) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) 00:52:52 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) (async) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) (async) ioctl$SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000000040)) 00:52:52 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x400200, 0x0) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xfffffffffffffffa) 00:52:52 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x422002, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000080)=0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$KIOCSOUND(r1, 0x4b2f, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x1, 0x1, 0x4, 0xa10, 0x1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x48) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x8) 00:52:52 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f00000010c0)) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x9) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 00:52:52 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x80, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={'nr', 0x0}, 0x7, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400480) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x4af5) (async) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x4af5) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000080)) 00:52:52 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$KDDISABIO(r1, 0x4b37) 00:52:52 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x400200, 0x0) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xfffffffffffffffa) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x400200, 0x0) (async) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xfffffffffffffffa) (async) 00:52:52 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000c00)) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) 00:52:52 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) 00:52:52 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x422002, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000080)=0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$KIOCSOUND(r1, 0x4b2f, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x1, 0x1, 0x4, 0xa10, 0x1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x48) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x8) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x422002, 0x0) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000080)=0x1) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) (async) ioctl$KIOCSOUND(r1, 0x4b2f, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x1, 0x1, 0x4, 0xa10, 0x1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x48) (async) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x8) (async) [ 3172.241293][T27241] block nbd4: shutting down sockets [ 3172.272627][T27255] block nbd5: NBD_DISCONNECT 00:52:52 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$KDDISABIO(r1, 0x4b37) 00:52:52 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f00000010c0)) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r3, 0xab03) 00:52:52 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000c00)) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) 00:52:52 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x422002, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000080)=0x1) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) (async) ioctl$KIOCSOUND(r1, 0x4b2f, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x1, 0x1, 0x4, 0xa10, 0x1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x48) (async) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x8) 00:52:52 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) 00:52:52 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$KDDISABIO(r1, 0x4b37) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$KDDISABIO(r1, 0x4b37) (async) 00:52:52 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x400200, 0x0) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xfffffffffffffffa) [ 3172.343887][T27273] block nbd5: NBD_DISCONNECT 00:52:52 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x10000) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x100000000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) 00:52:52 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) 00:52:52 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x127b40) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x4) 00:52:52 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) 00:52:52 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x40) ioctl$NBD_CLEAR_QUE(r1, 0xab05) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2, 0x180800, 0x0, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xa}) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x800) 00:52:52 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x10000) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x100000000) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) [ 3172.419521][T27287] block nbd5: NBD_DISCONNECT [ 3173.170330][ T6119] block nbd4: Receive control failed (result -32) [ 3173.175074][T27265] block nbd4: shutting down sockets 00:52:53 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000bc0)) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r3, 0xab03) 00:52:53 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x127b40) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x4) 00:52:53 executing program 5: setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000040)=0x100, 0x4) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) 00:52:53 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x40) ioctl$NBD_CLEAR_QUE(r1, 0xab05) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2, 0x180800, 0x0, 0xffffffffffffffff}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xa}) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x800) 00:52:53 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x10000) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x100000000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x10000) (async) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x100000000) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) (async) 00:52:53 executing program 5: setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000040)=0x100, 0x4) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000040)=0x100, 0x4) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) (async) ioctl$NBD_DO_IT(r1, 0xab03) (async) 00:52:53 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x127b40) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x4) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x127b40) (async) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x4) (async) [ 3173.243682][T27288] block nbd3: shutting down sockets 00:52:53 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:52:53 executing program 1: ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) 00:52:53 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x40) ioctl$NBD_CLEAR_QUE(r1, 0xab05) (async) ioctl$NBD_CLEAR_QUE(r1, 0xab05) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2, 0x180800, 0x0, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xa}) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x800) 00:52:53 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0x80, 0x2, 0x0, @remote, @loopback, 0x40, 0xf850, 0x40, 0x4}}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x5, 0x101, 0x400, 0xc, 0xffffffffffffffff, 0x100, '\x00', r0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x48) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x101400) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xff) ioctl$NBD_PRINT_DEBUG(r2, 0xab06) ioctl$NBD_SET_FLAGS(r1, 0x125d, 0x0) [ 3173.276586][T27317] block nbd1: NBD_DISCONNECT 00:52:53 executing program 5: setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000040)=0x100, 0x4) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) [ 3174.031574][ T6119] block nbd4: Receive control failed (result -32) [ 3174.035971][T27299] block nbd4: shutting down sockets 00:52:54 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) 00:52:54 executing program 1: ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) (async) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) 00:52:54 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) 00:52:54 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0x80, 0x2, 0x0, @remote, @loopback, 0x40, 0xf850, 0x40, 0x4}}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x5, 0x101, 0x400, 0xc, 0xffffffffffffffff, 0x100, '\x00', r0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x48) (async) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x101400) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xff) (async) ioctl$NBD_PRINT_DEBUG(r2, 0xab06) ioctl$NBD_SET_FLAGS(r1, 0x125d, 0x0) 00:52:54 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x4085) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x6) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000040)) 00:52:54 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) [ 3174.055483][T27330] block nbd1: NBD_DISCONNECT 00:52:54 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x4085) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x6) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000040)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) (async) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x4085) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x6) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000040)) (async) 00:52:54 executing program 1: ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) (async) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) 00:52:54 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:52:54 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) (async) 00:52:54 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0x80, 0x2, 0x0, @remote, @loopback, 0x40, 0xf850, 0x40, 0x4}}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x5, 0x101, 0x400, 0xc, 0xffffffffffffffff, 0x100, '\x00', r0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x48) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x101400) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xff) ioctl$NBD_PRINT_DEBUG(r2, 0xab06) ioctl$NBD_SET_FLAGS(r1, 0x125d, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0x80, 0x2, 0x0, @remote, @loopback, 0x40, 0xf850, 0x40, 0x4}}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x5, 0x101, 0x400, 0xc, 0xffffffffffffffff, 0x100, '\x00', r0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x48) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x101400) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2}) (async) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xff) (async) ioctl$NBD_PRINT_DEBUG(r2, 0xab06) (async) ioctl$NBD_SET_FLAGS(r1, 0x125d, 0x0) (async) [ 3174.108319][T27343] block nbd1: NBD_DISCONNECT 00:52:54 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x9c, 0x0, &(0x7f00000002c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000100)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/87, 0x57, 0x0, 0x38}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0), 0x0, 0x2, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x22}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x2, 0x0, 0x2a}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x4, 0x1, 0x16}}, &(0x7f0000000280)={0x0, 0x20, 0x38}}}, @free_buffer], 0xba, 0x0, &(0x7f0000000500)="9dd1a777d293520a7d2f8da72627609496bf5a2022bc7ee953ff94854d09877ebb1d14cc57b8473a99609018330bb43aad3cf6676a859f010066e5469e3de6d59bac985ee926b6185fe3e1232d08be4fe10699281145be27e819779ac9faff5ea615124064c7d70c3fc4721d18813013215ec11127bcf2609efd217d14b5dc9ec1c6e59554f46a16c05d181b8f6e5443f1025876e003465069cc48bde3fba6ce02d337d1d938603958682978abc951529145cad6a3ff50f9b745"}) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r2, 0x2b, 0x3, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x40, 0x3, 0x3}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@ifindex=r2, 0x1e, 0x1, 0xffffffff, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0]}, 0x40) [ 3174.889750][ T6119] block nbd4: Receive control failed (result -32) [ 3174.897661][T27327] block nbd4: shutting down sockets 00:52:54 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40800) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x20000000000000) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) 00:52:54 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x9c, 0x0, &(0x7f00000002c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000100)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/87, 0x57, 0x0, 0x38}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0), 0x0, 0x2, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x22}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x2, 0x0, 0x2a}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x4, 0x1, 0x16}}, &(0x7f0000000280)={0x0, 0x20, 0x38}}}, @free_buffer], 0xba, 0x0, &(0x7f0000000500)="9dd1a777d293520a7d2f8da72627609496bf5a2022bc7ee953ff94854d09877ebb1d14cc57b8473a99609018330bb43aad3cf6676a859f010066e5469e3de6d59bac985ee926b6185fe3e1232d08be4fe10699281145be27e819779ac9faff5ea615124064c7d70c3fc4721d18813013215ec11127bcf2609efd217d14b5dc9ec1c6e59554f46a16c05d181b8f6e5443f1025876e003465069cc48bde3fba6ce02d337d1d938603958682978abc951529145cad6a3ff50f9b745"}) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r2, 0x2b, 0x3, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x40, 0x3, 0x3}}) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@ifindex=r2, 0x1e, 0x1, 0xffffffff, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0]}, 0x40) (rerun: 64) 00:52:54 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x4085) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x6) (async) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000040)) 00:52:54 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) 00:52:54 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) 00:52:54 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) 00:52:54 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) 00:52:54 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000080)={0x38}) 00:52:54 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40800) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x20000000000000) (async) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) 00:52:54 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000080)={0x38}) 00:52:54 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x9c, 0x0, &(0x7f00000002c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000100)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/87, 0x57, 0x0, 0x38}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0), 0x0, 0x2, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x22}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x2, 0x0, 0x2a}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x4, 0x1, 0x16}}, &(0x7f0000000280)={0x0, 0x20, 0x38}}}, @free_buffer], 0xba, 0x0, &(0x7f0000000500)="9dd1a777d293520a7d2f8da72627609496bf5a2022bc7ee953ff94854d09877ebb1d14cc57b8473a99609018330bb43aad3cf6676a859f010066e5469e3de6d59bac985ee926b6185fe3e1232d08be4fe10699281145be27e819779ac9faff5ea615124064c7d70c3fc4721d18813013215ec11127bcf2609efd217d14b5dc9ec1c6e59554f46a16c05d181b8f6e5443f1025876e003465069cc48bde3fba6ce02d337d1d938603958682978abc951529145cad6a3ff50f9b745"}) (async) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r2, 0x2b, 0x3, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x40, 0x3, 0x3}}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@ifindex=r2, 0x1e, 0x1, 0xffffffff, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0]}, 0x40) 00:52:54 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) 00:52:54 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) (async, rerun: 64) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000080)={0x38}) [ 3175.755646][ T6119] block nbd3: Receive control failed (result -32) [ 3175.756643][T27366] block nbd3: shutting down sockets [ 3175.779020][T25416] block nbd4: Receive control failed (result -32) [ 3175.779330][T27372] block nbd4: shutting down sockets 00:52:55 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000c00)) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) 00:52:55 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) (async) 00:52:55 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40800) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x20000000000000) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40800) (async) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x20000000000000) (async) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) (async) 00:52:55 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4000) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x101) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0xffff) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) 00:52:55 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x58941) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) 00:52:55 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:52:55 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4000) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x101) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0xffff) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async, rerun: 64) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) (rerun: 64) 00:52:55 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x58941) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) 00:52:55 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) 00:52:55 executing program 0: ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0x125f, 0xfffffffffffffffe) socketpair(0x2a, 0x80000, 0x9, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) 00:52:55 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:52:55 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000c00)) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) 00:52:55 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x58941) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) 00:52:55 executing program 0: ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0x125f, 0xfffffffffffffffe) socketpair(0x2a, 0x80000, 0x9, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) 00:52:55 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) 00:52:55 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000c00)) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) 00:52:55 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:52:55 executing program 0: ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0x125f, 0xfffffffffffffffe) (async) socketpair(0x2a, 0x80000, 0x9, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) 00:52:55 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4000) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x101) (async) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0xffff) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) 00:52:55 executing program 0: sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xd4f7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048000}, 0x44005) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) 00:52:55 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x34) 00:52:55 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) 00:52:55 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) 00:52:55 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x406480) 00:52:55 executing program 0: sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xd4f7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048000}, 0x44005) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xd4f7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048000}, 0x44005) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) (async) 00:52:55 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) 00:52:56 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x34) 00:52:56 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) 00:52:56 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x406480) 00:52:56 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x126841) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) 00:52:56 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x34) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x34) (async) 00:52:56 executing program 0: sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xd4f7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048000}, 0x44005) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) 00:52:56 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) [ 3176.861158][T25416] block nbd4: Receive control failed (result -32) [ 3176.861955][T27440] block nbd4: shutting down sockets 00:52:56 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:52:56 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000bc0)) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r3, 0xab03) 00:52:56 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x406480) 00:52:56 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:52:56 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x126841) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x126841) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) 00:52:56 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x100) 00:52:56 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x126841) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x126841) (async) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) (async) 00:52:56 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0xd3d) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000300)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000000c0)) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) 00:52:56 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:52:56 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x100) 00:52:56 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:52:56 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000080)) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x40) 00:52:56 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0xd3d) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000300)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000000c0)) (async) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) [ 3177.733740][T25416] block nbd5: Receive control failed (result -32) [ 3177.739705][T27475] block nbd5: shutting down sockets 00:52:57 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000bc0)) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r3, 0xab03) 00:52:57 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:52:57 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x100) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x100) (async) 00:52:57 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:52:57 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) (async) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000080)) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x40) 00:52:57 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0xd3d) (async) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000300)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000000c0)) (async) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) 00:52:57 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80081) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) 00:52:57 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:52:57 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) 00:52:57 executing program 0: syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x20000) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$KDFONTOP_COPY(r2, 0x4b72, &(0x7f0000000140)={0x3, 0x1, 0xf, 0xb, 0x1c7, &(0x7f0000000680)}) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x18, 0x3, 0x123, &(0x7f0000000280)="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"}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_FLAGS(r1, 0x125f, 0x10000000) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0xed3}, 0x8) 00:52:57 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000080)) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x40) 00:52:57 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80081) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80081) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) [ 3178.624382][T25416] block nbd5: Receive control failed (result -32) [ 3178.627904][T27510] block nbd5: shutting down sockets 00:52:58 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000bc0)) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r3, 0xab03) 00:52:58 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x6) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) 00:52:58 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:52:58 executing program 0: syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x20000) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) (async, rerun: 32) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$KDFONTOP_COPY(r2, 0x4b72, &(0x7f0000000140)={0x3, 0x1, 0xf, 0xb, 0x1c7, &(0x7f0000000680)}) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x18, 0x3, 0x123, &(0x7f0000000280)="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"}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async, rerun: 64) ioctl$NBD_SET_FLAGS(r1, 0x125f, 0x10000000) (async, rerun: 64) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0xed3}, 0x8) 00:52:58 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80081) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) [ 3178.646513][ T6119] block nbd4: Receive control failed (result -32) [ 3178.648605][T27514] block nbd4: shutting down sockets 00:52:58 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x6) (async, rerun: 32) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) (rerun: 32) 00:52:58 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:52:58 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) 00:52:58 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x101400) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, &(0x7f0000000080)) getsockopt$rose(r2, 0x104, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x5) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x100000000) 00:52:58 executing program 0: syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x20000) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$KDFONTOP_COPY(r2, 0x4b72, &(0x7f0000000140)={0x3, 0x1, 0xf, 0xb, 0x1c7, &(0x7f0000000680)}) (async) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x18, 0x3, 0x123, &(0x7f0000000280)="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"}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_FLAGS(r1, 0x125f, 0x10000000) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0xed3}, 0x8) 00:52:58 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) (async) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x101400) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, &(0x7f0000000080)) (async) getsockopt$rose(r2, 0x104, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x5) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x100000000) 00:52:58 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x6) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) [ 3179.506469][T25416] block nbd5: Receive control failed (result -32) [ 3179.511912][T27537] block nbd5: shutting down sockets 00:52:59 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000bc0)) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 00:52:59 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:52:59 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) (async) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x101400) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, &(0x7f0000000080)) getsockopt$rose(r2, 0x104, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x5) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x100000000) 00:52:59 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x462400, 0x0) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x186) read$hiddev(r1, &(0x7f0000000280)=""/239, 0xef) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000100)) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x64dbd28bc160d5c4) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) ioctl$NBD_SET_SIZE(r3, 0xab02, 0x80000000) ioctl$NBD_SET_FLAGS(r2, 0x125f, 0x0) socketpair(0x0, 0x6, 0x4, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$SIOCRSGCAUSE(r4, 0x89e0, &(0x7f0000000080)) 00:52:59 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) [ 3179.533276][ T6119] block nbd4: Receive control failed (result -32) [ 3179.535089][T27542] block nbd4: shutting down sockets 00:52:59 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:52:59 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:52:59 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x614402) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x60482) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) 00:52:59 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x1) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$NBD_DO_IT(r1, 0xab03) (async) [ 3179.609195][T27563] block nbd5: shutting down sockets 00:52:59 executing program 0: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x462400, 0x0) (async) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x462400, 0x0) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x186) read$hiddev(r1, &(0x7f0000000280)=""/239, 0xef) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000100)) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x64dbd28bc160d5c4) (async) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x64dbd28bc160d5c4) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) ioctl$NBD_SET_SIZE(r3, 0xab02, 0x80000000) ioctl$NBD_SET_FLAGS(r2, 0x125f, 0x0) socketpair(0x0, 0x6, 0x4, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$SIOCRSGCAUSE(r4, 0x89e0, &(0x7f0000000080)) 00:52:59 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:52:59 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x614402) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x60482) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x614402) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x60482) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800}) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) (async) 00:52:59 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000bc0)) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 00:52:59 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:52:59 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) (async) ioctl$NBD_DO_IT(r1, 0xab03) 00:52:59 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:52:59 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x614402) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x60482) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) 00:52:59 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) 00:52:59 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) 00:52:59 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) [ 3179.731670][T27592] block nbd5: shutting down sockets 00:52:59 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x462400, 0x0) (async) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x186) read$hiddev(r1, &(0x7f0000000280)=""/239, 0xef) (async) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000100)) (async) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x64dbd28bc160d5c4) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_SIZE(r3, 0xab02, 0x80000000) (async) ioctl$NBD_SET_FLAGS(r2, 0x125f, 0x0) (async) socketpair(0x0, 0x6, 0x4, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$SIOCRSGCAUSE(r4, 0x89e0, &(0x7f0000000080)) 00:52:59 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) 00:52:59 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x20}]}) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) socketpair(0x27, 0x800, 0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff01}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40804}, 0x8000) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x8) 00:52:59 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) (async) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) [ 3179.779259][T27602] block nbd3: shutting down sockets 00:52:59 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000bc0)) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 00:52:59 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) 00:52:59 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) 00:52:59 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_pts(r0, 0x40100) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f00000003c0)="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") r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0x125f, 0x100) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x20, 0x1, 0x6, 0x1, 0x244, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x48) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000380), 0x101000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000000c0)) 00:52:59 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) 00:52:59 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:52:59 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x20}]}) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) socketpair(0x27, 0x800, 0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff01}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40804}, 0x8000) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x8) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x20}]}) (async) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) (async) socketpair(0x27, 0x800, 0x1, &(0x7f00000000c0)) (async) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff01}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40804}, 0x8000) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x8) (async) [ 3179.849354][T27620] block nbd3: shutting down sockets 00:52:59 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) [ 3179.868527][T27619] block nbd5: shutting down sockets 00:52:59 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_pts(r0, 0x40100) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f00000003c0)="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") (async) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0x125f, 0x100) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x20, 0x1, 0x6, 0x1, 0x244, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x48) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000380), 0x101000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000000c0)) 00:52:59 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:52:59 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xa0001) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) 00:52:59 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) 00:52:59 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x20}]}) (async) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) (async) socketpair(0x27, 0x800, 0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff01}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40804}, 0x8000) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x8) [ 3179.929366][T27634] block nbd3: shutting down sockets 00:52:59 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:52:59 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_pts(r0, 0x40100) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f00000003c0)="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") r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0x125f, 0x100) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x20, 0x1, 0x6, 0x1, 0x244, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x48) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000380), 0x101000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000000c0)) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) syz_open_pts(r0, 0x40100) (async) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f00000003c0)="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") (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_FLAGS(r2, 0x125f, 0x100) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x20, 0x1, 0x6, 0x1, 0x244, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x48) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000380), 0x101000, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000000c0)) (async) 00:52:59 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:52:59 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xa0001) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xa0001) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) 00:52:59 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x682, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) read$hiddev(r2, &(0x7f0000000100)=""/189, 0xbd) ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f00000000c0)=0x55) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000080)) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) read$dsp(r1, &(0x7f0000000200)=""/201, 0xc9) 00:52:59 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:52:59 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xa0001) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) 00:53:00 executing program 0: ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0x125f, 0x0) 00:53:00 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:00 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x2b91) [ 3180.780486][ T6119] block nbd5: Receive control failed (result -32) [ 3180.787360][T27646] block nbd5: shutting down sockets 00:53:00 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:00 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) [ 3180.825332][T25416] block nbd3: Receive control failed (result -32) [ 3180.826489][T27662] block nbd3: shutting down sockets 00:53:00 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 00:53:00 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) (async, rerun: 64) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x2b91) 00:53:00 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x682, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) read$hiddev(r2, &(0x7f0000000100)=""/189, 0xbd) ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f00000000c0)=0x55) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000080)) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) read$dsp(r1, &(0x7f0000000200)=""/201, 0xc9) 00:53:00 executing program 0: ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0x125f, 0x0) 00:53:00 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:00 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:00 executing program 0: ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0x125f, 0x0) 00:53:00 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x2b91) 00:53:00 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xa4602) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_int(r1, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800, 0x0, 0xffffffffffffffff}) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'caif0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r4}, 0x48) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x10001) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0xcf58) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x2, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, 0x0) ioctl$NBD_DISCONNECT(r5, 0xab08) [ 3180.900830][T27688] block nbd3: shutting down sockets 00:53:00 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 00:53:00 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) [ 3180.971361][T27702] block nbd3: shutting down sockets [ 3181.642561][T25416] block nbd5: Receive control failed (result -32) [ 3181.643718][T27679] block nbd5: shutting down sockets 00:53:01 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000c00)) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:01 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x220000) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) 00:53:01 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xa4602) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_int(r1, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800, 0x0, 0xffffffffffffffff}) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'caif0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r4}, 0x48) (async) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x10001) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0xcf58) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x2, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, 0x0) (async) ioctl$NBD_DISCONNECT(r5, 0xab08) 00:53:01 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:01 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 00:53:01 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x682, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) read$hiddev(r2, &(0x7f0000000100)=""/189, 0xbd) ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f00000000c0)=0x55) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000080)) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) read$dsp(r1, &(0x7f0000000200)=""/201, 0xc9) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x682, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) read$hiddev(r2, &(0x7f0000000100)=""/189, 0xbd) (async) ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f00000000c0)=0x55) (async) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000080)) (async) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) (async) read$dsp(r1, &(0x7f0000000200)=""/201, 0xc9) (async) 00:53:01 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000c00)) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) [ 3181.690395][T27705] block nbd4: shutting down sockets 00:53:01 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xa4602) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_int(r1, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800, 0x0, 0xffffffffffffffff}) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'caif0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r4}, 0x48) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x10001) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0xcf58) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x2, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, 0x0) ioctl$NBD_DISCONNECT(r5, 0xab08) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xa4602) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) openat$cgroup_int(r1, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800}) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'caif0\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r4}, 0x48) (async) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x10001) (async) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0xcf58) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x2, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, 0x0) (async) ioctl$NBD_DISCONNECT(r5, 0xab08) (async) 00:53:01 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x220000) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x220000) (async) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) (async) 00:53:01 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:01 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000c00)) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) [ 3181.734580][T27709] block nbd3: shutting down sockets 00:53:01 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_CLEAR_QUE(r1, 0xab05) 00:53:01 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 00:53:01 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x220000) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x220000) (async) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) (async) [ 3181.770414][T27726] block nbd4: shutting down sockets 00:53:01 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:01 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_CLEAR_QUE(r1, 0xab05) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$NBD_CLEAR_QUE(r1, 0xab05) (async) 00:53:01 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:01 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) 00:53:01 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000080)) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r2 = socket(0x1e, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) ioctl$NBD_SET_FLAGS(r1, 0x125e, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x404c43, 0x0) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x4400) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) ioctl$NBD_DISCONNECT(r3, 0xab08) 00:53:01 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_CLEAR_QUE(r1, 0xab05) [ 3181.860375][T27739] block nbd3: shutting down sockets 00:53:01 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000080)) (async) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r2 = socket(0x1e, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) (async) ioctl$NBD_SET_FLAGS(r1, 0x125e, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x404c43, 0x0) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x4400) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) (async) ioctl$NBD_DISCONNECT(r3, 0xab08) 00:53:01 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) [ 3181.889819][T27743] block nbd4: shutting down sockets 00:53:01 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x80, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={'nr', 0x0}, 0x7, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400480) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x4af5) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000080)) 00:53:01 executing program 1: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000080)) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r2 = socket(0x1e, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) ioctl$NBD_SET_FLAGS(r1, 0x125e, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x404c43, 0x0) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x4400) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) ioctl$NBD_DISCONNECT(r3, 0xab08) 00:53:01 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:01 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000000c0)) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) [ 3181.979635][T27767] block nbd0: shutting down sockets [ 3182.641701][T25416] block nbd5: Receive control failed (result -32) [ 3182.642795][T27741] block nbd5: shutting down sockets 00:53:02 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) 00:53:02 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f00000010c0)) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 00:53:02 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0xffffffffffffffff) 00:53:02 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:02 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000000c0)) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000000c0)) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) (async) 00:53:02 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x10000) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x3) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) 00:53:02 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0xffffffffffffffff) 00:53:02 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:02 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x10000) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x3) (async) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x3) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) [ 3182.729217][T27778] block nbd3: shutting down sockets 00:53:02 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0xffffffffffffffff) (async) [ 3182.765745][T27779] block nbd0: shutting down sockets [ 3182.782103][ T6119] block nbd4: Receive control failed (result -32) [ 3182.782358][T27772] block nbd4: shutting down sockets 00:53:02 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:02 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x10000) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x3) (async) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) 00:53:02 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000200)=0x1) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x145000, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_DISCONNECT(r1, 0xab08) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f00000001c0)=0x6) ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000140)={0x3c, 0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000280)) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0]}) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x1) 00:53:02 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f00000010c0)) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x9) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)=0x7) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 00:53:02 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) (async) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000000c0)) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) 00:53:02 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 00:53:02 executing program 2: ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0x125d, 0x5) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 00:53:02 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) [ 3182.832221][T27807] binder: 27804 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 3182.832246][T27807] binder: 27804:27807 ioctl c018620c 20000140 returned -22 00:53:02 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000200)=0x1) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x145000, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$NBD_DISCONNECT(r1, 0xab08) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)) (async) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f00000001c0)=0x6) ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000140)={0x3c, 0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000280)) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0]}) (async) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x1) 00:53:02 executing program 2: ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0x125d, 0x5) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) [ 3182.859831][T27805] block nbd0: shutting down sockets [ 3182.870648][T27809] block nbd4: shutting down sockets 00:53:02 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x10103, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x12b) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000080)) [ 3182.881679][T27818] binder: 27816 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 3182.881700][T27818] binder: 27816:27818 ioctl c018620c 20000140 returned -22 [ 3182.883878][T27801] block nbd3: shutting down sockets 00:53:02 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000200)=0x1) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x145000, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_DISCONNECT(r1, 0xab08) (async) ioctl$NBD_DISCONNECT(r1, 0xab08) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder0\x00', 0x800, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f00000001c0)=0x6) (async) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f00000001c0)=0x6) ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000140)={0x3c, 0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000140)={0x3c, 0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000280)) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0]}) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x1) 00:53:02 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 00:53:02 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r1, 0x125e, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r2, 0xab02, 0xfffffffffffffffb) 00:53:02 executing program 2: ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0x125d, 0x5) (async, rerun: 64) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) (rerun: 64) [ 3182.935761][T27826] binder: 27823 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 3182.935791][T27826] binder: 27823:27826 ioctl c018620c 20000140 returned -22 00:53:02 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) (async) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x10103, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x12b) (async) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000080)) [ 3182.953370][T27825] binder: 27823 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 3182.953393][T27825] binder: 27823:27825 ioctl c018620c 20000140 returned -22 00:53:02 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r1, 0x125e, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r2, 0xab02, 0xfffffffffffffffb) 00:53:02 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8991, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x58, 0x8, 0x4, 0x28, @local, @mcast1, 0x700, 0x80, 0x40, 0x400}}) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r1, 0x125e, 0x0) [ 3182.989447][T27828] block nbd4: shutting down sockets 00:53:02 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x377f5aa73f5b26e3) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x3dd6) r2 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000540), 0x109640, 0xe1) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x10}}) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) r4 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x242841, 0x22) ioctl$KDFONTOP_COPY(r4, 0x4b72, &(0x7f0000000500)={0x3, 0x0, 0x13, 0x20, 0x5b, &(0x7f0000000100)}) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) [ 3183.678522][ T6119] block nbd5: Receive control failed (result -32) [ 3183.679274][T27814] block nbd5: shutting down sockets 00:53:03 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r1, 0x125e, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r2, 0xab02, 0xfffffffffffffffb) 00:53:03 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8991, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8991, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x58, 0x8, 0x4, 0x28, @local, @mcast1, 0x700, 0x80, 0x40, 0x400}}) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r1, 0x125e, 0x0) 00:53:03 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) (async) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x10103, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x12b) (async) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000080)) 00:53:03 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 00:53:03 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:03 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x377f5aa73f5b26e3) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x3dd6) (async) r2 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000540), 0x109640, 0xe1) (async) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x10}}) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) (async) r4 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x242841, 0x22) ioctl$KDFONTOP_COPY(r4, 0x4b72, &(0x7f0000000500)={0x3, 0x0, 0x13, 0x20, 0x5b, &(0x7f0000000100)}) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) [ 3183.757207][T27846] block nbd4: shutting down sockets 00:53:03 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r1, 0x125e, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0xfffffffffffffffb) 00:53:03 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x377f5aa73f5b26e3) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x3dd6) r2 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000540), 0x109640, 0xe1) (async) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x10}}) (async, rerun: 64) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) (rerun: 64) r4 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x242841, 0x22) ioctl$KDFONTOP_COPY(r4, 0x4b72, &(0x7f0000000500)={0x3, 0x0, 0x13, 0x20, 0x5b, &(0x7f0000000100)}) (async) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) 00:53:03 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:03 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8991, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x58, 0x8, 0x4, 0x28, @local, @mcast1, 0x700, 0x80, 0x40, 0x400}}) (async) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r1, 0x125e, 0x0) 00:53:03 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x90000) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) ioctl$NBD_PRINT_DEBUG(r0, 0xab06) 00:53:03 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x2) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) 00:53:03 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r1, 0x125e, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0xfffffffffffffffb) 00:53:03 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:03 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x90000) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) ioctl$NBD_PRINT_DEBUG(r0, 0xab06) 00:53:03 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x101) accept4$rose(r1, &(0x7f0000000040)=@short={0xb, @dev, @rose, 0x1, @null}, &(0x7f0000000080)=0x1c, 0x80000) 00:53:03 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x0) 00:53:03 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x6) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x4000) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x4c29) r2 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x18) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0xc0800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x0) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x3) 00:53:03 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r1, 0x125e, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0xfffffffffffffffb) 00:53:03 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x101) accept4$rose(r1, &(0x7f0000000040)=@short={0xb, @dev, @rose, 0x1, @null}, &(0x7f0000000080)=0x1c, 0x80000) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x101) (async) accept4$rose(r1, &(0x7f0000000040)=@short={0xb, @dev, @rose, 0x1, @null}, &(0x7f0000000080)=0x1c, 0x80000) (async) 00:53:03 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x90000) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) ioctl$NBD_PRINT_DEBUG(r0, 0xab06) 00:53:03 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x0) 00:53:03 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:03 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x6) (async) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x4000) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x4c29) (async) r2 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x18) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0xc0800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x0) (async) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x3) 00:53:03 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0xfffffffffffffffb) 00:53:03 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x101) (async) accept4$rose(r1, &(0x7f0000000040)=@short={0xb, @dev, @rose, 