0xffffffffffffffff) 14:18:03 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x141000) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x141000) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async) 14:18:03 executing program 0: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x480) (async) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x480) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 14:18:03 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x900) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) 14:18:03 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macsec0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040001}, 0x20008845) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3fb, 0x1, 0x70bd25, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) socketpair(0x25, 0x0, 0x0, &(0x7f0000000300)) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macsec0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040001}, 0x20008845) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3fb, 0x1, 0x70bd25, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) (async) socketpair(0x25, 0x0, 0x0, &(0x7f0000000300)) (async) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) (async) 14:18:03 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/126, 0x7e) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:03 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x141000) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:03 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20200) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$xdp(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x2c, 0x5, 0x0, 0x21}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)="0de71a678a636f80aca1d19d889bf05e4bb6d86d3269622ba8", 0x19}, {&(0x7f0000000200)="c4569ff96d6b4ecfd8c9246330e04d8ae7c03500d334a8ff26a811e9d14279470562d99a545bd5b0bfbf585dc9655624af8f98a986151b4f25af67f09a70d7325d04b4f9e70b0066f887b9a5c3c485f6f9330ade1c78e9f4da3699ce2475d970df8daa8ea3742f2c58cbe1d05e0de45299a4589608c3a2fd202bf87da72ce964e722c5c536be", 0x86}, {&(0x7f00000002c0)="86da1645721b442ae5d4dc77d2ac3620d88b8ba68cf77820697e917add808982ad9b78bde9f25a1c99bd433c8ab162b5b6c922", 0x33}, {&(0x7f0000000300)="32a85d0f161c4e1473cab9b344eab1cc7fc4a51219fcce543f56de34153f541bbe347a0932192880043dc2d95e2257f783b51ea7f50158f687aa0a5ac57e4f7c987bfa9287204b1c56208cf8094da5ed3efdc4e1949f26fc2bf4d6c582aa5efc77ba3d3e5ebc6f05438711ef11726762cbc8f4727b8830fcedec5dd92d5a8b99836b0231d3903f9ad8d862739ef721f11385a4", 0x93}, {&(0x7f00000003c0)="3a4ad6f19b4cfd53fc597193091fce", 0xf}], 0x5, 0x0, 0x0, 0x8005}, 0x40080) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async, rerun: 64) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x80000, 0x0) (rerun: 64) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000580)=ANY=[@ANYBLOB="09000022000059876488adebe4efc48f29ee504040fae2", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x61}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) (async) syz_open_dev$ndb(&(0x7f00000004c0), 0x0, 0x100) 14:18:03 executing program 2: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x900) (async) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x900) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) 14:18:03 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/126, 0x7e) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:03 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x480) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 14:18:03 executing program 3: fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='!\x00', &(0x7f0000000080)="163df90190bb4c688630ede48c79bef78e5000e7469ed83ab7649f77121f6466f624be06d651313e9a0ef45adfc7651e46abf876d6e36c9e2088afc70db973661cada31f6d0142b9291d5328d5914ab5358d4e935f0f24d783fc01e94c4d960b8dda0779ef03c509f02c534620a98588759274619acf76536ed9c7d1db84aded5edfa032c0df2ec991bb3a07d4ab5ff85c96f4e1fb6b1b0b4ae72e92caabf77bf8912abe92e0ccb8388bc1eaa8a0994d4764e88cf22491328b84b258714891fa567e37a83552756828cd0455d9c3", 0xce) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) 14:18:03 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x2, 0x1, 0x407b, 0x1}) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req={0x7fffffff, 0x20, 0x2, 0x6}, 0x10) 14:18:03 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x9, 0x20, 0x8, 0x3, 0x0, 0x4, 0x7}, 0x1c) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:03 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/126, 0x7e) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:03 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x2, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x42000) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x2300, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) 14:18:03 executing program 3: fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='!\x00', &(0x7f0000000080)="163df90190bb4c688630ede48c79bef78e5000e7469ed83ab7649f77121f6466f624be06d651313e9a0ef45adfc7651e46abf876d6e36c9e2088afc70db973661cada31f6d0142b9291d5328d5914ab5358d4e935f0f24d783fc01e94c4d960b8dda0779ef03c509f02c534620a98588759274619acf76536ed9c7d1db84aded5edfa032c0df2ec991bb3a07d4ab5ff85c96f4e1fb6b1b0b4ae72e92caabf77bf8912abe92e0ccb8388bc1eaa8a0994d4764e88cf22491328b84b258714891fa567e37a83552756828cd0455d9c3", 0xce) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) 14:18:03 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x2, 0x1, 0x407b, 0x1}) (async) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req={0x7fffffff, 0x20, 0x2, 0x6}, 0x10) 14:18:03 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x9, 0x20, 0x8, 0x3, 0x0, 0x4, 0x7}, 0x1c) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:03 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x28a040) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x19}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000081}, 0x4080) 14:18:03 executing program 4: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x125e, 0xffffffffffffffff) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab04, 0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[]) 14:18:03 executing program 3: fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='!\x00', &(0x7f0000000080)="163df90190bb4c688630ede48c79bef78e5000e7469ed83ab7649f77121f6466f624be06d651313e9a0ef45adfc7651e46abf876d6e36c9e2088afc70db973661cada31f6d0142b9291d5328d5914ab5358d4e935f0f24d783fc01e94c4d960b8dda0779ef03c509f02c534620a98588759274619acf76536ed9c7d1db84aded5edfa032c0df2ec991bb3a07d4ab5ff85c96f4e1fb6b1b0b4ae72e92caabf77bf8912abe92e0ccb8388bc1eaa8a0994d4764e88cf22491328b84b258714891fa567e37a83552756828cd0455d9c3", 0xce) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) 14:18:03 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x9, 0x20, 0x8, 0x3, 0x0, 0x4, 0x7}, 0x1c) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x9, 0x20, 0x8, 0x3, 0x0, 0x4, 0x7}, 0x1c) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async) 14:18:03 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x2, 0x1, 0x407b, 0x1}) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) (async) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req={0x7fffffff, 0x20, 0x2, 0x6}, 0x10) 14:18:03 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x28a040) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x19}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000081}, 0x4080) 14:18:03 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x2, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x42000) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x2, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x42000) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x2300, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) 14:18:03 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='/dev/nbd#\x00', &(0x7f0000000080)="85988c32bbbeee4c1116fab76657d1a655607a659bb91f81985be73343e4713fd7bc365bf7f3cf2b82d8bdebc8b218630e668130155eef053edd2550e1cf63a0e2c3604f472ad3524bff511dd95ffd484aee9ca8f9160357b1f2a6140e541868da8b368dcc7ae576d9406a27463307e75729cf3b8361256f1cb1b3f323683c542c92206710828cb9812deaad2e2aa13e1a93d621890b382f87e175eedf5001d1c384edb9462e5f4e26ddc74c87549b961d0a415a32a1681fb293480eadd0ca409b27a6af637d9c7573499ce5259eee23296d0676e00b3654a955b595a1240c6db25af3e5721dd1f90ad1f40259190c1b4de05a07c5", 0xf5) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) 14:18:03 executing program 4: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x125e, 0xffffffffffffffff) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab04, 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[]) 14:18:03 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x28a040) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x19}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000081}, 0x4080) 14:18:03 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x2, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x42000) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x2300, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) 14:18:03 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x0, 0x70bd28, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x14004114}, 0x40010) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000140)='/dev/nbd#\x00', &(0x7f0000000180)='./file0\x00', r2) r3 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x40101) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) 14:18:03 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x400c081}, 0x880) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:03 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x110b3067521eefe0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) 14:18:03 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='/dev/nbd#\x00', &(0x7f0000000080)="85988c32bbbeee4c1116fab76657d1a655607a659bb91f81985be73343e4713fd7bc365bf7f3cf2b82d8bdebc8b218630e668130155eef053edd2550e1cf63a0e2c3604f472ad3524bff511dd95ffd484aee9ca8f9160357b1f2a6140e541868da8b368dcc7ae576d9406a27463307e75729cf3b8361256f1cb1b3f323683c542c92206710828cb9812deaad2e2aa13e1a93d621890b382f87e175eedf5001d1c384edb9462e5f4e26ddc74c87549b961d0a415a32a1681fb293480eadd0ca409b27a6af637d9c7573499ce5259eee23296d0676e00b3654a955b595a1240c6db25af3e5721dd1f90ad1f40259190c1b4de05a07c5", 0xf5) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) 14:18:03 executing program 4: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x125e, 0xffffffffffffffff) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab04, 0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[]) 14:18:04 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x77) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="bbef"]) socketpair(0x23, 0x4, 0x10000, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'gre0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) 14:18:04 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x0, 0x70bd28, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x14004114}, 0x40010) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000140)='/dev/nbd#\x00', &(0x7f0000000180)='./file0\x00', r2) r3 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x40101) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) (async) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) 14:18:04 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='/dev/nbd#\x00', &(0x7f0000000080)="85988c32bbbeee4c1116fab76657d1a655607a659bb91f81985be73343e4713fd7bc365bf7f3cf2b82d8bdebc8b218630e668130155eef053edd2550e1cf63a0e2c3604f472ad3524bff511dd95ffd484aee9ca8f9160357b1f2a6140e541868da8b368dcc7ae576d9406a27463307e75729cf3b8361256f1cb1b3f323683c542c92206710828cb9812deaad2e2aa13e1a93d621890b382f87e175eedf5001d1c384edb9462e5f4e26ddc74c87549b961d0a415a32a1681fb293480eadd0ca409b27a6af637d9c7573499ce5259eee23296d0676e00b3654a955b595a1240c6db25af3e5721dd1f90ad1f40259190c1b4de05a07c5", 0xf5) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) 14:18:04 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x110b3067521eefe0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) 14:18:04 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async, rerun: 64) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x400c081}, 0x880) (async, rerun: 64) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:04 executing program 4: accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000000)=[@free_buffer, @request_death={0x400c630e, 0x2}, @exit_looper], 0xa5, 