0x1, @null}, &(0x7f0000000080)=0x1c, 0x80000) 00:53:03 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x6) (async, rerun: 64) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x4000) (rerun: 64) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x4c29) (async, rerun: 32) r2 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x18) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0xc0800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x0) (async, rerun: 32) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x3) (rerun: 32) 00:53:03 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:04 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x0) 00:53:04 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f0000000080)=@bcast) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80182, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000040)) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x200000) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0xb6b) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)=@bcast) 00:53:04 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0xfffffffffffffffb) 00:53:04 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x20000) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) 00:53:04 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:04 executing program 1: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) 00:53:04 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 00:53:04 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:04 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:04 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x20000) (async) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) 00:53:04 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f0000000080)=@bcast) (async) ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f0000000080)=@bcast) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80182, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000040)) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x200000) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0xb6b) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)=@bcast) (async) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)=@bcast) 00:53:04 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:04 executing program 1: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) (async) 00:53:04 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0xfffffffffffffffb) 00:53:04 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:04 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:04 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x20000) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) 00:53:04 executing program 1: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x125e, 0x0) 00:53:04 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:04 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f0000000080)=@bcast) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80182, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000040)) (async) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x200000) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0xb6b) (async) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)=@bcast) 00:53:04 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:04 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:04 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:04 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040)=0x20d, 0x4) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) 00:53:04 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:04 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:04 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:04 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040)=0x20d, 0x4) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) 00:53:04 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:04 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x4) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000040)={0x401, 0x1f, 0x1}) 00:53:04 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:04 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:04 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040)=0x20d, 0x4) (async) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x0) 00:53:04 executing program 4: ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:04 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x4) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000040)={0x401, 0x1f, 0x1}) 00:53:04 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:04 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:04 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) (fail_nth: 1) 00:53:04 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x4) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000040)={0x401, 0x1f, 0x1}) (async) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000040)={0x401, 0x1f, 0x1}) 00:53:04 executing program 4: ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:04 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:04 executing program 3: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0xfffffffffffffffb) [ 3184.557437][T28004] FAULT_INJECTION: forcing a failure. [ 3184.557437][T28004] name failslab, interval 1, probability 0, space 0, times 0 00:53:04 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:04 executing program 4: ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:04 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x420000) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) 00:53:04 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) [ 3184.571517][T28004] CPU: 0 PID: 28004 Comm: syz-executor.2 Not tainted 6.7.0-rc8-syzkaller-g0802e17d9aca #0 [ 3184.573750][T28004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 3184.576009][T28004] Call trace: [ 3184.576702][T28004] dump_backtrace+0x1b8/0x1e4 [ 3184.577721][T28004] show_stack+0x2c/0x3c [ 3184.578621][T28004] dump_stack_lvl+0xd0/0x124 [ 3184.579665][T28004] dump_stack+0x1c/0x28 [ 3184.580585][T28004] should_fail_ex+0x3b0/0x50c [ 3184.581565][T28004] __should_failslab+0xc8/0x128 [ 3184.582602][T28004] should_failslab+0x10/0x28 [ 3184.583690][T28004] __kmem_cache_alloc_node+0x80/0x368 [ 3184.584930][T28004] __kmalloc+0xb8/0x1b8 [ 3184.585890][T28004] tomoyo_realpath_from_path+0xc8/0x4cc [ 3184.587134][T28004] tomoyo_path_number_perm+0x1ec/0x6a8 [ 3184.588379][T28004] tomoyo_file_ioctl+0x2c/0x3c [ 3184.589438][T28004] security_file_ioctl+0x80/0xbc [ 3184.590510][T28004] __arm64_sys_ioctl+0xa8/0x1c8 [ 3184.591575][T28004] invoke_syscall+0x98/0x2b8 [ 3184.592602][T28004] el0_svc_common+0x130/0x23c [ 3184.593673][T28004] do_el0_svc+0x48/0x58 00:53:04 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) [ 3184.594522][T28004] el0_svc+0x54/0x158 [ 3184.595392][T28004] el0t_64_sync_handler+0x84/0xfc [ 3184.596509][T28004] el0t_64_sync+0x190/0x194 [ 3184.600025][T28004] ERROR: Out of memory at tomoyo_realpath_from_path. 00:53:04 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x420000) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) 00:53:04 executing program 3: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0xfffffffffffffffb) [ 3185.339387][ T6119] block nbd2: Receive control failed (result -32) [ 3185.340031][T28004] block nbd2: shutting down sockets 00:53:05 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:05 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:05 executing program 1: ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0x301, 0x2) 00:53:05 executing program 3: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0xfffffffffffffffb) 00:53:05 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x420000) ioctl$NBD_SET_FLAGS(r0, 0x125f, 0x0) 00:53:05 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:05 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) (fail_nth: 1) 00:53:05 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) 00:53:05 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:05 executing program 1: ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0x301, 0x2) 00:53:05 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:05 executing program 1: ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0x301, 0x2) [ 3185.479537][T28045] FAULT_INJECTION: forcing a failure. [ 3185.479537][T28045] name failslab, interval 1, probability 0, space 0, times 0 [ 3185.482388][T28045] CPU: 0 PID: 28045 Comm: syz-executor.0 Not tainted 6.7.0-rc8-syzkaller-g0802e17d9aca #0 [ 3185.484518][T28045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 3185.486694][T28045] Call trace: [ 3185.487378][T28045] dump_backtrace+0x1b8/0x1e4 [ 3185.488455][T28045] show_stack+0x2c/0x3c [ 3185.489346][T28045] dump_stack_lvl+0xd0/0x124 [ 3185.489827][T28046] block nbd5: shutting down sockets [ 3185.490369][T28045] dump_stack+0x1c/0x28 [ 3185.492544][T28045] should_fail_ex+0x3b0/0x50c [ 3185.493628][T28045] __should_failslab+0xc8/0x128 [ 3185.494719][T28045] should_failslab+0x10/0x28 [ 3185.495749][T28045] __kmem_cache_alloc_node+0x80/0x368 [ 3185.496997][T28045] __kmalloc+0xb8/0x1b8 [ 3185.498045][T28045] tomoyo_realpath_from_path+0xc8/0x4cc [ 3185.499268][T28045] tomoyo_path_number_perm+0x1ec/0x6a8 [ 3185.500473][T28045] tomoyo_file_ioctl+0x2c/0x3c [ 3185.501550][T28045] security_file_ioctl+0x80/0xbc [ 3185.502614][T28045] __arm64_sys_ioctl+0xa8/0x1c8 [ 3185.503751][T28045] invoke_syscall+0x98/0x2b8 [ 3185.504749][T28045] el0_svc_common+0x130/0x23c [ 3185.505774][T28045] do_el0_svc+0x48/0x58 [ 3185.506750][T28045] el0_svc+0x54/0x158 [ 3185.507600][T28045] el0t_64_sync_handler+0x84/0xfc [ 3185.508659][T28045] el0t_64_sync+0x190/0x194 [ 3185.511207][T28045] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3186.203317][ T6119] block nbd2: Receive control failed (result -32) [ 3186.204077][T28033] block nbd2: shutting down sockets 00:53:06 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x2) 00:53:06 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:06 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) 00:53:06 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:06 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:06 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) [ 3186.259792][T28054] block nbd5: shutting down sockets [ 3186.267004][T25416] block nbd0: Receive control failed (result -32) [ 3186.271615][T28045] block nbd0: shutting down sockets 00:53:06 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:06 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:06 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) 00:53:06 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:06 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x8000) ioctl$NBD_DO_IT(r2, 0xab03) [ 3186.312067][T28060] block nbd2: shutting down sockets 00:53:06 executing program 4: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)=0x20) [ 3186.340398][T28064] block nbd5: shutting down sockets 00:53:06 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x10) 00:53:06 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (fail_nth: 1) 00:53:06 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0x301, 0x2) 00:53:06 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:06 executing program 4: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)=0x20) [ 3186.374056][T28080] FAULT_INJECTION: forcing a failure. [ 3186.374056][T28080] name failslab, interval 1, probability 0, space 0, times 0 [ 3186.376840][T28080] CPU: 1 PID: 28080 Comm: syz-executor.3 Not tainted 6.7.0-rc8-syzkaller-g0802e17d9aca #0 [ 3186.378944][T28080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 3186.381204][T28080] Call trace: [ 3186.381931][T28080] dump_backtrace+0x1b8/0x1e4 [ 3186.382999][T28080] show_stack+0x2c/0x3c [ 3186.383969][T28080] dump_stack_lvl+0xd0/0x124 [ 3186.385030][T28080] dump_stack+0x1c/0x28 [ 3186.385996][T28080] should_fail_ex+0x3b0/0x50c [ 3186.386960][T28080] __should_failslab+0xc8/0x128 [ 3186.387990][T28080] should_failslab+0x10/0x28 [ 3186.388947][T28080] __kmem_cache_alloc_node+0x80/0x368 [ 3186.390164][T28080] __kmalloc+0xb8/0x1b8 [ 3186.391114][T28080] tomoyo_realpath_from_path+0xc8/0x4cc [ 3186.392310][T28080] tomoyo_path_number_perm+0x1ec/0x6a8 [ 3186.393522][T28080] tomoyo_file_ioctl+0x2c/0x3c [ 3186.394564][T28080] security_file_ioctl+0x80/0xbc [ 3186.395637][T28080] __arm64_sys_ioctl+0xa8/0x1c8 [ 3186.396696][T28080] invoke_syscall+0x98/0x2b8 [ 3186.397660][T28080] el0_svc_common+0x130/0x23c [ 3186.398677][T28080] do_el0_svc+0x48/0x58 [ 3186.399555][T28080] el0_svc+0x54/0x158 [ 3186.400406][T28080] el0t_64_sync_handler+0x84/0xfc 00:53:06 executing program 4: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)=0x20) [ 3186.401485][T28080] el0t_64_sync+0x190/0x194 [ 3186.411209][T28080] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3186.429589][T28078] block nbd2: shutting down sockets [ 3187.139241][T25416] block nbd0: Receive control failed (result -32) [ 3187.144609][T28068] block nbd0: shutting down sockets 00:53:07 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x2) 00:53:07 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x301) 00:53:07 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (fail_nth: 2) 00:53:07 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0x301, 0x2) 00:53:07 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) 00:53:07 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0x301, 0x2) 00:53:07 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) [ 3187.202041][T28096] FAULT_INJECTION: forcing a failure. 00:53:07 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) [ 3187.202041][T28096] name failslab, interval 1, probability 0, space 0, times 0 [ 3187.207565][T28096] CPU: 0 PID: 28096 Comm: syz-executor.3 Not tainted 6.7.0-rc8-syzkaller-g0802e17d9aca #0 [ 3187.209647][T28089] block nbd2: shutting down sockets [ 3187.209759][T28096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 3187.213057][T28096] Call trace: [ 3187.213708][T28096] dump_backtrace+0x1b8/0x1e4 [ 3187.214685][T28096] show_stack+0x2c/0x3c [ 3187.215600][T28096] dump_stack_lvl+0xd0/0x124 [ 3187.216606][T28096] dump_stack+0x1c/0x28 [ 3187.217478][T28096] should_fail_ex+0x3b0/0x50c [ 3187.218502][T28096] __should_failslab+0xc8/0x128 [ 3187.219565][T28096] should_failslab+0x10/0x28 [ 3187.220580][T28096] __kmem_cache_alloc_node+0x80/0x368 [ 3187.221705][T28096] __kmalloc+0xb8/0x1b8 [ 3187.222649][T28096] tomoyo_encode+0x270/0x4b0 [ 3187.223730][T28096] tomoyo_realpath_from_path+0x478/0x4cc [ 3187.224949][T28096] tomoyo_path_number_perm+0x1ec/0x6a8 [ 3187.226225][T28096] tomoyo_file_ioctl+0x2c/0x3c [ 3187.227358][T28096] security_file_ioctl+0x80/0xbc [ 3187.228449][T28096] __arm64_sys_ioctl+0xa8/0x1c8 [ 3187.229465][T28096] invoke_syscall+0x98/0x2b8 [ 3187.230513][T28096] el0_svc_common+0x130/0x23c [ 3187.231527][T28096] do_el0_svc+0x48/0x58 [ 3187.232402][T28096] el0_svc+0x54/0x158 [ 3187.233271][T28096] el0t_64_sync_handler+0x84/0xfc [ 3187.234338][T28096] el0t_64_sync+0x190/0x194 [ 3187.236911][ T6119] block nbd5: Receive control failed (result -32) [ 3187.237248][T28082] block nbd5: shutting down sockets [ 3187.249950][T28097] block nbd0: shutting down sockets [ 3187.255839][T28096] ERROR: Out of memory at tomoyo_realpath_from_path. 00:53:07 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x125d) 00:53:07 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 00:53:07 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x10) 00:53:07 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) 00:53:07 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) 00:53:07 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (fail_nth: 3) [ 3187.319444][T28108] block nbd5: shutting down sockets [ 3187.319452][T28106] block nbd2: shutting down sockets 00:53:07 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 00:53:07 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x125e) 00:53:07 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) [ 3187.343238][T28105] block nbd0: shutting down sockets 00:53:07 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) [ 3187.353549][T28116] FAULT_INJECTION: forcing a failure. [ 3187.353549][T28116] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:53:07 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x301) [ 3187.368376][T28116] CPU: 1 PID: 28116 Comm: syz-executor.3 Not tainted 6.7.0-rc8-syzkaller-g0802e17d9aca #0 [ 3187.370652][T28116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 3187.372819][T28116] Call trace: [ 3187.373586][T28116] dump_backtrace+0x1b8/0x1e4 [ 3187.374628][T28116] show_stack+0x2c/0x3c [ 3187.375497][T28116] dump_stack_lvl+0xd0/0x124 [ 3187.376487][T28116] dump_stack+0x1c/0x28 [ 3187.377365][T28116] should_fail_ex+0x3b0/0x50c [ 3187.378390][T28116] should_fail+0x14/0x24 [ 3187.379337][T28116] should_fail_usercopy+0x20/0x30 [ 3187.380473][T28116] simple_read_from_buffer+0xd4/0x248 [ 3187.381679][T28116] proc_fail_nth_read+0x134/0x1a0 [ 3187.382733][T28116] vfs_read+0x284/0x8a4 [ 3187.383625][T28116] ksys_read+0x15c/0x26c [ 3187.384557][T28116] __arm64_sys_read+0x7c/0x90 [ 3187.385590][T28116] invoke_syscall+0x98/0x2b8 [ 3187.386652][T28116] el0_svc_common+0x130/0x23c [ 3187.387740][T28116] do_el0_svc+0x48/0x58 [ 3187.388667][T28116] el0_svc+0x54/0x158 [ 3187.389487][T28116] el0t_64_sync_handler+0x84/0xfc [ 3187.390645][T28116] el0t_64_sync+0x190/0x194 00:53:07 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) 00:53:07 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (fail_nth: 1) [ 3187.410199][T28118] block nbd5: shutting down sockets 00:53:07 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 00:53:07 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:07 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) [ 3187.439942][T28117] block nbd2: shutting down sockets 00:53:07 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x125f) [ 3187.456821][T28131] FAULT_INJECTION: forcing a failure. [ 3187.456821][T28131] name failslab, interval 1, probability 0, space 0, times 0 [ 3187.462997][T28131] CPU: 0 PID: 28131 Comm: syz-executor.1 Not tainted 6.7.0-rc8-syzkaller-g0802e17d9aca #0 [ 3187.465023][T28131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 3187.467122][T28131] Call trace: [ 3187.467821][T28131] dump_backtrace+0x1b8/0x1e4 [ 3187.468863][T28131] show_stack+0x2c/0x3c [ 3187.469744][T28131] dump_stack_lvl+0xd0/0x124 [ 3187.470670][T28131] dump_stack+0x1c/0x28 [ 3187.471488][T28131] should_fail_ex+0x3b0/0x50c [ 3187.472536][T28131] __should_failslab+0xc8/0x128 [ 3187.473573][T28131] should_failslab+0x10/0x28 [ 3187.474489][T28131] __kmem_cache_alloc_node+0x80/0x368 [ 3187.475579][T28131] __kmalloc+0xb8/0x1b8 [ 3187.476465][T28131] tomoyo_realpath_from_path+0xc8/0x4cc [ 3187.477588][T28131] tomoyo_path_number_perm+0x1ec/0x6a8 [ 3187.478768][T28131] tomoyo_file_ioctl+0x2c/0x3c [ 3187.479772][T28131] security_file_ioctl+0x80/0xbc [ 3187.480816][T28131] __arm64_sys_ioctl+0xa8/0x1c8 [ 3187.481810][T28131] invoke_syscall+0x98/0x2b8 [ 3187.482790][T28131] el0_svc_common+0x130/0x23c [ 3187.483833][T28131] do_el0_svc+0x48/0x58 [ 3187.484777][T28131] el0_svc+0x54/0x158 [ 3187.485555][T28131] el0t_64_sync_handler+0x84/0xfc [ 3187.486623][T28131] el0t_64_sync+0x190/0x194 [ 3187.494891][T28131] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3187.502631][T28124] block nbd0: shutting down sockets 00:53:07 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x2, 0xfffffffffffffffb) 00:53:07 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (fail_nth: 1) 00:53:07 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x125d) [ 3187.529928][T28133] block nbd5: shutting down sockets [ 3187.534436][T28142] FAULT_INJECTION: forcing a failure. [ 3187.534436][T28142] name failslab, interval 1, probability 0, space 0, times 0 00:53:07 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x10, 0xfffffffffffffffb) [ 3187.537419][T28142] CPU: 1 PID: 28142 Comm: syz-executor.4 Not tainted 6.7.0-rc8-syzkaller-g0802e17d9aca #0 [ 3187.539669][T28142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 3187.541939][T28142] Call trace: [ 3187.542669][T28142] dump_backtrace+0x1b8/0x1e4 [ 3187.543757][T28142] show_stack+0x2c/0x3c [ 3187.544620][T28142] dump_stack_lvl+0xd0/0x124 [ 3187.545674][T28142] dump_stack+0x1c/0x28 [ 3187.546646][T28142] should_fail_ex+0x3b0/0x50c [ 3187.547702][T28142] __should_failslab+0xc8/0x128 [ 3187.548792][T28142] should_failslab+0x10/0x28 [ 3187.549824][T28142] __kmem_cache_alloc_node+0x80/0x368 [ 3187.550991][T28142] __kmalloc+0xb8/0x1b8 [ 3187.551892][T28142] tomoyo_realpath_from_path+0xc8/0x4cc [ 3187.553143][T28142] tomoyo_path_number_perm+0x1ec/0x6a8 [ 3187.554384][T28142] tomoyo_file_ioctl+0x2c/0x3c [ 3187.555388][T28142] security_file_ioctl+0x80/0xbc [ 3187.556505][T28142] __arm64_sys_ioctl+0xa8/0x1c8 [ 3187.557544][T28142] invoke_syscall+0x98/0x2b8 [ 3187.558500][T28142] el0_svc_common+0x130/0x23c [ 3187.559446][T28142] do_el0_svc+0x48/0x58 [ 3187.560347][T28142] el0_svc+0x54/0x158 [ 3187.561261][T28142] el0t_64_sync_handler+0x84/0xfc [ 3187.562272][T28142] el0t_64_sync+0x190/0x194 [ 3187.570232][T28130] block nbd2: shutting down sockets [ 3187.574710][T28142] ERROR: Out of memory at tomoyo_realpath_from_path. 00:53:07 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x301, 0xfffffffffffffffb) 00:53:07 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x2, 0xfffffffffffffffb) 00:53:07 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x1260) [ 3187.620068][T28143] block nbd0: shutting down sockets 00:53:07 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (fail_nth: 2) 00:53:07 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x125e) 00:53:07 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (fail_nth: 2) 00:53:07 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x125d, 0xfffffffffffffffb) 00:53:07 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x2, 0xfffffffffffffffb) [ 3187.659841][T28151] block nbd2: shutting down sockets 00:53:07 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x1261) [ 3187.681870][T28159] FAULT_INJECTION: forcing a failure. [ 3187.681870][T28159] name failslab, interval 1, probability 0, space 0, times 0 [ 3187.687051][T28159] CPU: 0 PID: 28159 Comm: syz-executor.4 Not tainted 6.7.0-rc8-syzkaller-g0802e17d9aca #0 [ 3187.689154][T28159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 3187.691373][T28159] Call trace: [ 3187.692006][T28162] FAULT_INJECTION: forcing a failure. [ 3187.692006][T28162] name failslab, interval 1, probability 0, space 0, times 0 [ 3187.692033][T28159] dump_backtrace+0x1b8/0x1e4 [ 3187.695832][T28159] show_stack+0x2c/0x3c [ 3187.696721][T28159] dump_stack_lvl+0xd0/0x124 [ 3187.697696][T28159] dump_stack+0x1c/0x28 [ 3187.698622][T28159] should_fail_ex+0x3b0/0x50c [ 3187.699638][T28159] __should_failslab+0xc8/0x128 [ 3187.700715][T28159] should_failslab+0x10/0x28 [ 3187.701697][T28159] __kmem_cache_alloc_node+0x80/0x368 [ 3187.702918][T28159] __kmalloc+0xb8/0x1b8 [ 3187.703801][T28159] tomoyo_encode+0x270/0x4b0 [ 3187.704825][T28159] tomoyo_realpath_from_path+0x478/0x4cc [ 3187.706062][T28159] tomoyo_path_number_perm+0x1ec/0x6a8 [ 3187.707250][T28159] tomoyo_file_ioctl+0x2c/0x3c [ 3187.708275][T28159] security_file_ioctl+0x80/0xbc [ 3187.709394][T28159] __arm64_sys_ioctl+0xa8/0x1c8 [ 3187.710375][T28159] invoke_syscall+0x98/0x2b8 [ 3187.711378][T28159] el0_svc_common+0x130/0x23c [ 3187.712434][T28159] do_el0_svc+0x48/0x58 [ 3187.713285][T28159] el0_svc+0x54/0x158 [ 3187.714117][T28159] el0t_64_sync_handler+0x84/0xfc 00:53:07 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x2, 0xfffffffffffffffb) [ 3187.715145][T28159] el0t_64_sync+0x190/0x194 [ 3187.716158][T28162] CPU: 1 PID: 28162 Comm: syz-executor.1 Not tainted 6.7.0-rc8-syzkaller-g0802e17d9aca #0 [ 3187.718310][T28162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 3187.720520][T28162] Call trace: [ 3187.721243][T28162] dump_backtrace+0x1b8/0x1e4 [ 3187.722263][T28162] show_stack+0x2c/0x3c [ 3187.723170][T28162] dump_stack_lvl+0xd0/0x124 [ 3187.723777][T28159] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3187.724195][T28162] dump_stack+0x1c/0x28 [ 3187.726531][T28162] should_fail_ex+0x3b0/0x50c [ 3187.727557][T28162] __should_failslab+0xc8/0x128 [ 3187.728619][T28162] should_failslab+0x10/0x28 [ 3187.729617][T28162] __kmem_cache_alloc_node+0x80/0x368 [ 3187.730800][T28162] __kmalloc+0xb8/0x1b8 [ 3187.731639][T28162] tomoyo_encode+0x270/0x4b0 [ 3187.732589][T28162] tomoyo_realpath_from_path+0x478/0x4cc [ 3187.733824][T28162] tomoyo_path_number_perm+0x1ec/0x6a8 [ 3187.735046][T28162] tomoyo_file_ioctl+0x2c/0x3c [ 3187.736058][T28162] security_file_ioctl+0x80/0xbc [ 3187.737071][T28162] __arm64_sys_ioctl+0xa8/0x1c8 [ 3187.738122][T28162] invoke_syscall+0x98/0x2b8 [ 3187.739152][T28162] el0_svc_common+0x130/0x23c [ 3187.740191][T28162] do_el0_svc+0x48/0x58 [ 3187.741177][T28162] el0_svc+0x54/0x158 00:53:07 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (fail_nth: 3) [ 3187.742056][T28162] el0t_64_sync_handler+0x84/0xfc [ 3187.743175][T28162] el0t_64_sync+0x190/0x194 00:53:07 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x125e, 0xfffffffffffffffb) [ 3187.763905][T28162] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3187.776259][T28154] block nbd0: shutting down sockets 00:53:07 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x125f) [ 3187.785385][T28170] FAULT_INJECTION: forcing a failure. [ 3187.785385][T28170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3187.788300][T28170] CPU: 1 PID: 28170 Comm: syz-executor.4 Not tainted 6.7.0-rc8-syzkaller-g0802e17d9aca #0 [ 3187.789948][T28164] block nbd2: shutting down sockets [ 3187.790503][T28170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 3187.793815][T28170] Call trace: [ 3187.794471][T28170] dump_backtrace+0x1b8/0x1e4 [ 3187.795420][T28170] show_stack+0x2c/0x3c [ 3187.796338][T28170] dump_stack_lvl+0xd0/0x124 [ 3187.797330][T28170] dump_stack+0x1c/0x28 [ 3187.798203][T28170] should_fail_ex+0x3b0/0x50c [ 3187.799207][T28170] should_fail+0x14/0x24 [ 3187.800202][T28170] should_fail_usercopy+0x20/0x30 [ 3187.801283][T28170] simple_read_from_buffer+0xd4/0x248 [ 3187.802401][T28170] proc_fail_nth_read+0x134/0x1a0 [ 3187.803520][T28170] vfs_read+0x284/0x8a4 [ 3187.804407][T28170] ksys_read+0x15c/0x26c [ 3187.805306][T28170] __arm64_sys_read+0x7c/0x90 [ 3187.806342][T28170] invoke_syscall+0x98/0x2b8 00:53:07 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x1262) [ 3187.807376][T28170] el0_svc_common+0x130/0x23c [ 3187.808550][T28170] do_el0_svc+0x48/0x58 [ 3187.809474][T28170] el0_svc+0x54/0x158 [ 3187.810357][T28170] el0t_64_sync_handler+0x84/0xfc [ 3187.811404][T28170] el0t_64_sync+0x190/0x194 00:53:07 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x125f, 0xfffffffffffffffb) 00:53:07 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:07 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (fail_nth: 3) 00:53:07 executing program 5: ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x2, 0xfffffffffffffffb) [ 3187.859516][T28172] block nbd0: shutting down sockets 00:53:07 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x2, &(0x7f0000000040)=0x20) [ 3187.868235][T28182] FAULT_INJECTION: forcing a failure. [ 3187.868235][T28182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3187.871306][T28182] CPU: 1 PID: 28182 Comm: syz-executor.1 Not tainted 6.7.0-rc8-syzkaller-g0802e17d9aca #0 [ 3187.873448][T28182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 3187.875637][T28182] Call trace: [ 3187.876376][T28182] dump_backtrace+0x1b8/0x1e4 [ 3187.877411][T28182] show_stack+0x2c/0x3c 00:53:07 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x1260, 0xfffffffffffffffb) [ 3187.878262][T28182] dump_stack_lvl+0xd0/0x124 [ 3187.879234][T28182] dump_stack+0x1c/0x28 [ 3187.880184][T28182] should_fail_ex+0x3b0/0x50c [ 3187.881208][T28182] should_fail+0x14/0x24 [ 3187.882162][T28182] should_fail_usercopy+0x20/0x30 [ 3187.883287][T28182] simple_read_from_buffer+0xd4/0x248 [ 3187.884414][T28182] proc_fail_nth_read+0x134/0x1a0 [ 3187.885514][T28182] vfs_read+0x284/0x8a4 [ 3187.886460][T28182] ksys_read+0x15c/0x26c [ 3187.887383][T28182] __arm64_sys_read+0x7c/0x90 [ 3187.888445][T28182] invoke_syscall+0x98/0x2b8 [ 3187.889487][T28182] el0_svc_common+0x130/0x23c [ 3187.890503][T28182] do_el0_svc+0x48/0x58 [ 3187.891425][T28182] el0_svc+0x54/0x158 [ 3187.892290][T28182] el0t_64_sync_handler+0x84/0xfc [ 3187.893367][T28182] el0t_64_sync+0x190/0x194 [ 3187.895159][T28176] block nbd2: shutting down sockets 00:53:07 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x1260) 00:53:07 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x1263) 00:53:07 executing program 5: ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x2, 0xfffffffffffffffb) 00:53:07 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) [ 3187.949762][T28186] block nbd0: shutting down sockets 00:53:07 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x1261) 00:53:07 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x1261, 0xfffffffffffffffb) 00:53:07 executing program 5: ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x2, 0xfffffffffffffffb) 00:53:07 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x10, &(0x7f0000000040)=0x20) [ 3187.982241][T28189] block nbd2: shutting down sockets 00:53:07 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x2, 0x2) 00:53:07 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x1264) [ 3188.019886][T28196] block nbd0: shutting down sockets 00:53:08 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x10, 0x2) 00:53:08 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x1262) 00:53:08 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x2, 0xfffffffffffffffb) [ 3188.039728][T28203] block nbd2: shutting down sockets 00:53:08 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x1262, 0xfffffffffffffffb) 00:53:08 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x5000, &(0x7f0000000040)=0x20) 00:53:08 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x1265) 00:53:08 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x2, 0xfffffffffffffffb) 00:53:08 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x303, 0x2) [ 3188.109393][T28208] block nbd0: shutting down sockets 00:53:08 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x1263, 0xfffffffffffffffb) 00:53:08 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x2, 0xfffffffffffffffb) 00:53:08 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x5001, &(0x7f0000000040)=0x20) [ 3188.129605][T28215] block nbd2: shutting down sockets 00:53:08 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x1263) 00:53:08 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x304, 0x2) 00:53:08 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x1267) 00:53:08 executing program 5: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x2, 0xfffffffffffffffb) 00:53:08 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x1264, 0xfffffffffffffffb) 00:53:08 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x5008, &(0x7f0000000040)=0x20) 00:53:08 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x305, 0x2) [ 3188.219306][T28232] block nbd2: shutting down sockets [ 3188.221319][T28227] block nbd0: shutting down sockets 00:53:08 executing program 5: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x2, 0xfffffffffffffffb) 00:53:08 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x1268) 00:53:08 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x1265, 0xfffffffffffffffb) 00:53:08 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x500e, &(0x7f0000000040)=0x20) 00:53:08 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x1264) 00:53:08 executing program 5: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x2, 0xfffffffffffffffb) 00:53:08 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x308, 0x2) 00:53:08 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x2, 0x0) [ 3188.309607][T28246] block nbd2: shutting down sockets [ 3188.311525][T28247] block nbd0: shutting down sockets 00:53:08 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x1269) 00:53:08 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x5015, &(0x7f0000000040)=0x20) 00:53:08 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x1265) 00:53:08 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x318, 0x2) 00:53:08 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x1267, 0xfffffffffffffffb) 00:53:08 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x2, 0x0) [ 3188.380609][T28258] block nbd2: shutting down sockets 00:53:08 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x5016, &(0x7f0000000040)=0x20) 00:53:08 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x1274) [ 3188.419623][T28262] block nbd0: shutting down sockets 00:53:08 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x1260, 0x2) 00:53:08 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x541b, &(0x7f0000000040)=0x20) 00:53:08 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x1267) 00:53:08 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x1268, 0xfffffffffffffffb) 00:53:08 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x2, 0x0) [ 3188.459997][T28272] block nbd2: shutting down sockets 00:53:08 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x1275) 00:53:08 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x1263, 0x2) 00:53:08 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x5421, &(0x7f0000000040)=0x20) [ 3188.499404][T28278] block nbd0: shutting down sockets 00:53:08 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x1269, 0xfffffffffffffffb) 00:53:08 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x1268, 0xfffffffffffffffb) 00:53:08 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x1268) 00:53:08 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x1265, 0x2) [ 3188.550347][T28286] block nbd2: shutting down sockets 00:53:08 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x5450, &(0x7f0000000040)=0x20) 00:53:08 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x1274, 0xfffffffffffffffb) 00:53:08 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x1276) 00:53:08 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x1268, 0xfffffffffffffffb) 00:53:08 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x5451, &(0x7f0000000040)=0x20) [ 3188.610157][T28296] block nbd0: shutting down sockets 00:53:08 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x1269, 0x2) 00:53:08 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x1268, 0xfffffffffffffffb) 00:53:08 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x1269) 00:53:08 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x1275, 0xfffffffffffffffb) 00:53:08 executing program 5: ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x1268, 0xfffffffffffffffb) [ 3188.659834][T28302] block nbd2: shutting down sockets 00:53:08 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x541b, 0x2) 00:53:08 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x1277) [ 3188.679356][T28312] block nbd0: shutting down sockets 00:53:08 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x5452, &(0x7f0000000040)=0x20) 00:53:08 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x1274) 00:53:08 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x1276, 0xfffffffffffffffb) 00:53:08 executing program 5: ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x1268, 0xfffffffffffffffb) 00:53:08 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x5421, 0x2) 00:53:08 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x1277, 0xfffffffffffffffb) [ 3188.759505][T28318] block nbd2: shutting down sockets 00:53:08 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x5450, 0x2) 00:53:08 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x1278) [ 3188.779343][T28327] block nbd0: shutting down sockets 00:53:08 executing program 5: ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x1268, 0xfffffffffffffffb) 00:53:08 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x1275) 00:53:08 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x5460, &(0x7f0000000040)=0x20) 00:53:08 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x1278, 0xfffffffffffffffb) 00:53:08 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x1268, 0xfffffffffffffffb) [ 3188.847345][T28336] block nbd2: shutting down sockets 00:53:08 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x1279, 0xfffffffffffffffb) 00:53:08 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x1279) 00:53:08 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x8933, &(0x7f0000000040)=0x20) 00:53:08 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x5451, 0x2) [ 3188.879585][T28342] block nbd0: shutting down sockets 00:53:08 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x1268, 0xfffffffffffffffb) 00:53:08 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x1276) 00:53:08 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x127a, 0xfffffffffffffffb) 00:53:08 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x5452, 0x2) 00:53:08 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x1268, 0xfffffffffffffffb) [ 3188.939497][T28352] block nbd2: shutting down sockets 00:53:08 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x5460, 0x2) 00:53:08 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x127b, 0xfffffffffffffffb) [ 3188.960267][T28357] block nbd0: shutting down sockets 00:53:08 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x127a) 00:53:08 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x400448c9, &(0x7f0000000040)=0x20) 00:53:08 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x1277) 00:53:08 executing program 5: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x1268, 0xfffffffffffffffb) 00:53:08 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x127c, 0xfffffffffffffffb) 00:53:08 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x8933, 0x2) [ 3189.030077][T28371] block nbd2: shutting down sockets 00:53:09 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x127d, 0xfffffffffffffffb) 00:53:09 executing program 5: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x1268, 0xfffffffffffffffb) 00:53:09 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x127b) 00:53:09 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x400448c9, 0x2) [ 3189.060069][T28375] block nbd0: shutting down sockets 00:53:09 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x400448dd, &(0x7f0000000040)=0x20) 00:53:09 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x1278) 00:53:09 executing program 5: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x1268, 0xfffffffffffffffb) 00:53:09 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x400448dd, 0x2) [ 3189.111728][T28384] block nbd2: shutting down sockets 00:53:09 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x127e, 0xfffffffffffffffb) 00:53:09 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x127c) [ 3189.139574][T28392] block nbd0: shutting down sockets 00:53:09 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x40045010, &(0x7f0000000040)=0x20) 00:53:09 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x1268, 0x0) 00:53:09 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x1279) 00:53:09 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x400454ca, 0x2) 00:53:09 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x127f, 0xfffffffffffffffb) [ 3189.199954][T28398] block nbd2: shutting down sockets 00:53:09 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x40045017, &(0x7f0000000040)=0x20) 00:53:09 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x1268, 0x0) 00:53:09 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x127d) 00:53:09 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x541b, 0xfffffffffffffffb) 00:53:09 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x40049409, 0x2) [ 3189.268402][T28406] block nbd0: shutting down sockets 00:53:09 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x400454ca, &(0x7f0000000040)=0x20) 00:53:09 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x5421, 0xfffffffffffffffb) 00:53:09 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x127a) [ 3189.299724][T28417] block nbd2: shutting down sockets 00:53:09 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x127e) 00:53:09 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x40049409, &(0x7f0000000040)=0x20) 00:53:09 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x1268, 0x0) [ 3189.339703][T28427] block nbd0: shutting down sockets 00:53:09 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x5450, 0xfffffffffffffffb) 00:53:09 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x40081271, 0x2) 00:53:09 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x40086602, &(0x7f0000000040)=0x20) 00:53:09 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x5421, 0xfffffffffffffffb) 00:53:09 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x127b) 00:53:09 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x5451, 0xfffffffffffffffb) 00:53:09 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x40186366, &(0x7f0000000040)=0x20) 00:53:09 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x5421, 0xfffffffffffffffb) 00:53:09 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x40086602, 0x2) [ 3189.454000][T28432] block nbd2: shutting down sockets 00:53:09 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x5452, 0xfffffffffffffffb) 00:53:09 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x127f) 00:53:09 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x5421, 0xfffffffffffffffb) [ 3189.472325][T28441] block nbd0: shutting down sockets 00:53:09 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x401c5820, &(0x7f0000000040)=0x20) 00:53:09 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x40186366, 0x2) 00:53:09 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x127c) 00:53:09 executing program 5: ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x5421, 0xfffffffffffffffb) 00:53:09 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x401c5820, 0x2) [ 3189.540704][T28457] block nbd2: shutting down sockets 00:53:09 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x4020940d, &(0x7f0000000040)=0x20) 00:53:09 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x5460, 0xfffffffffffffffb) 00:53:09 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x541b) 00:53:09 executing program 5: ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x5421, 0xfffffffffffffffb) 00:53:09 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x4020940d, 0x2) [ 3189.584709][T28462] block nbd0: shutting down sockets 00:53:09 executing program 5: ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x5421, 0xfffffffffffffffb) 00:53:09 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x127d) 00:53:09 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x80044d76, &(0x7f0000000040)=0x20) 00:53:09 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x5421, 0xfffffffffffffffb) 00:53:09 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x8933, 0xfffffffffffffffb) [ 3189.650390][T28477] block nbd2: shutting down sockets 00:53:09 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x80081270, 0x2) [ 3189.670894][T28482] block nbd0: shutting down sockets 00:53:09 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x80044df9, &(0x7f0000000040)=0x20) 00:53:09 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x5421, 0xfffffffffffffffb) 00:53:09 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x80081272, 0x2) 00:53:09 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x5421) 00:53:09 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab00, 0xfffffffffffffffb) 00:53:09 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x127e) 00:53:09 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x80045002, &(0x7f0000000040)=0x20) 00:53:09 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x80086301, 0x2) [ 3189.740478][T28495] block nbd2: shutting down sockets 00:53:09 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x5421, 0xfffffffffffffffb) 00:53:09 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab01, 0xfffffffffffffffb) 00:53:09 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x5450) [ 3189.773201][T28501] block nbd0: shutting down sockets 00:53:09 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x80045005, &(0x7f0000000040)=0x20) 00:53:09 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab03, 0xfffffffffffffffb) 00:53:09 executing program 5: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x5421, 0xfffffffffffffffb) 00:53:09 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x127f) 00:53:09 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x80086601, 0x2) 00:53:09 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab04, 0xfffffffffffffffb) 00:53:09 executing program 5: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x5421, 0xfffffffffffffffb) 00:53:09 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x80045006, &(0x7f0000000040)=0x20) [ 3189.859681][T28512] block nbd2: shutting down sockets [ 3189.869765][T28521] block nbd0: shutting down sockets 00:53:09 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x5451) 00:53:09 executing program 5: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x5421, 0xfffffffffffffffb) 00:53:09 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x801c581f, 0x2) 00:53:09 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x80045007, &(0x7f0000000040)=0x20) 00:53:09 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x541b) 00:53:09 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab05, 0xfffffffffffffffb) 00:53:09 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x5421, 0x0) 00:53:09 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab06, 0xfffffffffffffffb) [ 3189.969467][T28535] block nbd0: shutting down sockets 00:53:09 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x8004500b, &(0x7f0000000040)=0x20) 00:53:09 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xc0045878, 0x2) [ 3189.978530][T28532] block nbd2: shutting down sockets 00:53:09 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x5421) 00:53:09 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab07, 0xfffffffffffffffb) 00:53:09 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x5452) 00:53:09 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x5421, 0x0) 00:53:10 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xc0045878, 0x2) 00:53:10 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x8004500f, &(0x7f0000000040)=0x20) 00:53:10 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab08, 0xfffffffffffffffb) 00:53:10 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x5421, 0x0) [ 3190.060068][T28553] block nbd0: shutting down sockets [ 3190.068814][T28565] block nbd3: NBD_DISCONNECT 00:53:10 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xc0189436, 0x2) [ 3190.080040][T28558] block nbd2: shutting down sockets 00:53:10 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x5450) 00:53:10 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab09, 0xfffffffffffffffb) 00:53:10 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x5460) 00:53:10 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x80045010, &(0x7f0000000040)=0x20) 00:53:10 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab04, 0xfffffffffffffffb) 00:53:10 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xc020660b, 0x2) [ 3190.149831][T28570] block nbd0: shutting down sockets 00:53:10 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x5451) [ 3190.169428][T28574] block nbd2: shutting down sockets 00:53:10 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab0a, 0xfffffffffffffffb) 00:53:10 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x5452, 0xfffffffffffffffb) 00:53:10 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x80045017, &(0x7f0000000040)=0x20) 00:53:10 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xc0481273, 0x2) 00:53:10 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x8933) 00:53:10 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x80086301, &(0x7f0000000040)=0x20) 00:53:10 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab18, 0xfffffffffffffffb) [ 3190.249935][T28583] block nbd0: shutting down sockets 00:53:10 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x5452, 0xfffffffffffffffb) 00:53:10 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x400448c9, 0xfffffffffffffffb) 00:53:10 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x5452) 00:53:10 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x3) 00:53:10 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x80086601, &(0x7f0000000040)=0x20) [ 3190.319729][T28594] block nbd2: shutting down sockets 00:53:10 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x5452, 0xfffffffffffffffb) 00:53:10 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab00) 00:53:10 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x400448dd, 0xfffffffffffffffb) 00:53:10 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x4) 00:53:10 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x800c5011, &(0x7f0000000040)=0x20) [ 3190.362942][T28602] block nbd0: shutting down sockets 00:53:10 executing program 5: ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x5452, 0xfffffffffffffffb) 00:53:10 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x5460) 00:53:10 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x400454ca, 0xfffffffffffffffb) [ 3190.409456][T28611] block nbd2: shutting down sockets 00:53:10 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x7) 00:53:10 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab01) 00:53:10 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x40049409, 0xfffffffffffffffb) 00:53:10 executing program 5: ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x5452, 0xfffffffffffffffb) 00:53:10 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x800c5012, &(0x7f0000000040)=0x20) [ 3190.459431][T28621] block nbd0: shutting down sockets 00:53:10 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x18) 00:53:10 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x8933) 00:53:10 executing program 5: ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x5452, 0xfffffffffffffffb) [ 3190.491039][T28629] block nbd2: shutting down sockets 00:53:10 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x40081271, 0xfffffffffffffffb) 00:53:10 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab02) 00:53:10 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x8010500c, &(0x7f0000000040)=0x20) 00:53:10 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x40086602, 0xfffffffffffffffb) [ 3190.549606][T28635] block nbd0: shutting down sockets 00:53:10 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x8010500d, &(0x7f0000000040)=0x20) 00:53:10 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x5452, 0xfffffffffffffffb) 00:53:10 executing program 1: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"a7ff3af53ce92a3711a53b9c4fd15b07", 0x0, 0x0, {0x8000000000000000, 0x7ff}, {0x4, 0x44}, 0x3, [0x7, 0x1, 0x2, 0x4, 0x9, 0x9, 0x3, 0x800, 0x8000000000000001, 0x100000000, 0x5, 0x3, 0xa7bf, 0x3, 0x4, 0x9e]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000003c0)={"1751a155b9a8c857129b7921ca44a2fe", r0, 0x0, {0x8001, 0x8}, {0x8, 0x8}, 0x34, [0x1f, 0x951, 0x8, 0x43c, 0x0, 0xc745, 0x80, 0x8000000000000000, 0x7, 0x80, 0x4, 0x9, 0x22a, 0xded, 0x4, 0x8001]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r2, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80040) accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @remote, @rose, 0x0, [@null, @rose, @default, @null, @netrom, @null]}, &(0x7f0000000240)=0x40, 0x80000) ioctl$NBD_SET_FLAGS(r4, 0x301, 0x2) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000280)) r7 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x7) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, &(0x7f00000005c0)=0xffffffff) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6bdff5b7e586d22353233cb17103620840", @ANYRES64=r7], 0xc2, 0x0, &(0x7f00000000c0)="58a48ea4f4ab1f7b6e8d0020c96799103f776df9c0fae56a7f5c2debab637eca1498bb494fa234ef86fb361c5245a16cd54cb699d58fb6cab8127ad1227a6ec65e7f36b275ae7b261a0c1a78055c26cf2d26bcd28a6c1d21b9e77f93f2022a8f19c605f3406cacfae2041b343c0bbc6be6bcd5e17e68acddbb487809b82fbeae473a95935c05164d0ae09e2b08400a06959189474557b74141c83f359417e02d767579597932fc1d566abf46d063717668b33b631090632c92385d8d6da8c9748423"}) 00:53:10 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab00) 00:53:10 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x40101283, 0xfffffffffffffffb) [ 3190.590006][T28644] block nbd2: shutting down sockets 00:53:10 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab04) 00:53:10 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x5452, 0xfffffffffffffffb) 00:53:10 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x40101286, 0xfffffffffffffffb) 00:53:10 executing program 1: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"a7ff3af53ce92a3711a53b9c4fd15b07", 0x0, 0x0, {0x8000000000000000, 0x7ff}, {0x4, 0x44}, 0x3, [0x7, 0x1, 0x2, 0x4, 0x9, 0x9, 0x3, 0x800, 0x8000000000000001, 0x100000000, 0x5, 0x3, 0xa7bf, 0x3, 0x4, 0x9e]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000003c0)={"1751a155b9a8c857129b7921ca44a2fe", r0, 0x0, {0x8001, 0x8}, {0x8, 0x8}, 0x34, [0x1f, 0x951, 0x8, 0x43c, 0x0, 0xc745, 0x80, 0x8000000000000000, 0x7, 0x80, 0x4, 0x9, 0x22a, 0xded, 0x4, 0x8001]}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) (async, rerun: 64) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r2, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80040) accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @remote, @rose, 0x0, [@null, @rose, @default, @null, @netrom, @null]}, &(0x7f0000000240)=0x40, 0x80000) (async) ioctl$NBD_SET_FLAGS(r4, 0x301, 0x2) (async) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000280)) (async) r7 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x7) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, &(0x7f00000005c0)=0xffffffff) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6bdff5b7e586d22353233cb17103620840", @ANYRES64=r7], 0xc2, 0x0, &(0x7f00000000c0)="58a48ea4f4ab1f7b6e8d0020c96799103f776df9c0fae56a7f5c2debab637eca1498bb494fa234ef86fb361c5245a16cd54cb699d58fb6cab8127ad1227a6ec65e7f36b275ae7b261a0c1a78055c26cf2d26bcd28a6c1d21b9e77f93f2022a8f19c605f3406cacfae2041b343c0bbc6be6bcd5e17e68acddbb487809b82fbeae473a95935c05164d0ae09e2b08400a06959189474557b74141c83f359417e02d767579597932fc1d566abf46d063717668b33b631090632c92385d8d6da8c9748423"}) 00:53:10 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x80105013, &(0x7f0000000040)=0x20) [ 3190.660189][T28653] block nbd0: shutting down sockets [ 3190.661278][T28663] block nbd2: shutting down sockets 00:53:10 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x5452, 0xfffffffffffffffb) 00:53:10 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x40101287, 0xfffffffffffffffb) 00:53:10 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab01) 00:53:10 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab05) 00:53:10 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x80105014, &(0x7f0000000040)=0x20) 00:53:10 executing program 5: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x5452, 0xfffffffffffffffb) 00:53:10 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x40101288, 0xfffffffffffffffb) 00:53:10 executing program 1: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"a7ff3af53ce92a3711a53b9c4fd15b07", 0x0, 0x0, {0x8000000000000000, 0x7ff}, {0x4, 0x44}, 0x3, [0x7, 0x1, 0x2, 0x4, 0x9, 0x9, 0x3, 0x800, 0x8000000000000001, 0x100000000, 0x5, 0x3, 0xa7bf, 0x3, 0x4, 0x9e]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000003c0)={"1751a155b9a8c857129b7921ca44a2fe", r0, 0x0, {0x8001, 0x8}, {0x8, 0x8}, 0x34, [0x1f, 0x951, 0x8, 0x43c, 0x0, 0xc745, 0x80, 0x8000000000000000, 0x7, 0x80, 0x4, 0x9, 0x22a, 0xded, 0x4, 0x8001]}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000003c0)={"1751a155b9a8c857129b7921ca44a2fe", r0, 0x0, {0x8001, 0x8}, {0x8, 0x8}, 0x34, [0x1f, 0x951, 0x8, 0x43c, 0x0, 0xc745, 0x80, 0x8000000000000000, 0x7, 0x80, 0x4, 0x9, 0x22a, 0xded, 0x4, 0x8001]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r2, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r2, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80040) accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @remote, @rose, 0x0, [@null, @rose, @default, @null, @netrom, @null]}, &(0x7f0000000240)=0x40, 0x80000) (async) accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @remote, @rose, 0x0, [@null, @rose, @default, @null, @netrom, @null]}, &(0x7f0000000240)=0x40, 0x80000) ioctl$NBD_SET_FLAGS(r4, 0x301, 0x2) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000280)) r7 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x7) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, &(0x7f00000005c0)=0xffffffff) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6bdff5b7e586d22353233cb17103620840", @ANYRES64=r7], 0xc2, 0x0, &(0x7f00000000c0)="58a48ea4f4ab1f7b6e8d0020c96799103f776df9c0fae56a7f5c2debab637eca1498bb494fa234ef86fb361c5245a16cd54cb699d58fb6cab8127ad1227a6ec65e7f36b275ae7b261a0c1a78055c26cf2d26bcd28a6c1d21b9e77f93f2022a8f19c605f3406cacfae2041b343c0bbc6be6bcd5e17e68acddbb487809b82fbeae473a95935c05164d0ae09e2b08400a06959189474557b74141c83f359417e02d767579597932fc1d566abf46d063717668b33b631090632c92385d8d6da8c9748423"}) [ 3190.770063][T28672] block nbd0: shutting down sockets 00:53:10 executing program 5: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x5452, 0xfffffffffffffffb) [ 3190.771897][T28674] block nbd2: shutting down sockets 00:53:10 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab02) 00:53:10 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x801c581f, &(0x7f0000000040)=0x20) 00:53:10 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab06) 00:53:10 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xad1c, @null, @rose={'rose', 0x0}, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x4000007d) ioctl$MEDIA_REQUEST_IOC_REINIT(r1, 0x7c81, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) 00:53:10 executing program 5: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x5452, 0xfffffffffffffffb) 00:53:10 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x401070c9, 0xfffffffffffffffb) [ 3190.832079][T28698] block nbd1: NBD_DISCONNECT 00:53:10 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xad1c, @null, @rose={'rose', 0x0}, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x4000007d) (async) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x4000007d) ioctl$MEDIA_REQUEST_IOC_REINIT(r1, 0x7c81, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) (async) ioctl$NBD_DISCONNECT(r0, 0xab08) [ 3190.857728][T28705] block nbd1: NBD_DISCONNECT [ 3190.860130][T28693] block nbd2: shutting down sockets [ 3190.861884][T28692] block nbd0: shutting down sockets 00:53:10 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x5452, 0x0) [ 3190.863602][T28706] block nbd1: NBD_DISCONNECT 00:53:10 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x401070ca, 0xfffffffffffffffb) 00:53:10 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab07) 00:53:10 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200000) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xad1c, @null, @rose={'rose', 0x0}, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) (async) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x4000007d) ioctl$MEDIA_REQUEST_IOC_REINIT(r1, 0x7c81, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) 00:53:10 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x5452, 0x0) 00:53:10 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab04) 00:53:10 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc0045002, &(0x7f0000000040)=0x20) [ 3190.924088][T28714] block nbd1: NBD_DISCONNECT 00:53:10 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x6) 00:53:10 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x401070cd, 0xfffffffffffffffb) [ 3190.959312][T28718] block nbd0: shutting down sockets [ 3190.962249][T28711] block nbd2: shutting down sockets 00:53:10 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x5452, 0x0) 00:53:10 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x6) 00:53:10 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc0045003, &(0x7f0000000040)=0x20) 00:53:10 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab08) 00:53:10 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x40186366, 0xfffffffffffffffb) 00:53:10 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab05) 00:53:11 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab04) 00:53:11 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc0045004, &(0x7f0000000040)=0x20) 00:53:11 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x6) [ 3191.059555][T28736] block nbd0: shutting down sockets [ 3191.061526][T28735] block nbd2: NBD_DISCONNECT [ 3191.064193][T28732] block nbd2: Disconnected due to user request. 