0x0, &(0x7f0000000080)="53d4ed46e09449350699991bca25ba68fb4cd226636f5844431ceb00a4f4c095b5c465c140b5c84139485d1d457db00f6ac046e2a9b887d5df12c4c1b9f4e10cd993bdefed026e22a94315ade934d0fae0f4b647e36d576523aca03e55f8b234d6ca4e771fb9776417f85ce34b4604e6e109c9fca2ae66d236694e2663dd6ebaa4ba5e5c51d8b55e055a63a9e2fbf28c394102f1f91a71a52d619b903b7e6a6963dad26d8b"}) 14:18:04 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x0, 0x70bd28, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x14004114}, 0x40010) (async, rerun: 64) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000140)='/dev/nbd#\x00', &(0x7f0000000180)='./file0\x00', r2) (async) r3 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x40101) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) 14:18:04 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x110b3067521eefe0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) 14:18:04 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x77) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="bbef"]) (async) socketpair(0x23, 0x4, 0x10000, &(0x7f00000000c0)={0xffffffffffffffff}) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'gre0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) 14:18:04 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x90c6) 14:18:04 executing program 4: accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000000)=[@free_buffer, @request_death={0x400c630e, 0x2}, @exit_looper], 0xa5, 0x0, &(0x7f0000000080)="53d4ed46e09449350699991bca25ba68fb4cd226636f5844431ceb00a4f4c095b5c465c140b5c84139485d1d457db00f6ac046e2a9b887d5df12c4c1b9f4e10cd993bdefed026e22a94315ade934d0fae0f4b647e36d576523aca03e55f8b234d6ca4e771fb9776417f85ce34b4604e6e109c9fca2ae66d236694e2663dd6ebaa4ba5e5c51d8b55e055a63a9e2fbf28c394102f1f91a71a52d619b903b7e6a6963dad26d8b"}) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000000)=[@free_buffer, @request_death={0x400c630e, 0x2}, @exit_looper], 0xa5, 0x0, &(0x7f0000000080)="53d4ed46e09449350699991bca25ba68fb4cd226636f5844431ceb00a4f4c095b5c465c140b5c84139485d1d457db00f6ac046e2a9b887d5df12c4c1b9f4e10cd993bdefed026e22a94315ade934d0fae0f4b647e36d576523aca03e55f8b234d6ca4e771fb9776417f85ce34b4604e6e109c9fca2ae66d236694e2663dd6ebaa4ba5e5c51d8b55e055a63a9e2fbf28c394102f1f91a71a52d619b903b7e6a6963dad26d8b"}) (async) 14:18:04 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x400c081}, 0x880) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:04 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) pidfd_getfd(r2, r3, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r1, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8001}, 0x24000044) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r6, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r7 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r9, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}]}, 0x20}}, 0x8000) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r9, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c5}, 0x4880) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r10, 0x40206435, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r10, 0x65, 0x6, &(0x7f0000000300), &(0x7f00000002c0)=0x4) ioctl$NBD_SET_SOCK(r7, 0x1261, 0xffffffffffffffff) 14:18:04 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)}) (async) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x90c6) 14:18:04 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x77) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="bbef"]) socketpair(0x23, 0x4, 0x10000, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'gre0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x77) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="bbef"]) (async) socketpair(0x23, 0x4, 0x10000, &(0x7f00000000c0)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'gre0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) (async) 14:18:04 executing program 4: accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000000)=[@free_buffer, @request_death={0x400c630e, 0x2}, @exit_looper], 0xa5, 0x0, &(0x7f0000000080)="53d4ed46e09449350699991bca25ba68fb4cd226636f5844431ceb00a4f4c095b5c465c140b5c84139485d1d457db00f6ac046e2a9b887d5df12c4c1b9f4e10cd993bdefed026e22a94315ade934d0fae0f4b647e36d576523aca03e55f8b234d6ca4e771fb9776417f85ce34b4604e6e109c9fca2ae66d236694e2663dd6ebaa4ba5e5c51d8b55e055a63a9e2fbf28c394102f1f91a71a52d619b903b7e6a6963dad26d8b"}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000000)=[@free_buffer, @request_death={0x400c630e, 0x2}, @exit_looper], 0xa5, 0x0, &(0x7f0000000080)="53d4ed46e09449350699991bca25ba68fb4cd226636f5844431ceb00a4f4c095b5c465c140b5c84139485d1d457db00f6ac046e2a9b887d5df12c4c1b9f4e10cd993bdefed026e22a94315ade934d0fae0f4b647e36d576523aca03e55f8b234d6ca4e771fb9776417f85ce34b4604e6e109c9fca2ae66d236694e2663dd6ebaa4ba5e5c51d8b55e055a63a9e2fbf28c394102f1f91a71a52d619b903b7e6a6963dad26d8b"}) 14:18:04 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x30000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r3 = pidfd_getfd(r2, r1, 0x0) ioctl$NBD_SET_SOCK(r3, 0x125f, 0xffffffffffffffff) 14:18:04 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f2, 0x400, 0x70bd27, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x60}, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x1260, 0xffffffffffffffff) 14:18:04 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x90c6) 14:18:04 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) pidfd_getfd(r2, r3, 0x0) (async) pidfd_getfd(r2, r3, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r1, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8001}, 0x24000044) (async) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8001}, 0x24000044) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r6, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r6, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r7 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r9, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}]}, 0x20}}, 0x8000) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r9, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}]}, 0x20}}, 0x8000) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r9, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c5}, 0x4880) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r10, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r10, 0x40206435, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r10, 0x65, 0x6, &(0x7f0000000300), &(0x7f00000002c0)=0x4) (async) getsockopt$CAN_RAW_JOIN_FILTERS(r10, 0x65, 0x6, &(0x7f0000000300), &(0x7f00000002c0)=0x4) ioctl$NBD_SET_SOCK(r7, 0x1261, 0xffffffffffffffff) 14:18:04 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x30000) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r3 = pidfd_getfd(r2, r1, 0x0) ioctl$NBD_SET_SOCK(r3, 0x125f, 0xffffffffffffffff) 14:18:04 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)=ANY=[@ANYBLOB="00000a314d5b25b67b8c9d9e62749b8e23a290a20172f0213df504a0f80501cad429428e6e74812c6384ab5f50bd1fe75c066cc4def3a4cc081d11d4609126864e0618d640252da34f5af531a6dbaa144e8be772e9be5b6f9f431d471be1d2e735377d478d0cb822789b4e78f21691572c80ab310ad6c2df64956ec6478e83d9b4cf2b6336ab0d1a8352ee08f204e11286d32e8981d46e", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x30) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:04 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x8, 0x14e4c6, 0x1f5bb4}) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 14:18:04 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f2, 0x400, 0x70bd27, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x60}, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) (async) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x1260, 0xffffffffffffffff) 14:18:04 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) 14:18:04 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) pidfd_getfd(r2, r3, 0x0) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r1, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8001}, 0x24000044) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r6, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async) r7 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async, rerun: 32) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r9, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}]}, 0x20}}, 0x8000) (async) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r9, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c5}, 0x4880) (async) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r10, 0x40206435, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r10, 0x65, 0x6, &(0x7f0000000300), &(0x7f00000002c0)=0x4) (async) ioctl$NBD_SET_SOCK(r7, 0x1261, 0xffffffffffffffff) 14:18:04 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)=ANY=[@ANYBLOB="00000a314d5b25b67b8c9d9e62749b8e23a290a20172f0213df504a0f80501cad429428e6e74812c6384ab5f50bd1fe75c066cc4def3a4cc081d11d4609126864e0618d640252da34f5af531a6dbaa144e8be772e9be5b6f9f431d471be1d2e735377d478d0cb822789b4e78f21691572c80ab310ad6c2df64956ec6478e83d9b4cf2b6336ab0d1a8352ee08f204e11286d32e8981d46e", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)=ANY=[@ANYBLOB="00000a314d5b25b67b8c9d9e62749b8e23a290a20172f0213df504a0f80501cad429428e6e74812c6384ab5f50bd1fe75c066cc4def3a4cc081d11d4609126864e0618d640252da34f5af531a6dbaa144e8be772e9be5b6f9f431d471be1d2e735377d478d0cb822789b4e78f21691572c80ab310ad6c2df64956ec6478e83d9b4cf2b6336ab0d1a8352ee08f204e11286d32e8981d46e", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x30) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:04 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x8, 0x14e4c6, 0x1f5bb4}) (async) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 14:18:04 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f2, 0x400, 0x70bd27, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x60}, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) (async) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x1260, 0xffffffffffffffff) 14:18:04 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x30000) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r3 = pidfd_getfd(r2, r1, 0x0) ioctl$NBD_SET_SOCK(r3, 0x125f, 0xffffffffffffffff) 14:18:04 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)=ANY=[@ANYBLOB="00000a314d5b25b67b8c9d9e62749b8e23a290a20172f0213df504a0f80501cad429428e6e74812c6384ab5f50bd1fe75c066cc4def3a4cc081d11d4609126864e0618d640252da34f5af531a6dbaa144e8be772e9be5b6f9f431d471be1d2e735377d478d0cb822789b4e78f21691572c80ab310ad6c2df64956ec6478e83d9b4cf2b6336ab0d1a8352ee08f204e11286d32e8981d46e", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x30) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)=ANY=[@ANYBLOB="00000a314d5b25b67b8c9d9e62749b8e23a290a20172f0213df504a0f80501cad429428e6e74812c6384ab5f50bd1fe75c066cc4def3a4cc081d11d4609126864e0618d640252da34f5af531a6dbaa144e8be772e9be5b6f9f431d471be1d2e735377d478d0cb822789b4e78f21691572c80ab310ad6c2df64956ec6478e83d9b4cf2b6336ab0d1a8352ee08f204e11286d32e8981d46e", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x30) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) 14:18:04 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) (async) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) (async) 14:18:04 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x28841) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) pidfd_send_signal(r1, 0x10, &(0x7f0000000040)={0xa, 0xae1e, 0x3f}, 0x0) 14:18:04 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x8, 0x14e4c6, 0x1f5bb4}) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 14:18:04 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x240400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x14, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_DFS_REGION={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x95}, 0x8000) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r4, 0x125f, 0xffffffffffffffff) 14:18:04 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x490200) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000080)={0xc}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x7, 0x4, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000340)={0x0, r6, r7, 0x0, 0x0, 0xa, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 14:18:04 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) (async) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) 14:18:04 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:04 