00:53:11 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x401870c8, 0xfffffffffffffffb) [ 3191.074719][T28732] block nbd2: shutting down sockets 00:53:11 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab06) [ 3191.079617][T28741] block nbd5: shutting down sockets 00:53:11 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x30200, 0x0) read$dsp(r1, &(0x7f0000000100)=""/148, 0x94) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x10f000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) 00:53:11 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc0045005, &(0x7f0000000040)=0x20) 00:53:11 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab04) 00:53:11 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab09) [ 3191.141947][T28747] block nbd0: shutting down sockets 00:53:11 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x401870cb, 0xfffffffffffffffb) [ 3191.149621][T28753] block nbd2: shutting down sockets 00:53:11 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc0045006, &(0x7f0000000040)=0x20) 00:53:11 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x30200, 0x0) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x30200, 0x0) read$dsp(r1, &(0x7f0000000100)=""/148, 0x94) (async) read$dsp(r1, &(0x7f0000000100)=""/148, 0x94) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x10f000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) [ 3191.160513][T28757] block nbd5: shutting down sockets 00:53:11 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab07) 00:53:11 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab0a) 00:53:11 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab04) 00:53:11 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x401870cc, 0xfffffffffffffffb) 00:53:11 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc0045007, &(0x7f0000000040)=0x20) 00:53:11 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x30200, 0x0) read$dsp(r1, &(0x7f0000000100)=""/148, 0x94) (async) read$dsp(r1, &(0x7f0000000100)=""/148, 0x94) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x10f000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) 00:53:11 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x401c5820, 0xfffffffffffffffb) [ 3191.249612][T28764] block nbd0: shutting down sockets 00:53:11 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc0045009, &(0x7f0000000040)=0x20) 00:53:11 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab08) 00:53:11 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x4020940d, 0xfffffffffffffffb) [ 3191.281781][T28767] block nbd2: shutting down sockets [ 3191.285324][T28775] block nbd5: shutting down sockets 00:53:11 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="04630440000000004770f7203d7cd7ad8ba386cad5602778b561a46732b7d9bf8fd498f776741fcee7c60599fa0e142300041d4e7cb71f94fa8eccc2a3e2e183c80fcc5686abb81103367533b8487d98f163d97797ab9bbc03052a4001bb21604cf10556047f84b65e64d9b17e2bb0698dc78739ec25a9a6e4b2bb7795e7de1b80dfc881e79db84fe03557f091671cb996f9cfc22ffa10d3518147ec56883e"], 0x10, 0x0, &(0x7f00000000c0)="0886c173e3bf599c1d6ce4716761ba91"}) 00:53:11 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc0045025, &(0x7f0000000040)=0x20) [ 3191.316613][T28786] binder: 28785:28786 IncRefs 0 refcount change on invalid ref 0 ret -22 00:53:11 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab18) 00:53:11 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab04) 00:53:11 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="04630440000000004770f7203d7cd7ad8ba386cad5602778b561a46732b7d9bf8fd498f776741fcee7c60599fa0e142300041d4e7cb71f94fa8eccc2a3e2e183c80fcc5686abb81103367533b8487d98f163d97797ab9bbc03052a4001bb21604cf10556047f84b65e64d9b17e2bb0698dc78739ec25a9a6e4b2bb7795e7de1b80dfc881e79db84fe03557f091671cb996f9cfc22ffa10d3518147ec56883e"], 0x10, 0x0, &(0x7f00000000c0)="0886c173e3bf599c1d6ce4716761ba91"}) [ 3191.350522][T28784] block nbd0: NBD_DISCONNECT [ 3191.352064][T28783] block nbd0: Disconnected due to user request. [ 3191.354769][T28783] block nbd0: shutting down sockets 00:53:11 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x80041284, 0xfffffffffffffffb) [ 3191.365344][T28787] block nbd2: shutting down sockets [ 3191.369639][T28796] binder: 28794:28796 IncRefs 0 refcount change on invalid ref 0 ret -22 00:53:11 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab09) 00:53:11 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc0045878, &(0x7f0000000040)=0x20) 00:53:11 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="04630440000000004770f7203d7cd7ad8ba386cad5602778b561a46732b7d9bf8fd498f776741fcee7c60599fa0e142300041d4e7cb71f94fa8eccc2a3e2e183c80fcc5686abb81103367533b8487d98f163d97797ab9bbc03052a4001bb21604cf10556047f84b65e64d9b17e2bb0698dc78739ec25a9a6e4b2bb7795e7de1b80dfc881e79db84fe03557f091671cb996f9cfc22ffa10d3518147ec56883e"], 0x10, 0x0, &(0x7f00000000c0)="0886c173e3bf599c1d6ce4716761ba91"}) 00:53:11 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab64) [ 3191.403564][T28791] block nbd5: shutting down sockets [ 3191.427200][T28805] binder: 28803:28805 IncRefs 0 refcount change on invalid ref 0 ret -22 00:53:11 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab04) 00:53:11 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x80041285, 0xfffffffffffffffb) 00:53:11 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc0045878, &(0x7f0000000040)=0x20) 00:53:11 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x12202) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x8) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) [ 3191.450490][T28799] block nbd0: shutting down sockets 00:53:11 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab0a) 00:53:11 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc0189436, &(0x7f0000000040)=0x20) [ 3191.489974][T28807] block nbd2: shutting down sockets [ 3191.509426][T28809] block nbd5: shutting down sockets 00:53:11 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x80081270, 0xfffffffffffffffb) 00:53:11 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x12202) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x8) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:11 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x400448c9) 00:53:11 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab04) [ 3191.539473][T28815] block nbd0: shutting down sockets 00:53:11 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab18) 00:53:11 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x12202) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x8) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:11 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc020660b, &(0x7f0000000040)=0x20) 00:53:11 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x80081272, 0xfffffffffffffffb) 00:53:11 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x2) [ 3191.614271][T28825] block nbd2: shutting down sockets [ 3191.616090][T28829] block nbd0: shutting down sockets 00:53:11 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x2) 00:53:11 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x80081280, 0xfffffffffffffffb) [ 3191.643949][T28827] block nbd5: shutting down sockets 00:53:11 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x4) 00:53:11 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x400448dd) 00:53:11 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x2) 00:53:11 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab64) 00:53:11 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab04) 00:53:11 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x80086301, 0xfffffffffffffffb) [ 3191.719831][T28848] block nbd2: shutting down sockets 00:53:11 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x18) 00:53:11 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab04) 00:53:11 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x400454ca) 00:53:11 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) ioctl$NBD_DO_IT(r0, 0xab03) 00:53:11 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x80086601, 0xfffffffffffffffb) [ 3191.760035][T28854] block nbd0: shutting down sockets 00:53:11 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x400448c9) 00:53:11 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab04) 00:53:11 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x25) 00:53:11 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x801c581f, 0xfffffffffffffffb) 00:53:11 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab04) [ 3191.842304][T28863] block nbd2: shutting down sockets 00:53:11 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) ioctl$NBD_DO_IT(r0, 0xab03) 00:53:11 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xc0045878, 0xfffffffffffffffb) [ 3191.860217][T28869] block nbd0: shutting down sockets 00:53:11 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x40049409) 00:53:11 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x400448dd) 00:53:11 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20000) 00:53:11 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) ioctl$NBD_DO_IT(r0, 0xab03) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) ioctl$NBD_DO_IT(r0, 0xab03) (async) 00:53:11 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xc0045878, 0xfffffffffffffffb) 00:53:11 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab04) 00:53:11 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000000)=0x9) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) [ 3191.941019][T28881] block nbd0: shutting down sockets 00:53:11 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xc0101282, 0xfffffffffffffffb) [ 3191.963888][T28883] block nbd2: shutting down sockets 00:53:11 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x400454ca) 00:53:11 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101000) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x321402, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:11 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x40081271) 00:53:11 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab04) 00:53:11 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xc0189436, 0xfffffffffffffffb) 00:53:11 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000000)=0x9) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:12 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xc020660b, 0xfffffffffffffffb) 00:53:12 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xc0481273, 0xfffffffffffffffb) 00:53:12 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab04) 00:53:12 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101000) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x321402, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) [ 3192.089444][T28904] block nbd0: shutting down sockets [ 3192.091196][T28905] block nbd2: shutting down sockets 00:53:12 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000000)=0x9) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:12 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x40086602) 00:53:12 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x40049409) 00:53:12 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_DISCONNECT(r1, 0xab08) 00:53:12 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101000) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x321402, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101000) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x321402, 0x0) (async) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) 00:53:12 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_DISCONNECT(r1, 0xab08) 00:53:12 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab04) 00:53:12 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f00000000c0)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x123a82, 0x0) [ 3192.199664][T28927] block nbd0: shutting down sockets [ 3192.200288][T28928] block nbd2: shutting down sockets 00:53:12 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x40081271) 00:53:12 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab04) 00:53:12 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x205) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000400)={0x1, 0x0, &(0x7f00000003c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000480)={0x1, 0x0, &(0x7f0000000440)=[0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000500)={&(0x7f00000004c0)=[r1, 0x0, r2, 0x0, 0x0, 0x0], 0x6, 0x80000}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r4, 0x2b, 0x3, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x40, 0x3, 0x3}}) r5 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x68000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80000}) r9 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000340)) r10 = syz_open_dev$dri(&(0x7f0000000380), 0x9, 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(r9, 0xc01064c8, &(0x7f0000000400)={0x1, 0x0, &(0x7f00000003c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x1, 0x0, &(0x7f0000000440)=[0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r10, 0xc01864c6, &(0x7f0000000500)={&(0x7f00000004c0)=[r11, r8, r12, r7, r6, r7], 0x6, 0x80000}) r13 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r13, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r14, 0x2b, 0x3, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x40, 0x3, 0x3}}) r15 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x68000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r13, 0xc01064c8, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r15, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, r16, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80000}) r19 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000000340)) r20 = syz_open_dev$dri(&(0x7f0000000380), 0x9, 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(r19, 0xc01064c8, &(0x7f0000000400)={0x1, 0x0, &(0x7f00000003c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r13, 0xc01064c8, &(0x7f0000000480)={0x1, 0x0, &(0x7f0000000440)=[0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r20, 0xc01864c6, &(0x7f0000000500)={&(0x7f00000004c0)=[r21, r18, r22, r17, r16, r17], 0x6, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, r7, r21, 0x0], 0x8, 0x80800}) 00:53:12 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_DISCONNECT(r1, 0xab08) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$NBD_DISCONNECT(r1, 0xab08) (async) 00:53:12 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x40101283) 00:53:12 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {0x66, 0x0, 0x0, 0x800}]}) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000040)) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) recvfrom$rose(r2, &(0x7f0000000000)=""/11, 0xb, 0x40000000, &(0x7f00000000c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) ioctl$SIOCRSACCEPT(r3, 0x89e3) ioctl$NBD_SET_SIZE(r1, 0xab02, 0xfffffffffffffffb) 00:53:12 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x205) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000400)={0x1, 0x0, &(0x7f00000003c0)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000400)={0x1, 0x0, &(0x7f00000003c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000480)={0x1, 0x0, &(0x7f0000000440)=[0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000500)={&(0x7f00000004c0)=[r1, 0x0, r2, 0x0, 0x0, 0x0], 0x6, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000500)={&(0x7f00000004c0)=[r1, 0x0, r2, 0x0, 0x0, 0x0], 0x6, 0x80000}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r4, 0x2b, 0x3, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x40, 0x3, 0x3}}) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x68000) (async) r5 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x68000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80000}) r9 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000340)) r10 = syz_open_dev$dri(&(0x7f0000000380), 0x9, 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(r9, 0xc01064c8, &(0x7f0000000400)={0x1, 0x0, &(0x7f00000003c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x1, 0x0, &(0x7f0000000440)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x1, 0x0, &(0x7f0000000440)=[0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r10, 0xc01864c6, &(0x7f0000000500)={&(0x7f00000004c0)=[r11, r8, r12, r7, r6, r7], 0x6, 0x80000}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) r13 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r13, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r14, 0x2b, 0x3, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x40, 0x3, 0x3}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r13, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r14, 0x2b, 0x3, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x40, 0x3, 0x3}}) r15 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x68000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r13, 0xc01064c8, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r15, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, r16, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r15, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, r16, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80000}) r19 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000000340)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000000340)) r20 = syz_open_dev$dri(&(0x7f0000000380), 0x9, 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(r19, 0xc01064c8, &(0x7f0000000400)={0x1, 0x0, &(0x7f00000003c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r13, 0xc01064c8, &(0x7f0000000480)={0x1, 0x0, &(0x7f0000000440)=[0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r20, 0xc01864c6, &(0x7f0000000500)={&(0x7f00000004c0)=[r21, r18, r22, r17, r16, r17], 0x6, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, r7, r21, 0x0], 0x8, 0x80800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, r7, r21, 0x0], 0x8, 0x80800}) 00:53:12 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) (async) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f00000000c0)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x123a82, 0x0) [ 3192.300513][T28941] block nbd0: shutting down sockets 00:53:12 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab04) 00:53:12 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x40086602) [ 3192.320367][T28945] block nbd2: shutting down sockets 00:53:12 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x40101286) 00:53:12 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {0x66, 0x0, 0x0, 0x800}]}) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000bc0)) (async, rerun: 64) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f00000010c0)) (async, rerun: 64) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000040)) (async) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async, rerun: 64) recvfrom$rose(r2, &(0x7f0000000000)=""/11, 0xb, 0x40000000, &(0x7f00000000c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) (async, rerun: 64) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) (async, rerun: 64) ioctl$SIOCRSACCEPT(r3, 0x89e3) (async, rerun: 64) ioctl$NBD_SET_SIZE(r1, 0xab02, 0xfffffffffffffffb) 00:53:12 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x205) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000400)={0x1, 0x0, &(0x7f00000003c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000480)={0x1, 0x0, &(0x7f0000000440)=[0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000500)={&(0x7f00000004c0)=[r1, 0x0, r2, 0x0, 0x0, 0x0], 0x6, 0x80000}) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r4, 0x2b, 0x3, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x40, 0x3, 0x3}}) (async) r5 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x68000) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80000}) (async) r9 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000340)) (rerun: 64) r10 = syz_open_dev$dri(&(0x7f0000000380), 0x9, 0x2) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r9, 0xc01064c8, &(0x7f0000000400)={0x1, 0x0, &(0x7f00000003c0)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x1, 0x0, &(0x7f0000000440)=[0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r10, 0xc01864c6, &(0x7f0000000500)={&(0x7f00000004c0)=[r11, r8, r12, r7, r6, r7], 0x6, 0x80000}) (async) r13 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r13, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r14, 0x2b, 0x3, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x40, 0x3, 0x3}}) (async, rerun: 64) r15 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x68000) (rerun: 64) ioctl$DRM_IOCTL_MODE_GET_LEASE(r13, 0xc01064c8, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r15, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, r16, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80000}) r19 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000000340)) (async) r20 = syz_open_dev$dri(&(0x7f0000000380), 0x9, 0x2) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GET_LEASE(r19, 0xc01064c8, &(0x7f0000000400)={0x1, 0x0, &(0x7f00000003c0)=[0x0]}) (rerun: 32) ioctl$DRM_IOCTL_MODE_GET_LEASE(r13, 0xc01064c8, &(0x7f0000000480)={0x1, 0x0, &(0x7f0000000440)=[0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r20, 0xc01864c6, &(0x7f0000000500)={&(0x7f00000004c0)=[r21, r18, r22, r17, r16, r17], 0x6, 0x80000}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, r7, r21, 0x0], 0x8, 0x80800}) (rerun: 32) 00:53:12 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab04) [ 3192.400622][T28959] block nbd0: shutting down sockets 00:53:12 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) (async) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f00000000c0)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x123a82, 0x0) 00:53:12 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x40101283) 00:53:12 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab04) 00:53:12 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {0x66, 0x0, 0x0, 0x800}]}) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000bc0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f00000010c0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000040)) (async) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000040)) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) recvfrom$rose(r2, &(0x7f0000000000)=""/11, 0xb, 0x40000000, &(0x7f00000000c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) ioctl$SIOCRSACCEPT(r3, 0x89e3) ioctl$NBD_SET_SIZE(r1, 0xab02, 0xfffffffffffffffb) [ 3192.449662][T28963] block nbd2: shutting down sockets 00:53:12 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x40101287) 00:53:12 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab04) 00:53:12 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x1) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) syz_open_dev$media(&(0x7f0000000040), 0x0, 0x351040) 00:53:12 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x301c80, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:12 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x1) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) (async) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) syz_open_dev$media(&(0x7f0000000040), 0x0, 0x351040) [ 3192.534662][T28982] block nbd0: shutting down sockets 00:53:12 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab04) 00:53:12 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x40101286) [ 3192.549692][T28988] block nbd2: shutting down sockets 00:53:12 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x40101288) 00:53:12 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x7) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x210002) r5 = syz_open_pts(r3, 0x18000) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000140)={0x83, 0x6, 0x64b, 0x3, 0xd, "a66a18e1bf9507b1"}) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f00000001c0)=0x8059, 0x4) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000002, 0x4010, r1, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000003, 0x11, r2, 0x0) ioctl$KDDISABIO(r2, 0x4b37) 00:53:12 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab04) 00:53:12 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x1) (async, rerun: 64) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x0) (async, rerun: 64) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) (async) syz_open_dev$media(&(0x7f0000000040), 0x0, 0x351040) 00:53:12 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x301c80, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:12 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab04) 00:53:12 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x7) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x210002) (async) r5 = syz_open_pts(r3, 0x18000) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000140)={0x83, 0x6, 0x64b, 0x3, 0xd, "a66a18e1bf9507b1"}) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) (async) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f00000001c0)=0x8059, 0x4) (async) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000002, 0x4010, r1, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000003, 0x11, r2, 0x0) ioctl$KDDISABIO(r2, 0x4b37) 00:53:12 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x440) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) [ 3192.650440][T29003] block nbd2: shutting down sockets [ 3192.652002][T29002] block nbd0: shutting down sockets 00:53:12 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab04) 00:53:12 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x301c80, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:12 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x401070c9) 00:53:12 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x40101287) 00:53:12 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab04) 00:53:12 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x440) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) [ 3192.720773][T29024] block nbd0: shutting down sockets 00:53:12 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x7) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x210002) (async) r5 = syz_open_pts(r3, 0x18000) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000140)={0x83, 0x6, 0x64b, 0x3, 0xd, "a66a18e1bf9507b1"}) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) (async) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f00000001c0)=0x8059, 0x4) (async) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000002, 0x4010, r1, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000003, 0x11, r2, 0x0) (async) ioctl$KDDISABIO(r2, 0x4b37) 00:53:12 executing program 4: syz_open_pts(0xffffffffffffffff, 0x80) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x100881, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f00000010c0)) ioctl$SOUND_PCM_READ_RATE(r2, 0x80045002, &(0x7f0000000100)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000000)) 00:53:12 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x40101288) [ 3192.730243][T29028] block nbd2: shutting down sockets 00:53:12 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab04) 00:53:12 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x440) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x440) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) [ 3192.780405][T29036] block nbd0: shutting down sockets 00:53:12 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x401070ca) 00:53:12 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x401070c9) 00:53:12 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2000) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) ioctl$NBD_DISCONNECT(r1, 0xab08) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) ioctl$NBD_CLEAR_QUE(r3, 0xab05) 00:53:12 executing program 4: syz_open_pts(0xffffffffffffffff, 0x80) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x100881, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f00000010c0)) ioctl$SOUND_PCM_READ_RATE(r2, 0x80045002, &(0x7f0000000100)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000000)) syz_open_pts(0xffffffffffffffff, 0x80) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x100881, 0x0) (async) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000bc0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f00000010c0)) (async) ioctl$SOUND_PCM_READ_RATE(r2, 0x80045002, &(0x7f0000000100)) (async) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) (async) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000000)) (async) 00:53:12 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) ioctl$NBD_PRINT_DEBUG(r0, 0xab06) [ 3192.849470][T29049] block nbd0: shutting down sockets 00:53:12 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab04) 00:53:12 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x401070ca) 00:53:12 executing program 3: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2000) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) ioctl$NBD_DISCONNECT(r1, 0xab08) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) ioctl$NBD_CLEAR_QUE(r3, 0xab05) [ 3192.891478][T29054] block nbd2: shutting down sockets 00:53:12 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) ioctl$NBD_PRINT_DEBUG(r0, 0xab06) 00:53:12 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x401070cd) 00:53:12 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2000) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) ioctl$NBD_DISCONNECT(r1, 0xab08) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) ioctl$NBD_CLEAR_QUE(r3, 0xab05) 00:53:12 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) ioctl$NBD_PRINT_DEBUG(r0, 0xab06) [ 3192.960682][T29060] block nbd0: shutting down sockets 00:53:12 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab04) 00:53:12 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x401070cd) 00:53:12 executing program 4: syz_open_pts(0xffffffffffffffff, 0x80) (async) syz_open_pts(0xffffffffffffffff, 0x80) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x100881, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) (async) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f00000010c0)) ioctl$SOUND_PCM_READ_RATE(r2, 0x80045002, &(0x7f0000000100)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000000)) (async) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000000)) [ 3192.975086][T29071] block nbd2: shutting down sockets 00:53:12 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x40186366) 00:53:12 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0xfffffffe) 00:53:12 executing program 3: ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:13 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab04) 00:53:13 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0xfffffffe) [ 3193.040090][T29079] block nbd0: shutting down sockets [ 3193.045798][T29082] block nbd2: shutting down sockets 00:53:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x40186366) 00:53:13 executing program 3: ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x401870c8) 00:53:13 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0xfffffffe) (async) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0xfffffffe) [ 3193.100088][T29093] block nbd5: shutting down sockets 00:53:13 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x600001, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x10000020) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x80) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$NBD_SET_SIZE(r2, 0xab02, 0xffff) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000000c0)=0x1ff) [ 3193.123101][T29096] block nbd0: shutting down sockets 00:53:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x401870c8) 00:53:13 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab04) 00:53:13 executing program 3: ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:13 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x600001, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x10000020) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x80) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$NBD_SET_SIZE(r2, 0xab02, 0xffff) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000000c0)=0x1ff) 00:53:13 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) [ 3193.159685][T29101] block nbd2: shutting down sockets 00:53:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x401870cb) 00:53:13 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) [ 3193.200141][T29110] block nbd0: shutting down sockets 00:53:13 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x7) [ 3193.210371][T29112] block nbd5: shutting down sockets 00:53:13 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x600001, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x10000020) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x80) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$NBD_SET_SIZE(r2, 0xab02, 0xffff) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000000c0)=0x1ff) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x600001, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x10000020) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x80) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_SIZE(r2, 0xab02, 0xffff) (async) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000000c0)=0x1ff) (async) 00:53:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x401870cb) 00:53:13 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab04) 00:53:13 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) read$dsp(r0, &(0x7f00000000c0)=""/88, 0x58) 00:53:13 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) [ 3193.271711][T29124] block nbd0: shutting down sockets [ 3193.273506][T29122] block nbd2: shutting down sockets 00:53:13 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) (async) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x7) 00:53:13 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80000) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x8c) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f00000004c0)={0x1, 0x0, 0x8, 0x1e, 0xe3, &(0x7f00000000c0)}) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$NBD_PRINT_DEBUG(r3, 0xab06) 00:53:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x401870cc) [ 3193.299293][T29134] block nbd5: shutting down sockets 00:53:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x401870cc) 00:53:13 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x7) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$NBD_DO_IT(r1, 0xab03) (async) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x7) (async) 00:53:13 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) read$dsp(r0, &(0x7f00000000c0)=""/88, 0x58) 00:53:13 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab04) [ 3193.362381][T29141] block nbd0: shutting down sockets 00:53:13 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80000) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x8c) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f00000004c0)={0x1, 0x0, 0x8, 0x1e, 0xe3, &(0x7f00000000c0)}) (async) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$NBD_PRINT_DEBUG(r3, 0xab06) [ 3193.380293][T29144] block nbd2: shutting down sockets 00:53:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x401c5820) [ 3193.390197][T29151] block nbd5: shutting down sockets 00:53:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x401c5820) 00:53:13 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$NBD_PRINT_DEBUG(r0, 0xab06) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x361542) ioctl$NBD_SET_SIZE(r1, 0xab02, 0xfffffffffffffffb) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) ioctl$NBD_PRINT_DEBUG(r3, 0xab06) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000000c0)={"c6fda1eca9c60037c442013bf1abf81f", 0x0, 0x0, {0x4, 0x7}, {0x8001, 0x200}, 0x3, [0x1f, 0x5, 0xf3, 0x100, 0x3, 0x80000001, 0x8, 0x6, 0x1, 0x1, 0x80000001, 0x162, 0x0, 0x3f, 0x6, 0xc0]}) 00:53:13 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab04) 00:53:13 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) read$dsp(r0, &(0x7f00000000c0)=""/88, 0x58) 00:53:13 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80000) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async, rerun: 32) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) (rerun: 32) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) (async) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x8c) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f00000004c0)={0x1, 0x0, 0x8, 0x1e, 0xe3, &(0x7f00000000c0)}) (async) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$NBD_PRINT_DEBUG(r3, 0xab06) 00:53:13 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async, rerun: 32) ioctl$NBD_PRINT_DEBUG(r0, 0xab06) (async, rerun: 32) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x361542) ioctl$NBD_SET_SIZE(r1, 0xab02, 0xfffffffffffffffb) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) (async) ioctl$NBD_PRINT_DEBUG(r3, 0xab06) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000000c0)={"c6fda1eca9c60037c442013bf1abf81f", 0x0, 0x0, {0x4, 0x7}, {0x8001, 0x200}, 0x3, [0x1f, 0x5, 0xf3, 0x100, 0x3, 0x80000001, 0x8, 0x6, 0x1, 0x1, 0x80000001, 0x162, 0x0, 0x3f, 0x6, 0xc0]}) 00:53:13 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x191001, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x802, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 3193.490105][T29164] block nbd0: shutting down sockets [ 3193.490789][T29161] block nbd5: shutting down sockets [ 3193.493767][T29163] block nbd2: shutting down sockets 00:53:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x4020940d) 00:53:13 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async) ioctl$NBD_PRINT_DEBUG(r0, 0xab06) (async) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x361542) ioctl$NBD_SET_SIZE(r1, 0xab02, 0xfffffffffffffffb) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) (async) ioctl$NBD_PRINT_DEBUG(r3, 0xab06) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000000c0)={"c6fda1eca9c60037c442013bf1abf81f", 0x0, 0x0, {0x4, 0x7}, {0x8001, 0x200}, 0x3, [0x1f, 0x5, 0xf3, 0x100, 0x3, 0x80000001, 0x8, 0x6, 0x1, 0x1, 0x80000001, 0x162, 0x0, 0x3f, 0x6, 0xc0]}) 00:53:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x4020940d) 00:53:13 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x191001, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x802, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 00:53:13 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab04) 00:53:13 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f0000000040)=@default) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000480)={r4, 0x0, "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", "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"}) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000000)={0xc}) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:13 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x191001, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x802, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x191001, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x802, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) [ 3193.609555][T29184] block nbd0: shutting down sockets [ 3193.609792][T29191] block nbd5: shutting down sockets [ 3193.611503][T29187] block nbd2: shutting down sockets 00:53:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x80041284) 00:53:13 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f0000000040)=@default) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000480)={r4, 0x0, "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", "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"}) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000000)={0xc}) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f0000000040)=@default) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000280)) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000480)={r4, 0x0, "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", "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"}) (async) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000000)={0xc}) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) 00:53:13 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x8001) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x1002) 00:53:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x80041284) 00:53:13 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x191001, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x802, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 00:53:13 executing program 4: clock_gettime(0x7, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x1, 0x8001, 0xf5f, 0xfffe}, 0x21) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:13 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f0000000040)=@default) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000480)={r4, 0x0, "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", "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"}) (async) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000000)={0xc}) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:13 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x401870cc) [ 3193.719370][T29204] block nbd0: shutting down sockets [ 3193.721211][T29205] block nbd2: shutting down sockets 00:53:13 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000bc0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x8001) (async) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x1002) 00:53:13 executing program 4: clock_gettime(0x7, &(0x7f0000000000)) (async) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x1, 0x8001, 0xf5f, 0xfffe}, 0x21) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x80041285) 00:53:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x80041285) 00:53:13 executing program 1: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x8001) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x8001) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x1002) 00:53:13 executing program 4: clock_gettime(0x7, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x1, 0x8001, 0xf5f, 0xfffe}, 0x21) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:13 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x5, 0x2}, 0x48) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3, 0x800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x3f) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) ioctl$TCGETS(r0, 0x5401, &(0x7f00000002c0)) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x420100) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x80001) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x200002) ioctl$NBD_SET_SIZE(r3, 0xab02, 0xfffffffffffffbff) [ 3193.810796][T29218] block nbd5: shutting down sockets [ 3193.830146][T29228] block nbd0: shutting down sockets 00:53:13 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x401070c9) [ 3193.838067][T29229] block nbd2: shutting down sockets 00:53:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x80081270) 00:53:13 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x5, 0x2}, 0x48) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3, 0x800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x3f) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) (async) ioctl$TCGETS(r0, 0x5401, &(0x7f00000002c0)) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x420100) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x80001) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x200002) ioctl$NBD_SET_SIZE(r3, 0xab02, 0xfffffffffffffbff) 00:53:13 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000000)=0x8d7d) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x80081270) [ 3193.900652][T29241] block nbd5: shutting down sockets 00:53:13 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20380) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xfffffffffffff001) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000040)) 00:53:13 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x5, 0x2}, 0x48) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3, 0x800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x3f) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) ioctl$TCGETS(r0, 0x5401, &(0x7f00000002c0)) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x420100) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x80001) (async) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x200002) ioctl$NBD_SET_SIZE(r3, 0xab02, 0xfffffffffffffbff) [ 3193.919497][T29242] block nbd0: shutting down sockets 00:53:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x80081272) 00:53:13 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xc0101282, 0xfffffffffffffffb) 00:53:13 executing program 4: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000000)=0x8d7d) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:13 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20380) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xfffffffffffff001) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000040)) 00:53:13 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) socket$l2tp6(0xa, 0x2, 0x73) 00:53:13 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xc0101282, 0xfffffffffffffffb) [ 3193.987383][T29249] block nbd2: shutting down sockets [ 3193.999428][T29255] block nbd0: shutting down sockets 00:53:13 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20380) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xfffffffffffff001) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000040)) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20380) (async) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xfffffffffffff001) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000040)) (async) 00:53:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x80081272) 00:53:14 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x80081280) 00:53:14 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) 00:53:14 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000000)=0x8d7d) (async, rerun: 64) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (rerun: 64) 00:53:14 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xc0101282, 0xfffffffffffffffb) 00:53:14 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40400) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:14 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) socket$l2tp6(0xa, 0x2, 0x73) [ 3194.100024][T29273] block nbd2: shutting down sockets [ 3194.100286][T29272] block nbd0: shutting down sockets 00:53:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x80081280) 00:53:14 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x80086301) 00:53:14 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40400) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40400) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) 00:53:14 executing program 3: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:14 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x1d) 00:53:14 executing program 5: ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xc0101282, 0xfffffffffffffffb) 00:53:14 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40400) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:14 executing program 5: ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xc0101282, 0xfffffffffffffffb) [ 3194.189524][T29291] block nbd0: shutting down sockets [ 3194.200582][T29293] block nbd2: shutting down sockets 00:53:14 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x80086601) 00:53:14 executing program 3: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x80086301) 00:53:14 executing program 5: ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xc0101282, 0xfffffffffffffffb) 00:53:14 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000040), 0x0) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x2040, 0xc0) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x8001) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0xffffffffc32d9eb1) 00:53:14 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x1d) 00:53:14 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xc0101282, 0xfffffffffffffffb) 00:53:14 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x1d) 00:53:14 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000040), 0x0) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x2040, 0xc0) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x8001) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0xffffffffc32d9eb1) [ 3194.299466][T29308] block nbd0: shutting down sockets [ 3194.309415][T29314] block nbd2: shutting down sockets 00:53:14 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x801c581f) 00:53:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x80086601) 00:53:14 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xc0101282, 0xfffffffffffffffb) 00:53:14 executing program 3: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:14 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800, 0x0, 0xffffffffffffffff}) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000000100)) 00:53:14 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) read$dsp(0xffffffffffffffff, &(0x7f0000000040), 0x0) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x2040, 0xc0) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x8001) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0xffffffffc32d9eb1) [ 3194.380585][T29328] block nbd0: shutting down sockets 00:53:14 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xc0101282, 0xfffffffffffffffb) [ 3194.399483][T29327] block nbd2: shutting down sockets 00:53:14 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800, 0x0, 0xffffffffffffffff}) ioctl$NBD_DISCONNECT(r1, 0xab08) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x5) 00:53:14 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xc0045878) 00:53:14 executing program 5: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xc0101282, 0xfffffffffffffffb) 00:53:14 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000000c0)={"36f32a6b53201201029ca1a1fccc827b", r2, r3, {0x1, 0xdad}, {0x7fffffffffffffff, 0x4}, 0x44f8400, [0x3, 0x6, 0x0, 0x9, 0x2, 0x3, 0x2, 0xda5, 0x7, 0x4be5, 0x401, 0xdb2, 0x1, 0x7fffffff, 0x5, 0x6]}) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:14 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800, 0x0, 0xffffffffffffffff}) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000000100)) 00:53:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0x801c581f) 00:53:14 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)=0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000000c0)={"36f32a6b53201201029ca1a1fccc827b", r2, r3, {0x1, 0xdad}, {0x7fffffffffffffff, 0x4}, 0x44f8400, [0x3, 0x6, 0x0, 0x9, 0x2, 0x3, 0x2, 0xda5, 0x7, 0x4be5, 0x401, 0xdb2, 0x1, 0x7fffffff, 0x5, 0x6]}) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:14 executing program 5: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xc0101282, 0xfffffffffffffffb) 00:53:14 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800, 0x0, 0xffffffffffffffff}) ioctl$NBD_DISCONNECT(r1, 0xab08) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x5) [ 3194.481900][T29350] block nbd0: shutting down sockets [ 3194.484906][T29351] block nbd2: shutting down sockets 00:53:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xc0045878) 00:53:14 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xc0045878) 00:53:14 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800, 0x0, 0xffffffffffffffff}) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000000100)) 00:53:14 executing program 5: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xc0101282, 0xfffffffffffffffb) 00:53:14 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800, 0x0, 0xffffffffffffffff}) ioctl$NBD_DISCONNECT(r1, 0xab08) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x5) 00:53:14 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000000c0)={"36f32a6b53201201029ca1a1fccc827b", r2, r3, {0x1, 0xdad}, {0x7fffffffffffffff, 0x4}, 0x44f8400, [0x3, 0x6, 0x0, 0x9, 0x2, 0x3, 0x2, 0xda5, 0x7, 0x4be5, 0x401, 0xdb2, 0x1, 0x7fffffff, 0x5, 0x6]}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000000c0)={"36f32a6b53201201029ca1a1fccc827b", r2, r3, {0x1, 0xdad}, {0x7fffffffffffffff, 0x4}, 0x44f8400, [0x3, 0x6, 0x0, 0x9, 0x2, 0x3, 0x2, 0xda5, 0x7, 0x4be5, 0x401, 0xdb2, 0x1, 0x7fffffff, 0x5, 0x6]}) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:14 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0x1) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 00:53:14 executing program 1: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x157100) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x80) [ 3194.603845][T29364] block nbd0: shutting down sockets 00:53:14 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7) 00:53:14 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xc0101282, 0x0) [ 3194.612513][T29356] block nbd2: shutting down sockets 00:53:14 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xc0101282) 00:53:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xc0045878) 00:53:14 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0x1) (async) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) (async, rerun: 32) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async, rerun: 32) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 00:53:14 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xc0101282, 0x0) 00:53:14 executing program 1: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x157100) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x80) 00:53:14 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7) [ 3194.689530][T29387] block nbd0: shutting down sockets 00:53:14 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0x1) (async) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 00:53:14 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xc0101282, 0x0) 00:53:14 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xc0189436) [ 3194.724870][T29385] block nbd2: shutting down sockets 00:53:14 executing program 1: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x157100) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x80) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x157100) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x80) (async) 00:53:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xc0101282) 00:53:14 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7) 00:53:14 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) socket$l2tp6(0xa, 0x2, 0x73) [ 3194.789968][T29406] block nbd2: shutting down sockets 00:53:14 executing program 1: ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0x301, 0x2) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x50002, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x1000) 00:53:14 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x80081280, 0xfffffffffffffffb) 00:53:14 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x420a80, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) [ 3194.819627][T29400] block nbd0: shutting down sockets 00:53:14 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xc020660b) 00:53:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xc0189436) 00:53:14 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x80081280, 0xfffffffffffffffb) 00:53:14 executing program 1: ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0x301, 0x2) (async) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x50002, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x1) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x1000) 00:53:14 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) ioctl$NBD_CLEAR_QUE(r0, 0xab05) 00:53:14 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) ioctl$NBD_CLEAR_QUE(r0, 0xab05) (async) ioctl$NBD_CLEAR_QUE(r0, 0xab05) 00:53:14 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x420a80, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x420a80, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) 00:53:14 executing program 1: ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0x301, 0x2) (async) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x50002, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x1) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x1000) 00:53:14 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x80081280, 0xfffffffffffffffb) [ 3194.909397][T29422] block nbd2: shutting down sockets 00:53:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xc020660b) [ 3194.920228][T29427] block nbd0: shutting down sockets 00:53:14 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xc0481273) 00:53:14 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x420a80, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:14 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) ioctl$NBD_CLEAR_QUE(r0, 0xab05) 00:53:14 executing program 5: ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x80081280, 0xfffffffffffffffb) 00:53:14 