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x490200) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000080)={0xc}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x7, 0x4, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000340)={0x0, r6, r7, 0x0, 0x0, 0xa, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x490200) (async) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000080)={0xc}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x7, 0x4, 0x1, 0x3}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000340)={0x0, r6, r7, 0x0, 0x0, 0xa, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) 14:18:05 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x28841) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) pidfd_send_signal(r1, 0x10, &(0x7f0000000040)={0xa, 0xae1e, 0x3f}, 0x0) 14:18:05 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000040)={0xcb95}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x6, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000000c0)={0x200, r2}) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 14:18:05 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x240400, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x14, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_DFS_REGION={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x95}, 0x8000) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r4, 0x125f, 0xffffffffffffffff) 14:18:05 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:05 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x490200) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000080)={0xc}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x7, 0x4, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000340)={0x0, r6, r7, 0x0, 0x0, 0xa, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x490200) (async) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000080)={0xc}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x7, 0x4, 0x1, 0x3}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000340)={0x0, r6, r7, 0x0, 0x0, 0xa, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) 14:18:05 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x28841) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async, rerun: 32) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async, rerun: 32) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) pidfd_send_signal(r1, 0x10, &(0x7f0000000040)={0xa, 0xae1e, 0x3f}, 0x0) 14:18:05 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x80800) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x2000008) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000280)=""/244, &(0x7f00000001c0)=0xf4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000240)={0x1e0, r0}, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r2, 0x125d, 0xffffffffffffffff) 14:18:05 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000040)={0xcb95}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x6, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000000c0)={0x200, r2}) (async, rerun: 32) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (rerun: 32) 14:18:05 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x80800) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x2000008) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000280)=""/244, &(0x7f00000001c0)=0xf4) (async, rerun: 64) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (rerun: 64) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000240)={0x1e0, r0}, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) ioctl$NBD_SET_SOCK(r2, 0x125d, 0xffffffffffffffff) 14:18:05 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x240400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x14, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_DFS_REGION={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x95}, 0x8000) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r4, 0x125f, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x240400, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x14, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_DFS_REGION={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x95}, 0x8000) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r4, 0x125f, 0xffffffffffffffff) (async) 14:18:05 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:05 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000040)={0xcb95}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x6, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000000c0)={0x200, r2}) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000040)={0xcb95}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x6, 0x0, 0x10001}) (async) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000000c0)={0x200, r2}) (async) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) 14:18:05 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x80000) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) 14:18:05 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[@ANYBLOB="5c000000f8f20c7fb566bcf779d2749be66f710562eaf9e692a9a5c08bfcff9e66432ff84f6e5f5add59bd02c3835d063c234a9f3dfba99695f6143923d4b104e1a76576274b95df47fe5dcf00963eb653e69c7e1af5bd2383a57bd5f12c67f9848c94d5f1688af752f4645077f889a2bf2a7d3fea244641023b33ffdbb2342852", @ANYRES16=0x0, @ANYBLOB="000327bd7000fbdbdf25020000001400020076657468305f766c616e0000000000000900010073797a310000000005000400020000000900010073797a3000000000140002006e723000"/86], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4044801) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) read$fb(r2, &(0x7f00000001c0)=""/4096, 0x1000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f0000000080)={0x0, 0xfff}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)='\x00', 0x0, r0) 14:18:05 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0xaef) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000080)={0x1200, r1}, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 14:18:05 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x80000) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x80000) (async) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) 14:18:05 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) landlock_restrict_self(0xffffffffffffffff, 0x0) 14:18:05 