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x5) 00:53:14 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x58881, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:14 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) write$tcp_congestion(r1, &(0x7f0000000000)='westwood\x00', 0x9) [ 3195.009822][T29448] block nbd0: shutting down sockets 00:53:14 executing program 5: ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x80081280, 0xfffffffffffffffb) [ 3195.010514][T29443] block nbd2: shutting down sockets 00:53:15 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xc0481273) 00:53:15 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x5) 00:53:15 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) 00:53:15 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async, rerun: 32) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) write$tcp_congestion(r1, &(0x7f0000000000)='westwood\x00', 0x9) 00:53:15 executing program 4: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x58881, 0x0) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x58881, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:15 executing program 5: ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x80081280, 0xfffffffffffffffb) 00:53:15 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x5) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x5) (async) 00:53:15 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async, rerun: 32) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000c00)) (async, rerun: 64) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) (rerun: 64) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) 00:53:15 executing program 3: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) write$tcp_congestion(r1, &(0x7f0000000000)='westwood\x00', 0x9) [ 3195.119958][T29466] block nbd2: shutting down sockets 00:53:15 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x4080c0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000440)={0x30, 0x1c, &(0x7f0000000040)="c3b453382c4611fae82ee70fe2115fd09694cdb62fc2fab2305ab947d32e889a4264fbc0e66a95cb0c9013cfe25f86f72863e6f4055a1845beb2aeedd139cf729f9cebe3beb8e0bffe1de045c5d8173efe8b0a4c5c2f04435176361619cc7d2c0d7fb6164a7cfcd1a21afe7fe451df25325bf11b90aa8728783a67aadbf4f4ce68fcc94554098ab640837870fcbb0ecc222e6bf563c40287aafa1920e224db0aa298d84c4ae212e81a4eb9a8ff99fabb4e54e01c7b464d56986ca7de21e7ac207c357a5ea514e202a952f6129fbb614a5fc4db7ed108834656541ae863eac27784edbebb312f48f1e52622d3c2a63811da4d20e62e78447679be630b35409452bd8d0c7ed9466f9aaf8b5956a373d7a2a4ade5c3dbf0f443d4a071272b649793078356e3702d22144e45bdf6e0c5aba111c796477cfc2b144883ec44999655ed7fe4a85119ddfb17319bce0e61b8d757240f29bd9539a6d884fd245d46437f95a2d924785404c83e32108ba5f9625d2aaa4453c52fd996925a06d9ea4a177171da6b96ad4e0e751034409a5aa7b8f20871cf0639aa868be156c7193c4fde2c87f6f6655bef80eef772cb11d86d2892cf9acb1466f2d983356829bb9b56e9c8cdcb1891ad3135e957cac3c54f92dee81ecb7b9a5695218cefddc8bfde9ff9e459e6e49b323bf18e59c40400f535e53415027fdf7f525fe4c70996106a702e5eb595b2f3c4166da5fc3c6fcaa474d84e3fd92fd86ca42d60d37b02ceedea8d610c2edd5b412637f6fc8b72aec1b10a55652aaee3da881d0e2b01aeca428655d52b9a11d788e5e96957d8e2ce51069a8046f893b5a95e420edd586eaab86b02fa9a0b77485504a6338e066c0c066fa513162a6f8f543a4eb6f898ec575ed482fda08fa6053930c4a4a2226dd6bb4ad10e9ad4c15f9c07665333c2e22d6c93762b91a55db2c5f18b468afe370cde14671d2b130043c18af3c3406da9e22aa5ea559f4e51e15fe3efaa255067a8a0ec360ffa28bc332157b95d6191316ea04487ac501a95c1ef5f1fd8cc725639bb99adc6068752dafff63e793954dd24e21a10efd6aedbcb29626548ff15c33e10046ae9ac0a76cf6f0a64c33e69e44dec8b20f8cb75538d7e818730092671156da84bd7c1d1095c2c4aa97d4d51a65b12ab7481d953e9691509d10ef35124828ce8bf66b079bbf706012a5fe3163bed04919bed3ed305118ef0cedcbe69b1c44d2b42a49e48f03b2446f8ea082f7893376b07391b998052ff815d63043d56e2382480240f6825ee82365bd9ed250eb26f52a0be8e7f7d127979037e84ce91f08f246acd50a1cf1b48fe9863ca872295532294fdbf04387998c65231f550f84edc8d0315ffe4a11711387981052c2952f3b75ea7ea66bf69822fcdc992a12c8b155936901e1f20ce6b75eb002f948b92899ac535bd"}) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x2) 00:53:15 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x80081280, 0xfffffffffffffffb) 00:53:15 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000040)) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:15 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x40) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x40) 00:53:15 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x4080c0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000440)={0x30, 0x1c, &(0x7f0000000040)="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"}) (async) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x2) 00:53:15 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x58881, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:15 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x80081280, 0xfffffffffffffffb) 00:53:15 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x4080c0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000440)={0x30, 0x1c, &(0x7f0000000040)="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"}) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x2) 00:53:15 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000c00)) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) (async) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) 00:53:15 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x40) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x40) 00:53:15 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x80081280, 0xfffffffffffffffb) [ 3195.255574][T29492] block nbd2: shutting down sockets 00:53:15 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000100)={0x100, 0x40, 0x5, 0x4e6e, 0x9, "c2f4cefce0613949"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) r3 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x10) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)}) ioctl$NBD_DISCONNECT(r0, 0xab08) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r2) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x3f, 0x8, 0x3, 0x0, 0x10}}) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:15 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x40) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x40) 00:53:15 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000040)) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:15 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:15 executing program 5: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x80081280, 0xfffffffffffffffb) 00:53:15 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400002) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:15 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400002) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:15 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000100)={0x100, 0x40, 0x5, 0x4e6e, 0x9, "c2f4cefce0613949"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) r3 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x10) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)}) ioctl$NBD_DISCONNECT(r0, 0xab08) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r2) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x3f, 0x8, 0x3, 0x0, 0x10}}) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040)=0x20) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000100)={0x100, 0x40, 0x5, 0x4e6e, 0x9, "c2f4cefce0613949"}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x10) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)}) (async) ioctl$NBD_DISCONNECT(r0, 0xab08) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r2) (async) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x3f, 0x8, 0x3, 0x0, 0x10}}) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040)=0x20) (async) 00:53:15 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f00000000c0)=ANY=[@ANYBLOB="a900000014e3bc74f14af28a5d36841110b433d4a9f8e6c1de56ac3570ff8a6c68167f895417d7cdf78d7e7871c33167f81a5fafe4c9ca5d415ffd8449962af1b444a135367e0dfdc60a6bca30ec43c3fa842a74fae1b9a35f0e153a3f97123ae709f3b5a42300a0c97078f482d145216cb76557ddb594442a8fbd50859fbaedfafc940fb744c90ab2ec370933cb39deecb89b118ebf09f58073986d38e70786d86a48ab68637847f58334dd3a"]) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x4, 0x20, 0x4, 0x9, 0x1a, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x10, 0x700, 0x8071, 0x3ff}}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x7, '\x00', r3, r4, 0x2, 0x5}, 0x48) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:15 executing program 5: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x80081280, 0xfffffffffffffffb) [ 3195.359616][T29517] block nbd2: shutting down sockets 00:53:15 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$NBD_DO_IT(r2, 0xab03) (async) 00:53:15 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400002) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:15 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async, rerun: 32) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000040)) (rerun: 32) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:15 executing program 5: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x80081280, 0xfffffffffffffffb) 00:53:15 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000100)={0x100, 0x40, 0x5, 0x4e6e, 0x9, "c2f4cefce0613949"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) r3 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x10) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)}) ioctl$NBD_DISCONNECT(r0, 0xab08) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r2) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x3f, 0x8, 0x3, 0x0, 0x10}}) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040)=0x20) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000100)={0x100, 0x40, 0x5, 0x4e6e, 0x9, "c2f4cefce0613949"}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x10) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)}) (async) ioctl$NBD_DISCONNECT(r0, 0xab08) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r2) (async) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x3f, 0x8, 0x3, 0x0, 0x10}}) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040)=0x20) (async) 00:53:15 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400080) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xb) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:15 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f00000000c0)=ANY=[@ANYBLOB="a900000014e3bc74f14af28a5d36841110b433d4a9f8e6c1de56ac3570ff8a6c68167f895417d7cdf78d7e7871c33167f81a5fafe4c9ca5d415ffd8449962af1b444a135367e0dfdc60a6bca30ec43c3fa842a74fae1b9a35f0e153a3f97123ae709f3b5a42300a0c97078f482d145216cb76557ddb594442a8fbd50859fbaedfafc940fb744c90ab2ec370933cb39deecb89b118ebf09f58073986d38e70786d86a48ab68637847f58334dd3a"]) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x4, 0x20, 0x4, 0x9, 0x1a, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x10, 0x700, 0x8071, 0x3ff}}) (async) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x7, '\x00', r3, r4, 0x2, 0x5}, 0x48) (async) ioctl$NBD_DO_IT(r1, 0xab03) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:15 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x80081280, 0x0) 00:53:15 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:15 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x80081280, 0x0) 00:53:15 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400080) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xb) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:15 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) (async) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f00000000c0)=ANY=[@ANYBLOB="a900000014e3bc74f14af28a5d36841110b433d4a9f8e6c1de56ac3570ff8a6c68167f895417d7cdf78d7e7871c33167f81a5fafe4c9ca5d415ffd8449962af1b444a135367e0dfdc60a6bca30ec43c3fa842a74fae1b9a35f0e153a3f97123ae709f3b5a42300a0c97078f482d145216cb76557ddb594442a8fbd50859fbaedfafc940fb744c90ab2ec370933cb39deecb89b118ebf09f58073986d38e70786d86a48ab68637847f58334dd3a"]) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x4, 0x20, 0x4, 0x9, 0x1a, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x10, 0x700, 0x8071, 0x3ff}}) (async) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x7, '\x00', r3, r4, 0x2, 0x5}, 0x48) (async) ioctl$NBD_DO_IT(r1, 0xab03) (async, rerun: 32) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (rerun: 32) 00:53:15 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x80081280, 0x0) 00:53:15 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) [ 3196.259766][T29540] block nbd2: shutting down sockets 00:53:16 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) 00:53:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0xffffffffffffffff, 0x12) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000100), 0x10002, 0xbb) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:16 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400080) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xb) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:16 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0xc0800, 0x0, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000840) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$NBD_SET_SIZE(r1, 0xab02, 0xfffffffffffffffb) 00:53:16 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400080) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xb) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:16 executing program 1: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x200800, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0x301, 0xffffffffffffffff) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) 00:53:16 executing program 4: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) 00:53:16 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0xc0800, 0x0, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000840) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$NBD_SET_SIZE(r1, 0xab02, 0xfffffffffffffffb) 00:53:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0xffffffffffffffff, 0x12) (async) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000100), 0x10002, 0xbb) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:16 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x80081272, 0xfffffffffffffffb) 00:53:16 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) [ 3196.393048][T29575] block nbd0: shutting down sockets 00:53:16 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:16 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0xc0800, 0x0, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000840) (async) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$NBD_SET_SIZE(r1, 0xab02, 0xfffffffffffffffb) 00:53:16 executing program 1: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x200800, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0x301, 0xffffffffffffffff) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) 00:53:16 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000100)) mmap$dsp(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1000002, 0x80010, r0, 0x0) 00:53:16 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x80081272, 0xfffffffffffffffb) 00:53:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0xffffffffffffffff, 0x12) (async) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000100), 0x10002, 0xbb) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:16 executing program 1: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x200800, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0x301, 0xffffffffffffffff) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) (async) ioctl$NBD_DISCONNECT(r0, 0xab08) 00:53:16 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x557741) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, &(0x7f00000000c0)={0x8, r2}) 00:53:16 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000100)) mmap$dsp(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1000002, 0x80010, r0, 0x0) 00:53:16 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x80081272, 0xfffffffffffffffb) 00:53:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x6) 00:53:16 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xb4b82) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) [ 3197.275461][ T6119] block nbd0: Receive control failed (result -32) [ 3197.275862][T29612] block nbd0: shutting down sockets 00:53:17 executing program 5: ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x80081272, 0xfffffffffffffffb) 00:53:17 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x557741) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) (async) ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, &(0x7f00000000c0)={0x8, r2}) 00:53:17 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xb4b82) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:17 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$NBD_DO_IT(r2, 0xab03) (async) 00:53:17 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000100)) mmap$dsp(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1000002, 0x80010, r0, 0x0) (async) mmap$dsp(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1000002, 0x80010, r0, 0x0) 00:53:17 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x8201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f00000000c0)) socket$inet_udplite(0x2, 0x2, 0x88) 00:53:17 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xb4b82) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:17 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x557741) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, &(0x7f00000000c0)={0x8, r2}) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x557741) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x38}) (async) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) (async) ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, &(0x7f00000000c0)={0x8, r2}) (async) 00:53:17 executing program 5: ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x80081272, 0xfffffffffffffffb) [ 3197.362129][T29632] block nbd2: shutting down sockets 00:53:17 executing program 5: ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x80081272, 0xfffffffffffffffb) 00:53:17 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) (async) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x6) 00:53:17 executing program 3: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) [ 3197.425355][T29647] block nbd0: shutting down sockets [ 3197.479394][T29663] block nbd0: Device being setup by another task 00:53:17 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000000c0)={0x7, 0x6, 0xff}) r3 = socket(0x23, 0x610fe8acbe98cebf, 0x1) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000140)=0x1) r5 = syz_open_pts(0xffffffffffffffff, 0x42002) ioctl$PIO_FONTX(r5, 0x4b6c, &(0x7f0000000100)={0x1be, 0x13, &(0x7f0000000280)="46a478b00e7663b27162bbcfcaa32a4bc3a1198d12c7564061cf34ea6016424bb7991418e9dd0812068d6b1e73740f124051651b2974b02d17eb6d9cbedb0496d3743c42590763fc071426c6e72272ed7fb40363f564999be005cf7bf7e818f0729e3963f3602c304e3a76ac153ad63366b258a3166b4fc8fb2c6d459970e75af51c620c2146394f88f9174b6aad1d142de132ff2803e44ec898ee698473bf7ff6133253644415e234ce993a82eacb277a5c582b7c4c97828bc26cb72ea012cce1cceec23204455d9749122bfeefc29e2a888068dca4eff3674d6ff9106b9bb52e1a1e6459fa83bcd5cf538b7845e2f69987e4d4cbdc08cdaa0e4367d7e0f97da3eafe51aa384323f83d6c78e72241de25e7c085ca36bbd62d843c9f4cf8047a863ee24e8279a4d92e85dc68ff5fa3866ea5346a12c796f6ea07dd49f8749f89c58859f88cd286c2080a1e8510c0b82b68bc660b77da6a87e9b7ae76bfe35d4b316aafd6f2c028d2afc83a90cb4fb26aa53b6e90f9776a08fdc175df4cd653b32b517d554b35e5fe1fb5abfe5148c8fb1e765976b0bb7b7ddde6c01760ba96e9927774fa3102be17e35be0efe4c270da9ee722ed2e8f687c0e4c3c1ec107381d6b7ad9c00e106084f64d3ae371967c0e6235368849c3a3f19ce0d5fa88eef3703af68cf274bb0dbb681a0b8a0d12a7664ab56328772b2a874f8344305372f30d18f5f618e8604fe5acead9ded935c620c52287bad960354087b8bfaeda0864cf7dbb365b1ace041ca28f95314f9389b191ef5d038b7a25c42dcdb554405178a908d0617f798c55623bd14c0a06c8c93ac498158ccbb39e18237b92e2e57e9affcfe16c7582da8ddceaa4877919ea2e20ed4af7c19d480189a2e3b39aa70e9a6a03ba54586e028a719669e0e9535ce89404906da7cafc62fdea8d526ada55de9b705bb8b27d13b8829103aca83ad3a8159e95da6a5ecb9d9f1db3d6d8d7fcb2e378d74b154d5abfb7b685f85159973b9fcfc41def2b5dd95cb16493d45359f0712ac44157cf83132ceab42c40a8a60220526df5b4f5590ad654578490fdcd919e7a7d09c76d8c0d5e56e9bdc61b1f9a6d6a712072657fe3daa819a2077eeb01a7edb4e5babe1fbecd8a99e4be9e9ca78f58fd2413ff09c16c6a1288a59cea49b8cbb053b7fd0f36fa9380592d9a22471230eda52c5b825900707e3823eaff456d24c3e9bfc40fd7965590f37a05275cc0e68f6737ab3eb1ba602744d4711e65b55ecf99793b41222f0e7e4cb3f94a9408103725671f05f8747873b2d95df3e5ae1d5d88f97950be6a070812622b92814758d6672f8de89ba13a40796c8b971ed9804d6bcc2a869e4c675743a2278a67571fe768448cb863bc782c644527ac4a66f04d196925105cf8125c63e51c1b540fe8843af2134b00f012abcb8dfa3e9094"}) ioctl$NBD_DO_IT(r4, 0xab03) 00:53:17 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x181080) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:17 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x8201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f00000000c0)) socket$inet_udplite(0x2, 0x2, 0x88) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x8201, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)) (async) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f00000000c0)) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) 00:53:17 executing program 3: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) 00:53:17 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x80081272, 0xfffffffffffffffb) 00:53:17 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x6) 00:53:17 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x181080) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x181080) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) 00:53:17 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x80081272, 0xfffffffffffffffb) 00:53:17 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async, rerun: 32) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000000c0)={0x7, 0x6, 0xff}) r3 = socket(0x23, 0x610fe8acbe98cebf, 0x1) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) (async, rerun: 64) r4 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000140)=0x1) (async) r5 = syz_open_pts(0xffffffffffffffff, 0x42002) ioctl$PIO_FONTX(r5, 0x4b6c, &(0x7f0000000100)={0x1be, 0x13, &(0x7f0000000280)="46a478b00e7663b27162bbcfcaa32a4bc3a1198d12c7564061cf34ea6016424bb7991418e9dd0812068d6b1e73740f124051651b2974b02d17eb6d9cbedb0496d3743c42590763fc071426c6e72272ed7fb40363f564999be005cf7bf7e818f0729e3963f3602c304e3a76ac153ad63366b258a3166b4fc8fb2c6d459970e75af51c620c2146394f88f9174b6aad1d142de132ff2803e44ec898ee698473bf7ff6133253644415e234ce993a82eacb277a5c582b7c4c97828bc26cb72ea012cce1cceec23204455d9749122bfeefc29e2a888068dca4eff3674d6ff9106b9bb52e1a1e6459fa83bcd5cf538b7845e2f69987e4d4cbdc08cdaa0e4367d7e0f97da3eafe51aa384323f83d6c78e72241de25e7c085ca36bbd62d843c9f4cf8047a863ee24e8279a4d92e85dc68ff5fa3866ea5346a12c796f6ea07dd49f8749f89c58859f88cd286c2080a1e8510c0b82b68bc660b77da6a87e9b7ae76bfe35d4b316aafd6f2c028d2afc83a90cb4fb26aa53b6e90f9776a08fdc175df4cd653b32b517d554b35e5fe1fb5abfe5148c8fb1e765976b0bb7b7ddde6c01760ba96e9927774fa3102be17e35be0efe4c270da9ee722ed2e8f687c0e4c3c1ec107381d6b7ad9c00e106084f64d3ae371967c0e6235368849c3a3f19ce0d5fa88eef3703af68cf274bb0dbb681a0b8a0d12a7664ab56328772b2a874f8344305372f30d18f5f618e8604fe5acead9ded935c620c52287bad960354087b8bfaeda0864cf7dbb365b1ace041ca28f95314f9389b191ef5d038b7a25c42dcdb554405178a908d0617f798c55623bd14c0a06c8c93ac498158ccbb39e18237b92e2e57e9affcfe16c7582da8ddceaa4877919ea2e20ed4af7c19d480189a2e3b39aa70e9a6a03ba54586e028a719669e0e9535ce89404906da7cafc62fdea8d526ada55de9b705bb8b27d13b8829103aca83ad3a8159e95da6a5ecb9d9f1db3d6d8d7fcb2e378d74b154d5abfb7b685f85159973b9fcfc41def2b5dd95cb16493d45359f0712ac44157cf83132ceab42c40a8a60220526df5b4f5590ad654578490fdcd919e7a7d09c76d8c0d5e56e9bdc61b1f9a6d6a712072657fe3daa819a2077eeb01a7edb4e5babe1fbecd8a99e4be9e9ca78f58fd2413ff09c16c6a1288a59cea49b8cbb053b7fd0f36fa9380592d9a22471230eda52c5b825900707e3823eaff456d24c3e9bfc40fd7965590f37a05275cc0e68f6737ab3eb1ba602744d4711e65b55ecf99793b41222f0e7e4cb3f94a9408103725671f05f8747873b2d95df3e5ae1d5d88f97950be6a070812622b92814758d6672f8de89ba13a40796c8b971ed9804d6bcc2a869e4c675743a2278a67571fe768448cb863bc782c644527ac4a66f04d196925105cf8125c63e51c1b540fe8843af2134b00f012abcb8dfa3e9094"}) (async) ioctl$NBD_DO_IT(r4, 0xab03) 00:53:17 executing program 3: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) 00:53:17 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x1) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x6) 00:53:17 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x8201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f00000000c0)) socket$inet_udplite(0x2, 0x2, 0x88) 00:53:17 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x80081272, 0xfffffffffffffffb) 00:53:17 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x181080) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:17 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x1) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x6) 00:53:17 executing program 5: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x80081272, 0xfffffffffffffffb) 00:53:17 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40000) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) socket(0x29, 0x1, 0xff) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) recvfrom$rose(r2, &(0x7f0000000100)=""/149, 0x95, 0x40000002, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x7) syz_open_dev$media(&(0x7f00000000c0), 0x3, 0x4000) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, 0x0) ioctl$HIDIOCSUSAGE(r4, 0x4018480c, &(0x7f0000000080)={0x2, 0x100, 0x4, 0x3, 0x3, 0x1ff}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) [ 3197.949108][ T2218] ieee802154 phy0 wpan0: encryption failed: -22 [ 3197.954479][ T2218] ieee802154 phy1 wpan1: encryption failed: -22 [ 3198.343958][T25416] block nbd2: Receive control failed (result -32) [ 3198.346707][T29678] block nbd2: shutting down sockets 00:53:18 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x799402) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:18 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000000c0)={0x7, 0x6, 0xff}) r3 = socket(0x23, 0x610fe8acbe98cebf, 0x1) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) (async) r4 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000140)=0x1) r5 = syz_open_pts(0xffffffffffffffff, 0x42002) ioctl$PIO_FONTX(r5, 0x4b6c, &(0x7f0000000100)={0x1be, 0x13, &(0x7f0000000280)="46a478b00e7663b27162bbcfcaa32a4bc3a1198d12c7564061cf34ea6016424bb7991418e9dd0812068d6b1e73740f124051651b2974b02d17eb6d9cbedb0496d3743c42590763fc071426c6e72272ed7fb40363f564999be005cf7bf7e818f0729e3963f3602c304e3a76ac153ad63366b258a3166b4fc8fb2c6d459970e75af51c620c2146394f88f9174b6aad1d142de132ff2803e44ec898ee698473bf7ff6133253644415e234ce993a82eacb277a5c582b7c4c97828bc26cb72ea012cce1cceec23204455d9749122bfeefc29e2a888068dca4eff3674d6ff9106b9bb52e1a1e6459fa83bcd5cf538b7845e2f69987e4d4cbdc08cdaa0e4367d7e0f97da3eafe51aa384323f83d6c78e72241de25e7c085ca36bbd62d843c9f4cf8047a863ee24e8279a4d92e85dc68ff5fa3866ea5346a12c796f6ea07dd49f8749f89c58859f88cd286c2080a1e8510c0b82b68bc660b77da6a87e9b7ae76bfe35d4b316aafd6f2c028d2afc83a90cb4fb26aa53b6e90f9776a08fdc175df4cd653b32b517d554b35e5fe1fb5abfe5148c8fb1e765976b0bb7b7ddde6c01760ba96e9927774fa3102be17e35be0efe4c270da9ee722ed2e8f687c0e4c3c1ec107381d6b7ad9c00e106084f64d3ae371967c0e6235368849c3a3f19ce0d5fa88eef3703af68cf274bb0dbb681a0b8a0d12a7664ab56328772b2a874f8344305372f30d18f5f618e8604fe5acead9ded935c620c52287bad960354087b8bfaeda0864cf7dbb365b1ace041ca28f95314f9389b191ef5d038b7a25c42dcdb554405178a908d0617f798c55623bd14c0a06c8c93ac498158ccbb39e18237b92e2e57e9affcfe16c7582da8ddceaa4877919ea2e20ed4af7c19d480189a2e3b39aa70e9a6a03ba54586e028a719669e0e9535ce89404906da7cafc62fdea8d526ada55de9b705bb8b27d13b8829103aca83ad3a8159e95da6a5ecb9d9f1db3d6d8d7fcb2e378d74b154d5abfb7b685f85159973b9fcfc41def2b5dd95cb16493d45359f0712ac44157cf83132ceab42c40a8a60220526df5b4f5590ad654578490fdcd919e7a7d09c76d8c0d5e56e9bdc61b1f9a6d6a712072657fe3daa819a2077eeb01a7edb4e5babe1fbecd8a99e4be9e9ca78f58fd2413ff09c16c6a1288a59cea49b8cbb053b7fd0f36fa9380592d9a22471230eda52c5b825900707e3823eaff456d24c3e9bfc40fd7965590f37a05275cc0e68f6737ab3eb1ba602744d4711e65b55ecf99793b41222f0e7e4cb3f94a9408103725671f05f8747873b2d95df3e5ae1d5d88f97950be6a070812622b92814758d6672f8de89ba13a40796c8b971ed9804d6bcc2a869e4c675743a2278a67571fe768448cb863bc782c644527ac4a66f04d196925105cf8125c63e51c1b540fe8843af2134b00f012abcb8dfa3e9094"}) ioctl$NBD_DO_IT(r4, 0xab03) 00:53:18 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x5451, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)=0x3) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x1f) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200100) 00:53:18 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x1) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x6) 00:53:18 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40000) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) socket(0x29, 0x1, 0xff) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async, rerun: 32) recvfrom$rose(r2, &(0x7f0000000100)=""/149, 0x95, 0x40000002, 0x0, 0x0) (async, rerun: 32) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x7) (async) syz_open_dev$media(&(0x7f00000000c0), 0x3, 0x4000) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, 0x0) (async) ioctl$HIDIOCSUSAGE(r4, 0x4018480c, &(0x7f0000000080)={0x2, 0x100, 0x4, 0x3, 0x3, 0x1ff}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:18 executing program 5: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x80081272, 0xfffffffffffffffb) [ 3198.407383][T29712] block nbd2: shutting down sockets 00:53:18 executing program 5: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x80081272, 0xfffffffffffffffb) 00:53:18 executing program 3: ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x6, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:18 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x680e42) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:18 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x799402) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:18 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x5451, 0x0) (async, rerun: 64) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)=0x3) (async, rerun: 64) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x1f) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200100) 00:53:18 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40000) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) (async) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) socket(0x29, 0x1, 0xff) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) recvfrom$rose(r2, &(0x7f0000000100)=""/149, 0x95, 0x40000002, 0x0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x7) (async) syz_open_dev$media(&(0x7f00000000c0), 0x3, 0x4000) (async) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, 0x0) (async) ioctl$HIDIOCSUSAGE(r4, 0x4018480c, &(0x7f0000000080)={0x2, 0x100, 0x4, 0x3, 0x3, 0x1ff}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) [ 3198.479651][T29731] block nbd2: shutting down sockets 00:53:18 executing program 3: ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x6, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:18 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x101000) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x20000000002) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f00000000c0)={0x8000, 0x3, 0x8f02}) 00:53:18 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x799402) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) (async) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:18 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x80081272, 0x0) 00:53:18 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x5451, 0x0) (async) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)=0x3) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x1f) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200100) [ 3198.520006][T29729] block nbd0: shutting down sockets 00:53:18 executing program 3: ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x6, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:18 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x101000) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_CLEAR_QUE(r0, 0xab05) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x20000000002) (async) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f00000000c0)={0x8000, 0x3, 0x8f02}) 00:53:18 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x680e42) (async) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x680e42) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:18 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x40001, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:18 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x80081272, 0x0) 00:53:18 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x40001, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x40001, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) [ 3198.583426][T29748] block nbd2: shutting down sockets 00:53:18 executing program 3: ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f0000000040)={0x8, r0}) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x1d5081) ioctl$NBD_SET_SIZE(r1, 0xab02, 0xfffffffffffffffb) 00:53:18 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x1) ioctl$NBD_DO_IT(r2, 0xab03) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_NONBLOCK(r3, 0x500e, 0x0) [ 3198.622349][T29763] block nbd0: shutting down sockets 00:53:18 executing program 3: ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f0000000040)={0x8, r0}) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x1d5081) ioctl$NBD_SET_SIZE(r1, 0xab02, 0xfffffffffffffffb) 00:53:18 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x101000) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x20000000002) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f00000000c0)={0x8000, 0x3, 0x8f02}) 00:53:18 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) (async) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x680e42) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:18 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x80081272, 0x0) 00:53:18 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x40001, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:18 executing program 3: ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f0000000040)={0x8, r0}) (async) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x1d5081) ioctl$NBD_SET_SIZE(r1, 0xab02, 0xfffffffffffffffb) 00:53:18 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x7, 0x4) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:18 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x602000, 0x260) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x2cb) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x80000001) 00:53:18 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x80081270, 0xfffffffffffffffb) 00:53:18 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x7, 0x4) (async) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x20) [ 3198.721840][T29779] block nbd0: shutting down sockets 00:53:18 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)) [ 3199.466117][T25416] block nbd2: Receive control failed (result -32) [ 3199.471260][T29777] block nbd2: shutting down sockets 00:53:19 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x1) ioctl$NBD_DO_IT(r2, 0xab03) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f00000010c0)) (async, rerun: 32) ioctl$SNDCTL_DSP_NONBLOCK(r3, 0x500e, 0x0) (rerun: 32) 00:53:19 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x303042) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x2) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:19 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async, rerun: 32) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x602000, 0x260) (rerun: 32) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x2cb) (async) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x80000001) 00:53:19 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x80081270, 0xfffffffffffffffb) 00:53:19 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x7, 0x4) (async) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:19 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)) (async) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)) 00:53:19 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x303042) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x2) ioctl$NBD_DO_IT(r2, 0xab03) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x303042) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x2) (async) ioctl$NBD_DO_IT(r2, 0xab03) (async) 00:53:19 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x80081270, 0xfffffffffffffffb) 00:53:19 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)) 00:53:19 executing program 4: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_GETBLKSIZE(r1, 0xc0045004, &(0x7f0000000000)) 00:53:19 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async, rerun: 64) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x602000, 0x260) (rerun: 64) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x2cb) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x80000001) 00:53:19 executing program 4: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_GETBLKSIZE(r1, 0xc0045004, &(0x7f0000000000)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) (async) ioctl$SNDCTL_DSP_GETBLKSIZE(r1, 0xc0045004, &(0x7f0000000000)) (async) [ 3200.354690][T25416] block nbd2: Receive control failed (result -32) [ 3200.358433][T29819] block nbd2: shutting down sockets 00:53:20 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x1) ioctl$NBD_DO_IT(r2, 0xab03) (async) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f0000000bc0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_NONBLOCK(r3, 0x500e, 0x0) 00:53:20 executing program 5: ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x80081270, 0xfffffffffffffffb) 00:53:20 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x303042) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x2) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:20 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x4) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000140)={0x40, "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"}) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, 0xffffffffffffffff}) ioctl$NBD_CLEAR_QUE(r3, 0xab05) 00:53:20 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x6, @mcast2, 0xffffffff, 0xffffffff}, 0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)=0x3) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$TIOCNXCL(r1, 0x540d) 00:53:20 executing program 4: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_GETBLKSIZE(r1, 0xc0045004, &(0x7f0000000000)) 00:53:20 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x4) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000140)={0x40, "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"}) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, 0xffffffffffffffff}) ioctl$NBD_CLEAR_QUE(r3, 0xab05) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) (async) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x4) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000140)={0x40, "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"}) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) (async) ioctl$NBD_CLEAR_QUE(r3, 0xab05) (async) 00:53:20 executing program 5: ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x80081270, 0xfffffffffffffffb) 00:53:20 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000040)=0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000c00)) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x84003) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x5) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r5 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r5, 0xab03) 00:53:20 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x6, @mcast2, 0xffffffff, 0xffffffff}, 0x20) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)=0x3) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$TIOCNXCL(r1, 0x540d) 00:53:20 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x4) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000140)={0x40, "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"}) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, 0xffffffffffffffff}) ioctl$NBD_CLEAR_QUE(r3, 0xab05) 00:53:20 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r2, 0x2b, 0x3, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x40, 0x3, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x2f, 0x20, 0x3f, 0x4, 0x2a, @mcast1, @empty, 0x20, 0x20, 0xfffffffc, 0x7ff}}) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) [ 3200.499913][T29867] block nbd0: shutting down sockets [ 3201.222849][T25416] block nbd2: Receive control failed (result -32) [ 3201.228652][T29852] block nbd2: shutting down sockets 00:53:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x6, @mcast2, 0xffffffff, 0xffffffff}, 0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)=0x3) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$TIOCNXCL(r1, 0x540d) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x6, @mcast2, 0xffffffff, 0xffffffff}, 0x20) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)=0x3) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) 00:53:21 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x400100) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:21 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r2, 0x2b, 0x3, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x40, 0x3, 0x3}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x2f, 0x20, 0x3f, 0x4, 0x2a, @mcast1, @empty, 0x20, 0x20, 0xfffffffc, 0x7ff}}) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:21 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2480) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:21 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000040)=0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000c00)) (async) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000c00)) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x84003) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x5) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r5 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r5, 0xab03) 00:53:21 executing program 5: ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x80081270, 0xfffffffffffffffb) 00:53:21 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x80081270, 0xfffffffffffffffb) 00:53:21 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2480) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:21 executing program 3: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40080) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffdfffffffb) 00:53:21 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r2, 0x2b, 0x3, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x40, 0x3, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x2f, 0x20, 0x3f, 0x4, 0x2a, @mcast1, @empty, 0x20, 0x20, 0xfffffffc, 0x7ff}}) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:21 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x80081270, 0xfffffffffffffffb) [ 3201.314956][T29889] block nbd2: shutting down sockets [ 3201.319894][T29878] block nbd0: shutting down sockets 00:53:21 executing program 3: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40080) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffdfffffffb) 00:53:21 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2480) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:21 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x400100) ioctl$NBD_DO_IT(r2, 0xab03) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x400100) (async) ioctl$NBD_DO_IT(r2, 0xab03) (async) 00:53:21 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000040)=0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000c00)) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x84003) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x5) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r5 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r5, 0xab03) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000040)=0x1) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000c00)) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x84003) (async) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x5) (async) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$NBD_DO_IT(r5, 0xab03) (async) 00:53:21 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000000)=0x9) 00:53:21 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$TIOCSCTTY(r2, 0x540e, 0x40) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000040)=0x4) 00:53:21 executing program 3: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40080) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffdfffffffb) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffdfffffffb) 00:53:21 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x80081270, 0xfffffffffffffffb) [ 3201.400139][T29906] block nbd0: shutting down sockets [ 3201.430022][T29914] block nbd2: Device being setup by another task 00:53:21 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$TIOCSCTTY(r2, 0x540e, 0x40) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000040)=0x4) [ 3201.447277][T29914] block nbd2: shutting down sockets 00:53:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000000)=0x3) 00:53:21 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x10000) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:21 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000000)=0x9) 00:53:21 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x400100) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:21 executing program 5: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x80081270, 0xfffffffffffffffb) 00:53:21 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) ioctl$TIOCSCTTY(r2, 0x540e, 0x40) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000040)=0x4) 00:53:21 executing program 3: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000000)=0x3) 00:53:21 executing program 5: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x80081270, 0xfffffffffffffffb) 00:53:21 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000000)=0x9) 00:53:21 executing program 1: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000000)=0xffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="db07557b", @ANYRES64=r0, @ANYBLOB="00022dbd7000fcdbdf2504000000060001000700000005000400060000000500220001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x200080d0}, 0x4000) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x202000) ioctl$NBD_SET_FLAGS(r2, 0x301, 0x2) 00:53:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async, rerun: 32) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000000)=0x3) (rerun: 32) [ 3201.559142][T29929] block nbd2: shutting down sockets 00:53:21 executing program 5: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0x80081270, 0xfffffffffffffffb) 00:53:21 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f00000000c0)="f3e3c11824fd5fe5e9f668fde15fee4139baea88d39b6262469e85") [ 3202.312756][T25416] block nbd0: Receive control failed (result -32) [ 3202.317069][T29932] block nbd0: shutting down sockets 00:53:22 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x10000) ioctl$NBD_DO_IT(r2, 0xab03) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x10000) (async) ioctl$NBD_DO_IT(r2, 0xab03) (async) 00:53:22 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r2 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x200201, 0x202) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:22 executing program 1: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) (rerun: 32) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) (async) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000000)=0xffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="db07557b", @ANYRES64=r0, @ANYBLOB="00022dbd7000fcdbdf2504000000060001000700000005000400060000000500220001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x200080d0}, 0x4000) (async, rerun: 32) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x202000) (rerun: 32) ioctl$NBD_SET_FLAGS(r2, 0x301, 0x2) 00:53:22 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f00000000c0)=0xe3cc8b4e113ccde8) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) 00:53:22 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x80081270, 0x0) 00:53:22 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f00000000c0)="f3e3c11824fd5fe5e9f668fde15fee4139baea88d39b6262469e85") 00:53:22 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f00000000c0)=0xe3cc8b4e113ccde8) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) 00:53:22 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f00000000c0)="f3e3c11824fd5fe5e9f668fde15fee4139baea88d39b6262469e85") [ 3202.401353][T29966] block nbd2: shutting down sockets 00:53:22 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x80081270, 0x0) 00:53:22 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r2 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x200201, 0x202) ioctl$NBD_DO_IT(r2, 0xab03) (async) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:22 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f00000000c0)=0xe3cc8b4e113ccde8) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) [ 3202.461259][T29970] block nbd0: shutting down sockets 00:53:22 executing program 1: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000000)=0xffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="db07557b", @ANYRES64=r0, @ANYBLOB="00022dbd7000fcdbdf2504000000060001000700000005000400060000000500220001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x200080d0}, 0x4000) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x202000) ioctl$NBD_SET_FLAGS(r2, 0x301, 0x2) 00:53:22 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x10000) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:22 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x80081270, 0x0) 00:53:22 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:22 executing program 3: r0 = getpid() sched_rr_get_interval(r0, &(0x7f00000000c0)) sched_rr_get_interval(r0, &(0x7f0000000000)) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x210980) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x1) [ 3202.511697][T29979] block nbd2: shutting down sockets 00:53:22 executing program 3: r0 = getpid() sched_rr_get_interval(r0, &(0x7f00000000c0)) (async) sched_rr_get_interval(r0, &(0x7f0000000000)) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x210980) (async, rerun: 64) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x1) 00:53:22 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r2 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x200201, 0x202) ioctl$NBD_DO_IT(r2, 0xab03) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x200201, 0x202) (async) ioctl$NBD_DO_IT(r2, 0xab03) (async) 00:53:22 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x80081270, 0xfffffffffffffffb) 00:53:22 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) 00:53:22 executing program 3: r0 = getpid() sched_rr_get_interval(r0, &(0x7f00000000c0)) sched_rr_get_interval(r0, &(0x7f0000000000)) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x210980) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x1) (async) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x1) 00:53:22 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000040)=0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000c00)) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x84003) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x5) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r5 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r5, 0xab03) 00:53:22 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:22 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) [ 3202.672870][T30010] block nbd2: shutting down sockets [ 3202.675700][T30014] block nbd5: shutting down sockets [ 3203.345997][T25416] block nbd0: Receive control failed (result -32) [ 3203.351341][T29995] block nbd0: shutting down sockets 00:53:23 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x12a00, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', r0, r1}, 0x48) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) 00:53:23 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x555c00) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0xfffffffeffffffff) accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@short={0xb, @remote, @rose, 0x1, @netrom}, &(0x7f0000000140)=0x1c, 0x80000) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f0000000180)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000040)) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) accept4$rose(r1, &(0x7f0000000100)=@short={0xb, @dev, @remote, 0x1, @rose}, &(0x7f00000001c0)=0x1c, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f00000000c0)) 00:53:23 executing program 4: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:23 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) 00:53:23 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0xffff) 00:53:23 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000040)=0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000c00)) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x84003) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x5) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r5 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r5, 0xab03) 00:53:23 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x555c00) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0xfffffffeffffffff) accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@short={0xb, @remote, @rose, 0x1, @netrom}, &(0x7f0000000140)=0x1c, 0x80000) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f0000000180)) (async, rerun: 64) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000040)) (async, rerun: 64) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) accept4$rose(r1, &(0x7f0000000100)=@short={0xb, @dev, @remote, 0x1, @rose}, &(0x7f00000001c0)=0x1c, 0x0) (async, rerun: 32) ioctl$TCGETS(r0, 0x5401, &(0x7f00000000c0)) (rerun: 32) [ 3203.422416][T30034] block nbd5: shutting down sockets 00:53:23 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2e840, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x201003) 00:53:23 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f00000000c0)={r1}) ioctl$NBD_SET_SIZE(r2, 0xab02, 0x8) 00:53:23 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x555c00) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0xfffffffeffffffff) (async, rerun: 32) accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@short={0xb, @remote, @rose, 0x1, @netrom}, &(0x7f0000000140)=0x1c, 0x80000) (rerun: 32) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f0000000180)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000040)) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) accept4$rose(r1, &(0x7f0000000100)=@short={0xb, @dev, @remote, 0x1, @rose}, &(0x7f00000001c0)=0x1c, 0x0) (async) ioctl$TCGETS(r0, 0x5401, &(0x7f00000000c0)) 00:53:23 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000040)=0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000c00)) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x84003) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x5) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r5 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r5, 0xab03) 00:53:23 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f00000000c0)={r1}) (async) ioctl$NBD_SET_SIZE(r2, 0xab02, 0x8) [ 3203.549863][T30054] block nbd5: shutting down sockets [ 3204.209910][T25416] block nbd0: Receive control failed (result -32) [ 3204.212725][T30031] block nbd0: shutting down sockets 00:53:24 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xc8001) 00:53:24 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f00000000c0)={r1}) (async, rerun: 32) ioctl$NBD_SET_SIZE(r2, 0xab02, 0x8) (rerun: 32) 00:53:24 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2e840, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x201003) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2e840, 0x0) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x201003) (async) 00:53:24 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x12a00, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', r0, r1}, 0x48) (async) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) [ 3204.222720][ T6119] block nbd2: Receive control failed (result -32) [ 3204.223334][T30036] block nbd2: shutting down sockets 00:53:24 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0xffff) 00:53:24 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000040)=0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000c00)) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x84003) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x5) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 00:53:24 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xc8001) 00:53:24 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) 00:53:24 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) (async, rerun: 64) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (rerun: 64) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xc8001) [ 3204.310710][T30070] block nbd5: shutting down sockets 00:53:24 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)) (async) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2e840, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x201003) 00:53:24 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async) ioctl$NBD_DO_IT(r0, 0xab03) 00:53:24 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000040)=0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000c00)) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x84003) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x5) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 00:53:24 executing program 3: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000000)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SIZE(r2, 0xab02, 0xffffffffffffff5f) 00:53:24 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x158) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000000c0)) [ 3204.389609][T30088] block nbd5: shutting down sockets 00:53:24 executing program 3: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000000)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SIZE(r2, 0xab02, 0xffffffffffffff5f) [ 3205.067116][ T6119] block nbd0: Receive control failed (result -32) [ 3205.071005][T30062] block nbd0: shutting down sockets 00:53:25 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x12a00, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', r0, r1}, 0x48) (async, rerun: 64) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) [ 3205.121443][T25416] block nbd2: Receive control failed (result -32) [ 3205.121828][T30077] block nbd2: shutting down sockets 00:53:25 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000040)=0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000c00)) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x84003) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x5) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 00:53:25 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) 00:53:25 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async, rerun: 64) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x158) (async, rerun: 64) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000000c0)) 00:53:25 executing program 3: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000000)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SIZE(r2, 0xab02, 0xffffffffffffff5f) 00:53:25 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) (async) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0xffff) 00:53:25 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x145000, 0x160) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) 00:53:25 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x158) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000000c0)) 00:53:25 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2d0900) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x98, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x0, 0x1, 0x33}, @fda={0x66646185, 0x2, 0x1, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/195, 0xc3, 0x0, 0x36}}, &(0x7f0000000280)={0x0, 0x20, 0x40}}, 0x400}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@flat=@weak_handle={0x77682a85, 0x181}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0xa, 0x1, 0x30}}, &(0x7f0000000340)={0x0, 0x18, 0x30}}}], 0x4b, 0x0, &(0x7f0000000440)="3f97087b57d40606edade6ccd90d8a37e519e9230b063ce0f67d3c178f7a225fa6c2a197f554112831c825451ef8201330bb50e6f6507d541132ffb103209fbac2fd6185efd653d5a2b9f6"}) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_NONBLOCK(r3, 0x500e, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x1800, 0x0, 0xffffffffffffffff}) ioctl$NBD_PRINT_DEBUG(r4, 0xab06) 00:53:25 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x28041) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) [ 3205.199597][T30121] binder: 30121:30120 cannot find target node [ 3205.202244][T30121] binder: 30120:30121 transaction async to 0:0 failed 2883/29189/-22, size 104-24 line 3054 [ 3205.211625][T23426] binder: undelivered TRANSACTION_ERROR: 29189 00:53:25 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2d0900) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x98, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x0, 0x1, 0x33}, @fda={0x66646185, 0x2, 0x1, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/195, 0xc3, 0x0, 0x36}}, &(0x7f0000000280)={0x0, 0x20, 0x40}}, 0x400}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@flat=@weak_handle={0x77682a85, 0x181}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0xa, 0x1, 0x30}}, &(0x7f0000000340)={0x0, 0x18, 0x30}}}], 0x4b, 0x0, &(0x7f0000000440)="3f97087b57d40606edade6ccd90d8a37e519e9230b063ce0f67d3c178f7a225fa6c2a197f554112831c825451ef8201330bb50e6f6507d541132ffb103209fbac2fd6185efd653d5a2b9f6"}) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_NONBLOCK(r3, 0x500e, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x1800, 0x0, 0xffffffffffffffff}) ioctl$NBD_PRINT_DEBUG(r4, 0xab06) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2d0900) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x98, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x0, 0x1, 0x33}, @fda={0x66646185, 0x2, 0x1, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/195, 0xc3, 0x0, 0x36}}, &(0x7f0000000280)={0x0, 0x20, 0x40}}, 0x400}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@flat=@weak_handle={0x77682a85, 0x181}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0xa, 0x1, 0x30}}, &(0x7f0000000340)={0x0, 0x18, 0x30}}}], 0x4b, 0x0, &(0x7f0000000440)="3f97087b57d40606edade6ccd90d8a37e519e9230b063ce0f67d3c178f7a225fa6c2a197f554112831c825451ef8201330bb50e6f6507d541132ffb103209fbac2fd6185efd653d5a2b9f6"}) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f0000000bc0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f00000010c0)) (async) ioctl$SNDCTL_DSP_NONBLOCK(r3, 0x500e, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x1800}) (async) ioctl$NBD_PRINT_DEBUG(r4, 0xab06) (async) 00:53:25 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x28041) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x28041) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) [ 3205.228638][T30104] block nbd5: shutting down sockets 00:53:25 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x60402, 0x0) [ 3205.251349][T30129] binder: 30129:30127 cannot find target node [ 3205.252862][T30129] binder: 30127:30129 transaction async to 0:0 failed 2884/29189/-22, size 104-24 line 3054 00:53:25 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000040)=0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000c00)) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x84003) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x5) r5 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r5, 0xab03) [ 3205.266579][T30131] binder: 30131:30127 cannot find target node [ 3205.272229][T30131] binder: 30127:30131 transaction async to 0:0 failed 2885/29189/-22, size 104-24 line 3054 [ 3205.298364][T23426] binder: undelivered TRANSACTION_ERROR: 29189 [ 3205.299899][T23426] binder: undelivered TRANSACTION_ERROR: 29189 00:53:25 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2d0900) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x98, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x0, 0x1, 0x33}, @fda={0x66646185, 0x2, 0x1, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/195, 0xc3, 0x0, 0x36}}, &(0x7f0000000280)={0x0, 0x20, 0x40}}, 0x400}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@flat=@weak_handle={0x77682a85, 0x181}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0xa, 0x1, 0x30}}, &(0x7f0000000340)={0x0, 0x18, 0x30}}}], 0x4b, 0x0, &(0x7f0000000440)="3f97087b57d40606edade6ccd90d8a37e519e9230b063ce0f67d3c178f7a225fa6c2a197f554112831c825451ef8201330bb50e6f6507d541132ffb103209fbac2fd6185efd653d5a2b9f6"}) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_NONBLOCK(r3, 0x500e, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x1800, 0x0, 0xffffffffffffffff}) ioctl$NBD_PRINT_DEBUG(r4, 0xab06) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2d0900) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x98, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x0, 0x1, 0x33}, @fda={0x66646185, 0x2, 0x1, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/195, 0xc3, 0x0, 0x36}}, &(0x7f0000000280)={0x0, 0x20, 0x40}}, 0x400}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@flat=@weak_handle={0x77682a85, 0x181}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0xa, 0x1, 0x30}}, &(0x7f0000000340)={0x0, 0x18, 0x30}}}], 0x4b, 0x0, &(0x7f0000000440)="3f97087b57d40606edade6ccd90d8a37e519e9230b063ce0f67d3c178f7a225fa6c2a197f554112831c825451ef8201330bb50e6f6507d541132ffb103209fbac2fd6185efd653d5a2b9f6"}) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f0000000bc0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f00000010c0)) (async) ioctl$SNDCTL_DSP_NONBLOCK(r3, 0x500e, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x1800}) (async) ioctl$NBD_PRINT_DEBUG(r4, 0xab06) (async) [ 3205.317887][T30142] binder: 30142:30141 cannot find target node [ 3205.320698][T30140] block nbd5: shutting down sockets 00:53:25 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x28041) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) 00:53:25 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000040)=0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000c00)) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x84003) r4 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) [ 3205.390029][T30148] block nbd5: shutting down sockets [ 3205.990495][T25416] block nbd0: Receive control failed (result -32) [ 3205.995128][T30114] block nbd0: shutting down sockets [ 3206.009805][ T6119] block nbd2: Receive control failed (result -32) [ 3206.012293][T30116] block nbd2: shutting down sockets 00:53:26 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x301001) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0xb) socket(0x1d, 0x2, 0x0) 00:53:26 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x60402, 0x0) 00:53:26 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000000c0), 0x4481, 0x46) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='I\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030026bd7000fcdbdf25040000000800090001"], 0x4c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x14, r2, 0x20, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x48084}, 0x20000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1f) ioctl$NBD_SET_FLAGS(r3, 0x301, 0x1) 00:53:26 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000040)=0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000c00)) r4 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) 00:53:26 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x529601) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:26 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async) r2 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x145000, 0x160) ioctl$NBD_DO_IT(r2, 0xab03) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) (async) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) [ 3206.049760][T30151] netlink: 45 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3206.070519][T30155] can: request_module (can-proto-0) failed. 00:53:26 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x529601) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async, rerun: 64) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:26 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000000c0), 0x4481, 0x46) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='I\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030026bd7000fcdbdf25040000000800090001"], 0x4c}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x14, r2, 0x20, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x48084}, 0x20000000) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1f) ioctl$NBD_SET_FLAGS(r3, 0x301, 0x1) 00:53:26 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x301001) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0xb) (async) socket(0x1d, 0x2, 0x0) 00:53:26 executing program 4: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x60402, 0x0) [ 3206.102353][T30164] block nbd5: shutting down sockets [ 3206.112787][T30159] block nbd0: shutting down sockets 00:53:26 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async) r2 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x145000, 0x160) ioctl$NBD_DO_IT(r2, 0xab03) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) (async) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) [ 3206.140688][T30170] can: request_module (can-proto-0) failed. 00:53:26 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000040)=0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) 00:53:26 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x529601) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) (async) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:26 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x301001) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0xb) socket(0x1d, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x301001) (async) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0xb) (async) socket(0x1d, 0x2, 0x0) (async) 00:53:26 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000000c0), 0x4481, 0x46) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='I\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030026bd7000fcdbdf25040000000800090001"], 0x4c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x14, r2, 0x20, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x48084}, 0x20000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1f) (async) ioctl$NBD_SET_FLAGS(r3, 0x301, 0x1) [ 3206.199513][T30182] block nbd5: shutting down sockets 00:53:26 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x10000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:26 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000040)=0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) [ 3206.245272][T30187] can: request_module (can-proto-0) failed. 00:53:26 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40002) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:26 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f00000000c0)=0x1) [ 3206.255219][T30192] netlink: 45 bytes leftover after parsing attributes in process `syz-executor.1'. 00:53:26 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040), 0x0, 0x800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) 00:53:26 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40002) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) [ 3206.300193][T30200] block nbd5: shutting down sockets 00:53:26 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000040)=0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) [ 3206.990811][ T6119] block nbd0: Receive control failed (result -32) [ 3206.992447][T30179] block nbd0: shutting down sockets 00:53:26 executing program 4: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f00000000c0)=0x1) 00:53:26 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040), 0x0, 0x800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) 00:53:26 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r5, 0x2b, 0x3, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x40, 0x3, 0x3}}) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000280)) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x5c, r3, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x43}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_MODE={0xffffff9a, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xd0ed}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$KDADDIO(r6, 0x4b34, 0xcdee) r7 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x3) ioctl$NBD_DO_IT(r7, 0xab03) 00:53:26 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40002) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:27 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) [ 3207.069459][T25416] block nbd2: Receive control failed (result -32) [ 3207.071329][T30193] block nbd2: shutting down sockets 00:53:27 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040), 0x0, 0x800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) 00:53:27 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x10000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x10000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$NBD_DO_IT(r2, 0xab03) (async) 00:53:27 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f00000000c0)=0x1) 00:53:27 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:27 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) 00:53:27 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x30, 0x0, &(0x7f0000000040)=[@request_death, @release, @request_death={0x400c630e, 0x3}, @register_looper, @enter_looper], 0x17, 0x0, &(0x7f0000000080)="bf8fca6097b42671af0f4bf13a8a1f8753cc2e4b44251a"}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000180)) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) [ 3207.179083][ T50] block nbd5: Receive control failed (result -32) [ 3207.179336][T30210] block nbd5: shutting down sockets [ 3207.191910][T30234] block nbd2: shutting down sockets 00:53:27 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000040)=0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) [ 3207.229176][T30240] block nbd2: Device being setup by another task [ 3207.881030][T25416] block nbd0: Receive control failed (result -32) [ 3207.881439][T30221] block nbd0: shutting down sockets 00:53:27 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 32) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r5, 0x2b, 0x3, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x40, 0x3, 0x3}}) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000280)) (async, rerun: 32) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x5c, r3, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x43}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_MODE={0xffffff9a, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xd0ed}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000) (async, rerun: 32) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$KDADDIO(r6, 0x4b34, 0xcdee) (async, rerun: 32) r7 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x3) (async) ioctl$NBD_DO_IT(r7, 0xab03) 00:53:27 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x1ae) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x48024, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000140)) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f00000000c0)) 00:53:27 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x30, 0x0, &(0x7f0000000040)=[@request_death, @release, @request_death={0x400c630e, 0x3}, @register_looper, @enter_looper], 0x17, 0x0, &(0x7f0000000080)="bf8fca6097b42671af0f4bf13a8a1f8753cc2e4b44251a"}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000180)) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:27 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 00:53:27 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x10000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:27 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x30, 0x0, &(0x7f0000000040)=[@request_death, @release, @request_death={0x400c630e, 0x3}, @register_looper, @enter_looper], 0x17, 0x0, &(0x7f0000000080)="bf8fca6097b42671af0f4bf13a8a1f8753cc2e4b44251a"}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) (rerun: 32) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000180)) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:27 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x1ae) (async) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x1ae) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x48024, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000140)) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f00000000c0)) 00:53:27 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) (async) 00:53:27 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 00:53:27 executing program 1: ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000040)) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:27 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) [ 3208.039001][ T6119] block nbd5: Receive control failed (result -32) [ 3208.039340][T30244] block nbd5: shutting down sockets 00:53:28 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000040)=0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) [ 3208.062618][T30274] block nbd3: shutting down sockets [ 3208.750095][T25416] block nbd2: Receive control failed (result -32) [ 3208.750722][T30256] block nbd2: shutting down sockets [ 3208.751745][ T50] block nbd0: Receive control failed (result -32) [ 3208.760564][T30254] block nbd0: shutting down sockets 00:53:28 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async, rerun: 64) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r5, 0x2b, 0x3, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x40, 0x3, 0x3}}) (async) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000280)) (async, rerun: 64) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x5c, r3, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x43}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_MODE={0xffffff9a, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xd0ed}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000) (async, rerun: 64) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$KDADDIO(r6, 0x4b34, 0xcdee) (async) r7 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x3) (async, rerun: 64) ioctl$NBD_DO_IT(r7, 0xab03) (rerun: 64) 00:53:28 executing program 1: ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000040)) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:28 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x1ae) (async) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x1ae) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x48024, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000140)) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f00000000c0)) 00:53:28 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async, rerun: 64) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (rerun: 64) 00:53:28 executing program 2: ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040)) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000000c0), 0x82800, 0x160) ioctl$NBD_DISCONNECT(r2, 0xab08) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) 00:53:28 executing program 1: ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000040)) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:28 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x228d02, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)) [ 3208.839482][T30284] block nbd0: shutting down sockets 00:53:28 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @dev, @rose, 0x0, [@null, @rose, @default, @null, @default]}, &(0x7f00000000c0)=0x40, 0x800) accept4$rose(r1, &(0x7f0000000100)=@short={0xb, @dev, @null, 0x1, @bcast}, &(0x7f0000000140)=0x1c, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x7f) 00:53:28 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) bpf$BPF_PROG_QUERY(0x3, &(0x7f0000000100)={@map=0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f00000000c0)={'custom1\x00'}) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x7, 0x0, r2, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x48) ioctl$NBD_DO_IT(r3, 0xab03) 00:53:28 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x228d02, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000000)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)) 00:53:28 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @dev, @rose, 0x0, [@null, @rose, @default, @null, @default]}, &(0x7f00000000c0)=0x40, 0x800) accept4$rose(r1, &(0x7f0000000100)=@short={0xb, @dev, @null, 0x1, @bcast}, &(0x7f0000000140)=0x1c, 0x0) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x7f) [ 3208.897651][ T6119] block nbd5: Receive control failed (result -32) [ 3208.899170][T30278] block nbd5: shutting down sockets 00:53:28 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000040)=0x1) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:28 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @dev, @rose, 0x0, [@null, @rose, @default, @null, @default]}, &(0x7f00000000c0)=0x40, 0x800) accept4$rose(r1, &(0x7f0000000100)=@short={0xb, @dev, @null, 0x1, @bcast}, &(0x7f0000000140)=0x1c, 0x0) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x7f) 00:53:28 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x228d02, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000000)) (async, rerun: 64) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (rerun: 64) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)) 00:53:28 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000140)=0x401) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) [ 3208.970265][T30312] block nbd5: shutting down sockets [ 3209.620858][ T50] block nbd2: Receive control failed (result -32) [ 3209.621940][T30291] block nbd2: shutting down sockets [ 3209.628899][T30287] block nbd3: shutting down sockets 00:53:29 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000c00)) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:29 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x3) 00:53:29 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000140)=0x401) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1, 0x80000}) (async) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000140)=0x401) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) (async) 00:53:29 executing program 2: ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040)) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000000c0), 0x82800, 0x160) ioctl$NBD_DISCONNECT(r2, 0xab08) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040)) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000000c0), 0x82800, 0x160) (async) ioctl$NBD_DISCONNECT(r2, 0xab08) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$NBD_DO_IT(r3, 0xab03) (async) 00:53:29 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000040)=0x1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) [ 3209.680019][T30320] block nbd3: shutting down sockets [ 3209.711788][ T6119] block nbd0: Receive control failed (result -32) [ 3209.712802][T30302] block nbd0: shutting down sockets 00:53:29 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) bpf$BPF_PROG_QUERY(0x3, &(0x7f0000000100)={@map, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x3, &(0x7f0000000100)={@map=0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f00000000c0)={'custom1\x00'}) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x7, 0x0, r2, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x48) ioctl$NBD_DO_IT(r3, 0xab03) (async) ioctl$NBD_DO_IT(r3, 0xab03) 00:53:29 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x3) 00:53:29 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:29 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000140)=0x401) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1, 0x80000}) (async) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000140)=0x401) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) (async) [ 3209.729339][T30334] block nbd5: shutting down sockets 00:53:29 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:29 executing program 4: ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0x4) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x3) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f00000000c0)=0x80000001) 00:53:29 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x3) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x3) (async) [ 3209.793011][T30328] block nbd2: shutting down sockets 00:53:29 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:29 executing program 2: ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040)) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r2 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000000c0), 0x82800, 0x160) ioctl$NBD_DISCONNECT(r2, 0xab08) (async) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) 00:53:29 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20000) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000040)=@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:29 executing program 4: ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0x4) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f00000010c0)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x3) (async) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) (async) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f00000000c0)=0x80000001) 00:53:29 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x0) (async, rerun: 32) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (rerun: 32) [ 3209.854166][T30355] block nbd5: shutting down sockets [ 3210.576386][ T6119] block nbd0: Receive control failed (result -32) [ 3210.577409][T30342] block nbd0: shutting down sockets 00:53:30 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) bpf$BPF_PROG_QUERY(0x3, &(0x7f0000000100)={@map=0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f00000000c0)={'custom1\x00'}) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x7, 0x0, r2, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x48) ioctl$NBD_DO_IT(r3, 0xab03) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) bpf$BPF_PROG_QUERY(0x3, &(0x7f0000000100)={@map, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f00000000c0)={'custom1\x00'}) (async) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x7, 0x0, r2, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x48) (async) ioctl$NBD_DO_IT(r3, 0xab03) (async) 00:53:30 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20000) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000040)=@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:30 executing program 3: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0x16, 0x10000001, 0x100000, &(0x7f00000000c0)}) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:30 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:30 executing program 4: ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0x4) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x3) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f00000000c0)=0x80000001) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0x4) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000bc0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f00000010c0)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x3) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) (async) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f00000000c0)=0x80000001) (async) 00:53:30 executing program 3: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0x16, 0x10000001, 0x100000, &(0x7f00000000c0)}) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:30 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20000) (async, rerun: 32) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async, rerun: 32) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000040)=@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}) (async, rerun: 32) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:30 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) [ 3210.684773][ T50] block nbd2: Receive control failed (result -32) [ 3210.685235][T30364] block nbd2: shutting down sockets 00:53:30 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:30 executing program 3: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0x16, 0x10000001, 0x100000, &(0x7f00000000c0)}) (async) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:30 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}]}, 0x34}}, 0x8840) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) 00:53:30 executing program 4: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000000)={0x7ff, 0x68, 0x200}) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) [ 3210.715001][T30381] block nbd0: shutting down sockets 00:53:30 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f00000000c0)="3e12fcd5094a0188e6d723e642c2a8da3dd007ad65b93f62b69653a9b4eea13dedd3c5921dcbe6fd56bfff3c3eb9d4f5a275cc782cfe4166b8c8697b27ce7dec1f16c46003c02307c1ffaaa09926f396ca8e05df285e5e4bfbe488d8d0a826943fdd72c6c80493cb457fe3368e959382b3e06c18f882490ac38e11fb550e450913b05aacd54a3c272ae318b1b768b55e1cd29358d498482176f8af53e3dd832c5121527dd4c826adbc819e06d5d34c878ee0ce0d77bb76bf5fe849fceebbb8d71d8535621def9d873c8ed1b63f8034a0600513dd256258be11b19975fd24665f") ioctl$NBD_SET_SIZE(r0, 0xab02, 0x6) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000001c0)) 00:53:30 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:30 executing program 4: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000000)={0x7ff, 0x68, 0x200}) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:30 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0xd2300) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:30 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:30 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0xd2300) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) (async, rerun: 32) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (rerun: 32) 00:53:30 executing program 4: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000000)={0x7ff, 0x68, 0x200}) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:30 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:30 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:30 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x4a) ioctl$SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x20) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000100)=0x4) [ 3211.557381][ T6119] block nbd2: Receive control failed (result -32) [ 3211.558309][T30404] block nbd2: shutting down sockets 00:53:31 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}]}, 0x34}}, 0x8840) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) (async) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) (async) ioctl$NBD_DO_IT(r4, 0xab03) 00:53:31 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) [ 3211.609746][ T50] block nbd0: Receive control failed (result -32) [ 3211.612444][T30412] block nbd0: shutting down sockets 00:53:31 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x4a) ioctl$SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f00000000c0)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x20) (async) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000100)=0x4) 00:53:31 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0xd2300) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0xd2300) (async) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) 00:53:31 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f00000000c0)="3e12fcd5094a0188e6d723e642c2a8da3dd007ad65b93f62b69653a9b4eea13dedd3c5921dcbe6fd56bfff3c3eb9d4f5a275cc782cfe4166b8c8697b27ce7dec1f16c46003c02307c1ffaaa09926f396ca8e05df285e5e4bfbe488d8d0a826943fdd72c6c80493cb457fe3368e959382b3e06c18f882490ac38e11fb550e450913b05aacd54a3c272ae318b1b768b55e1cd29358d498482176f8af53e3dd832c5121527dd4c826adbc819e06d5d34c878ee0ce0d77bb76bf5fe849fceebbb8d71d8535621def9d873c8ed1b63f8034a0600513dd256258be11b19975fd24665f") ioctl$NBD_SET_SIZE(r0, 0xab02, 0x6) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000001c0)) 00:53:31 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:31 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:31 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x81) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000000)=0x3) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000000c0)) 00:53:31 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r1, 0x7c80, 0x0) 00:53:31 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x4a) ioctl$SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x20) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000100)=0x4) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x4a) (async) ioctl$SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f00000000c0)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x20) (async) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000100)=0x4) (async) 00:53:31 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) [ 3211.669207][T30437] block nbd2: Device being setup by another task 00:53:31 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$MEDIA_REQUEST_IOC_QUEUE(r1, 0x7c80, 0x0) [ 3211.728859][T30453] block nbd0: Device being setup by another task [ 3212.413626][ T50] block nbd2: Receive control failed (result -32) [ 3212.414860][T30436] block nbd2: shutting down sockets 00:53:32 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}]}, 0x34}}, 0x8840) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}]}, 0x34}}, 0x8840) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$NBD_DO_IT(r4, 0xab03) (async) 00:53:32 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x81) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000000)=0x3) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000000c0)) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x81) (async) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000000)=0x3) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000000c0)) (async) 00:53:32 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:32 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async, rerun: 64) ioctl$MEDIA_REQUEST_IOC_QUEUE(r1, 0x7c80, 0x0) (rerun: 64) [ 3212.478124][ T6119] block nbd0: Receive control failed (result -32) [ 3212.478290][T30451] block nbd0: shutting down sockets 00:53:32 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x81) (async) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000000)=0x3) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000000c0)) 00:53:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xff) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0xfffffffffffffffa) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)=0x20) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f00000002c0)={0x1000, 0x4, 0x7ff}) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000000)=0x7ff) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 00:53:32 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:32 executing program 0: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f00000000c0)="3e12fcd5094a0188e6d723e642c2a8da3dd007ad65b93f62b69653a9b4eea13dedd3c5921dcbe6fd56bfff3c3eb9d4f5a275cc782cfe4166b8c8697b27ce7dec1f16c46003c02307c1ffaaa09926f396ca8e05df285e5e4bfbe488d8d0a826943fdd72c6c80493cb457fe3368e959382b3e06c18f882490ac38e11fb550e450913b05aacd54a3c272ae318b1b768b55e1cd29358d498482176f8af53e3dd832c5121527dd4c826adbc819e06d5d34c878ee0ce0d77bb76bf5fe849fceebbb8d71d8535621def9d873c8ed1b63f8034a0600513dd256258be11b19975fd24665f") (async) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f00000000c0)="3e12fcd5094a0188e6d723e642c2a8da3dd007ad65b93f62b69653a9b4eea13dedd3c5921dcbe6fd56bfff3c3eb9d4f5a275cc782cfe4166b8c8697b27ce7dec1f16c46003c02307c1ffaaa09926f396ca8e05df285e5e4bfbe488d8d0a826943fdd72c6c80493cb457fe3368e959382b3e06c18f882490ac38e11fb550e450913b05aacd54a3c272ae318b1b768b55e1cd29358d498482176f8af53e3dd832c5121527dd4c826adbc819e06d5d34c878ee0ce0d77bb76bf5fe849fceebbb8d71d8535621def9d873c8ed1b63f8034a0600513dd256258be11b19975fd24665f") ioctl$NBD_SET_SIZE(r0, 0xab02, 0x6) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000001c0)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000001c0)) 00:53:32 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8802) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x9) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)) 00:53:32 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) [ 3212.541156][T30476] block nbd2: shutting down sockets 00:53:32 executing program 3: ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_REINIT(r0, 0x7c81, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x50421) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r3, 0x29, 0xe0, 0x9e, 0xfffffffc, 0x14, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x8000, 0x8, 0x79cfe3d6, 0x7f}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x7) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) 00:53:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)) (async) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xff) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0xfffffffffffffffa) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)=0x20) (async) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f00000002c0)={0x1000, 0x4, 0x7ff}) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000000)=0x7ff) (async) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, 0x0) (async) ioctl$VT_WAITACTIVE(r5, 0x5607) 00:53:32 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:32 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8802) (async) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x9) (async) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)) 00:53:32 executing program 3: ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_REINIT(r0, 0x7c81, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x50421) (async) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r3, 0x29, 0xe0, 0x9e, 0xfffffffc, 0x14, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x8000, 0x8, 0x79cfe3d6, 0x7f}}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x7) (async) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, 0x0) (async) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) 00:53:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)) (async) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xff) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0xfffffffffffffffa) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)=0x20) (async) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f00000002c0)={0x1000, 0x4, 0x7ff}) (async) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000000)=0x7ff) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, 0x0) (async) ioctl$VT_WAITACTIVE(r5, 0x5607) 00:53:32 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:32 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8802) (async) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x9) (async) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)) 00:53:32 executing program 3: ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_REINIT(r0, 0x7c81, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x50421) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r3, 0x29, 0xe0, 0x9e, 0xfffffffc, 0x14, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x8000, 0x8, 0x79cfe3d6, 0x7f}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x7) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)) (async) ioctl$MEDIA_REQUEST_IOC_REINIT(r0, 0x7c81, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x50421) (async) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r3, 0x29, 0xe0, 0x9e, 0xfffffffc, 0x14, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x8000, 0x8, 0x79cfe3d6, 0x7f}}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x7) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) (async) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) (async) [ 3213.360685][ T6119] block nbd0: Receive control failed (result -32) [ 3213.361260][T30491] block nbd0: shutting down sockets 00:53:33 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:33 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) 00:53:33 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:33 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000140)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000100)=0xa8f) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000180)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)=0x3) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x24) 00:53:33 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) getresgid(&(0x7f0000000140)=0x0, &(0x7f0000000040), &(0x7f0000000000)) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000000c0)) setresgid(0x0, 0x0, r1) r2 = getegid() setresgid(r1, 0x0, r2) getegid() r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) ioctl$NBD_PRINT_DEBUG(r3, 0xab06) [ 3213.419128][T30530] block nbd5: shutting down sockets [ 3213.444906][T30509] block nbd2: shutting down sockets 00:53:33 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) getresgid(&(0x7f0000000140)=0x0, &(0x7f0000000040), &(0x7f0000000000)) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000000c0)) setresgid(0x0, 0x0, r1) r2 = getegid() setresgid(r1, 0x0, r2) getegid() r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) ioctl$NBD_PRINT_DEBUG(r3, 0xab06) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) getresgid(&(0x7f0000000140), &(0x7f0000000040), &(0x7f0000000000)) (async) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000000c0)) (async) setresgid(0x0, 0x0, r1) (async) getegid() (async) setresgid(r1, 0x0, r2) (async) getegid() (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) (async) ioctl$NBD_PRINT_DEBUG(r3, 0xab06) (async) 00:53:33 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) 00:53:33 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000140)) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000100)=0xa8f) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000180)) (async) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)=0x3) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x24) 00:53:33 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:33 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:33 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) getresgid(&(0x7f0000000140)=0x0, &(0x7f0000000040), &(0x7f0000000000)) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000000c0)) setresgid(0x0, 0x0, r1) r2 = getegid() setresgid(r1, 0x0, r2) getegid() r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) ioctl$NBD_PRINT_DEBUG(r3, 0xab06) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) getresgid(&(0x7f0000000140), &(0x7f0000000040), &(0x7f0000000000)) (async) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000000c0)) (async) setresgid(0x0, 0x0, r1) (async) getegid() (async) setresgid(r1, 0x0, r2) (async) getegid() (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) (async) ioctl$NBD_PRINT_DEBUG(r3, 0xab06) (async) 00:53:33 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:33 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) [ 3214.226521][ T6119] block nbd0: Receive control failed (result -32) [ 3214.227447][T30532] block nbd0: shutting down sockets 00:53:34 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) 00:53:34 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:34 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000140)) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000100)=0xa8f) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000180)) (async) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)=0x3) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x24) 00:53:34 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x406802) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x80000, 0x0, 0xffffffffffffffff}) write$cgroup_int(r1, &(0x7f00000000c0)=0x1, 0x12) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) r3 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000140), 0xc400, 0x92) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0xde) 00:53:34 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) ioctl$NBD_DO_IT(r0, 0xab03) 00:53:34 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:34 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x406802) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x80000, 0x0, 0xffffffffffffffff}) write$cgroup_int(r1, &(0x7f00000000c0)=0x1, 0x12) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) r3 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000140), 0xc400, 0x92) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0xde) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x406802) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x80000}) (async) write$cgroup_int(r1, &(0x7f00000000c0)=0x1, 0x12) (async) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async) ioctl$NBD_DISCONNECT(r0, 0xab08) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000140), 0xc400, 0x92) (async) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0xde) (async) [ 3214.315951][ T50] block nbd2: Receive control failed (result -32) [ 3214.316275][T30545] block nbd2: shutting down sockets 00:53:34 executing program 4: r0 = socket(0x5, 0x6, 0x9a) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x81, 0x4) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4020040}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r3, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x81}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x10004000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000100)) 00:53:34 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:34 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x406802) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x80000, 0x0, 0xffffffffffffffff}) write$cgroup_int(r1, &(0x7f00000000c0)=0x1, 0x12) (async) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async) ioctl$NBD_DISCONNECT(r0, 0xab08) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) r3 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000140), 0xc400, 0x92) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0xde) 00:53:34 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:34 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) ioctl$NBD_DO_IT(r0, 0xab03) [ 3215.100189][ T50] block nbd0: Receive control failed (result -32) [ 3215.101030][T30570] block nbd0: shutting down sockets 00:53:35 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) (async) ioctl$NBD_DO_IT(r3, 0xab03) 00:53:35 executing program 3: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) ioctl$NBD_DO_IT(r0, 0xab03) 00:53:35 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x12022) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000000)) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x12402) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x2) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x101) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) 00:53:35 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f00000000c0)={0x0, "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"}) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r2, 0xab05) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000040)) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:35 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:35 executing program 4: r0 = socket(0x5, 0x6, 0x9a) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x81, 0x4) (async) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x20) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4020040}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r3, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x81}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x10004000) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000100)) 00:53:35 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x12022) (async) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000000)) (async) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x12402) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x2) (async) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) (async) ioctl$NBD_DO_IT(r0, 0xab03) (async) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x101) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) 00:53:35 executing program 3: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x3ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ff, 0x4}, 0x20) 00:53:35 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:35 executing program 4: socket(0x5, 0x6, 0x9a) (async) r0 = socket(0x5, 0x6, 0x9a) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x81, 0x4) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x20) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4020040}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r3, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x81}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x10004000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000100)) 00:53:35 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:35 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x12022) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000000)) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x12402) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x2) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x101) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) [ 3215.962625][ T50] block nbd2: Receive control failed (result -32) [ 3215.964924][T30604] block nbd2: shutting down sockets [ 3215.980517][ T6119] block nbd0: Receive control failed (result -32) [ 3215.980814][T30616] block nbd0: shutting down sockets 00:53:35 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80081) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x4cb8) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:35 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x6) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) 00:53:35 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f00000000c0)={0x0, "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"}) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r2, 0xab05) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000040)) ioctl$NBD_DO_IT(r2, 0xab03) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f00000000c0)={0x0, "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"}) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$NBD_CLEAR_QUE(r2, 0xab05) (async) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000040)) (async) ioctl$NBD_DO_IT(r2, 0xab03) (async) 00:53:35 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:35 executing program 4: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000040)) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x20000023) 00:53:35 executing program 3: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x3ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ff, 0x4}, 0x20) 00:53:35 executing program 3: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x3ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ff, 0x4}, 0x20) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x3ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ff, 0x4}, 0x20) (async) 00:53:36 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80081) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x4cb8) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:36 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:36 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000000000)) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:36 executing program 4: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000040)) (async) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000040)) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x20000023) 00:53:36 executing program 1: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80081) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x4cb8) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:36 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x8) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) [ 3216.122748][T30636] block nbd2: shutting down sockets [ 3216.854237][ T50] block nbd0: Receive control failed (result -32) [ 3216.854939][T30638] block nbd0: shutting down sockets 00:53:36 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f00000000c0)={0x0, "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"}) (async) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f00000000c0)={0x0, "c524a939d90cb83e41a080c7f676817e27c71792f19d407f26040969044021145f46bcc6ced94b868e4ca737d5d084762ab4c955ea2a21b64fd0c1944d6a520e2fa2dbd48335836a249e771bcdef4ddcf047d6d1f9606c085ac2e7c492c7cce10e7e6a225558d0a0eb8a569e90dc7f0e496cac8ac6840676b569e1bbc00537a8a7969b861a5aef9973aa1c4fa31d6fef11f6222b46d7ec29b35f96af30d8c5eaa2577cff90e28f771c7c1e875a0fa7f2866f0b1a1e42e2c71dd4debab72441fa3144e770c7c5bbcce6ffaf3961b8131a55cd6e4361df12c8f61dbb85a5e74701549ff91717d70adc49fdf627e69ba8c7b79853361d6e7e339f4b0f41fb85643ef6730365ef245a01b5874477469f52c466095753cf7cb890d0b2b7b6e5793f9a974a663d5fe9b0a422eafab58b97f0204dc12da0fef21bff69601122b76f8a3b23531814abe0565e2437125b26825a7920135fe2481409286fe095acd8e86bf694353338325fb04578df85585d396c5ecfca6749a746c9e88e9273807197ee61b40af26f6c7aeb650f9bf723e80da827a96fb5846bd4b70328386f6206172d48a2c3dcdc26da52c7264346ab8036a811f42cb75f8549b79be4553f78e08efd4f189e50a5c894f72a6fc8fb82b2b302d0b73476680805600ec74d54df39afd156fae7d43eb9d3ae735807351edd5f87505834e32b24d34a91e8ce085b5db37bbc"}) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r2, 0xab05) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000040)) (async) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000040)) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:36 executing program 3: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000000000)) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:36 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x8) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x80000}) (async) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) (async) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x8) (async) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) (async) 00:53:36 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x6) (async) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) 00:53:36 executing program 4: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000040)) (async) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f00000010c0)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x20000023) [ 3216.893378][T25416] block nbd5: Receive control failed (result -32) [ 3216.895195][T30643] block nbd5: shutting down sockets 00:53:36 executing program 4: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0xd2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f00000000c0)) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x693e2eff28af72d6, r1, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:36 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:36 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) (async) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x8) (async) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 00:53:36 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000000000)) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:36 executing program 4: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0xd2) (async) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) (async) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f00000000c0)) (async) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x693e2eff28af72d6, r1, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:36 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x42680, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x2) 00:53:36 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080)) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x2) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x4100, 0x0) delete_module(&(0x7f00000000c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x800) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) [ 3217.707544][T25416] block nbd2: Receive control failed (result -32) [ 3217.708388][T30663] block nbd2: shutting down sockets [ 3217.728517][ T50] block nbd0: Receive control failed (result -32) 00:53:37 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) (async) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x42680, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x2) 00:53:37 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:37 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080)) (async) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x2) (async) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x4100, 0x0) delete_module(&(0x7f00000000c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x800) (async) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) [ 3217.731644][T30675] block nbd0: shutting down sockets 00:53:37 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x6) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) (async) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x6) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$NBD_DO_IT(r3, 0xab03) (async) 00:53:37 executing program 4: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0xd2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) (async) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f00000000c0)) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x693e2eff28af72d6, r1, 0x0) (async) ioctl$VT_WAITACTIVE(r0, 0x5607) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:37 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async, rerun: 64) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080)) (rerun: 64) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x2) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x4100, 0x0) delete_module(&(0x7f00000000c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x800) (async) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) [ 3217.764651][ T6119] block nbd5: Receive control failed (result -32) [ 3217.766523][T30680] block nbd5: shutting down sockets 00:53:37 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x42680, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x2) 00:53:37 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:37 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x7) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:37 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x44881) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:37 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x1c) 00:53:37 executing program 3: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x44881) (async) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x44881) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:37 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x7) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) [ 3217.863358][T30706] block nbd0: shutting down sockets [ 3218.599409][ T50] block nbd2: Receive control failed (result -32) [ 3218.600208][T30703] block nbd2: shutting down sockets 00:53:38 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80) ioctl$NBD_DO_IT(r2, 0xab03) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80) (async) ioctl$NBD_DO_IT(r2, 0xab03) (async) 00:53:38 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x44881) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:38 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x1c) 00:53:38 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000040)={0x2, 0x3, 0x10001}) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:38 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x7) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x7) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) [ 3218.624838][T25416] block nbd5: Receive control failed (result -32) [ 3218.625198][T30711] block nbd5: shutting down sockets 00:53:38 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x1c) 00:53:38 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:38 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x12100) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000040)='%pi6 \x00'}, 0x20) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000280)={0x6d, "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"}) 00:53:38 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x12100) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000040)='%pi6 \x00'}, 0x20) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000280)={0x6d, "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"}) 00:53:38 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x40) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x20001) 00:53:38 executing program 4: socketpair(0x15, 0x80000, 0x80000001, &(0x7f0000000000)) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:38 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x12100) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000040)='%pi6 \x00'}, 0x20) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async, rerun: 64) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000280)={0x6d, "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"}) (rerun: 64) [ 3218.761378][T30752] block nbd5: shutting down sockets [ 3218.766314][T30742] block nbd2: shutting down sockets 00:53:38 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:38 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x40) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x20001) 00:53:38 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) [ 3218.850064][T30765] block nbd5: shutting down sockets [ 3219.464514][T25416] block nbd0: Receive control failed (result -32) [ 3219.466927][T30737] block nbd0: shutting down sockets 00:53:39 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x8) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x244080, 0x0) ioctl$SIOCRSSL2CALL(r3, 0x89e2, &(0x7f00000000c0)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x55) 00:53:39 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000040)={0x2, 0x3, 0x10001}) (async, rerun: 32) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:39 executing program 4: socketpair(0x15, 0x80000, 0x80000001, &(0x7f0000000000)) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:39 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x40) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x20001) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x40) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x20001) (async) 00:53:39 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:39 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETCAPS(0xffffffffffffffff, 0x8004500f, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) ioctl$NBD_DISCONNECT(r0, 0xab08) 00:53:39 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x8) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x244080, 0x0) ioctl$SIOCRSSL2CALL(r3, 0x89e2, &(0x7f00000000c0)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x55) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x8) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x244080, 0x0) (async) ioctl$SIOCRSSL2CALL(r3, 0x89e2, &(0x7f00000000c0)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}) (async) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x55) (async) 00:53:39 executing program 4: socketpair(0x15, 0x80000, 0x80000001, &(0x7f0000000000)) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) [ 3219.539941][T30776] block nbd5: shutting down sockets [ 3219.555449][T30791] block nbd1: NBD_DISCONNECT 00:53:39 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x8) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x244080, 0x0) ioctl$SIOCRSSL2CALL(r3, 0x89e2, &(0x7f00000000c0)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x55) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x8) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x244080, 0x0) (async) ioctl$SIOCRSSL2CALL(r3, 0x89e2, &(0x7f00000000c0)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}) (async) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x55) (async) [ 3219.650844][ T50] block nbd2: Receive control failed (result -32) [ 3219.652723][T30770] block nbd2: shutting down sockets 00:53:39 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 00:53:39 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETCAPS(0xffffffffffffffff, 0x8004500f, &(0x7f0000000040)) (async) ioctl$SNDCTL_DSP_GETCAPS(0xffffffffffffffff, 0x8004500f, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) ioctl$NBD_DISCONNECT(r0, 0xab08) 00:53:39 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r2, 0x2b, 0x3, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x40, 0x3, 0x3}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'pim6reg1\x00'}) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f00000000c0)=0x1f) 00:53:39 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) [ 3219.679292][T30803] block nbd1: NBD_DISCONNECT [ 3219.739675][T30804] block nbd5: shutting down sockets [ 3220.341380][T25416] block nbd0: Receive control failed (result -32) [ 3220.343775][T30784] block nbd0: shutting down sockets 00:53:40 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000040)={0x2, 0x3, 0x10001}) (async, rerun: 64) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:40 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x87) 00:53:40 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETCAPS(0xffffffffffffffff, 0x8004500f, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) ioctl$NBD_DISCONNECT(r0, 0xab08) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_GETCAPS(0xffffffffffffffff, 0x8004500f, &(0x7f0000000040)) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) ioctl$NBD_DISCONNECT(r0, 0xab08) (async) 00:53:40 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r2, 0x2b, 0x3, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x40, 0x3, 0x3}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'pim6reg1\x00'}) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f00000000c0)=0x1f) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r2, 0x2b, 0x3, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x40, 0x3, 0x3}}) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x48) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'pim6reg1\x00'}) (async) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f00000000c0)=0x1f) (async) 00:53:40 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 3220.367157][T30809] block nbd1: NBD_DISCONNECT [ 3220.374877][T30812] block nbd1: NBD_DISCONNECT 00:53:40 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x6b8201) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x2) 00:53:40 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x87) [ 3220.414492][T30816] block nbd5: shutting down sockets 00:53:40 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 00:53:40 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x6b8201) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x6b8201) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x2) 00:53:40 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x6b8201) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x2) 00:53:40 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r2, 0x2b, 0x3, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x40, 0x3, 0x3}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r2, 0x2b, 0x3, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x40, 0x3, 0x3}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'pim6reg1\x00'}) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f00000000c0)=0x1f) (async) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f00000000c0)=0x1f) [ 3220.504745][ T50] block nbd2: Receive control failed (result -32) [ 3220.505133][T30799] block nbd2: shutting down sockets 00:53:40 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x0) (async) ioctl$NBD_DO_IT(r2, 0xab03) [ 3220.529651][T30835] block nbd5: shutting down sockets [ 3221.227773][T25416] block nbd0: Receive control failed (result -32) [ 3221.232393][T30820] block nbd0: shutting down sockets 00:53:41 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x6) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:41 executing program 4: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc0801, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x121840, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x23) 00:53:41 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x87) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x87) (async) 00:53:41 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:41 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x81) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000000)=0x3) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000000c0)) 00:53:41 executing program 3: ioctl$NBD_PRINT_DEBUG(0xffffffffffffffff, 0xab06) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x238100) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x4) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x3) 00:53:41 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) bpf$BPF_PROG_QUERY(0x3, &(0x7f0000000100)={@map=0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f00000000c0)={'custom1\x00'}) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x7, 0x0, r2, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x48) ioctl$NBD_DO_IT(r3, 0xab03) 00:53:41 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:41 executing program 4: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc0801, 0x0) (async) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x0) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x121840, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x23) 00:53:41 executing program 3: ioctl$NBD_PRINT_DEBUG(0xffffffffffffffff, 0xab06) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x238100) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x4) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x3) 00:53:41 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) [ 3221.359648][T30840] block nbd2: shutting down sockets 00:53:41 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) (async) ioctl$NBD_DO_IT(r2, 0xab03) [ 3222.105021][T25416] block nbd0: Receive control failed (result -32) [ 3222.109946][T30850] block nbd0: shutting down sockets 00:53:42 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x6) (async) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x6) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:42 executing program 3: ioctl$NBD_PRINT_DEBUG(0xffffffffffffffff, 0xab06) (async, rerun: 32) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x238100) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x4) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x3) 00:53:42 executing program 4: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc0801, 0x0) (async) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x121840, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x23) 00:53:42 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000040)=0x80000001) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) [ 3222.149710][ T6119] block nbd5: Receive control failed (result -32) [ 3222.151583][T30853] block nbd5: shutting down sockets 00:53:42 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x145000, 0x160) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) 00:53:42 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000040)=0x80000001) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) 00:53:42 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x19) 00:53:42 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x9, 0x7, 0x525, 0x65, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x8000, 0x10, 0x1000, 0x80000000}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', r3, 0x4, 0x7, 0x20, 0x97, 0x10, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x7800, 0x7, 0x6}}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0, 0xffffffffffffffff}) read$hiddev(r4, &(0x7f0000000280)=""/85, 0x55) ioctl$NBD_DISCONNECT(r1, 0xab08) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:42 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000040)=0x80000001) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) 00:53:42 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x19) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x19) (async) 00:53:42 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x9, 0x7, 0x525, 0x65, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x8000, 0x10, 0x1000, 0x80000000}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', r3, 0x4, 0x7, 0x20, 0x97, 0x10, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x7800, 0x7, 0x6}}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0, 0xffffffffffffffff}) read$hiddev(r4, &(0x7f0000000280)=""/85, 0x55) ioctl$NBD_DISCONNECT(r1, 0xab08) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x9, 0x7, 0x525, 0x65, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x8000, 0x10, 0x1000, 0x80000000}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', r3, 0x4, 0x7, 0x20, 0x97, 0x10, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x7800, 0x7, 0x6}}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) read$hiddev(r4, &(0x7f0000000280)=""/85, 0x55) (async) ioctl$NBD_DISCONNECT(r1, 0xab08) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) [ 3222.232580][T30869] block nbd2: shutting down sockets 00:53:42 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x48) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x4) [ 3222.966140][ T6119] block nbd0: Receive control failed (result -32) [ 3222.967441][T30876] block nbd0: shutting down sockets 00:53:42 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x6) ioctl$NBD_DO_IT(r2, 0xab03) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x6) (async) ioctl$NBD_DO_IT(r2, 0xab03) (async) 00:53:42 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async, rerun: 64) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x9, 0x7, 0x525, 0x65, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x8000, 0x10, 0x1000, 0x80000000}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', r3, 0x4, 0x7, 0x20, 0x97, 0x10, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x7800, 0x7, 0x6}}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0, 0xffffffffffffffff}) read$hiddev(r4, &(0x7f0000000280)=""/85, 0x55) (async) ioctl$NBD_DISCONNECT(r1, 0xab08) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:42 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2201) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) ioctl$TIOCEXCL(r3, 0x540c) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:42 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x19) [ 3223.024247][T30887] block nbd5: shutting down sockets 00:53:43 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x48) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x4) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x48) (async) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x4) (async) 00:53:43 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:43 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x145000, 0x160) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) 00:53:43 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000}) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$HIDIOCGVERSION(r1, 0x80044801, &(0x7f0000000040)) 00:53:43 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x48) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x4) 00:53:43 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:43 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000}) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$HIDIOCGVERSION(r1, 0x80044801, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000}) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$HIDIOCGVERSION(r1, 0x80044801, &(0x7f0000000040)) (async) 00:53:43 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) [ 3223.105905][T30914] block nbd0: shutting down sockets [ 3223.128833][T30929] block nbd0: Device being setup by another task 00:53:43 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000100)={0x4, 0x80, 0xfff, 0x7, 0x8, "8a5ab16d53ee24ee"}) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) 00:53:43 executing program 1: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x1}, 0x8) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000140)={0x4}, 0x8) [ 3223.182257][T30941] block nbd0: shutting down sockets [ 3223.819599][ T6119] block nbd2: Receive control failed (result -32) [ 3223.820332][T30905] block nbd2: shutting down sockets 00:53:43 executing program 4: read$hiddev(0xffffffffffffffff, &(0x7f0000000000)=""/64, 0x40) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:43 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000}) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$HIDIOCGVERSION(r1, 0x80044801, &(0x7f0000000040)) 00:53:43 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) (rerun: 64) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async, rerun: 32) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2201) (async, rerun: 32) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) (async) ioctl$TIOCEXCL(r3, 0x540c) (async, rerun: 32) ioctl$NBD_DO_IT(r2, 0xab03) (rerun: 32) 00:53:43 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000100)={0x4, 0x80, 0xfff, 0x7, 0x8, "8a5ab16d53ee24ee"}) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000100)={0x4, 0x80, 0xfff, 0x7, 0x8, "8a5ab16d53ee24ee"}) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) (async) ioctl$NBD_DO_IT(r3, 0xab03) (async) [ 3223.882384][T25416] block nbd5: Receive control failed (result -32) [ 3223.885446][T30920] block nbd5: shutting down sockets 00:53:43 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x145000, 0x160) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) 00:53:43 executing program 1: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x1}, 0x8) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000140)={0x4}, 0x8) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x1}, 0x8) (async) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000140)={0x4}, 0x8) (async) 00:53:43 executing program 4: read$hiddev(0xffffffffffffffff, &(0x7f0000000000)=""/64, 0x40) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) read$hiddev(0xffffffffffffffff, &(0x7f0000000000)=""/64, 0x40) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) 00:53:43 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x202) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x200) [ 3223.909242][T30954] block nbd0: Device being setup by another task [ 3223.914129][T30954] block nbd0: shutting down sockets 00:53:43 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000100)={0x4, 0x80, 0xfff, 0x7, 0x8, "8a5ab16d53ee24ee"}) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) 00:53:43 executing program 1: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x1}, 0x8) (async) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async, rerun: 64) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) (async, rerun: 64) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000140)={0x4}, 0x8) 00:53:43 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x202) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x200) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x202) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x200) (async) 00:53:43 executing program 4: read$hiddev(0xffffffffffffffff, &(0x7f0000000000)=""/64, 0x40) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) [ 3223.975586][T30951] block nbd2: shutting down sockets [ 3223.980844][T30968] block nbd0: shutting down sockets 00:53:43 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2201) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) (async) ioctl$TIOCEXCL(r3, 0x540c) (async) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:43 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r4 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x440c0, 0x120) r5 = getpid() sched_rr_get_interval(r5, &(0x7f00000000c0)) ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f00000000c0)={r5, 0x0, 0xfffffff9}) ioctl$NBD_DO_IT(r3, 0xab03) 00:53:43 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x100000003) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) ioctl$NBD_PRINT_DEBUG(r0, 0xab06) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000140)) 00:53:44 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x202) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async, rerun: 64) syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x200) (rerun: 64) [ 3224.742417][T25416] block nbd5: Receive control failed (result -32) [ 3224.743421][T30962] block nbd5: shutting down sockets 00:53:44 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x145000, 0x160) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 00:53:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"26b4933d0c9aefd3fa31b9e214523821", r1, 0x0, {0x6, 0x4}, {0x1, 0xfb1}, 0x4f, [0x8, 0xffffffffffffffff, 0xffffffffffff78c1, 0x4, 0x2, 0x40, 0x8000000000000001, 0x20, 0x8, 0x1f, 0x1ff, 0x1a20, 0x8, 0x4, 0x7, 0x200]}) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:44 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xff) 00:53:44 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x100000003) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) ioctl$NBD_PRINT_DEBUG(r0, 0xab06) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000140)) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x100000003) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x800}) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) (async) ioctl$NBD_PRINT_DEBUG(r0, 0xab06) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3, 0x80000}) (async) ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000140)) (async) 00:53:44 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x100000003) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) ioctl$NBD_PRINT_DEBUG(r0, 0xab06) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000140)) 00:53:44 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xff) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xff) (async) 00:53:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"26b4933d0c9aefd3fa31b9e214523821", r1, 0x0, {0x6, 0x4}, {0x1, 0xfb1}, 0x4f, [0x8, 0xffffffffffffffff, 0xffffffffffff78c1, 0x4, 0x2, 0x40, 0x8000000000000001, 0x20, 0x8, 0x1f, 0x1ff, 0x1a20, 0x8, 0x4, 0x7, 0x200]}) (async) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:44 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000080)={r2, 0x0, 0xff}) [ 3224.830093][T30997] block nbd5: shutting down sockets [ 3224.850239][T31011] binder: 31010:31011 ioctl 400c620e 20000080 returned -22 [ 3224.866345][ T50] block nbd2: Receive control failed (result -32) [ 3224.866701][T30984] block nbd2: shutting down sockets [ 3224.874770][ T6119] block nbd0: Receive control failed (result -32) [ 3224.876550][T30987] block nbd0: shutting down sockets 00:53:44 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040814}, 0x42040) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000100)) r5 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x4b0001) ioctl$NBD_DO_IT(r5, 0xab03) 00:53:44 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x145000, 0x160) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 00:53:44 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$VT_DISALLOCATE(r2, 0x5608) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) r4 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x440c0, 0x120) (async) r5 = getpid() sched_rr_get_interval(r5, &(0x7f00000000c0)) ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f00000000c0)={r5, 0x0, 0xfffffff9}) (async) ioctl$NBD_DO_IT(r3, 0xab03) 00:53:44 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xff) 00:53:44 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000080)={r2, 0x0, 0xff}) 00:53:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"26b4933d0c9aefd3fa31b9e214523821", r1, 0x0, {0x6, 0x4}, {0x1, 0xfb1}, 0x4f, [0x8, 0xffffffffffffffff, 0xffffffffffff78c1, 0x4, 0x2, 0x40, 0x8000000000000001, 0x20, 0x8, 0x1f, 0x1ff, 0x1a20, 0x8, 0x4, 0x7, 0x200]}) (async) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)=0x20) [ 3224.921820][T31022] binder: 31016:31022 ioctl 400c620e 20000080 returned -22 00:53:44 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:44 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x320c0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x80003, 0x42) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000040)) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) ioctl$NBD_PRINT_DEBUG(r2, 0xab06) 00:53:44 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000080)={r2, 0x0, 0xff}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) getpid() (async) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000080)={r2, 0x0, 0xff}) (async) [ 3224.949584][T31014] block nbd5: shutting down sockets 00:53:44 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x145000, 0x160) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 3224.977399][T31031] binder: 31028:31031 ioctl 400c620e 20000080 returned -22 [ 3224.991093][T31034] binder: 31028:31034 ioctl 400c620e 20000080 returned -22 00:53:44 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x320c0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x80003, 0x42) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000040)) (async) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) ioctl$NBD_PRINT_DEBUG(r2, 0xab06) 00:53:44 executing program 4: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) [ 3225.059722][T31037] block nbd5: shutting down sockets [ 3225.722462][ T6119] block nbd2: Receive control failed (result -32) [ 3225.726424][T31012] block nbd2: shutting down sockets 00:53:45 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040814}, 0x42040) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000100)) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) r5 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x4b0001) ioctl$NBD_DO_IT(r5, 0xab03) (async) ioctl$NBD_DO_IT(r5, 0xab03) 00:53:45 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) [ 3225.746988][ T50] block nbd0: Receive control failed (result -32) [ 3225.748995][T31020] block nbd0: shutting down sockets 00:53:45 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$VT_DISALLOCATE(r2, 0x5608) (async) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x440c0, 0x120) (async) r4 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x440c0, 0x120) r5 = getpid() sched_rr_get_interval(r5, &(0x7f00000000c0)) ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f00000000c0)={r5, 0x0, 0xfffffff9}) ioctl$NBD_DO_IT(r3, 0xab03) 00:53:45 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x320c0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x80003, 0x42) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000040)) (async) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) ioctl$NBD_PRINT_DEBUG(r2, 0xab06) 00:53:45 executing program 4: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:45 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x145000, 0x160) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) 00:53:45 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) 00:53:45 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:45 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r1 = socket(0x11, 0x6, 0x1623) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x800, 0x4) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:45 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f00000010c0)) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) read$dsp(r1, &(0x7f0000000000)=""/37, 0x25) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:45 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r1 = socket(0x11, 0x6, 0x1623) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x800, 0x4) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) socket(0x11, 0x6, 0x1623) (async) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x800, 0x4) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) 00:53:45 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x0, 0x20, 0x4, 0x2, 0x12, "8fc1ea80cf955387dcf47ccbe574cc8c620b39"}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) [ 3226.583951][ T50] block nbd2: Receive control failed (result -32) [ 3226.585412][T31049] block nbd2: shutting down sockets 00:53:46 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040814}, 0x42040) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000100)) (async) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000100)) r5 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x4b0001) ioctl$NBD_DO_IT(r5, 0xab03) 00:53:46 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r1 = socket(0x11, 0x6, 0x1623) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x800, 0x4) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) socket(0x11, 0x6, 0x1623) (async) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x800, 0x4) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) [ 3226.607929][ T6119] block nbd5: Receive control failed (result -32) [ 3226.608395][T31056] block nbd5: shutting down sockets [ 3226.634348][T25416] block nbd0: Receive control failed (result -32) [ 3226.634619][T31062] block nbd0: shutting down sockets 00:53:46 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x0, 0x20, 0x4, 0x2, 0x12, "8fc1ea80cf955387dcf47ccbe574cc8c620b39"}) (rerun: 64) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async, rerun: 64) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) (rerun: 64) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:46 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f00000010c0)) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) read$dsp(r1, &(0x7f0000000000)=""/37, 0x25) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)=0x20) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000bc0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f00000010c0)) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) (async) read$dsp(r1, &(0x7f0000000000)=""/37, 0x25) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)=0x20) (async) 00:53:46 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x400, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x364) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) ioctl$NBD_PRINT_DEBUG(r3, 0xab06) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x42000) ioctl$NBD_DO_IT(r4, 0xab03) 00:53:46 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x3) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x6, 0x7, 0x9, 0xfff, 0x8, "8761c2aadc88f572230ad93f8ad37ce4606748"}) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0xfffffffffffffffb) 00:53:46 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x145000, 0x160) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) 00:53:46 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x3) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x6, 0x7, 0x9, 0xfff, 0x8, "8761c2aadc88f572230ad93f8ad37ce4606748"}) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0xfffffffffffffffb) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x3) (async) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x6, 0x7, 0x9, 0xfff, 0x8, "8761c2aadc88f572230ad93f8ad37ce4606748"}) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$NBD_SET_SIZE(r1, 0xab02, 0xfffffffffffffffb) (async) 00:53:46 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x0, 0x20, 0x4, 0x2, 0x12, "8fc1ea80cf955387dcf47ccbe574cc8c620b39"}) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) (async, rerun: 32) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (rerun: 32) 00:53:46 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x3) (async) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x6, 0x7, 0x9, 0xfff, 0x8, "8761c2aadc88f572230ad93f8ad37ce4606748"}) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0xfffffffffffffffb) 00:53:46 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair(0x27, 0x9ba5284cb991fd9f, 0xfff, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x44054) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:46 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair(0x27, 0x9ba5284cb991fd9f, 0xfff, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x44054) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) [ 3227.436071][T25416] block nbd2: Receive control failed (result -32) [ 3227.440541][T31079] block nbd2: shutting down sockets 00:53:47 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x101200) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x1000) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) ioctl$NBD_DO_IT(r3, 0xab03) 00:53:47 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair(0x27, 0x9ba5284cb991fd9f, 0xfff, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x44054) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:47 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f00000010c0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f00000010c0)) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) read$dsp(r1, &(0x7f0000000000)=""/37, 0x25) (async) read$dsp(r1, &(0x7f0000000000)=""/37, 0x25) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)=0x20) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:47 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x8991, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) ioctl$NBD_DO_IT(r1, 0xab03) [ 3227.495936][ T6119] block nbd0: Receive control failed (result -32) [ 3227.497788][ T50] block nbd5: Receive control failed (result -32) [ 3227.498086][T31090] block nbd5: shutting down sockets [ 3227.501182][T31086] block nbd0: shutting down sockets 00:53:47 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000040)) syz_open_pts(r0, 0x200000) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, 0x0) ioctl$TIOCNXCL(r4, 0x540d) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x10001, '\x00', r2, r3, 0x4, 0x2, 0x1}, 0x48) 00:53:47 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x400}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x400, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x364) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) ioctl$NBD_PRINT_DEBUG(r3, 0xab06) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x42000) ioctl$NBD_DO_IT(r4, 0xab03) (async) ioctl$NBD_DO_IT(r4, 0xab03) 00:53:47 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x145000, 0x160) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) 00:53:47 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x2) (async) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x8991, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:47 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000040)) syz_open_pts(r0, 0x200000) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, 0x0) ioctl$TIOCNXCL(r4, 0x540d) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x10001, '\x00', r2, r3, 0x4, 0x2, 0x1}, 0x48) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000040)) (async) syz_open_pts(r0, 0x200000) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, 0x0) (async) ioctl$TIOCNXCL(r4, 0x540d) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x10001, '\x00', r2, r3, 0x4, 0x2, 0x1}, 0x48) (async) 00:53:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400141, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x7, 0x6, 0x2, 0x10}}) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:47 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x8991, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:47 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffc) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000000)={0x2}) [ 3227.609113][T31126] block nbd0: Device being setup by another task [ 3228.317134][ T50] block nbd2: Receive control failed (result -32) [ 3228.318640][T31120] block nbd2: shutting down sockets 00:53:48 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) (async) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x101200) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x1000) (async) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) (async) ioctl$NBD_DO_IT(r3, 0xab03) 00:53:48 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000040)) (async, rerun: 32) syz_open_pts(r0, 0x200000) (async, rerun: 32) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r1, 0x301, 0x2) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) (async, rerun: 32) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, 0x0) ioctl$TIOCNXCL(r4, 0x540d) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) (async, rerun: 64) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x10001, '\x00', r2, r3, 0x4, 0x2, 0x1}, 0x48) (rerun: 64) 00:53:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400141, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x7, 0x6, 0x2, 0x10}}) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x20) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:48 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffc) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000000)={0x2}) 00:53:48 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffc) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) (async) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000000)={0x2}) [ 3228.366445][T25416] block nbd0: Receive control failed (result -32) [ 3228.366896][T31125] block nbd0: shutting down sockets [ 3228.373652][ T6119] block nbd5: Receive control failed (result -32) [ 3228.373948][T31129] block nbd5: shutting down sockets 00:53:48 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x400, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x364) (async, rerun: 64) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) (async) ioctl$NBD_PRINT_DEBUG(r3, 0xab06) (async) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x42000) ioctl$NBD_DO_IT(r4, 0xab03) 00:53:48 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x145000, 0x160) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:48 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"7d256bc01406b42444f5344e9c3b2dbd", 0x0, 0x0, {0x4, 0x3}, {0x80000000, 0xffffffff}, 0x2, [0x5132a2c7, 0xe6c, 0x4, 0x5e, 0x4c09118a, 0x0, 0x0, 0x5, 0x6, 0x1, 0x7, 0x77, 0x2d, 0x337, 0x3, 0x1]}) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000140)={"bfee8b411732aa00acdd1b70d677aaf0", 0x0, r2, {0x9}, {0x9, 0xfffffffe}, 0x5, [0xbbc, 0x1, 0x7, 0x771, 0xec2, 0x4, 0xfffffffffffffffe, 0x7fffffff, 0xd67, 0xfffffffffffffffb, 0x4, 0x7ff, 0x0, 0xdab, 0x7fffffff, 0x4]}) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000240)={0x3, 0x200, 0x3f}) read$hiddev(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r3, 0x0, 0x0, 0x0, &(0x7f0000000800)={0xa, 0x0, 0x0, @local, 0x7f}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'veth0_to_bond\x00'}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, 0x0) ioctl$HIDIOCAPPLICATION(r5, 0x4802, 0x5) 00:53:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400141, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x7, 0x6, 0x2, 0x10}}) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:48 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup, 0x1d, 0x1, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:48 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x145000, 0x160) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:48 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup, 0x1d, 0x1, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) [ 3229.209330][ T6119] block nbd2: Receive control failed (result -32) [ 3229.213788][T31158] block nbd2: shutting down sockets 00:53:49 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) (rerun: 32) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_DO_IT(r0, 0xab03) (async) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x101200) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x1000) (async) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r4 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) (async, rerun: 32) ioctl$NBD_DO_IT(r3, 0xab03) (rerun: 32) 00:53:49 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"7d256bc01406b42444f5344e9c3b2dbd", 0x0, 0x0, {0x4, 0x3}, {0x80000000, 0xffffffff}, 0x2, [0x5132a2c7, 0xe6c, 0x4, 0x5e, 0x4c09118a, 0x0, 0x0, 0x5, 0x6, 0x1, 0x7, 0x77, 0x2d, 0x337, 0x3, 0x1]}) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000140)={"bfee8b411732aa00acdd1b70d677aaf0", 0x0, r2, {0x9}, {0x9, 0xfffffffe}, 0x5, [0xbbc, 0x1, 0x7, 0x771, 0xec2, 0x4, 0xfffffffffffffffe, 0x7fffffff, 0xd67, 0xfffffffffffffffb, 0x4, 0x7ff, 0x0, 0xdab, 0x7fffffff, 0x4]}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000140)={"bfee8b411732aa00acdd1b70d677aaf0", 0x0, r2, {0x9}, {0x9, 0xfffffffe}, 0x5, [0xbbc, 0x1, 0x7, 0x771, 0xec2, 0x4, 0xfffffffffffffffe, 0x7fffffff, 0xd67, 0xfffffffffffffffb, 0x4, 0x7ff, 0x0, 0xdab, 0x7fffffff, 0x4]}) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000240)={0x3, 0x200, 0x3f}) read$hiddev(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r3, 0x0, 0x0, 0x0, &(0x7f0000000800)={0xa, 0x0, 0x0, @local, 0x7f}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'veth0_to_bond\x00'}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, 0x0) ioctl$HIDIOCAPPLICATION(r5, 0x4802, 0x5) 00:53:49 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x408241, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:49 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x145000, 0x160) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:49 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup, 0x1d, 0x1, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) [ 3229.250190][T25416] block nbd0: Receive control failed (result -32) [ 3229.250821][T31164] block nbd0: shutting down sockets 00:53:49 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:49 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x408241, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x408241, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) 00:53:49 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x145000, 0x160) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:49 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x48) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000000c0)) 00:53:49 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) (async, rerun: 64) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"7d256bc01406b42444f5344e9c3b2dbd", 0x0, 0x0, {0x4, 0x3}, {0x80000000, 0xffffffff}, 0x2, [0x5132a2c7, 0xe6c, 0x4, 0x5e, 0x4c09118a, 0x0, 0x0, 0x5, 0x6, 0x1, 0x7, 0x77, 0x2d, 0x337, 0x3, 0x1]}) (rerun: 64) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000140)={"bfee8b411732aa00acdd1b70d677aaf0", 0x0, r2, {0x9}, {0x9, 0xfffffffe}, 0x5, [0xbbc, 0x1, 0x7, 0x771, 0xec2, 0x4, 0xfffffffffffffffe, 0x7fffffff, 0xd67, 0xfffffffffffffffb, 0x4, 0x7ff, 0x0, 0xdab, 0x7fffffff, 0x4]}) (async) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000240)={0x3, 0x200, 0x3f}) (async, rerun: 32) read$hiddev(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec) (async, rerun: 32) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r3, 0x0, 0x0, 0x0, &(0x7f0000000800)={0xa, 0x0, 0x0, @local, 0x7f}, 0x20) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'veth0_to_bond\x00'}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, 0x0) (async, rerun: 32) ioctl$HIDIOCAPPLICATION(r5, 0x4802, 0x5) (rerun: 32) 00:53:49 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x408241, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) [ 3229.320516][T31188] block nbd2: shutting down sockets 00:53:49 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x28140) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:49 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async, rerun: 64) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x48) (rerun: 64) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000000c0)) 00:53:49 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) getitimer(0x2, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:49 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:49 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x28140) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x28140) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x800}) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$NBD_DO_IT(r2, 0xab03) (async) 00:53:49 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x48) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000000c0)) [ 3230.134081][T25416] block nbd5: Receive control failed (result -32) [ 3230.134722][T31201] block nbd5: shutting down sockets [ 3230.147049][ T6119] block nbd0: Receive control failed (result -32) [ 3230.147337][T31203] block nbd0: shutting down sockets 00:53:50 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$NBD_DO_IT(r2, 0xab03) (async) 00:53:50 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x28140) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x28140) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x800}) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$NBD_DO_IT(r2, 0xab03) (async) 00:53:50 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:50 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) 00:53:50 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) getitimer(0x2, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) getitimer(0x2, &(0x7f0000000040)) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) 00:53:50 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:50 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:50 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) getitimer(0x2, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) getitimer(0x2, &(0x7f0000000040)) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) 00:53:50 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 00:53:50 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:50 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:50 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000000080)) [ 3230.290914][T31239] block nbd0: shutting down sockets 00:53:50 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:50 executing program 4: ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:50 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x4) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x8000000000000000) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x100) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0) ioctl$NBD_CLEAR_QUE(r1, 0xab05) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000000c0)=0x101) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f0000000200)) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f00000010c0)) ioctl$SOUND_PCM_READ_CHANNELS(r3, 0x80045006, &(0x7f0000000140)) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r5 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000180), 0x602003, 0x100) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f00000001c0)=0x28) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040)=0x10001) ioctl$NBD_SET_BLKSIZE(r4, 0xab01, 0x10001) 00:53:50 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000000080)) [ 3230.341498][T31270] block nbd2: shutting down sockets 00:53:50 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000000080)) (async) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000000080)) [ 3231.002890][ T6119] block nbd5: Receive control failed (result -32) [ 3231.003752][T31234] block nbd5: shutting down sockets 00:53:50 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:50 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) (async) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 00:53:50 executing program 4: ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:50 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) syz_open_dev$media(&(0x7f0000000040), 0xffffffff, 0x0) 00:53:50 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x4) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x8000000000000000) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x100) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0) ioctl$NBD_CLEAR_QUE(r1, 0xab05) (async) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000000c0)=0x101) (async) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f0000000200)) (async) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f00000010c0)) (async) ioctl$SOUND_PCM_READ_CHANNELS(r3, 0x80045006, &(0x7f0000000140)) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) r5 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000180), 0x602003, 0x100) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f00000001c0)=0x28) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040)=0x10001) (async) ioctl$NBD_SET_BLKSIZE(r4, 0xab01, 0x10001) 00:53:51 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) syz_open_dev$media(&(0x7f0000000040), 0xffffffff, 0x0) 00:53:51 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) [ 3231.080907][T31289] block nbd2: shutting down sockets [ 3231.172393][ T50] block nbd0: Receive control failed (result -32) [ 3231.175481][T31271] block nbd0: shutting down sockets 00:53:51 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r3 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x28) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$HIDIOCGSTRING(r3, 0x81044804, &(0x7f0000000100)={0xf0, "4e8e44f9438d6bf4ed7ccd95972cf61493f7a2805fc24b4421abab4b212ac73447ef0dd95ca939d033dd9af097af0791abd391897154ba840c4d5bcd04155c9704b6b3995ab928729aa4062221de010d2d4ce513f27ae842d7b59f037b1f489b529af3fc8afec98d19e8c801236af028074adf0d0240aac159ec00efe055a4599d791c8e068361f35d78844d8f3fef35dbdc7dcbfdc5c9d1ab46a414f642953e2e4dd29e08c3e61d2f71b8d4e266f15ed8f8a3536b4d78213141c268768eab332ab52d0814bc0f63c7d3cb648b2810ab55982e15ab8a68fd251b4484d2627e1d1f0604c4fe038b7fd2cf4b9f988b63e7"}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, 0x0) ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0x1) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r5, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r5, 0x8010500d, &(0x7f00000010c0)) ioctl$SOUND_PCM_READ_RATE(r5, 0x80045002, &(0x7f0000000040)) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:51 executing program 4: ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)) (async, rerun: 32) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)=0x20) (rerun: 32) 00:53:51 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x4) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x8000000000000000) (async) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x100) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0) ioctl$NBD_CLEAR_QUE(r1, 0xab05) (async, rerun: 32) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000000c0)=0x101) (async, rerun: 32) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f0000000200)) (async) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f00000010c0)) ioctl$SOUND_PCM_READ_CHANNELS(r3, 0x80045006, &(0x7f0000000140)) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) r5 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000180), 0x602003, 0x100) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f00000001c0)=0x28) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, 0x0) (async, rerun: 32) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040)=0x10001) (async, rerun: 32) ioctl$NBD_SET_BLKSIZE(r4, 0xab01, 0x10001) 00:53:51 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) syz_open_dev$media(&(0x7f0000000040), 0xffffffff, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) syz_open_dev$media(&(0x7f0000000040), 0xffffffff, 0x0) (async) 00:53:51 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) (async) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 00:53:51 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:51 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x5) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:51 executing program 4: ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000140)=[0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[r1, 0x0, r2], 0x3, 0x80800}) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f00000000c0)=0x7ff) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:51 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) ioctl$NBD_DISCONNECT(r0, 0xab08) [ 3231.253781][T31318] block nbd3: NBD_DISCONNECT 00:53:51 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4000) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) [ 3231.263655][T31312] block nbd2: shutting down sockets 00:53:51 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x5) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:51 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4202) ioctl$NBD_DISCONNECT(r0, 0xab08) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000000c0)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000040), &(0x7f00000002c0)='%pB \x00'}, 0x20) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r5 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r5, 0xab03) [ 3232.047274][ T50] block nbd0: Receive control failed (result -32) [ 3232.052793][T31310] block nbd0: shutting down sockets 00:53:52 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4000) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4000) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) 00:53:52 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x28) ioctl$NBD_DO_IT(r3, 0xab03) (async) ioctl$HIDIOCGSTRING(r3, 0x81044804, &(0x7f0000000100)={0xf0, "4e8e44f9438d6bf4ed7ccd95972cf61493f7a2805fc24b4421abab4b212ac73447ef0dd95ca939d033dd9af097af0791abd391897154ba840c4d5bcd04155c9704b6b3995ab928729aa4062221de010d2d4ce513f27ae842d7b59f037b1f489b529af3fc8afec98d19e8c801236af028074adf0d0240aac159ec00efe055a4599d791c8e068361f35d78844d8f3fef35dbdc7dcbfdc5c9d1ab46a414f642953e2e4dd29e08c3e61d2f71b8d4e266f15ed8f8a3536b4d78213141c268768eab332ab52d0814bc0f63c7d3cb648b2810ab55982e15ab8a68fd251b4484d2627e1d1f0604c4fe038b7fd2cf4b9f988b63e7"}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0x1) (async) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r5, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r5, 0x8010500d, &(0x7f00000010c0)) (async) ioctl$SOUND_PCM_READ_RATE(r5, 0x80045002, &(0x7f0000000040)) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:52 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) ioctl$NBD_DISCONNECT(r0, 0xab08) 00:53:52 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4202) ioctl$NBD_DISCONNECT(r0, 0xab08) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000000c0)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000040), &(0x7f00000002c0)='%pB \x00'}, 0x20) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r5 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r5, 0xab03) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4202) (async) ioctl$NBD_DISCONNECT(r0, 0xab08) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000000c0)) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) (async) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000040), &(0x7f00000002c0)='%pB \x00'}, 0x20) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$NBD_DO_IT(r5, 0xab03) (async) 00:53:52 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x5) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:52 executing program 4: ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000140)=[0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[r1, 0x0, r2], 0x3, 0x80800}) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f00000000c0)=0x7ff) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)=0x20) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000140)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[r1, 0x0, r2], 0x3, 0x80800}) (async) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f00000000c0)=0x7ff) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)=0x20) (async) [ 3232.095792][T31343] block nbd3: NBD_DISCONNECT 00:53:52 executing program 4: ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000140)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000140)=[0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[r1, 0x0, r2], 0x3, 0x80800}) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f00000000c0)=0x7ff) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:52 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) ioctl$NBD_DISCONNECT(r0, 0xab08) 00:53:52 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) [ 3232.140392][T31349] block nbd3: NBD_DISCONNECT 00:53:52 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4000) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:52 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4202) ioctl$NBD_DISCONNECT(r0, 0xab08) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000000c0)) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) (async) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000040), &(0x7f00000002c0)='%pB \x00'}, 0x20) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r5 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r5, 0xab03) 00:53:52 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, &(0x7f00000000c0)) ioctl$NBD_PRINT_DEBUG(r1, 0xab06) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f0000000000)) 00:53:52 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x101, 0x100) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000100)={0x8, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 3232.916194][ T50] block nbd0: Receive control failed (result -32) [ 3232.921242][T31342] block nbd0: shutting down sockets 00:53:52 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async, rerun: 32) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) r3 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x28) ioctl$NBD_DO_IT(r3, 0xab03) (async) ioctl$HIDIOCGSTRING(r3, 0x81044804, &(0x7f0000000100)={0xf0, "4e8e44f9438d6bf4ed7ccd95972cf61493f7a2805fc24b4421abab4b212ac73447ef0dd95ca939d033dd9af097af0791abd391897154ba840c4d5bcd04155c9704b6b3995ab928729aa4062221de010d2d4ce513f27ae842d7b59f037b1f489b529af3fc8afec98d19e8c801236af028074adf0d0240aac159ec00efe055a4599d791c8e068361f35d78844d8f3fef35dbdc7dcbfdc5c9d1ab46a414f642953e2e4dd29e08c3e61d2f71b8d4e266f15ed8f8a3536b4d78213141c268768eab332ab52d0814bc0f63c7d3cb648b2810ab55982e15ab8a68fd251b4484d2627e1d1f0604c4fe038b7fd2cf4b9f988b63e7"}) (async) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, 0x0) ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0x1) (async) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r5, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r5, 0x8010500d, &(0x7f00000010c0)) ioctl$SOUND_PCM_READ_RATE(r5, 0x80045002, &(0x7f0000000040)) (async, rerun: 64) ioctl$NBD_DO_IT(r2, 0xab03) (rerun: 64) 00:53:52 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, &(0x7f00000000c0)) (async) ioctl$NBD_PRINT_DEBUG(r1, 0xab06) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f0000000000)) 00:53:52 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:52 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x10401) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:52 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x84000) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:52 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x101, 0x100) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000100)={0x8, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x101, 0x100) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000100)={0x8, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) 00:53:52 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x10401) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:52 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, &(0x7f00000000c0)) ioctl$NBD_PRINT_DEBUG(r1, 0xab06) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f0000000000)) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) (async) ioctl$SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, &(0x7f00000000c0)) (async) ioctl$NBD_PRINT_DEBUG(r1, 0xab06) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f0000000000)) (async) 00:53:52 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) [ 3233.002058][T31375] block nbd0: shutting down sockets [ 3233.003920][T31368] block nbd2: shutting down sockets 00:53:52 executing program 3: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x3b1202) 00:53:53 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x101, 0x100) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000100)={0x8, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 00:53:53 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x84000) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) (async) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:53 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x402000) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$NBD_DISCONNECT(r2, 0xab08) 00:53:53 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x10401) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:53 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:53 executing program 3: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x3b1202) 00:53:53 executing program 3: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x3b1202) 00:53:53 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) [ 3233.109228][T31398] block nbd2: shutting down sockets 00:53:53 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x420000, 0x0) r1 = getpid() sched_rr_get_interval(r1, &(0x7f00000000c0)) syz_pidfd_open(r1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) clock_gettime(0x1, &(0x7f0000000000)) [ 3233.111495][T31397] block nbd0: shutting down sockets 00:53:53 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x84000) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) (async) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) (async) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:53 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x402000) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) ioctl$NBD_DISCONNECT(r2, 0xab08) 00:53:53 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:53 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:53 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x2) ioctl$NBD_PRINT_DEBUG(r0, 0xab06) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000000c0)={"e4ac9a5958db31c84a468bf2764c126b", 0x0, 0x0, {0x1, 0x20}, {0x4, 0x7}, 0x8001, [0x4, 0x10001, 0x9, 0x8, 0x3, 0xfff, 0x1a6, 0x8, 0x8000, 0xffffffffffffffff, 0x2, 0x1ff, 0x0, 0x3, 0x3f, 0xffff]}) [ 3233.180034][T31412] block nbd2: shutting down sockets [ 3233.189532][T31416] block nbd0: shutting down sockets 00:53:53 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x402000) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$NBD_DISCONNECT(r2, 0xab08) 00:53:53 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x420000, 0x0) r1 = getpid() sched_rr_get_interval(r1, &(0x7f00000000c0)) syz_pidfd_open(r1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) clock_gettime(0x1, &(0x7f0000000000)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x420000, 0x0) (async) getpid() (async) sched_rr_get_interval(r1, &(0x7f00000000c0)) (async) syz_pidfd_open(r1, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) clock_gettime(0x1, &(0x7f0000000000)) (async) 00:53:53 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:53 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x2) ioctl$NBD_PRINT_DEBUG(r0, 0xab06) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000000c0)={"e4ac9a5958db31c84a468bf2764c126b", 0x0, 0x0, {0x1, 0x20}, {0x4, 0x7}, 0x8001, [0x4, 0x10001, 0x9, 0x8, 0x3, 0xfff, 0x1a6, 0x8, 0x8000, 0xffffffffffffffff, 0x2, 0x1ff, 0x0, 0x3, 0x3f, 0xffff]}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000000c0)={"e4ac9a5958db31c84a468bf2764c126b", 0x0, 0x0, {0x1, 0x20}, {0x4, 0x7}, 0x8001, [0x4, 0x10001, 0x9, 0x8, 0x3, 0xfff, 0x1a6, 0x8, 0x8000, 0xffffffffffffffff, 0x2, 0x1ff, 0x0, 0x3, 0x3f, 0xffff]}) 00:53:53 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:53 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)) (async) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:53 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x420000, 0x0) (async, rerun: 64) r1 = getpid() (rerun: 64) sched_rr_get_interval(r1, &(0x7f00000000c0)) syz_pidfd_open(r1, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) clock_gettime(0x1, &(0x7f0000000000)) 00:53:53 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) [ 3233.270406][T31429] block nbd0: shutting down sockets 00:53:53 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:53 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000080)={0x40, 0x7f, 0x1000, 0x5, 0x73, 0x81}) 00:53:53 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x2) (async) ioctl$NBD_PRINT_DEBUG(r0, 0xab06) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000000c0)={"e4ac9a5958db31c84a468bf2764c126b", 0x0, 0x0, {0x1, 0x20}, {0x4, 0x7}, 0x8001, [0x4, 0x10001, 0x9, 0x8, 0x3, 0xfff, 0x1a6, 0x8, 0x8000, 0xffffffffffffffff, 0x2, 0x1ff, 0x0, 0x3, 0x3f, 0xffff]}) 00:53:53 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0xb6fae56dff7fa7c8, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:53 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:53 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0xb6fae56dff7fa7c8, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0xb6fae56dff7fa7c8, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) [ 3233.390491][T31451] block nbd0: server does not support multiple connections per device. [ 3233.392617][T31446] block nbd0: shutting down sockets [ 3234.073919][ T50] block nbd2: Receive control failed (result -32) [ 3234.074773][T31433] block nbd2: shutting down sockets 00:53:54 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:54 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:54 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async, rerun: 64) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) (rerun: 64) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000080)={0x40, 0x7f, 0x1000, 0x5, 0x73, 0x81}) 00:53:54 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:54 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0xb6fae56dff7fa7c8, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:53:54 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) (async, rerun: 32) ioctl$NBD_DO_IT(r2, 0xab03) (rerun: 32) 00:53:54 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:54 executing program 3: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:54 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8040) ioctl$NBD_SET_SIZE(r1, 0xab02, 0xe3d) 00:53:54 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000080)={0x40, 0x7f, 0x1000, 0x5, 0x73, 0x81}) 00:53:54 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:54 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) [ 3234.948009][ T50] block nbd0: Receive control failed (result -32) [ 3234.959962][ T6119] block nbd2: Receive control failed (result -32) [ 3234.961855][T31475] block nbd2: shutting down sockets 00:53:54 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:54 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000040)) 00:53:54 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8040) ioctl$NBD_SET_SIZE(r1, 0xab02, 0xe3d) [ 3234.969405][T31471] block nbd0: shutting down sockets 00:53:54 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) 00:53:54 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) socketpair(0x10, 0x4, 0x800, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000140)=0x1) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3b7c, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x2, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_PRINT_DEBUG(r1, 0xab06) 00:53:54 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) (async) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:55 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x5) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:55 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) socketpair(0x10, 0x4, 0x800, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000140)=0x1) (async) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3b7c, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x2, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null]}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$NBD_PRINT_DEBUG(r1, 0xab06) 00:53:55 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8040) ioctl$NBD_SET_SIZE(r1, 0xab02, 0xe3d) 00:53:55 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000040)) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000040)) (async) 00:53:55 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000040)) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000040)) (async) [ 3235.088820][T31503] block nbd0: Device being setup by another task 00:53:55 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) socketpair(0x10, 0x4, 0x800, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000140)=0x1) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3b7c, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x2, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_PRINT_DEBUG(r1, 0xab06) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) socketpair(0x10, 0x4, 0x800, &(0x7f0000000000)) (async) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000140)=0x1) (async) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f0000000040)) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) (async) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3b7c, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x2, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null]}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$NBD_PRINT_DEBUG(r1, 0xab06) (async) [ 3235.821303][ T6119] block nbd2: Receive control failed (result -32) [ 3235.822592][T31500] block nbd2: shutting down sockets 00:53:55 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) socket(0x1, 0x5, 0x1000) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x1ff) 00:53:55 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)=0xffff92e6) ioctl$SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x400080, 0x0) 00:53:55 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x353743) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x20001) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:55 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x100000000) [ 3235.850953][T25416] block nbd0: Receive control failed (result -32) [ 3235.852962][T31501] block nbd0: shutting down sockets [ 3235.877262][ T50] block nbd5: Receive control failed (result -32) [ 3235.879168][T31506] block nbd5: shutting down sockets 00:53:55 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1f, 0x80000, 0x5) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x31b3fc9d4dde101) bind$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3, 0x1}, 0x20) ioctl$NBD_DO_IT(r3, 0xab03) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) 00:53:55 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x100000000) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x100000000) (async) 00:53:55 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x5) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:55 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x353743) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x20001) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:55 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)=0xffff92e6) ioctl$SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x400080, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) (async) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)=0xffff92e6) (async) ioctl$SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000000000)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x400080, 0x0) (async) 00:53:55 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x353743) (async, rerun: 64) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x20001) (rerun: 64) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:55 executing program 3: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x100000000) [ 3235.970458][T31536] block nbd0: shutting down sockets 00:53:55 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) [ 3236.696865][ T50] block nbd2: Receive control failed (result -32) [ 3236.697973][T31532] block nbd2: shutting down sockets 00:53:56 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) socket(0x1, 0x5, 0x1000) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x1ff) 00:53:56 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)=0xffff92e6) ioctl$SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000000000)) (async, rerun: 64) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async, rerun: 64) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x400080, 0x0) 00:53:56 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r2 = socket(0x1f, 0x80000, 0x5) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x31b3fc9d4dde101) (async) bind$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3, 0x1}, 0x20) ioctl$NBD_DO_IT(r3, 0xab03) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) 00:53:56 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x101000) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:56 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:56 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) [ 3236.751126][T25416] block nbd5: Receive control failed (result -32) [ 3236.755327][T31540] block nbd5: shutting down sockets 00:53:56 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x5) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:56 executing program 4: r0 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f00000001c0)=[@exit_looper, @acquire={0x40046305, 0x3}, @free_buffer={0x40086303, r0}, @increfs_done={0x40106308, 0x3}, @release={0x40046306, 0x3}, @exit_looper, @acquire_done={0x40106309, 0x1}], 0xd3, 0x0, &(0x7f0000000240)="d7a6ce6c30cf1ce7ff6520851106126fbad8e229d0b21a742f121e4e4c1fe62dd41a575c145aa225ced725edbb7c455eb1ef9d3cf6e278c48f89a455488a1600ecd331f61d66770c92df2f506381b02dc7c8e9150ef19739f6ae72e0eb5849e7e821918d0a5b167ef578a7379bca1be2fed93b204cb3c57c3e2e7e411c45314753403b84b9e314061bb1d06045c9e6a5d685052f229673b5874a1e749cf87eb5a5623d0af996898c6f1a0f63c8b68bfcdb117a21f03ccc700d049f6f69648cd005a3318f2887207fc21d7fc28d310708186591"}) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x20) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="ffff7fff", @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf002800030000000500330000000000", @ANYRES32=r1, @ANYRES64=r1], 0x24}, 0x1, 0x0, 0x0, 0x20004890}, 0x44) 00:53:56 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x101000) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x101000) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) 00:53:56 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x3) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x6) [ 3236.790518][T31564] block nbd0: shutting down sockets 00:53:56 executing program 4: r0 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f00000001c0)=[@exit_looper, @acquire={0x40046305, 0x3}, @free_buffer={0x40086303, r0}, @increfs_done={0x40106308, 0x3}, @release={0x40046306, 0x3}, @exit_looper, @acquire_done={0x40106309, 0x1}], 0xd3, 0x0, &(0x7f0000000240)="d7a6ce6c30cf1ce7ff6520851106126fbad8e229d0b21a742f121e4e4c1fe62dd41a575c145aa225ced725edbb7c455eb1ef9d3cf6e278c48f89a455488a1600ecd331f61d66770c92df2f506381b02dc7c8e9150ef19739f6ae72e0eb5849e7e821918d0a5b167ef578a7379bca1be2fed93b204cb3c57c3e2e7e411c45314753403b84b9e314061bb1d06045c9e6a5d685052f229673b5874a1e749cf87eb5a5623d0af996898c6f1a0f63c8b68bfcdb117a21f03ccc700d049f6f69648cd005a3318f2887207fc21d7fc28d310708186591"}) (async) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x20) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="ffff7fff", @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf002800030000000500330000000000", @ANYRES32=r1, @ANYRES64=r1], 0x24}, 0x1, 0x0, 0x0, 0x20004890}, 0x44) 00:53:56 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1f, 0x80000, 0x5) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x31b3fc9d4dde101) (async) bind$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3, 0x1}, 0x20) ioctl$NBD_DO_IT(r3, 0xab03) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) [ 3236.881443][T31584] block nbd0: shutting down sockets [ 3237.565175][T25416] block nbd2: Receive control failed (result -32) [ 3237.566311][T31567] block nbd2: shutting down sockets 00:53:57 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x3) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x6) 00:53:57 executing program 4: r0 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f00000001c0)=[@exit_looper, @acquire={0x40046305, 0x3}, @free_buffer={0x40086303, r0}, @increfs_done={0x40106308, 0x3}, @release={0x40046306, 0x3}, @exit_looper, @acquire_done={0x40106309, 0x1}], 0xd3, 0x0, &(0x7f0000000240)="d7a6ce6c30cf1ce7ff6520851106126fbad8e229d0b21a742f121e4e4c1fe62dd41a575c145aa225ced725edbb7c455eb1ef9d3cf6e278c48f89a455488a1600ecd331f61d66770c92df2f506381b02dc7c8e9150ef19739f6ae72e0eb5849e7e821918d0a5b167ef578a7379bca1be2fed93b204cb3c57c3e2e7e411c45314753403b84b9e314061bb1d06045c9e6a5d685052f229673b5874a1e749cf87eb5a5623d0af996898c6f1a0f63c8b68bfcdb117a21f03ccc700d049f6f69648cd005a3318f2887207fc21d7fc28d310708186591"}) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x20) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="ffff7fff", @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf002800030000000500330000000000", @ANYRES32=r1, @ANYRES64=r1], 0x24}, 0x1, 0x0, 0x0, 0x20004890}, 0x44) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f00000001c0)=[@exit_looper, @acquire={0x40046305, 0x3}, @free_buffer={0x40086303, r0}, @increfs_done={0x40106308, 0x3}, @release={0x40046306, 0x3}, @exit_looper, @acquire_done={0x40106309, 0x1}], 0xd3, 0x0, &(0x7f0000000240)="d7a6ce6c30cf1ce7ff6520851106126fbad8e229d0b21a742f121e4e4c1fe62dd41a575c145aa225ced725edbb7c455eb1ef9d3cf6e278c48f89a455488a1600ecd331f61d66770c92df2f506381b02dc7c8e9150ef19739f6ae72e0eb5849e7e821918d0a5b167ef578a7379bca1be2fed93b204cb3c57c3e2e7e411c45314753403b84b9e314061bb1d06045c9e6a5d685052f229673b5874a1e749cf87eb5a5623d0af996898c6f1a0f63c8b68bfcdb117a21f03ccc700d049f6f69648cd005a3318f2887207fc21d7fc28d310708186591"}) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x20) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="ffff7fff", @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf002800030000000500330000000000", @ANYRES32=r1, @ANYRES64=r1], 0x24}, 0x1, 0x0, 0x0, 0x20004890}, 0x44) (async) 00:53:57 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x101000) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:57 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) socket(0x1, 0x5, 0x1000) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x1ff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) socket(0x1, 0x5, 0x1000) (async) ioctl$NBD_DO_IT(r2, 0xab03) (async) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x1ff) (async) 00:53:57 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r2 = syz_open_pts(0xffffffffffffffff, 0x240) r3 = syz_open_pts(r2, 0x200000) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000100)={0x2, 0x9, 0x7, 0x81, 0xf, "e8723d3d8b7106205dbe4c25287c9ae396b8ed"}) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000040)) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100}) ioctl$NBD_DO_IT(r4, 0xab03) 00:53:57 executing program 3: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x3) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x6) (async) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x6) [ 3237.645536][T31579] block nbd5: shutting down sockets 00:53:57 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x1) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x1ba) write$cgroup_int(r1, &(0x7f0000000040)=0x9, 0x12) 00:53:57 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:57 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800, 0x0, 0xffffffffffffffff}) ioctl$SOUND_PCM_READ_CHANNELS(r2, 0x80045006, &(0x7f0000000100)) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) 00:53:57 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x3f) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE(r3, 0xab02, 0x4) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) ioctl$TIOCNXCL(r1, 0x540d) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) [ 3237.690406][T31595] block nbd2: shutting down sockets 00:53:57 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x1) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x1ba) write$cgroup_int(r1, &(0x7f0000000040)=0x9, 0x12) 00:53:57 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800, 0x0, 0xffffffffffffffff}) ioctl$SOUND_PCM_READ_CHANNELS(r2, 0x80045006, &(0x7f0000000100)) (async) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) 00:53:57 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x3f) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE(r3, 0xab02, 0x4) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) ioctl$TIOCNXCL(r1, 0x540d) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x3f) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SIZE(r3, 0xab02, 0x4) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000c00)) (async) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) [ 3237.723106][T31613] block nbd2: Device being setup by another task 00:53:57 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000}) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x400401, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r3, 0xab00, r1) r5 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r5, 0xab03) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 00:53:57 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x1) (async) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x1ba) write$cgroup_int(r1, &(0x7f0000000040)=0x9, 0x12) 00:53:57 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x3f) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE(r3, 0xab02, 0x4) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) ioctl$TIOCNXCL(r1, 0x540d) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x3f) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SIZE(r3, 0xab02, 0x4) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000c00)) (async) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) [ 3238.435186][ T6119] block nbd0: Receive control failed (result -32) [ 3238.438050][T31598] block nbd0: shutting down sockets 00:53:58 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) (async) r2 = syz_open_pts(0xffffffffffffffff, 0x240) r3 = syz_open_pts(r2, 0x200000) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000100)={0x2, 0x9, 0x7, 0x81, 0xf, "e8723d3d8b7106205dbe4c25287c9ae396b8ed"}) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000040)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r4 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100}) (async) ioctl$NBD_DO_IT(r4, 0xab03) 00:53:58 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000540), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r2, 0x2b, 0x3, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x40, 0x3, 0x3}}) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x68000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80000, 0x0, 0xffffffffffffffff}) r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000340)) r9 = syz_open_dev$dri(&(0x7f0000000380), 0x9, 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(r8, 0xc01064c8, &(0x7f0000000400)={0x1, 0x0, &(0x7f00000003c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000480)={0x1, 0x0, &(0x7f0000000440)=[0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f0000000500)={&(0x7f00000004c0)=[r10, r6, r11, r5, r4, r5], 0x6, 0x80000}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000280)=[0x0]}) ioctl$NBD_SET_SIZE(r7, 0xab02, 0xd5) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[r11, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1800}) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:58 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000}) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x400401, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r3, 0xab00, r1) r5 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r5, 0xab03) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000}) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x400401, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000c00)) (async) ioctl$NBD_SET_SOCK(r3, 0xab00, r1) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$NBD_DO_IT(r5, 0xab03) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) (async) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) (async) [ 3238.516239][T25416] block nbd5: Receive control failed (result -32) [ 3238.516497][T31614] block nbd5: shutting down sockets 00:53:58 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:58 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2224c1) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:58 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800, 0x0, 0xffffffffffffffff}) ioctl$SOUND_PCM_READ_CHANNELS(r2, 0x80045006, &(0x7f0000000100)) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000bc0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000010c0)) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800}) (async) ioctl$SOUND_PCM_READ_CHANNELS(r2, 0x80045006, &(0x7f0000000100)) (async) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) (async) 00:53:58 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000}) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x400401, 0x0) (async) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x400401, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r3, 0xab00, r1) r5 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r5, 0xab03) (async) ioctl$NBD_DO_IT(r5, 0xab03) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) (async) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 00:53:58 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000540), 0x0, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r2, 0x2b, 0x3, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x40, 0x3, 0x3}}) (async, rerun: 64) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x68000) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80000, 0x0, 0xffffffffffffffff}) (async, rerun: 64) r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000340)) (async, rerun: 32) r9 = syz_open_dev$dri(&(0x7f0000000380), 0x9, 0x2) (rerun: 32) ioctl$DRM_IOCTL_MODE_GET_LEASE(r8, 0xc01064c8, &(0x7f0000000400)={0x1, 0x0, &(0x7f00000003c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000480)={0x1, 0x0, &(0x7f0000000440)=[0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f0000000500)={&(0x7f00000004c0)=[r10, r6, r11, r5, r4, r5], 0x6, 0x80000}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000280)=[0x0]}) (async) ioctl$NBD_SET_SIZE(r7, 0xab02, 0xd5) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[r11, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1800}) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:58 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r2 = syz_open_pts(0xffffffffffffffff, 0x240) r3 = syz_open_pts(r2, 0x200000) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000100)={0x2, 0x9, 0x7, 0x81, 0xf, "e8723d3d8b7106205dbe4c25287c9ae396b8ed"}) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000040)) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100}) ioctl$NBD_DO_IT(r4, 0xab03) (async) ioctl$NBD_DO_IT(r4, 0xab03) 00:53:58 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2224c1) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:58 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000540), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r2, 0x2b, 0x3, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x40, 0x3, 0x3}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r2, 0x2b, 0x3, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x40, 0x3, 0x3}}) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x68000) (async) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x68000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80000, 0x0, 0xffffffffffffffff}) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) (async) r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000340)) syz_open_dev$dri(&(0x7f0000000380), 0x9, 0x2) (async) r9 = syz_open_dev$dri(&(0x7f0000000380), 0x9, 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(r8, 0xc01064c8, &(0x7f0000000400)={0x1, 0x0, &(0x7f00000003c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000480)={0x1, 0x0, &(0x7f0000000440)=[0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f0000000500)={&(0x7f00000004c0)=[r10, r6, r11, r5, r4, r5], 0x6, 0x80000}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000280)=[0x0]}) ioctl$NBD_SET_SIZE(r7, 0xab02, 0xd5) (async) ioctl$NBD_SET_SIZE(r7, 0xab02, 0xd5) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[r11, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1800}) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:58 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, 0x0) ioctl$NBD_CLEAR_QUE(r4, 0xab05) ioctl$NBD_DO_IT(r3, 0xab03) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0x7) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="04002bbd7000fbdbdf2511000000050038000000000008003b00050100000a0009005c10e01dcde6000008000300", @ANYRES32=0x0, @ANYBLOB="05002a000000000008000300", @ANYRES32=r6, @ANYBLOB="08002668649f0480"], 0x50}, 0x1, 0x0, 0x0, 0x404c810}, 0x81) 00:53:58 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2224c1) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:53:58 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x141401, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) ioctl$MEDIA_REQUEST_IOC_REINIT(r0, 0x7c81, 0x0) 00:53:58 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000000)=0x101) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000000c0), 0x349280, 0x100) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000100)=0x3) [ 3239.382097][ T6119] block nbd0: Receive control failed (result -32) [ 3239.385536][T31665] block nbd0: shutting down sockets [ 3239.388099][T25416] block nbd5: Receive control failed (result -32) [ 3239.388513][T31667] block nbd5: shutting down sockets 00:53:59 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:59 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000000c0)={0xc}) r3 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x151a00) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 00:53:59 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x141401, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) ioctl$MEDIA_REQUEST_IOC_REINIT(r0, 0x7c81, 0x0) 00:53:59 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000000)=0x101) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000000c0), 0x349280, 0x100) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000100)=0x3) 00:53:59 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x101, 0x0) ioctl$NBD_SET_SIZE(r3, 0xab02, 0x6) ioctl$NBD_DO_IT(r2, 0xab03) 00:53:59 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000000)=0x101) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000000c0), 0x349280, 0x100) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000100)=0x3) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000000)=0x101) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000000c0), 0x349280, 0x100) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000100)=0x3) (async) 00:53:59 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x141401, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) ioctl$MEDIA_REQUEST_IOC_REINIT(r0, 0x7c81, 0x0) [ 3239.446846][ T50] block nbd2: Receive control failed (result -32) [ 3239.456551][T31676] block nbd2: shutting down sockets 00:53:59 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000000c0)={0xc}) (async) r3 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x151a00) ioctl$NBD_DO_IT(r3, 0xab03) (async) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 00:53:59 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, 0x0) ioctl$NBD_CLEAR_QUE(r4, 0xab05) ioctl$NBD_DO_IT(r3, 0xab03) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0x7) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="04002bbd7000fbdbdf2511000000050038000000000008003b00050100000a0009005c10e01dcde6000008000300", @ANYRES32=0x0, @ANYBLOB="05002a000000000008000300", @ANYRES32=r6, @ANYBLOB="08002668649f0480"], 0x50}, 0x1, 0x0, 0x0, 0x404c810}, 0x81) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, 0x0) (async) ioctl$NBD_CLEAR_QUE(r4, 0xab05) (async) ioctl$NBD_DO_IT(r3, 0xab03) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)) (async) ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0x7) (async) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="04002bbd7000fbdbdf2511000000050038000000000008003b00050100000a0009005c10e01dcde6000008000300", @ANYRES32=0x0, @ANYBLOB="05002a000000000008000300", @ANYRES32=r6, @ANYBLOB="08002668649f0480"], 0x50}, 0x1, 0x0, 0x0, 0x404c810}, 0x81) (async) 00:53:59 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f00000000c0)) 00:53:59 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:53:59 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000000c0)={0xc}) (async) r3 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x151a00) ioctl$NBD_DO_IT(r3, 0xab03) (async) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) [ 3239.603190][T31708] block nbd2: shutting down sockets [ 3240.256950][ T50] block nbd5: Receive control failed (result -32) [ 3240.257283][T31694] block nbd5: shutting down sockets [ 3240.264304][T25416] block nbd0: Receive control failed (result -32) [ 3240.264611][T31696] block nbd0: shutting down sockets 00:54:00 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:54:00 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f00000000c0)) 00:54:00 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:54:00 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) 00:54:00 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, 0x0) ioctl$NBD_CLEAR_QUE(r4, 0xab05) ioctl$NBD_DO_IT(r3, 0xab03) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0x7) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="04002bbd7000fbdbdf2511000000050038000000000008003b00050100000a0009005c10e01dcde6000008000300", @ANYRES32=0x0, @ANYBLOB="05002a000000000008000300", @ANYRES32=r6, @ANYBLOB="08002668649f0480"], 0x50}, 0x1, 0x0, 0x0, 0x404c810}, 0x81) (async) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="04002bbd7000fbdbdf2511000000050038000000000008003b00050100000a0009005c10e01dcde6000008000300", @ANYRES32=0x0, @ANYBLOB="05002a000000000008000300", @ANYRES32=r6, @ANYBLOB="08002668649f0480"], 0x50}, 0x1, 0x0, 0x0, 0x404c810}, 0x81) 00:54:00 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x101, 0x0) ioctl$NBD_SET_SIZE(r3, 0xab02, 0x6) ioctl$NBD_DO_IT(r2, 0xab03) 00:54:00 executing program 3: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) 00:54:00 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:54:00 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f00000000c0)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f00000000c0)) (async) 00:54:00 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) [ 3240.341717][T31724] block nbd5: shutting down sockets 00:54:00 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000040)={0xc}) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0x301, 0x2) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x200040, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000000000)) 00:54:00 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:54:00 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000040)={0xc}) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0x301, 0x2) (async) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x200040, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) (async) ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, &(0x7f00000000c0)) (async) ioctl$SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000000000)) 00:54:00 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x101) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x3f) [ 3240.410269][T31743] block nbd5: shutting down sockets 00:54:00 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x284000, 0x0) ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, &(0x7f00000000c0)={0x8}) 00:54:00 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) (async) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000040)={0xc}) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0x301, 0x2) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x200040, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, &(0x7f00000000c0)) (async) ioctl$SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000000000)) [ 3241.134469][ T50] block nbd2: Receive control failed (result -32) [ 3241.135559][T31728] block nbd2: shutting down sockets [ 3241.136030][T25416] block nbd0: Receive control failed (result -32) [ 3241.140470][T31723] block nbd0: shutting down sockets 00:54:01 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x284000, 0x0) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x284000, 0x0) ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, &(0x7f00000000c0)={0x8}) 00:54:01 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x101, 0x0) ioctl$NBD_SET_SIZE(r3, 0xab02, 0x6) (async) ioctl$NBD_DO_IT(r2, 0xab03) 00:54:01 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:54:01 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x101) (async) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x101) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x3f) 00:54:01 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r2 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$rose(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x109100) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x3) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x4) 00:54:01 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x680) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r6, 0x2b, 0x3, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x40, 0x3, 0x3}}) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x68020) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f00000002c0)={0x2, 0x0, &(0x7f0000000280)=[0x0, 0x0]}) r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r11, 0xc00464c9, 0x0) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r13, 0x2b, 0x3, 0x7, 0x4000001, 0x4, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x80, 0x3, 0x3}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r11, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[r10, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0], 0x8, 0x81800}) r14 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000340)) r15 = syz_open_dev$dri(&(0x7f0000000380), 0x9, 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(r14, 0xc01064c8, &(0x7f0000000400)={0x1, 0x0, &(0x7f00000003c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000480)={0x1, 0x0, &(0x7f0000000440)=[0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r15, 0xc01864c6, &(0x7f0000000500)={&(0x7f00000004c0)=[r16, r9, r17, r8, r7, r8], 0x6, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f00000001c0)=[0x0, 0x0, r7, r3, r4], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SIZE_BLOCKS(r18, 0xab07, 0x1) ioctl$NBD_DO_IT(r2, 0xab03) r19 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r19, 0xc00464c9, 0x0) ioctl$NBD_CLEAR_SOCK(r19, 0xab04) 00:54:01 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x284000, 0x0) ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, &(0x7f00000000c0)={0x8}) 00:54:01 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x101) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x3f) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x101) (async) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x3f) (async) 00:54:01 executing program 4: ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f00000000c0)) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000100)) [ 3241.219567][T31764] block nbd5: shutting down sockets 00:54:01 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async, rerun: 32) r2 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$rose(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x109100) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x3) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x4) 00:54:01 executing program 4: ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) (async) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f00000000c0)) (async) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000100)) 00:54:01 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 00:54:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x100) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000010c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000000c0)={0x0, 0x0, "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", "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"}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002500)=@base={0xd, 0xfffffff7, 0x200, 0x6, 0x220, r2, 0x6, '\x00', 0x0, r1, 0x5, 0x4, 0x1}, 0x48) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x58, &(0x7f0000002640)}, 0x10) r4 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x7) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x4) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0xf, 0x12, 0x24, &(0x7f00000020c0)="ab2dd00422010283d4ba1a3e1db2385408650ad6b3769c1c14bb4be8cd910fdc35db724c9f98e33444ce484676742161660d3f0ee0a8901660d14f02dd13ff268ac0dceb5c5eb5486bd5b9dba3ee627544b4225f5525fd6bf4076a275e3f645b868785206c009a0b08ff9381f6fc9aeae558e19a9f79cafc46e578291094b68ce017e7d3fb0bba376902a2b12608db0758629de47a5341c4b7af7390e4c41cb78aa60b08f60e3260d28965722309a938693eea2fd91cf6425d1e1d0e82f9791dbbbe46e00d24d13dfcbe64a7619bc8953f5e6db68848d7370cfb7b836e3f3a09f3b6013832ff133c4e326a377e83780835b8ae3a6ed8a0f8d50564f01f94eab2e8c26faaed1ba29d0d94ce0234a7ec3ccfa7723b5203310e86e395117fda28c3b970558f40da915fdf886506802c9258487cc409604d2e3f18974c60c0839b55813f1f932f3bcb00bf62e1b720f1a15d823818589a5a23bf5bef64db14ee1649753ba96cad86b99fc3f711b55286ff365fa11eacc3ad2f5042da29277b8b4b72d1703d8eeb13a8fbd9a2a87f7fedad09191d50d25df06daf36c94898bd6ddb9b0e0a3e910535c50e16744cad185a9b7706542b48f0ed87185bd8a5ab73827a00193d8751bbde20fb3b540eac2856b306ef95c8fb47ddcd9674cd51b4410c97b1321d4a0ad28788bbb5810fc04514cb1e17f85cf38c44397f17df1310a62957c4a63eaafe24f60b7b9e82a74d37619e1a8e8636f511ae9af352967f5615ed91f1db04a0122a122dfa37ccbf30a891c3d929f3f72329a3c0c5f1ffcb6c6b6bc66755626ec0ae860c0ef5b2625716ff086b0d34682221915d728460bf086422234d8b523d3a599dddf779762d828d4c421fae80125ce349a3ce5b0fdfde4761633412d2edbe45a7e1731e8a21a09b9cecb280107e1d377b2a08cd29a586927f1438c9f508ac301239d884efa5ec8620e2204f306993b602a0ba15819baaec7cb621ff8b7598498bf88f17ef599ba70e6c6058fbd726cb85da67e0b37e1e40dfe3941ed768c30702143699177e77bd1d13f013d001c45e134b3f6b2912f38462cb56c422015302bfa40b097c51361a4f62c103906e831a1a396899bb902947b17e5ad9d567431ae3ec96b2b73de0f1dd83d04f49ba285a014a3af6b3502e6fe29ab6902a2b29233ce00ff75c364af0e373fb20049cdd994f7fe1145aa381ec00b2f02d7ddf563ec42e6a075363f3af515ef2f4fd8d8f3e8bac63db0f87ad5cb610fc8f040f523674a88356c115600ad9b9abb0d6dc4e0b73e7fa0a6bebe12337f16df29fa4ae58037ce96bafe1c57734dd9670e14da30653d195c7e9cbb9da9d69575bf89d161a70a264b12736ee31ecb216c21d38394678dc3a6a4116d526f2803ed0958ac23a7381b4098833fe0ceee9fcb26ea9c5b474b14a00e1af3ce498b822"}) r6 = syz_open_dev$ndb(&(0x7f00000024c0), 0x0, 0x0) ioctl$NBD_SET_SIZE(r6, 0xab02, 0xfffffffffffffffb) [ 3241.330684][T31787] block nbd5: shutting down sockets [ 3241.994957][T25416] block nbd2: Receive control failed (result -32) [ 3242.000550][T31762] block nbd2: shutting down sockets [ 3242.013114][ T50] block nbd0: Receive control failed (result -32) [ 3242.013698][T31774] block nbd0: shutting down sockets 00:54:02 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000001c0)={0xa, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000240)={0x6, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000002c0)={0xa, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000300), 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, 0x0) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000300)) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r6, 0xc00464c9, 0x0) read$hiddev(r6, &(0x7f00000000c0)=""/17, 0x11) r7 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x1) ioctl$NBD_SET_BLKSIZE(r7, 0xab01, 0x10001) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'pimreg1\x00'}) r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r8, 0x8010500d, &(0x7f0000000bc0)) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000380)="90de8e06baf65e706b22398aca9d200126249fd5cf6f6185d43f8f68755cf0131bde467911f1f5dae60cc8197d591a6f52a64c6913571c978fd6009045a7d3d426930599d5b89c8a283ac0564bbbff74ca86ad6d1297cdd11263883e06b19d69f969175acd5fa3847350ef2fa3f37628") r9 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) ioctl$NBD_SET_BLKSIZE(r9, 0xab01, 0x8) ioctl$SNDCTL_DSP_GETISPACE(r8, 0x8010500d, &(0x7f00000010c0)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x810, r8, 0x0) socket$l2tp(0x2, 0x2, 0x73) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 00:54:02 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) r2 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$rose(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x109100) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x3) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x4) 00:54:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x100) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000010c0)={0x0, 0x0, "7760234cbc907fa68198c7250237731129bf87604ee36f3c43cd813881185c44561ff1bd9552b41d89a56651b8a3e9fb47082512d656c78c3aba7ef50d44ab9c21939de8fe9fee8b30ef9be8a35154c536b0335712ebb9f2a91178d6e7d510dfbcf17376c5ab945e265fbd3817147ce7980e6af3d49dfc775da07c568e53c6b2bc6a587fb4295716291f92fedad45a17af25ad722e5671319bffbe71681d28969debf8be2e02a9a14a2f787b5c6348e025c571c34501473c29e3a24a2176e5326f176a4d1e1f072ebc7c87f7474bc9c70c7e5f83cd65bd14afe9fb45298942a422189d091166d557d597722d2559bcb0cc19611a361461f0054397ad81e73c44", "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"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000000c0)={0x0, 0x0, "d0fee92cc3316af19e6abd47e1fa7f70ae42fa5712473409e9ac8913f5ac96b5e4219e305ad688c70f7c2514cf067210f2256a8c95bbdc51cd532668695435427d69cf8cad0eaf3db9d585c942907781cbcb34b7c5a8735a2a9a5f09505eaa089056d9490678e9cc1ed196479a35ec394c8443a24c5a471f2549b1a80b148655c3cf792d111b9e9499bae036bffbbf5a0135d08bd0db7671a52a69e15668a8f44a7397ff5e6304733de0b32d38171a365fbcf07e2ed54be5cb8dc55ab78b48ebc1bd7437503e3e56f03bc0eb6f30383b973560d49c17f732e085b26a7c3c4b2ba76967ee934b1df917b1b332c4d53ae2abb50e671dfb3695009f3e84ed1546c4", "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"}) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002500)=@base={0xd, 0xfffffff7, 0x200, 0x6, 0x220, r2, 0x6, '\x00', 0x0, r1, 0x5, 0x4, 0x1}, 0x48) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x58, &(0x7f0000002640)}, 0x10) (async, rerun: 32) r4 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x7) (rerun: 32) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x4) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0xf, 0x12, 0x24, &(0x7f00000020c0)="ab2dd00422010283d4ba1a3e1db2385408650ad6b3769c1c14bb4be8cd910fdc35db724c9f98e33444ce484676742161660d3f0ee0a8901660d14f02dd13ff268ac0dceb5c5eb5486bd5b9dba3ee627544b4225f5525fd6bf4076a275e3f645b868785206c009a0b08ff9381f6fc9aeae558e19a9f79cafc46e578291094b68ce017e7d3fb0bba376902a2b12608db0758629de47a5341c4b7af7390e4c41cb78aa60b08f60e3260d28965722309a938693eea2fd91cf6425d1e1d0e82f9791dbbbe46e00d24d13dfcbe64a7619bc8953f5e6db68848d7370cfb7b836e3f3a09f3b6013832ff133c4e326a377e83780835b8ae3a6ed8a0f8d50564f01f94eab2e8c26faaed1ba29d0d94ce0234a7ec3ccfa7723b5203310e86e395117fda28c3b970558f40da915fdf886506802c9258487cc409604d2e3f18974c60c0839b55813f1f932f3bcb00bf62e1b720f1a15d823818589a5a23bf5bef64db14ee1649753ba96cad86b99fc3f711b55286ff365fa11eacc3ad2f5042da29277b8b4b72d1703d8eeb13a8fbd9a2a87f7fedad09191d50d25df06daf36c94898bd6ddb9b0e0a3e910535c50e16744cad185a9b7706542b48f0ed87185bd8a5ab73827a00193d8751bbde20fb3b540eac2856b306ef95c8fb47ddcd9674cd51b4410c97b1321d4a0ad28788bbb5810fc04514cb1e17f85cf38c44397f17df1310a62957c4a63eaafe24f60b7b9e82a74d37619e1a8e8636f511ae9af352967f5615ed91f1db04a0122a122dfa37ccbf30a891c3d929f3f72329a3c0c5f1ffcb6c6b6bc66755626ec0ae860c0ef5b2625716ff086b0d34682221915d728460bf086422234d8b523d3a599dddf779762d828d4c421fae80125ce349a3ce5b0fdfde4761633412d2edbe45a7e1731e8a21a09b9cecb280107e1d377b2a08cd29a586927f1438c9f508ac301239d884efa5ec8620e2204f306993b602a0ba15819baaec7cb621ff8b7598498bf88f17ef599ba70e6c6058fbd726cb85da67e0b37e1e40dfe3941ed768c30702143699177e77bd1d13f013d001c45e134b3f6b2912f38462cb56c422015302bfa40b097c51361a4f62c103906e831a1a396899bb902947b17e5ad9d567431ae3ec96b2b73de0f1dd83d04f49ba285a014a3af6b3502e6fe29ab6902a2b29233ce00ff75c364af0e373fb20049cdd994f7fe1145aa381ec00b2f02d7ddf563ec42e6a075363f3af515ef2f4fd8d8f3e8bac63db0f87ad5cb610fc8f040f523674a88356c115600ad9b9abb0d6dc4e0b73e7fa0a6bebe12337f16df29fa4ae58037ce96bafe1c57734dd9670e14da30653d195c7e9cbb9da9d69575bf89d161a70a264b12736ee31ecb216c21d38394678dc3a6a4116d526f2803ed0958ac23a7381b4098833fe0ceee9fcb26ea9c5b474b14a00e1af3ce498b822"}) (async, rerun: 32) r6 = syz_open_dev$ndb(&(0x7f00000024c0), 0x0, 0x0) (rerun: 32) ioctl$NBD_SET_SIZE(r6, 0xab02, 0xfffffffffffffffb) 00:54:02 executing program 4: ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) (async) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f00000000c0)) (async) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000100)) 00:54:02 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 00:54:02 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x680) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r6, 0x2b, 0x3, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x40, 0x3, 0x3}}) (async) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x68020) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f00000002c0)={0x2, 0x0, &(0x7f0000000280)=[0x0, 0x0]}) (async) r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r11, 0xc00464c9, 0x0) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r13, 0x2b, 0x3, 0x7, 0x4000001, 0x4, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x80, 0x3, 0x3}}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r11, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[r10, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0], 0x8, 0x81800}) (async) r14 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000340)) (async) r15 = syz_open_dev$dri(&(0x7f0000000380), 0x9, 0x2) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r14, 0xc01064c8, &(0x7f0000000400)={0x1, 0x0, &(0x7f00000003c0)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000480)={0x1, 0x0, &(0x7f0000000440)=[0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r15, 0xc01864c6, &(0x7f0000000500)={&(0x7f00000004c0)=[r16, r9, r17, r8, r7, r8], 0x6, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f00000001c0)=[0x0, 0x0, r7, r3, r4], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SIZE_BLOCKS(r18, 0xab07, 0x1) ioctl$NBD_DO_IT(r2, 0xab03) (async) r19 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r19, 0xc00464c9, 0x0) ioctl$NBD_CLEAR_SOCK(r19, 0xab04) 00:54:02 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:54:02 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_PRINT_DEBUG(r1, 0xab06) [ 3242.079777][T31800] block nbd5: shutting down sockets 00:54:02 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 00:54:02 executing program 4: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:54:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x100) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000010c0)={0x0, 0x0, "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", "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"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000000c0)={0x0, 