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000340)={0x1f}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$NBD_SET_SOCK(r3, 0xab00, 0xffffffffffffffff) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f0000000040)={0x0, 0x80000000}) 14:18:05 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x80800) (async) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x80800) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x2000008) (async) inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x2000008) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000280)=""/244, &(0x7f00000001c0)=0xf4) (async) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000280)=""/244, &(0x7f00000001c0)=0xf4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000240)={0x1e0, r0}, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r2, 0x125d, 0xffffffffffffffff) 14:18:05 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[@ANYBLOB="5c000000f8f20c7fb566bcf779d2749be66f710562eaf9e692a9a5c08bfcff9e66432ff84f6e5f5add59bd02c3835d063c234a9f3dfba99695f6143923d4b104e1a76576274b95df47fe5dcf00963eb653e69c7e1af5bd2383a57bd5f12c67f9848c94d5f1688af752f4645077f889a2bf2a7d3fea244641023b33ffdbb2342852", @ANYRES16=0x0, @ANYBLOB="000327bd7000fbdbdf25020000001400020076657468305f766c616e0000000000000900010073797a310000000005000400020000000900010073797a3000000000140002006e723000"/86], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4044801) (async) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) read$fb(r2, &(0x7f00000001c0)=""/4096, 0x1000) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f0000000080)={0x0, 0xfff}) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)='\x00', 0x0, r0) 14:18:05 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x80000) (async, rerun: 64) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (rerun: 64) 14:18:05 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0xaef) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000080)={0x1200, r1}, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000080)={0x1200, r1}, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 14:18:05 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) landlock_restrict_self(0xffffffffffffffff, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) landlock_restrict_self(0xffffffffffffffff, 0x0) (async) 14:18:05 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000340)={0x1f}) (async) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000340)={0x1f}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$NBD_SET_SOCK(r3, 0xab00, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f0000000040)={0x0, 0x80000000}) 14:18:05 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x80) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, r3, 0xc01, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80002000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xdc, 0x464, 0x400, 0x70bd27, 0x25dfdbfb, "576057f481dd6d7bcb17be18bf795cdc1d0f0b97473a3ea700d979fba51f3cd3f02d7bf1d466d8006284524b4272629eeab90628735f6b0d082de9440c486b16985a6d0a087aadb21b3e53e3334747529aa1d0014c62dcb52d095f5b0e7bd9870854c763543861a8f153674f85d9ab50de2140e214f4bccd54f228c513ec6c290b4d73ac55605089875e34234b098dcc53557dcb8ac74e233800782655380477b9c10b86009a5f68e2615af4eb05491512f4fa8e952324eaffdbd996548c5f893f7e535ca890373fa66e3d"}, 0xdc}, 0x1, 0x0, 0x0, 0x4040}, 0x8010) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3f}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000280)={0x94, r5}, 0x0) 14:18:05 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[@ANYBLOB="5c000000f8f20c7fb566bcf779d2749be66f710562eaf9e692a9a5c08bfcff9e66432ff84f6e5f5add59bd02c3835d063c234a9f3dfba99695f6143923d4b104e1a76576274b95df47fe5dcf00963eb653e69c7e1af5bd2383a57bd5f12c67f9848c94d5f1688af752f4645077f889a2bf2a7d3fea244641023b33ffdbb2342852", @ANYRES16=0x0, @ANYBLOB="000327bd7000fbdbdf25020000001400020076657468305f766c616e0000000000000900010073797a310000000005000400020000000900010073797a3000000000140002006e723000"/86], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4044801) (async) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) read$fb(r2, &(0x7f00000001c0)=""/4096, 0x1000) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f0000000080)={0x0, 0xfff}) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)='\x00', 0x0, r0) 14:18:05 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb8, 0x3ed, 0x300, 0x70bd2c, 0x25dfdbfc, "1310ff4437f21cd7cc64a87eb369aae8202dd1896ac7822365661b121f8c55595ed56da53e7affff44703d381bd1a602703865f292ae37420400000026b37c04857cdb93b95a59c63d21dad509f6a87314e913c79ed226284d94060b710781e853c83309001a524b062ed18878fd5186e70000c43ae39731e9a7bff078a9edffe49a80cca33ec9ba8a9320c5c818d43fe73fe8d21dd9ecae57ca1e993f5f90b0a13fe0a2177095", ["", "", "", "", "", ""]}, 0xb8}}, 0x4000) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x880) 14:18:05 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) landlock_restrict_self(0xffffffffffffffff, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) landlock_restrict_self(0xffffffffffffffff, 0x0) (async) 14:18:05 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x80) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, r3, 0xc01, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80002000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xdc, 0x464, 0x400, 0x70bd27, 0x25dfdbfb, "576057f481dd6d7bcb17be18bf795cdc1d0f0b97473a3ea700d979fba51f3cd3f02d7bf1d466d8006284524b4272629eeab90628735f6b0d082de9440c486b16985a6d0a087aadb21b3e53e3334747529aa1d0014c62dcb52d095f5b0e7bd9870854c763543861a8f153674f85d9ab50de2140e214f4bccd54f228c513ec6c290b4d73ac55605089875e34234b098dcc53557dcb8ac74e233800782655380477b9c10b86009a5f68e2615af4eb05491512f4fa8e952324eaffdbd996548c5f893f7e535ca890373fa66e3d"}, 0xdc}, 0x1, 0x0, 0x0, 0x4040}, 0x8010) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3f}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000280)={0x94, r5}, 0x0) 14:18:05 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000340)={0x1f}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$NBD_SET_SOCK(r3, 0xab00, 0xffffffffffffffff) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f0000000040)={0x0, 0x80000000}) 14:18:05 