0x0, "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", "e2ab075bbf543b7e0d6e8ab1eaa240cf7b7827a8fbcda0a81b4fe0f6087ce4eabd8c8f1d426aa5bb83346b52181b6515743a49475d7b07532e325ea2ceda3c4581456d697a6f2cca3b0b61f0349d6f440684e1489b7c3fd46bec9797db1908fc209ad14db5c09b46215801297201f85924f24e2eb663d7fe0c13dd58f14d340689580cddf2ed88392d1e881a7fc2e48a802da6cce3b06c53c459be9b034b8742efb7d04ba4d0d66acc52a75040b9b745d715f763e1af44d0cf5040bb5db9e319d35625d44987537b11036d4f7930c9e0354c96f86d6783146b2e34406e2fe6fe4c77dc8efc65db44f9e0b3979a6bc7ae08b7e25d8f6b1a44ffa0a09bbee149551305359ea85737f8a57bc950cacc1388b1fbb5dcb13850d98217fe3a4eda411405d16073793f8028a1939da947977f5ff29f2e20f13f61216d961f4b0a0153b1016e62c12ca918c2de7e230f8492d1326a821a17f7b5b1e52394bf5dc132879c0837eed3e6053987b5666c07461e145f0f68ceda366249af3bceeeb70e939f28b3fb7b153d3289ebce1385ee4a17b8c19b44355eaa4514f0a28253ca98e99170388edce486b935359554d14066ce803e07982a2a763f30e0ba2bfcafe09793014c50fec481b2458c6b043c7a08e2fc86662e9d44f99339fb87258ac31249a9f7f250ea2b912847bad466ed8e41a4ff72ce28ee4d3327cebd9b6288a7e10d03c70c6cbb569b701f477c16bad6fb7ad2c783e9501a6a351c91af30c3b51187414bd9f0390cccecf83b49b34f39d2843b16b01dc89254fef2eaa4dddfc850b0ff6df33dbd2838a2f293e642d001f7c00fbbcefca4f8c1cce89db0f4c4e8d47d3db3de72ddda6b3234be54ad46a9ff0201021530e0e9a086ae54d6965c74842a09d1eb9f861145db1dcde3a62007d373a91363fc42d8914586b71d2cb654c9875c390708aeafced6104ffc04728868072e97f419d67760c68ea1222cecad596ecba0d8d8e5e0ea12855138bc546eb1d9f0b7f49b7eb52759b1519f495d2dc73ce886df720b903282cd661a0f400a85f7d32924991dcedbfe7b0b149301f0dac8e6ef299e74931e0a919b0f42b3c9609853dbdc04cf9d05df41ee98bdd21890de94a51ea9bd9aa2beb12e951d803ce6db6876976fe8a7735001646a7df3be69b882888d8dabc5f72f43ebcb57747a34185f0824d69a4d9352e7f23386de8ee3401523c0039b4c4ff9c58d187a458fb4e806efae934e8f12bc0cb7d553e89483401707d475a4592920af4fe87340a30c038afb7019bf7750a6fd8b6302f22b082625aa81c5bd6f82a9086535413c3ae69ab9c6bb221fa5657fbc34e3bb6134baefa337cfe3edbd7d9a4d43078e3433cc6dcddb09a7b31b4334c1c120267362025001a4b26fb0bce8b0457f652538a8447ffe84ca14d1b5d6467370e86ed9d8f417680cb8017da38711341160e5d368bf5a07ee8854c9ebd24eea4cc70bf29461f39aa02bdbc8514f4a6cacf3d437dafa8d65fbd3bbeeb72edbba38531fe1938590d35bc7829b7acfbb0ad5cb570c3562692b51b07bdadfecc6ecdf4e54ff568738df6c74e02c35bdb29a6308ee5dd909b508990c111e06826c8a75bedb305716f634e0dfe89f1a7c0bf8556b258dba19bf57c8249d08f8581b0b542dc83c90540b707e382e41f81a433ae4ce3304e9eb18e1f3a726bd7f3b6a46b95afa2a11b8244e973899fc8bd8993e11e229646136bbf2b967afcd8d442bee24da6402b85dd53eb97a8fb8f8f76101a468402e46d6ab6464a0f44842026e6863ac1b79012fa1b8058d79c49f8ce6956f745bf641df22af5d258e79de6915b3563e4d932cd68bfbdfc66d35b4fd57a022091b7aa36d51ab8e3baa90f0aa019c0bf65002fe17e313446ede4c203afb42d448942a668a59baf7f4e45076784bc61e68cd48e6fe495954f0250ef9e97e62fc21021e60efdb14bb70437d3215fea13221da06edb89d5a2643caacc0c4339a20933e1817327f6ccb50c78f136a7d7062d35fe3f6739b47e455d06200289c07d7aca24270a8b3139554d37bd54a01366d6aadc2e72a013ca2f743730d7800f85f349f89def9bf13fd2b87280f48e4511464cabee8a24ec3c62e0c09f6aef37bd6971a080ebbe8d0afd33907099ef5ec65a75a6c376dfb56e62a5e63caeb0bd39ea5e856609ce9687428ad1f291f491a792bd690b031835a7e40124cf678b759bae572805f9aa46604877a8978e8bf19c0497c7e7df36ff55dfdeb6778a1f08002312ef9477d1567de593f942267ad6b2a43216c1e7df26572f97287d888ad5d27043b3507410537e1a9ba11e047d4ca290714977f54897b3f963994cd7c81ab940658b5017a1d982de23182da9b7e6cee3f74d19da706da334eeb415fce75523bb9df9445609fedf86030af4fc6157b562babf9caa98820887680093888e4653e5cc787cb9c329b48b31549f57a0375b63a64f69fd52d9ff2e5cba1a51b4039bc39f185d7a7f916e86436056112b948a89fd4ab5d1a2c6609de1531214dd9d9ba98ac43574f4feefe0ce8de9f3532c42d98cff90e84eb81a10e2539f7c35d5afca29037c76c233cc22e0da0902267db341fe82bdd34d95de0943f7281d9ea64810178c3542958d49652452e6ae709532c1daa3029e8361bf4581dde2009fd1de08639634c412c4f8b017251f1ee3b049b7497680c933de5fd4fde6e0e38e7f6d34482b705d0ff17b6ea27293fce198da1e50956cce48e62070b2e52bcd6dd53b4836ada5bf761fdcf179f61baaa9594ba0802c6928eb9f3de1d6e2999cd28119d594a0be8a5bd4390cbf4b31f372916861962b53f69f659de135fd50d29152308f4527b291f41f9efba75de0c228ba30c1b1de8f973eede6bb8c7362dfd1a91f44be14454112ec1badd59ea7c23834644675a936d588bf1e64180f6569f2d92f8cd21aef3ce97e8ad28363481db1472bfc76179d91530ea6bce37044e849d3e734f28f7e6c60589301a9b491177c54f0bdb6daf314f7f3efff5b6101a75baa7f915740bcc1351ab43a17747fd69237649b616ea94cf9bab909e4d68caa848f6e90ef4f702b0fa426c77d95657ce52a74050c3ffab75c65c15a2519fcb2f4f1bbed0df51d4e14c6cbb469f51b96a420896d6ef88584e5cd3f7429f78ea6708bc98f63d090798c59b9c982f4f706d985119b1f0c9607220fcdaca60c12fa0e2be1ddecf642f5d02243b0f953a718c9504637cc5f0222ffa7448dafcd4ac8274c65decaf62489860e73e9b6816fd437971bda044abeddc31b6383be692726188c2a20cee2630a0f3d4a5fb8b75705a15e3cc5dc3c183216d8ace78cadc50c215d0acb14c3821d32b184fa1d3991708cc46dd47fb8511132c0f67454cbd96ea5080e8b71fc4ff803e7d4ae8d355454c39e840c90f8390b794f2b968db6e0b5bc42019daeede56b80c5dda9d3ede8b31847d15d139d22cdc0edbd6acea5b304232d3a9b8141728034a5daf5ad0bc87d5837c396900083a0bfc41c4d924c05ab688238ed0393bc9859ee7d469939166256ba331305e4a9d457ec3eb7b063d8858646c969b68f59a5f8ad7e701f4a090492e84a427359b49bdc009306a6152114ee04a87cd5721e7842dca8ce73cb67f41162fcf5fb242f1028c3f04adc402e4255416ca07ac2c50aa20c2822cee06c99c770fdb05c12e8f27f9d1e705d0999f867d1dd81fd9ece0c51b5d444356d7fedb6521ecc99a46ac10b197d116d801963199c191be8b4f9740d5e7edc030c9e0193194e8434b8d1d8b7224bfcade2af472df32b56177035128a0411af09d5c4a20ce84e77a53c8f387a3772c12a28d622870f7cc3ec8209932653ff672f5fbd2f5913eaf16684567a8414953656aea31417c7d91ad74cd1b8bb640e33c21222a7e2cd1daa5bace0b64312f8622d25e39af1c55b2262861fb9787eb3bc4d25e0cda00a5bc599b146a61bc9f7939a1bfcfdf64ec5483780a7c952a7c4fd0bc1abd535676217655b0704457240c2c5f271e87feaf250c69badbb79e29d733fd356f7d776ec7bbd00c9f71a7fa8ce3ed1ea7ab5b95eeaa6af18c914b35e17d3f4125358ae19a9d10fc1cda3a63374118025973a2c20e9b2ce2de0df7ef323a2dd54510a35661d56a792bc8f70d22d452a32a69dbd4a1d7697b2e115f17204a404f840a56ab907922fb24beb26eb9e5cced1f5ff07b3534b3759b1f9ff21900abb9952f6f4e3ec7c4da33c541cc84422f8ce6227679f5cedb67c6a6268c3126bab0376b2abd46a1300585b07d6fa9beaa2c7eef9f45acc883118717c20bccc4005d90bd2d3226ebf9543e09725e98251f02a03eaea95ed071c417b4be6bfa4af52894535c9d55558bb21579d6ef56749016d14577e5465ab21f350e2c2c8da0bdc64c8a2b2fe0845706ff597a89a4de71858dd4e90d0a30b06a6b29488ffc81837e67d530ffbc2346b3af4d9a7b9f42d05090057f11aef2bff78049a4c64b74f797446fa27121c0de1de56a4cfc9df73c12fb9a266d5d0e02ba244c8b793910da1c3fa279b7da6205f8a227e3471cf0e3e0d502272ecb696603c0401cf7b110bccac98481dd44cf7b60854db67108f10142eb2ff0000dca175b1a09ac2f8db50c10a617b75ebc415cf9f239cbe5571051af23169de01ebea4822d25f1985f461af44c4c7387c0009177982a8fee1d6f52638500b5f970ee0c9287a34968d08e21f1f8327c5dbfc616d86c58fe11d16535266a11d1ee4aca22a63dcbbab92b7797bb95fe17518b0129bd83673db24e60fef77669dfdd5508e6529e8745b64d763c7d608d79a667a5441bcb28c9c2c89e41535dcbc18482352dc348dac9ea4c5b5d8da4e77ca08804a22f3cd86eb1f3aa9b151f421ec87e8a7bb9d58393232f9a2cac8f7208ed282e1aa12bcc46185c272e81c79a3767624453928aee5dc4c55c3208155fe3c2ccdc6682defaa35338c913153d6b478f7871b2596d7c3de8ab36c747528e8552d6774343241116ce03e058367a81ec593526bd8a0a5251eb2f975fd5b979c22e5941b9c941e093ab7d2b3439533dc7a9bb74752c96381da8eec928e792f44ef3c134c84057c970ceab001a08146eac722c9b2edd7f93e530388b156d9195ce178f7bcfa857bb3a6377d6a315aa3444c3190f12b0d546720a774fbd8eb5a39b05c94f5d245c10e5dddc6d79ddbc0e36d776d86a5bd08a93c30dbec7d5a6ba6816da0ee7423c1fc91f5fdc722fd31bcdc3fb3a23d83e6804fc51b071e89f4a71ff4dd5917a134f0c3802a11fb9807980121ed99886cb745b4399dfa59656f79af48ba8f803df256afc0796adc30e957092b48bd4e6cc82c1eec830615785e0dc6950578e98c4b978dae0e848c2e178fce361d831688faf8b4fdf"}) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000002500)=@base={0xd, 0xfffffff7, 0x200, 0x6, 0x220, r2, 0x6, '\x00', 0x0, r1, 0x5, 0x4, 0x1}, 0x48) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x58, &(0x7f0000002640)}, 0x10) r4 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x7) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x4) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0xf, 0x12, 0x24, &(0x7f00000020c0)="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"}) (async) r6 = syz_open_dev$ndb(&(0x7f00000024c0), 0x0, 0x0) ioctl$NBD_SET_SIZE(r6, 0xab02, 0xfffffffffffffffb) 00:54:02 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async) ioctl$NBD_PRINT_DEBUG(r1, 0xab06) [ 3242.158552][T31802] block nbd0: shutting down sockets [ 3242.169969][T31819] block nbd5: shutting down sockets 00:54:02 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000001c0)={0xa, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000240)={0x6, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000002c0)={0xa, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000300), 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, 0x0) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000300)) (async) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000300)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r6, 0xc00464c9, 0x0) read$hiddev(r6, &(0x7f00000000c0)=""/17, 0x11) (async) read$hiddev(r6, &(0x7f00000000c0)=""/17, 0x11) r7 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x1) ioctl$NBD_SET_BLKSIZE(r7, 0xab01, 0x10001) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'pimreg1\x00'}) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) (async) r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r8, 0x8010500d, &(0x7f0000000bc0)) (async) ioctl$SNDCTL_DSP_GETISPACE(r8, 0x8010500d, &(0x7f0000000bc0)) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000380)="90de8e06baf65e706b22398aca9d200126249fd5cf6f6185d43f8f68755cf0131bde467911f1f5dae60cc8197d591a6f52a64c6913571c978fd6009045a7d3d426930599d5b89c8a283ac0564bbbff74ca86ad6d1297cdd11263883e06b19d69f969175acd5fa3847350ef2fa3f37628") (async) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000380)="90de8e06baf65e706b22398aca9d200126249fd5cf6f6185d43f8f68755cf0131bde467911f1f5dae60cc8197d591a6f52a64c6913571c978fd6009045a7d3d426930599d5b89c8a283ac0564bbbff74ca86ad6d1297cdd11263883e06b19d69f969175acd5fa3847350ef2fa3f37628") r9 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) ioctl$NBD_SET_BLKSIZE(r9, 0xab01, 0x8) ioctl$SNDCTL_DSP_GETISPACE(r8, 0x8010500d, &(0x7f00000010c0)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x810, r8, 0x0) (async) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x810, r8, 0x0) socket$l2tp(0x2, 0x2, 0x73) (async) socket$l2tp(0x2, 0x2, 0x73) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 00:54:02 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc}) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x8) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x0) 00:54:02 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) 00:54:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x100) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000010c0)={0x0, 0x0, "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", "086085d3b15dbb8126d518fe131a29be4a9c0796de67ac2e6d4fed26974c3fb873bb8d5ce21537887b4c88e744b1bbc6dc1f8496eeb4d75c30175e0577d37badef4344057f594a3a7bb4aca637fd824b908186379694ddd68218e62e9b461816fdd46879f035e30194d360a371456d087fc005b145d2d4f508fd2535f27fc216bc88005bb5049a64db22e83abd3e390d0e8b89b430a975b64dfc087ca12c5c9f26bd593d84401c26c620f541927b08954b3224b5dd07b556c535f518e33a601aa35f4f286b3a9d8cef1f67259cfbdf4f4bd1214f3f75102db2219b63cf76b2c9d79017b4eaae952d1304609ab0ad4f53c91facbe192305ef20d395249893f7a133d7305d915b8298be573344efac265afa4c74c3270573e703a25584d7718a56ec29ebe4180f9542808917ac55c9caf1806317b8a96a6bf884d85697a90a29ad85a275bc8675eefac0173c295aae3d4a0c35ba29d160800e0afc0ea61d9721cf0820012cb82e5c03d9ba8cf8575bcd7864e044a4bcbdb71b82ad30a5fa90372a9ed274223aea3926aeabe7217dfba5d5ec12508d956f83907220cd845b50dc220cad7a15e420445e5a9f50ceb3515fb4b111774ce696b8f20d9c31d5fe83ee7f5bf6c783dc3cc4ed6ddab1ddb0f2a453ef405bc6850cb6f41a43e519e206545e03752837785f070e07867bb212f42325f72e01484fe96d0796302df7389ba50d82cbc84d09499c814c831b764a5d04bae7351e6c8774fdccba353c65b3071673781a54a27fa38c6a2f4e6c1c9056d00e2451e7ff93020adb6c0acbbbce6e66d303e6386e8e41dc991ddd940664c36c43e49a0365c1c90d9c7ca75480e4f69f46aa91096c878ce2a7e422fb21c046566b6c0fb6df93655dc953c6e1234496144133f13d26baf34633670b957556b557134a226863d712466a3d0cb15ef5f9a895183117cfe6e0a9ff441ec60582de9c6ca492e410a9c2f7c77641cdeb15cb685d881a8b6781c9974dc66e3fa31a6b8b6e4060a80c56b131cceb9310a45d730860dcf09c10ca20709216037da3581b1362ea8d2a59e1ee16550a0f021cdf6f934ae3516b86896b0f34288c72bf724131f140a781a555be9f62b6429bffb0aa78a71a365d8aa72400edec215bd861925762449a6993188fd13f8ccab13b92431fa89e3b05d1ae292f1ee0cca57c691ec22ff2afa452929331fd6cb3022d995b65a01b14f795c04462cbf4b0ec442d0a5099921e553171fb74e54939a6d3924b9d429557f4cfee29a7dd536b7237ec0e8894a54baae79125ebca0bbea33f7f8063dcb5bfdfefd9c60d078279350b0d3343b5cbd25ae83067eeb3fc52c4e39da3ada48ca5be9d3e05c5d18202392447e343cd3eccbe472538e519fbf613393452962941b583e3f790d7df78d2b58e9f0248f5732c7d32804eb0e2b2e488d9f3343e201065a20e7a264d70f55adeb66e3e23455c5a9d511d415e1dd05961704361c08de7082a5de21aab0d3c671f4cf155fe68e876fce3965d181b30d23b3edeb6f15bd86dd2e2f2209ed8c5087dc430b56816d6a08455ba1c30c64e0dc4dd180f2b44fabbfdad9b2e157d80882a4c8a9d164cd539817e09be101d0130159f4c447ec9b3e6c1d4d4fe66a434b65537296359c1947c5788d1f90413e81f2641a553e28b7bdeb938286dbf09a8a0c50703ecc34777b925a1b8e66389afd7fa1a01ac79ed46d43fe175120ed3d6f774852af30f1ab4438452029ccf199863267ebb5b2477bf7bf3793b6b6b4d25906b6aef8b66e04caa185bf53efa15ec2930aa87489860278afc64122a4df40178ea0bb790a1e2b2f5754cd071eec4b1c246f381d69cac5fe7c11f1bb48f248c0ffd7cdccfd000ed9015810f13e697a14c0b7cbffab5db588487c70306f02f1eae75945af219dce802c7b3d10876a8e8c8255c33c4ff4b6842270dc1ca505852c1cd361e49006ceb7c60536b3b90cbc01b87dbf70345318333c428a30aabfd3e5d097732a3a6c3631c7ad964a53df26fe5f2e87a480bf8fd9a4d06b10117e5e08d9b905f6783d43a20314bcc596b2bbdaacd5f62688cde5c6f4fe5e51ab257399b1b272552450c0c9b05b0dceaf8580c7dcb07d0c736a471a812727caa7922840a9b138d43f0cac26962849e2736770bc8d0ebea52681ba02c99f22102457d8f21353eddcafd633381732ccb00de4947c55c87ae65352d877092b451964370c7eae78dd6c4a4da781e2ee65800ce8a1aa04931ce72f911b571730c11e6f35f6956dbab7f07f02907d6b60715b4e9a214a78769c9981229418b1041da1e796b03c67e939b570a5ba60694444f1fe821b2b3311098dfd6e87416d9436d1749cd32df677830f66c2da77f165a86bc25dcd07a9be82e23fe7e3136ff6dfa027e02fbecaa229de35fe29881ef0822e1c765f2a46bb39f8bac7e9038cecd7ae1d7ebb3e7f658fd79b56118deee58a3f638b4884f3a686ba31bf9f3cd70daaf438e2c0e62b4f46a2a89ca20c930e46b80bd6142ab4c40666fce6ba87ca28bf25d30de18d1cfd3d7ae9adfd5c5cd52d8858bf454893c37ea57b844377263e93fdad4b441bb4b877bbe7fea710bc3945020afdbd4ed69a2e9fb3b63566c976a52c34ef31b860a38bc345345bbcecc694a0cfcdf889a0162f3176817b4043ac83263a9ea1bffb23ffa6a7ac51eb7d7e1b3c8e32a2d49b9ff6a37036a436725aff8de437431af2f0ddf68e0c4788997e85654aeeb1a3e5c2773e6d1c5b12e471a6176ec448a460ff5db4700e781f8ead07670aa66ca2049dee79d2fc724c08fb0d2733a1a27c0db8afda0f797faf18b3a090aac97073bc2ee5c42aa3895dd0791634ff4761192c66c0b12677f156da7d580ec35fe12004a2e3c762286656ecfe2e682659eefdd3baca8ea44098cdac76ee55d89ee89e630323c648df74e24abb36c8bdcc58f70b161892f63c5e03c2340d33832e0310cc21c4fb163f192837e3f3eca4334e66f00f6e5d9c5fecdb9f13691883b5abbeb71f58a2450f37155c0ee6b90898b01bed8df2df07b9b98273005c910adf0b0788761a52f980236b16c2978f638aa1514d790c30f127c89724e7db0c7695e147ae0fd80d97a9635ec95a9cf4ab31842f5e9dc2e630fd99b68365dce4b1901eb12afd88dee714272913ac4efefdbae2d48b4e535f1f9d5cdb904dfd0bb94edcd58d17369d4896baed334f85152d7df776fb4f3e4c96f52b8ac388d4e892cc4f1ac7af490099198b615dba1d7feef31eabc23e8119b58ba085576f2c4ade858435a91db385468d4415aa74250bc493dd6803f2dabf2c6a6d53c7d4fa9a53f6514c9d91c05a52856925017d28362644043e5012d46d87c83bac368eac0fc2c85df32af6765b4446e7a6f44e394c266542b8abf49a4250425b93fa79973f784de143df6c236e535b20efc1070df9dc5eeacfcff021f2419090ef945bc4928d10d987eb7c08bff7268e920dca041ffba84e41fb29d32d31e36650255e0b5cb2a3cb24357ddf4977bc3ddd53168c0773535019d52aa4308b390f94973ed8dd31909f8e7471f1d395c3c3df369fdbd132fc59cfd66b0dc499801f546bc8b4c003ef11ed49627d9b68e218000c699043bcdb60a00a1563c90f01291a0e651118265b951349a0a8640637d7a97054965fec70f181ee48f7b2fec62c5cd94b04dfd545078986e9b70562b5b83ddcee19e9d1b50f7da36e42f6c243ec43a2597bfb96077418d143da3685ee2f28aa64e6d269b1b631bdf5751a9bdd04842de29411eb0ef3a5bbdfcae311c534a64f2142450bc144fc59f7ff29aaa15ef323ce4a8117ef6fb6f184eb48215ac8d8d3884878c5cb77c99759d9a50fe3f22da576d297c59756f56143dc182c7908b25f1c1703f572cfa8a2284cd6f3313eb0edbfb796d68e6ad88fef7d9db0ae9416673ece4c67d2f1ecf770b2e2fb6e5ae8c701ac4267144407dfbe78956dfceee8bef8cd5ff1880e707b0c58be98f2989b75d95e51e3db9c9bad92e44add263a4cb65d640ed3093020519d0fc7f1630367f77d504faec9568e9924d63059b9a36f9c5e50325ddcbc02c8c5264dfa8e307bc6b1d6aca620dfc72cfc6eec005db54a0dcfd96aeea4b33647626d9fb236637687c6afc557ede76f5f617acba7eff2bef842fe68a5b866f798969ee74d8f28fc8b39cb964b6d0de28e2a4251bf13d660605bf470c52c1dcfc9c5f263106d070f577f881b3123cea2c00da51dfbf79af66beec2f8fd084002fa0b963c6a880d032bf64b9f51e6b69f04d596a03224210fb7eba993e5c14e2ac8a1e1bf3e519e28722bc14b5d315aed590020ba098a0068a2cb1197eab5663f31a2dbba88c45d1446ba558003ccbc43ee4a55c06ac6dffbb201d0c1b533e571b641c37f73eccad18b8f2a95af6297a4a25360959bc53249f7c35e934c08892cf9a6e97fc0691e0f28412e64116fb9f56536508f30129e3ce566f5838816c0e9dc80c57dfd3967b3af1ed80fb683b80ce6efc673d799efe3db1e269c46597fd5a847247981c43ccbf9fd12c3adbd31fde14f9bf19cf5cd05ea9523ad5b4adab140d11114a5ab5788c9ec478a784934ff13a40c78513f85a1644e41e1dcf7557ca8452840fb007bb8d90ff0ae07f0be0be2b4eea8019f2e5c346e4b575096e31097040f3151811744ce026cc17355784fbfb3fa1319f72a61a0caa49716d4fae23732b530ae0ba7a5ef8562e72f41bad7831dcaf8239186ac206dce5af2c3656e7c3b2148f1a977bdab6998b750100c656123ef842e07f3220049cb8268a15f9f2565366c03e6adf94b9415b5b7800068db624c577cbf51cd07e5a12ffc1fe03501cdf4e981c8ae041633b8d95f14b27e7cc0dba2a427761e11032dbb18e6a41999e6b7b7d6daf1d7613b5dc5559ce818fa8e877e332523d92a5a3f609059bffab3179d967fdd7183b7b131d9ce2b1207bdbfbd21625ae555489347363f3b7f7c517133bebec4a61d780403a9dfb456a4de1300c020fdbf740bc768a6567ef8469271ac2c373a9bb985f00486b46e89714ad965be4537e187a0c27331fd91254215a2270a80210681d138e5d5bad587caffec40a12838f21384a28e6fff6f54a4d3194a25803094a2a27bfd2041b9627a3402eb537d12a93fa944fd7e78ae4ad51742e31dd5bc30755dd19528c3c38eb89f561f4ff6045f50c46d2bf07b2dcf420bb71cd52bc9c398776d75b4eca853ce8f678e5fb051b45015f7056e1d348678b040404f8f7f08f1ad4b98dd2da09b567d0a8c437d1924f9aabfce99cddec9d1cfe40e47e741345c1a58be40d05a5f253113a6cda91e1a66eaad44c9e08f14fe98832dba5aca1e947410a2fdc9e738666c17f51b589eb8712b9e9049f34f89feec029c82846dc"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000000c0)={0x0, 0x0, "d0fee92cc3316af19e6abd47e1fa7f70ae42fa5712473409e9ac8913f5ac96b5e4219e305ad688c70f7c2514cf067210f2256a8c95bbdc51cd532668695435427d69cf8cad0eaf3db9d585c942907781cbcb34b7c5a8735a2a9a5f09505eaa089056d9490678e9cc1ed196479a35ec394c8443a24c5a471f2549b1a80b148655c3cf792d111b9e9499bae036bffbbf5a0135d08bd0db7671a52a69e15668a8f44a7397ff5e6304733de0b32d38171a365fbcf07e2ed54be5cb8dc55ab78b48ebc1bd7437503e3e56f03bc0eb6f30383b973560d49c17f732e085b26a7c3c4b2ba76967ee934b1df917b1b332c4d53ae2abb50e671dfb3695009f3e84ed1546c4", "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"}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002500)=@base={0xd, 0xfffffff7, 0x200, 0x6, 0x220, r2, 0x6, '\x00', 0x0, r1, 0x5, 0x4, 0x1}, 0x48) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x58, &(0x7f0000002640)}, 0x10) r4 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x7) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x4) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0xf, 0x12, 0x24, &(0x7f00000020c0)="ab2dd00422010283d4ba1a3e1db2385408650ad6b3769c1c14bb4be8cd910fdc35db724c9f98e33444ce484676742161660d3f0ee0a8901660d14f02dd13ff268ac0dceb5c5eb5486bd5b9dba3ee627544b4225f5525fd6bf4076a275e3f645b868785206c009a0b08ff9381f6fc9aeae558e19a9f79cafc46e578291094b68ce017e7d3fb0bba376902a2b12608db0758629de47a5341c4b7af7390e4c41cb78aa60b08f60e3260d28965722309a938693eea2fd91cf6425d1e1d0e82f9791dbbbe46e00d24d13dfcbe64a7619bc8953f5e6db68848d7370cfb7b836e3f3a09f3b6013832ff133c4e326a377e83780835b8ae3a6ed8a0f8d50564f01f94eab2e8c26faaed1ba29d0d94ce0234a7ec3ccfa7723b5203310e86e395117fda28c3b970558f40da915fdf886506802c9258487cc409604d2e3f18974c60c0839b55813f1f932f3bcb00bf62e1b720f1a15d823818589a5a23bf5bef64db14ee1649753ba96cad86b99fc3f711b55286ff365fa11eacc3ad2f5042da29277b8b4b72d1703d8eeb13a8fbd9a2a87f7fedad09191d50d25df06daf36c94898bd6ddb9b0e0a3e910535c50e16744cad185a9b7706542b48f0ed87185bd8a5ab73827a00193d8751bbde20fb3b540eac2856b306ef95c8fb47ddcd9674cd51b4410c97b1321d4a0ad28788bbb5810fc04514cb1e17f85cf38c44397f17df1310a62957c4a63eaafe24f60b7b9e82a74d37619e1a8e8636f511ae9af352967f5615ed91f1db04a0122a122dfa37ccbf30a891c3d929f3f72329a3c0c5f1ffcb6c6b6bc66755626ec0ae860c0ef5b2625716ff086b0d34682221915d728460bf086422234d8b523d3a599dddf779762d828d4c421fae80125ce349a3ce5b0fdfde4761633412d2edbe45a7e1731e8a21a09b9cecb280107e1d377b2a08cd29a586927f1438c9f508ac301239d884efa5ec8620e2204f306993b602a0ba15819baaec7cb621ff8b7598498bf88f17ef599ba70e6c6058fbd726cb85da67e0b37e1e40dfe3941ed768c30702143699177e77bd1d13f013d001c45e134b3f6b2912f38462cb56c422015302bfa40b097c51361a4f62c103906e831a1a396899bb902947b17e5ad9d567431ae3ec96b2b73de0f1dd83d04f49ba285a014a3af6b3502e6fe29ab6902a2b29233ce00ff75c364af0e373fb20049cdd994f7fe1145aa381ec00b2f02d7ddf563ec42e6a075363f3af515ef2f4fd8d8f3e8bac63db0f87ad5cb610fc8f040f523674a88356c115600ad9b9abb0d6dc4e0b73e7fa0a6bebe12337f16df29fa4ae58037ce96bafe1c57734dd9670e14da30653d195c7e9cbb9da9d69575bf89d161a70a264b12736ee31ecb216c21d38394678dc3a6a4116d526f2803ed0958ac23a7381b4098833fe0ceee9fcb26ea9c5b474b14a00e1af3ce498b822"}) r6 = syz_open_dev$ndb(&(0x7f00000024c0), 0x0, 0x0) ioctl$NBD_SET_SIZE(r6, 0xab02, 0xfffffffffffffffb) 00:54:02 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_PRINT_DEBUG(r1, 0xab06) [ 3242.311939][T31837] block nbd0: shutting down sockets [ 3242.873866][ T50] block nbd2: Receive control failed (result -32) [ 3242.874821][T31810] block nbd2: shutting down sockets 00:54:02 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async, rerun: 32) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x680) (rerun: 32) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) (async) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r6, 0x2b, 0x3, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x40, 0x3, 0x3}}) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x68020) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f00000002c0)={0x2, 0x0, &(0x7f0000000280)=[0x0, 0x0]}) (async) r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r11, 0xc00464c9, 0x0) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r13, 0x2b, 0x3, 0x7, 0x4000001, 0x4, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x80, 0x3, 0x3}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r11, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[r10, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0], 0x8, 0x81800}) r14 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000340)) r15 = syz_open_dev$dri(&(0x7f0000000380), 0x9, 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(r14, 0xc01064c8, &(0x7f0000000400)={0x1, 0x0, &(0x7f00000003c0)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000480)={0x1, 0x0, &(0x7f0000000440)=[0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r15, 0xc01864c6, &(0x7f0000000500)={&(0x7f00000004c0)=[r16, r9, r17, r8, r7, r8], 0x6, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f00000001c0)=[0x0, 0x0, r7, r3, r4], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SIZE_BLOCKS(r18, 0xab07, 0x1) (async) ioctl$NBD_DO_IT(r2, 0xab03) r19 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r19, 0xc00464c9, 0x0) (async) ioctl$NBD_CLEAR_SOCK(r19, 0xab04) 00:54:02 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc}) (async) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x8) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x0) 00:54:02 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x26, 0x4, 0x8, 0x31, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x80, 0x2, 0x4}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf251200000008003c000900000008003a008b090000050038000100000005002f000100000008000b0001010000060028000300000008002b000000000008000300", @ANYRES32=r0, @ANYBLOB="05002f000100000008002b00144b0000"], 0x64}, 0x1, 0x0, 0x0, 0x8041}, 0x48051) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x20) ioctl$SOUND_PCM_READ_BITS(0xffffffffffffffff, 0x80045005, &(0x7f0000000280)) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x48) 00:54:02 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x101, 0x0) ioctl$NBD_SET_SIZE(r3, 0xab02, 0x6) ioctl$NBD_DO_IT(r2, 0xab03) 00:54:02 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000040)={0x6, 0x7fff, 0x17e}) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20000) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:54:02 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000001c0)={0xa, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000240)={0x6, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000002c0)={0xa, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000300), 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x5) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000c00)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000300)) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r6, 0xc00464c9, 0x0) (async) read$hiddev(r6, &(0x7f00000000c0)=""/17, 0x11) (async) r7 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x1) ioctl$NBD_SET_BLKSIZE(r7, 0xab01, 0x10001) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'pimreg1\x00'}) (async) r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r8, 0x8010500d, &(0x7f0000000bc0)) (async) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000380)="90de8e06baf65e706b22398aca9d200126249fd5cf6f6185d43f8f68755cf0131bde467911f1f5dae60cc8197d591a6f52a64c6913571c978fd6009045a7d3d426930599d5b89c8a283ac0564bbbff74ca86ad6d1297cdd11263883e06b19d69f969175acd5fa3847350ef2fa3f37628") (async) r9 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) ioctl$NBD_SET_BLKSIZE(r9, 0xab01, 0x8) (async) ioctl$SNDCTL_DSP_GETISPACE(r8, 0x8010500d, &(0x7f00000010c0)) (async) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x810, r8, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 3242.922313][T31850] block nbd2: shutting down sockets 00:54:02 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r2 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000000c0), 0x400002, 0x80) ioctl$NBD_PRINT_DEBUG(r2, 0xab06) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x589840, 0x0) ioctl$NBD_SET_SIZE(r3, 0xab02, 0x8000) r4 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x3f) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1}, 0x4) ioctl$NBD_DO_IT(r4, 0xab03) 00:54:02 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x26, 0x4, 0x8, 0x31, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x80, 0x2, 0x4}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf251200000008003c000900000008003a008b090000050038000100000005002f000100000008000b0001010000060028000300000008002b000000000008000300", @ANYRES32=r0, @ANYBLOB="05002f000100000008002b00144b0000"], 0x64}, 0x1, 0x0, 0x0, 0x8041}, 0x48051) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x20) ioctl$SOUND_PCM_READ_BITS(0xffffffffffffffff, 0x80045005, &(0x7f0000000280)) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x26, 0x4, 0x8, 0x31, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x80, 0x2, 0x4}}) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf251200000008003c000900000008003a008b090000050038000100000005002f000100000008000b0001010000060028000300000008002b000000000008000300", @ANYRES32=r0, @ANYBLOB="05002f000100000008002b00144b0000"], 0x64}, 0x1, 0x0, 0x0, 0x8041}, 0x48051) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x20) (async) ioctl$SOUND_PCM_READ_BITS(0xffffffffffffffff, 0x80045005, &(0x7f0000000280)) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x48) (async) 00:54:02 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async, rerun: 64) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc}) (async, rerun: 64) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x8) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) (async, rerun: 32) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x0) (rerun: 32) 00:54:02 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) 00:54:02 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000040)={0x6, 0x7fff, 0x17e}) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20000) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000040)={0x6, 0x7fff, 0x17e}) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20000) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) 00:54:02 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x26, 0x4, 0x8, 0x31, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x80, 0x2, 0x4}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf251200000008003c000900000008003a008b090000050038000100000005002f000100000008000b0001010000060028000300000008002b000000000008000300", @ANYRES32=r0, @ANYBLOB="05002f000100000008002b00144b0000"], 0x64}, 0x1, 0x0, 0x0, 0x8041}, 0x48051) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x20) ioctl$SOUND_PCM_READ_BITS(0xffffffffffffffff, 0x80045005, &(0x7f0000000280)) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x26, 0x4, 0x8, 0x31, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x80, 0x2, 0x4}}) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf251200000008003c000900000008003a008b090000050038000100000005002f000100000008000b0001010000060028000300000008002b000000000008000300", @ANYRES32=r0, @ANYBLOB="05002f000100000008002b00144b0000"], 0x64}, 0x1, 0x0, 0x0, 0x8041}, 0x48051) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x20) (async) ioctl$SOUND_PCM_READ_BITS(0xffffffffffffffff, 0x80045005, &(0x7f0000000280)) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x48) (async) [ 3242.990294][T31867] nbd2: detected capacity change from 0 to 126 00:54:02 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000040)={0x6, 0x7fff, 0x17e}) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20000) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:54:03 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0xffffffff00000001) 00:54:03 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) [ 3243.746163][ T50] block nbd5: Receive control failed (result -32) [ 3243.747005][T31863] block nbd5: shutting down sockets 00:54:03 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 00:54:03 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async, rerun: 32) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0xffffffff00000001) (rerun: 32) 00:54:03 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x30000) ioctl$NBD_DISCONNECT(r1, 0xab08) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) [ 3243.774915][T31896] block nbd1: NBD_DISCONNECT [ 3243.824312][ T6119] block nbd0: Receive control failed (result -32) [ 3243.824941][T31876] block nbd0: shutting down sockets [ 3243.860637][T31898] block nbd5: server does not support multiple connections per device. [ 3243.862872][T31897] block nbd5: shutting down sockets [ 3245.945291][T31867] block nbd2: shutting down sockets [ 3245.947321][ C0] blk_print_req_error: 25 callbacks suppressed [ 3245.947334][ C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3245.950596][ C0] buffer_io_error: 25 callbacks suppressed [ 3245.950605][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3245.954113][ T54] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3245.956030][ T54] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3245.957656][ T54] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3245.959704][ T54] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3245.961446][ T24] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3245.963465][ T24] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3245.965291][ T54] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3245.967261][ T54] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3245.969137][ T54] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3245.971095][ T54] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3245.972883][ T24] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3245.974878][ T24] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3245.976652][ T24] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3245.978641][ T24] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3245.980540][T30346] ldm_validate_partition_table(): Disk read failed. [ 3245.982048][ T24] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3245.983909][ T24] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3245.985728][ T24] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3245.987761][ T24] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3245.989648][T30346] Dev nbd2: unable to read RDB block 0 [ 3245.991284][T30346] nbd2: unable to read partition table [ 3245.994277][T30346] ldm_validate_partition_table(): Disk read failed. [ 3245.996142][T30346] Dev nbd2: unable to read RDB block 0 [ 3245.998212][T30346] nbd2: unable to read partition table 00:54:05 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) (async) r2 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000000c0), 0x400002, 0x80) ioctl$NBD_PRINT_DEBUG(r2, 0xab06) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x589840, 0x0) ioctl$NBD_SET_SIZE(r3, 0xab02, 0x8000) (async) r4 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x3f) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1}, 0x4) (async) ioctl$NBD_DO_IT(r4, 0xab03) 00:54:05 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) 00:54:05 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x30000) ioctl$NBD_DISCONNECT(r1, 0xab08) (async, rerun: 64) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (rerun: 64) 00:54:05 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async, rerun: 32) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0xffffffff00000001) (rerun: 32) 00:54:05 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000c00)) (async) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) 00:54:05 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) [ 3246.030635][T31902] block nbd1: NBD_DISCONNECT [ 3246.032428][T31902] block nbd1: NBD_DISCONNECT [ 3246.033775][T31902] block nbd1: NBD_DISCONNECT [ 3246.035100][T31902] block nbd1: NBD_DISCONNECT [ 3246.036447][T31902] block nbd1: NBD_DISCONNECT [ 3246.037745][T31902] block nbd1: NBD_DISCONNECT [ 3246.039337][T31902] block nbd1: NBD_DISCONNECT [ 3246.040600][T31902] block nbd1: NBD_DISCONNECT [ 3246.041907][T31902] block nbd1: NBD_DISCONNECT [ 3246.043188][T31902] block nbd1: NBD_DISCONNECT [ 3246.044487][T31902] block nbd1: NBD_DISCONNECT [ 3246.046029][T31902] block nbd1: NBD_DISCONNECT [ 3246.047407][T31902] block nbd1: NBD_DISCONNECT [ 3246.050858][T31902] block nbd1: NBD_DISCONNECT [ 3246.052490][T31902] block nbd1: NBD_DISCONNECT [ 3246.053888][T31902] block nbd1: NBD_DISCONNECT [ 3246.055216][T31902] block nbd1: NBD_DISCONNECT [ 3246.056478][T31902] block nbd1: NBD_DISCONNECT [ 3246.057792][T31902] block nbd1: NBD_DISCONNECT [ 3246.059525][T31902] block nbd1: NBD_DISCONNECT [ 3246.060840][T31902] block nbd1: NBD_DISCONNECT [ 3246.062157][T31902] block nbd1: NBD_DISCONNECT 00:54:06 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) [ 3246.068832][T31902] block nbd1: NBD_DISCONNECT [ 3246.070321][T31902] block nbd1: NBD_DISCONNECT [ 3246.071581][T31902] block nbd1: NBD_DISCONNECT [ 3246.072813][T31902] block nbd1: NBD_DISCONNECT [ 3246.074114][T31902] block nbd1: NBD_DISCONNECT [ 3246.076495][T31902] block nbd1: NBD_DISCONNECT [ 3246.077724][T31902] block nbd1: NBD_DISCONNECT [ 3246.080460][T31902] block nbd1: NBD_DISCONNECT [ 3246.082629][T31902] block nbd1: NBD_DISCONNECT 00:54:06 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) [ 3246.089348][T31902] block nbd1: NBD_DISCONNECT [ 3246.090011][T31914] nbd2: detected capacity change from 0 to 126 [ 3246.090627][T31902] block nbd1: NBD_DISCONNECT [ 3246.094170][T31902] block nbd1: NBD_DISCONNECT [ 3246.096568][T31902] block nbd1: NBD_DISCONNECT [ 3246.099809][T31902] block nbd1: NBD_DISCONNECT [ 3246.102241][T31902] block nbd1: NBD_DISCONNECT [ 3246.104344][T31902] block nbd1: NBD_DISCONNECT 00:54:06 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) [ 3246.109642][T31910] block nbd5: server does not support multiple connections per device. [ 3246.110531][T31902] block nbd1: NBD_DISCONNECT [ 3246.115127][T31900] block nbd5: shutting down sockets [ 3246.116523][T31902] block nbd1: NBD_DISCONNECT [ 3246.119080][T31902] block nbd1: NBD_DISCONNECT [ 3246.121082][T31902] block nbd1: NBD_DISCONNECT [ 3246.122365][T31902] block nbd1: NBD_DISCONNECT [ 3246.123728][T31902] block nbd1: NBD_DISCONNECT [ 3246.125044][T31902] block nbd1: NBD_DISCONNECT [ 3246.126346][T31902] block nbd1: NBD_DISCONNECT [ 3246.127617][T31902] block nbd1: NBD_DISCONNECT [ 3246.129241][T31902] block nbd1: NBD_DISCONNECT 00:54:06 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) [ 3246.133887][T31902] block nbd1: NBD_DISCONNECT [ 3246.137395][T31902] block nbd1: NBD_DISCONNECT [ 3246.139753][T31902] block nbd1: NBD_DISCONNECT [ 3246.143371][T31902] block nbd1: NBD_DISCONNECT 00:54:06 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) read$dsp(r0, &(0x7f00000000c0)=""/119, 0x77) [ 3246.149655][T31902] block nbd1: NBD_DISCONNECT [ 3246.150868][T31902] block nbd1: NBD_DISCONNECT [ 3246.154185][T31902] block nbd1: NBD_DISCONNECT [ 3246.156505][T31902] block nbd1: NBD_DISCONNECT [ 3246.160524][T31902] block nbd1: NBD_DISCONNECT 00:54:06 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) [ 3246.162343][T31902] block nbd1: NBD_DISCONNECT [ 3246.163740][T31902] block nbd1: NBD_DISCONNECT [ 3246.164890][T31902] block nbd1: NBD_DISCONNECT [ 3246.166106][T31902] block nbd1: NBD_DISCONNECT [ 3246.167269][T31902] block nbd1: NBD_DISCONNECT [ 3246.168399][T31902] block nbd1: NBD_DISCONNECT [ 3246.177131][T31902] block nbd1: NBD_DISCONNECT [ 3246.178296][T31902] block nbd1: NBD_DISCONNECT [ 3246.244298][T31924] block nbd5: server does not support multiple connections per device. [ 3246.246506][T31923] block nbd5: shutting down sockets [ 3246.861774][T25416] block nbd0: Receive control failed (result -32) [ 3246.865141][T31911] block nbd0: shutting down sockets [ 3246.869794][ T6119] block nbd2: Receive control failed (result -104) [ 3259.379221][ T2218] ieee802154 phy0 wpan0: encryption failed: -22 [ 3259.380556][ T2218] ieee802154 phy1 wpan1: encryption failed: -22 [ 3301.024275][T31938] block nbd1: NBD_DISCONNECT 00:55:00 executing program 3: getpgid(0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:55:00 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000c00)) (async) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$NBD_DO_IT(r4, 0xab03) (async) 00:55:00 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x30000) ioctl$NBD_DISCONNECT(r1, 0xab08) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:55:00 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r2 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000000c0), 0x400002, 0x80) ioctl$NBD_PRINT_DEBUG(r2, 0xab06) (async) ioctl$NBD_PRINT_DEBUG(r2, 0xab06) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x589840, 0x0) ioctl$NBD_SET_SIZE(r3, 0xab02, 0x8000) r4 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x3f) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1}, 0x4) ioctl$NBD_DO_IT(r4, 0xab03) 00:55:00 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:55:00 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) read$dsp(r0, &(0x7f00000000c0)=""/119, 0x77) 00:55:01 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040)) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:55:01 executing program 3: getpgid(0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:55:01 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x20) (async) read$dsp(r0, &(0x7f00000000c0)=""/119, 0x77) 00:55:01 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040)) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:55:01 executing program 4: r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0xa4) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0xffff) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x20) 00:55:01 executing program 3: getpgid(0x0) (async, rerun: 64) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) 00:55:01 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040)) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040)) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) (async) [ 3301.196687][T31945] block nbd0: shutting down sockets [ 3301.219397][T31961] block nbd0: Device being setup by another task [ 3301.873994][ T6119] block nbd5: Receive control failed (result -32) [ 3301.874895][T31943] block nbd5: shutting down sockets [ 3302.463944][T25416] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 3302.466531][T25416] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 3302.468566][T25416] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 3302.472067][T25416] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 3302.473857][T25416] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 3302.475573][T25416] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 3302.541251][T31968] chnl_net:caif_netlink_parms(): no params data found [ 3302.576771][T31968] bridge0: port 1(bridge_slave_0) entered blocking state [ 3302.578326][T31968] bridge0: port 1(bridge_slave_0) entered disabled state [ 3302.580366][T31968] bridge_slave_0: entered allmulticast mode [ 3302.582218][T31968] bridge_slave_0: entered promiscuous mode [ 3302.584893][T31968] bridge0: port 2(bridge_slave_1) entered blocking state [ 3302.586448][T31968] bridge0: port 2(bridge_slave_1) entered disabled state [ 3302.588047][T31968] bridge_slave_1: entered allmulticast mode [ 3302.589871][T31968] bridge_slave_1: entered promiscuous mode [ 3302.602623][T31968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3302.606056][T31968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3302.618257][T31968] team0: Port device team_slave_0 added [ 3302.622199][T31968] team0: Port device team_slave_1 added [ 3302.632170][T31968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3302.633669][T31968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3302.639248][T31968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3302.642791][T31968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3302.644288][T31968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3302.650741][T31968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3302.710367][T31968] hsr_slave_0: entered promiscuous mode [ 3302.749100][T31968] hsr_slave_1: entered promiscuous mode [ 3302.798808][T31968] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3302.800616][T31968] Cannot create hsr debugfs directory [ 3302.860221][T31968] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3302.943852][T31968] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3303.009108][T31968] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3303.102906][T31968] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3303.243642][T31968] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3303.260641][T31968] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3303.313310][T31968] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3303.350897][T31968] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3303.410920][T31968] bridge0: port 2(bridge_slave_1) entered blocking state [ 3303.412609][T31968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3303.414644][T31968] bridge0: port 1(bridge_slave_0) entered blocking state [ 3303.416245][T31968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3303.444324][T31968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3303.451492][ T1657] bridge0: port 1(bridge_slave_0) entered disabled state [ 3303.454390][ T1657] bridge0: port 2(bridge_slave_1) entered disabled state [ 3303.463166][T31968] 8021q: adding VLAN 0 to HW filter on device team0 [ 3303.470998][T23607] bridge0: port 1(bridge_slave_0) entered blocking state [ 3303.472438][T23607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3303.474509][T23607] bridge0: port 2(bridge_slave_1) entered blocking state [ 3303.475976][T23607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3303.493612][T31968] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3303.495773][T31968] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3303.562544][T31968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3303.584101][T31968] veth0_vlan: entered promiscuous mode [ 3303.589704][T31968] veth1_vlan: entered promiscuous mode [ 3303.603526][T31968] veth0_macvtap: entered promiscuous mode [ 3303.606719][T31968] veth1_macvtap: entered promiscuous mode [ 3303.614110][T31968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3303.616491][T31968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3303.619253][T31968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3303.621535][T31968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3303.623782][T31968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3303.626041][T31968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3303.628296][T31968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3303.631088][T31968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3303.633221][T31968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3303.635540][T31968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3303.637622][T31968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3303.640735][T31968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3303.643825][T31968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3303.655941][T31968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3303.658141][T31968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3303.660720][T31968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3303.662919][T31968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3303.664861][T31968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3303.667042][T31968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3303.669425][T31968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3303.671833][T31968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3303.673893][T31968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3303.676186][T31968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3303.678320][T31968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3303.680876][T31968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3303.683873][T31968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3303.689446][T31968] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3303.691280][T31968] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3303.693154][T31968] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3303.695085][T31968] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3303.730236][ T597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3303.732077][ T597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3303.743476][T24464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3303.745249][T24464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3304.499651][ T6119] Bluetooth: hci6: command 0x0409 tx timeout [ 3306.578777][ T6119] Bluetooth: hci6: command 0x041b tx timeout [ 3306.745972][ T5714] udevd[5714]: worker [30346] /devices/virtual/block/nbd2 is taking a long time [ 3308.668827][ T6119] Bluetooth: hci6: command 0x040f tx timeout [ 3310.738883][ T6119] Bluetooth: hci6: command 0x0419 tx timeout [ 3320.819928][ T2218] ieee802154 phy0 wpan0: encryption failed: -22 [ 3320.821306][ T2218] ieee802154 phy1 wpan1: encryption failed: -22 00:55:58 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0xffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x2) ioctl$NBD_DO_IT(r2, 0xab03) 00:55:58 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x3) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r6, 0x2b, 0x3, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x40, 0x3, 0x3}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x800, 0x0, 0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0xdf, '\x00', r6, r7, 0x5, 0x5, 0x1}, 0x48) ioctl$KDFONTOP_COPY(r4, 0x4b72, &(0x7f0000000540)={0x3, 0x0, 0x15, 0x1b, 0xbb, &(0x7f0000000140)}) ioctl$TCSETAW(r7, 0x5407, &(0x7f00000006c0)={0x2, 0x5, 0xff, 0x7f, 0x2, "bb019537d5582ec4"}) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) socket$l2tp6(0xa, 0x2, 0x73) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r8, 0x11c, 0x0, &(0x7f0000000740)=""/114, &(0x7f00000007c0)=0x72) 00:55:58 executing program 4: r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0xa4) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0xffff) (async) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x20) 00:55:58 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:55:58 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000c00)) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x703000, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000c00)) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) 00:55:58 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 00:55:58 executing program 4: r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0xa4) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0xffff) (async) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x20) 00:55:58 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:55:58 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) 00:55:58 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) (async) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x3) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r6, 0x2b, 0x3, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x40, 0x3, 0x3}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r6, 0x2b, 0x3, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x40, 0x3, 0x3}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x800, 0x0, 0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0xdf, '\x00', r6, r7, 0x5, 0x5, 0x1}, 0x48) ioctl$KDFONTOP_COPY(r4, 0x4b72, &(0x7f0000000540)={0x3, 0x0, 0x15, 0x1b, 0xbb, &(0x7f0000000140)}) ioctl$TCSETAW(r7, 0x5407, &(0x7f00000006c0)={0x2, 0x5, 0xff, 0x7f, 0x2, "bb019537d5582ec4"}) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xfffffffffffffffb) socket$l2tp6(0xa, 0x2, 0x73) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r8, 0x11c, 0x0, &(0x7f0000000740)=""/114, &(0x7f00000007c0)=0x72) 00:55:58 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x301, 0x2) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x6) 00:55:58 executing program 4: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000bc0)) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f00000010c0)) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000000)) [ 3359.671670][T25416] block nbd5: Receive control failed (result -32) [ 3359.672502][T31990] block nbd5: shutting down sockets [ 3359.682398][ T6119] block nbd0: Receive control failed (result -32) [ 3359.683675][T31993] block nbd0: shutting down sockets [ 3359.983746][T25416] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 3359.986671][T25416] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 3359.988927][T25416] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 3359.991125][T25416] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 3359.992973][T25416] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 3359.994695][T25416] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 3360.057545][T32012] chnl_net:caif_netlink_parms(): no params data found [ 3360.083938][T32012] bridge0: port 1(bridge_slave_0) entered blocking state [ 3360.085481][T32012] bridge0: port 1(bridge_slave_0) entered disabled state [ 3360.087127][T32012] bridge_slave_0: entered allmulticast mode [ 3360.089019][T32012] bridge_slave_0: entered promiscuous mode [ 3360.092085][T32012] bridge0: port 2(bridge_slave_1) entered blocking state [ 3360.093603][T32012] bridge0: port 2(bridge_slave_1) entered disabled state [ 3360.095254][T32012] bridge_slave_1: entered allmulticast mode [ 3360.097156][T32012] bridge_slave_1: entered promiscuous mode [ 3360.110299][T32012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3360.113967][T32012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3360.126489][T32012] team0: Port device team_slave_0 added [ 3360.129566][T32012] team0: Port device team_slave_1 added [ 3360.139476][T32012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3360.141134][T32012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3360.146803][T32012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3360.150435][T32012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3360.151797][T32012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3360.157136][T32012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3360.221016][T32012] hsr_slave_0: entered promiscuous mode [ 3360.259163][T32012] hsr_slave_1: entered promiscuous mode [ 3360.308841][T32012] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3360.310606][T32012] Cannot create hsr debugfs directory [ 3360.377638][T32012] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3360.463312][T32012] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3360.539660][T32012] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3360.579745][T32012] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3360.744049][T32012] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3360.761135][T32012] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3360.810287][T32012] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3360.850405][T32012] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3360.920606][T32012] bridge0: port 2(bridge_slave_1) entered blocking state [ 3360.922181][T32012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3360.923710][T32012] bridge0: port 1(bridge_slave_0) entered blocking state [ 3360.925255][T32012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3360.953600][T32012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3360.962004][T15734] bridge0: port 1(bridge_slave_0) entered disabled state [ 3360.964032][T15734] bridge0: port 2(bridge_slave_1) entered disabled state [ 3360.972662][T32012] 8021q: adding VLAN 0 to HW filter on device team0 [ 3360.977885][T15734] bridge0: port 1(bridge_slave_0) entered blocking state [ 3360.979461][T15734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3360.990827][ T1657] bridge0: port 2(bridge_slave_1) entered blocking state [ 3360.992410][ T1657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3361.003363][T32012] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3361.005533][T32012] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3361.071415][T32012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3361.093191][T32012] veth0_vlan: entered promiscuous mode [ 3361.099330][T32012] veth1_vlan: entered promiscuous mode [ 3361.112684][T32012] veth0_macvtap: entered promiscuous mode [ 3361.115815][T32012] veth1_macvtap: entered promiscuous mode [ 3361.123367][T32012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3361.125442][T32012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3361.127454][T32012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3361.129711][T32012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3361.131666][T32012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3361.133764][T32012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3361.135966][T32012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3361.138106][T32012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3361.141574][T32012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3361.143729][T32012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3361.145862][T32012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3361.148110][T32012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3361.152292][T32012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3361.154456][T32012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3361.157711][T32012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3361.163789][T32012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3361.165959][T32012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3361.167997][T32012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3361.177820][T32012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3361.180066][T32012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3361.182294][T32012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3361.184225][T32012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3361.186365][T32012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3361.188485][T32012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3361.190822][T32012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3361.192840][T32012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3361.195044][T32012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3361.197607][T32012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3361.199968][T32012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3361.202935][T32012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3361.207071][T32012] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3361.209373][T32012] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3361.211221][T32012] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3361.213132][T32012] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3361.267589][T15734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3361.269369][T15734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3361.279972][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3361.281714][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3362.018874][T25416] Bluetooth: hci7: command 0x0409 tx timeout [ 3364.108844][T25416] Bluetooth: hci7: command 0x041b tx timeout [ 3366.179015][T25416] Bluetooth: hci7: command 0x040f tx timeout [ 3368.268883][T25416] Bluetooth: hci7: command 0x0419 tx timeout [ 3382.259164][ T2218] ieee802154 phy0 wpan0: encryption failed: -22 [ 3382.260648][ T2218] ieee802154 phy1 wpan1: encryption failed: -22 [ 3395.059422][ T29] INFO: task syz-executor.2:31906 blocked for more than 143 seconds. [ 3395.061089][ T29] Not tainted 6.7.0-rc8-syzkaller-g0802e17d9aca #0 [ 3395.062551][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3395.064371][ T29] task:syz-executor.2 state:D stack:0 pid:31906 tgid:31906 ppid:6125 flags:0x00000005 [ 3395.066534][ T29] Call trace: [ 3395.067255][ T29] __switch_to+0x314/0x560 [ 3395.068180][ T29] __schedule+0x1354/0x2360 [ 3395.069636][ T29] schedule+0xb8/0x19c [ 3395.070538][ T29] schedule_preempt_disabled+0x18/0x2c [ 3395.071761][ T29] __mutex_lock_common+0xbd8/0x21a0 [ 3395.072941][ T29] mutex_lock_nested+0x2c/0x38 [ 3395.073768][ T29] blkdev_put+0xec/0x740 [ 3395.074590][ T29] bdev_release+0x5c/0x78 [ 3395.075603][ T29] blkdev_release+0x40/0x54 [ 3395.076626][ T29] __fput+0x308/0x8e4 [ 3395.077491][ T29] __fput_sync+0x60/0x9c [ 3395.078387][ T29] __arm64_sys_close+0x150/0x1e0 [ 3395.081325][ T29] invoke_syscall+0x98/0x2b8 [ 3395.082289][ T29] el0_svc_common+0x130/0x23c [ 3395.083285][ T29] do_el0_svc+0x48/0x58 [ 3395.084154][ T29] el0_svc+0x54/0x158 [ 3395.085002][ T29] el0t_64_sync_handler+0x84/0xfc [ 3395.086130][ T29] el0t_64_sync+0x190/0x194 [ 3395.087105][ T29] [ 3395.087105][ T29] Showing all locks held in the system: [ 3395.088833][ T29] 1 lock held by khungtaskd/29: [ 3395.089850][ T29] #0: ffff80008e6c48c0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 3395.092714][ T29] 2 locks held by getty/5864: [ 3395.093702][ T29] #0: ffff0000d76400a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 3395.095779][ T29] #1: ffff800094e802f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41c/0x1228 [ 3395.098119][ T29] 1 lock held by udevd/30346: [ 3395.099186][ T29] #0: ffff0000ca0464c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x114/0x55c [ 3395.101227][ T29] 1 lock held by syz-executor.2/31906: [ 3395.102340][ T29] #0: ffff0000ca0464c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xec/0x740 [ 3395.104245][ T29] 1 lock held by syz-executor.2/31982: [ 3395.105352][ T29] #0: ffff0000ca0464c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x114/0x55c [ 3395.107594][ T29] 1 lock held by syz-executor.2/31983: [ 3395.108827][ T29] #0: ffff0000ca0464c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x114/0x55c [ 3395.111018][ T29] 1 lock held by syz-executor.2/32026: [ 3395.112158][ T29] #0: ffff0000ca0464c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x114/0x55c [ 3395.114303][ T29] 1 lock held by syz-executor.2/32027: [ 3395.115391][ T29] #0: ffff0000ca0464c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x114/0x55c [ 3395.117602][ T29] [ 3395.118131][ T29] ============================================= [ 3395.118131][ T29] [ 3395.120108][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 3395.121632][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.7.0-rc8-syzkaller-g0802e17d9aca #0 [ 3395.123526][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 3395.125736][ T29] Call trace: [ 3395.126416][ T29] dump_backtrace+0x1b8/0x1e4 [ 3395.127461][ T29] show_stack+0x2c/0x3c [ 3395.128365][ T29] dump_stack_lvl+0xd0/0x124 [ 3395.129329][ T29] dump_stack+0x1c/0x28 [ 3395.130218][ T29] panic+0x30c/0x88c [ 3395.131141][ T29] hung_task_panic+0x0/0x2c [ 3395.132075][ T29] kthread+0x288/0x310 [ 3395.132903][ T29] ret_from_fork+0x10/0x20 [ 3395.133959][ T29] SMP: stopping secondary CPUs [ 3395.134995][ T29] Kernel Offset: disabled [ 3395.135890][ T29] CPU features: 0x0,00000020,7002004a,21017203 [ 3395.137300][ T29] Memory Limit: none [ 3396.200340][ T29] Rebooting in 86400 seconds..