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0xaef) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000080)={0x1200, r1}, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 14:18:05 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0xab7d57ebf5758b9) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x6, 0x6, 0x2}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f00000003c0)={r1}) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) r2 = fsmount(0xffffffffffffffff, 0x0, 0x8) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000200), &(0x7f0000000240)=0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x3fb, 0x100, 0x70bd2b, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x8011}, 0x40088d1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000001b49c78673b2cfc81f40486000000185b1713", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x600480, 0x0) accept$packet(r4, &(0x7f0000000440), &(0x7f0000000480)=0x14) 14:18:05 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r1, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}]}, 0x20}}, 0x8000) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x25}, @void, @void}}, ["", ""]}, 0x1c}}, 0x400000d) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0x125e, 0xffffffffffffffff) 14:18:05 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb8, 0x3ed, 0x300, 0x70bd2c, 0x25dfdbfc, "1310ff4437f21cd7cc64a87eb369aae8202dd1896ac7822365661b121f8c55595ed56da53e7affff44703d381bd1a602703865f292ae37420400000026b37c04857cdb93b95a59c63d21dad509f6a87314e913c79ed226284d94060b710781e853c83309001a524b062ed18878fd5186e70000c43ae39731e9a7bff078a9edffe49a80cca33ec9ba8a9320c5c818d43fe73fe8d21dd9ecae57ca1e993f5f90b0a13fe0a2177095", ["", "", "", "", "", ""]}, 0xb8}}, 0x4000) (async) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x880) 14:18:05 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0xab7d57ebf5758b9) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x6, 0x6, 0x2}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f00000003c0)={r1}) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) (async) r2 = fsmount(0xffffffffffffffff, 0x0, 0x8) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x3fb, 0x100, 0x70bd2b, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x8011}, 0x40088d1) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000001b49c78673b2cfc81f40486000000185b1713", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x600480, 0x0) accept$packet(r4, &(0x7f0000000440), &(0x7f0000000480)=0x14) 14:18:05 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x80) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, r3, 0xc01, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, r3, 0xc01, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80002000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xdc, 0x464, 0x400, 0x70bd27, 0x25dfdbfb, "576057f481dd6d7bcb17be18bf795cdc1d0f0b97473a3ea700d979fba51f3cd3f02d7bf1d466d8006284524b4272629eeab90628735f6b0d082de9440c486b16985a6d0a087aadb21b3e53e3334747529aa1d0014c62dcb52d095f5b0e7bd9870854c763543861a8f153674f85d9ab50de2140e214f4bccd54f228c513ec6c290b4d73ac55605089875e34234b098dcc53557dcb8ac74e233800782655380477b9c10b86009a5f68e2615af4eb05491512f4fa8e952324eaffdbd996548c5f893f7e535ca890373fa66e3d"}, 0xdc}, 0x1, 0x0, 0x0, 0x4040}, 0x8010) (async) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80002000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xdc, 0x464, 0x400, 0x70bd27, 0x25dfdbfb, "576057f481dd6d7bcb17be18bf795cdc1d0f0b97473a3ea700d979fba51f3cd3f02d7bf1d466d8006284524b4272629eeab90628735f6b0d082de9440c486b16985a6d0a087aadb21b3e53e3334747529aa1d0014c62dcb52d095f5b0e7bd9870854c763543861a8f153674f85d9ab50de2140e214f4bccd54f228c513ec6c290b4d73ac55605089875e34234b098dcc53557dcb8ac74e233800782655380477b9c10b86009a5f68e2615af4eb05491512f4fa8e952324eaffdbd996548c5f893f7e535ca890373fa66e3d"}, 0xdc}, 0x1, 0x0, 0x0, 0x4040}, 0x8010) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3f}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000280)={0x94, r5}, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000280)={0x94, r5}, 0x0) 14:18:05 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRES32=r0, @ANYBLOB="00008000001600002eafc380faa52f66"]) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, &(0x7f0000000280)={{0x4}, {0x8, 0x7}, 0x200}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x8054, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x800) sendmsg$can_raw(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x0, 0x0, 0x0, 0x1}, 0x3e, 0x1, 0x0, 0x0, "adda4b3e63d3c50e343cb1f7a3b8d75a00080372bfcf93298a77de431b858da8d22fa3654c55cd2987257d30abdce8cd11ca7faffec6bdf4c2d8fb0df84dbbee"}, 0x48}, 0x1, 0x0, 0x0, 0x20008040}, 0xc0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) r6 = inotify_add_watch(r1, &(0x7f0000000240)='\x00', 0x100) inotify_rm_watch(r5, r6) 14:18:05 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, r1) 14:18:06 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r1, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}]}, 0x20}}, 0x8000) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r1, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}]}, 0x20}}, 0x8000) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x25}, @void, @void}}, ["", ""]}, 0x1c}}, 0x400000d) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x25}, @void, @void}}, ["", ""]}, 0x1c}}, 0x400000d) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0x125e, 0xffffffffffffffff) 14:18:06 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb8, 0x3ed, 0x300, 0x70bd2c, 0x25dfdbfc, "1310ff4437f21cd7cc64a87eb369aae8202dd1896ac7822365661b121f8c55595ed56da53e7affff44703d381bd1a602703865f292ae37420400000026b37c04857cdb93b95a59c63d21dad509f6a87314e913c79ed226284d94060b710781e853c83309001a524b062ed18878fd5186e70000c43ae39731e9a7bff078a9edffe49a80cca33ec9ba8a9320c5c818d43fe73fe8d21dd9ecae57ca1e993f5f90b0a13fe0a2177095", ["", "", "", "", "", ""]}, 0xb8}}, 0x4000) (async) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async, rerun: 64) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x880) (rerun: 64) 14:18:06 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0xab7d57ebf5758b9) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x6, 0x6, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x6, 0x6, 0x2}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f00000003c0)={r1}) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) r2 = fsmount(0xffffffffffffffff, 0x0, 0x8) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000200), &(0x7f0000000240)=0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x3fb, 0x100, 0x70bd2b, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x8011}, 0x40088d1) (async) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x3fb, 0x100, 0x70bd2b, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x8011}, 0x40088d1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000001b49c78673b2cfc81f40486000000185b1713", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000001b49c78673b2cfc81f40486000000185b1713", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x600480, 0x0) accept$packet(r4, &(0x7f0000000440), &(0x7f0000000480)=0x14) (async) accept$packet(r4, &(0x7f0000000440), &(0x7f0000000480)=0x14) 14:18:06 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRES32=r0, @ANYBLOB="00008000001600002eafc380faa52f66"]) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, &(0x7f0000000280)={{0x4}, {0x8, 0x7}, 0x200}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x8054, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x800) sendmsg$can_raw(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x0, 0x0, 0x0, 0x1}, 0x3e, 0x1, 0x0, 0x0, "adda4b3e63d3c50e343cb1f7a3b8d75a00080372bfcf93298a77de431b858da8d22fa3654c55cd2987257d30abdce8cd11ca7faffec6bdf4c2d8fb0df84dbbee"}, 0x48}, 0x1, 0x0, 0x0, 0x20008040}, 0xc0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) r6 = inotify_add_watch(r1, &(0x7f0000000240)='\x00', 0x100) inotify_rm_watch(r5, r6) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRES32=r0, @ANYBLOB="00008000001600002eafc380faa52f66"]) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, &(0x7f0000000280)={{0x4}, {0x8, 0x7}, 0x200}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) (async) sendto$packet(r2, 0x0, 0x0, 0x8054, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x800) (async) sendmsg$can_raw(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x0, 0x0, 0x0, 0x1}, 0x3e, 0x1, 0x0, 0x0, "adda4b3e63d3c50e343cb1f7a3b8d75a00080372bfcf93298a77de431b858da8d22fa3654c55cd2987257d30abdce8cd11ca7faffec6bdf4c2d8fb0df84dbbee"}, 0x48}, 0x1, 0x0, 0x0, 0x20008040}, 0xc0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) (async) inotify_add_watch(r1, &(0x7f0000000240)='\x00', 0x100) (async) inotify_rm_watch(r5, r6) (async) 14:18:06 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, r1) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, r1) (async) 14:18:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x125d, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000880)='big_key\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='+', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r2, 0x0) keyctl$set_timeout(0xf, r2, 0x0) add_key(&(0x7f00000000c0)='trusted\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="18115e4ab5e0108046aca0bae4bc96f1ed5ccd12c7d56d0960b69b61a27d90c4b61195acc5cf3cfbce4a347943e107c9810f5c0af8b88917c581b45dfcee6cbc9dc6302d6331f44b1be8c6cac1544f35a04924de717df1ed3a9ad2e44f711181a30a07cbe70103338a24ef685b405d477db8c5327ce4261831984bd708f7565e710576e2636de65febb0aaf70281586556fda0b6c22288ef075eed7d1591f142bf86c57ce6b16a6587d2c2a32bf320bc69930ab9bda5a42f392f62292dfa7df60441d4346211af412d4a01b35ae0c38fa9b7358bb6db1824a26df2a0b3004eee9b48c84846510ba41325059f41f7070bf0994cbe5bec011a5e8e2579da6fe1836dbf4cd167418984da7b50f452f7805c451d183d791a4abe4b56d0aac7ad626bf6d1457b37504c9796e116e5821040e447f825b41213f3f76a9749b3e4543c3a8d31ba611249d00c52440a0ead9d8e372da7f69e1b5e5b0ce26b51fe781904b7f4df90906ec0870ecbf870e67aaef96e3158a82ad231423325cb5e7c82be5294d0764b7e406682bef401e0e6b0541eba232c7259931586adcbaed05518579e76084a9465a2d599309121f12a5d097c0c0924e4f04a721345a04c53e003a3215a46599985b9aa347bcd44455a7a3e92a2892f07bfc13d79465a30e63f158f69537c64c4d5e14f75b299c7075f06005fa0cd676b9b687e5cd63eca1930f5d3f8924879fd5b5dfbbec950ed641124679c36ff9a3d12f16d886cb6fce3608358ef84ec107c08b3617a69578d654966c66bcb1ad48a49d8e5c10477cff91d8e8c1b4e7e07630695a3fc02f2387e36b20a6b355f7bed7ab1084b6348e45469a0c7f1a6498cf2ac7e2cdfa1b9822636ba0f0af114c1f25866dcc9e7c4665913630a73af80c6056ef90e2d117e5944a25d8a88d4a32c814436c97d4840a85fdcd51c10bb80545ad68b8760a196927992a9678d3fc02c2806e393c2d3ca6406409b6e8b201610efccf24ea59e698fb5af2061ea9f130b8b166adfc26514181b4e52d19c04a700116b2da79d65f70428e8c16ef5bf511d1b87f8693f7c1186441df1f8431e2692e4524dd3e3e4a8006e4423168f61255232ba00012af8f8b316910ca25da177d3cf9f24a1afb5b6b7af3e4046e8983b219c33e3cc861cd7492d1949b4b50714e21dd19be38ad4297d6f3b1496970be7cbc6bff397be5a9017b158a5948ed9f5ab4c55bc3a8c25de99d9a761212436c361c96cc6c9ea2af7892ceee31d7a00c2593d29a8b2735fc8db4bdb23a4efbaa8a57a1781ec0697a9c80d29f79ac516065d8e938d06d6d08d4bb70c7a63543e6377f27535e694420de790f1acae1f811e50bd97c66aa28ecb3b4b80ef94dcbc78bf3ac1fe3482cb69c70c386d73f5ba155f8acc7cec9eb666f4ffcca2708bc0301a59a580b4556913c85a41405fe4fe09e582bd5c919ad19e02b0a1276d044c430b832fc561188330fbe071e84470d6bbbfd8eb65347df83c3d0d90d09e44e7d07f9391dd9de809e69cf7c5ceaa9a65fc00f77e82587e1fe4dfa93419a854826f807e864ff8bac99f43ad650e0c29df84e42623bbb2600f47f529d6c042ca8e7432bd3ec344a74322c2fa5c0050a5104740697dce403241b85dd392b44fe994d54da2150f6ab7eb2fc2f8da673ef36ec20bac10bb7deef8cf27febf3462cf2491f4d73f9cd9691fb5e2b457d46b0a9eca562471a114884dc5341d4b00b69f334311a824738f5266f4244eae8a63445d827e2e33d02b450124ae6a69c2f64798e796a3c096fa34df5fc5d0d4e9b22b0c148af1e52ce156ecfb8c5b04a9cd9ea42b32eb66511f646535a4424c0fb28d1b5c32d8757e6bff8113e5aa01d2d3e484e247d642cb289a9110588c5f616da2ece7e2eac1387b02df0e0e85b933c469eb821887efe8c1d58fa528fd9a2c5dc77a1553d3cb5932dc63c90d87d07b9e6e4f32b79f2725e5aa59c25d8735781de3416143d2e2df72fa5efbd1013aa3e9e8e132e3734d49545d0a8be6771c476a56fd77f31f3df9993fe0689ffd0c71fe49da3988cb9fa77ad77f108180a453c33cc4cfde49947a28ff48b88e891679f8a1ceff94c2ea3a8c3f80d7f22201697bb7628c803a51d7e7ef1b4240007253791dec02fd95af20d6c2eec931d86104880c4df5752a30c76ccac22a17d24a383ef18f83060026cbc02463d48c7e07b2c84fbdf5e9cab2d1f3ad30a1802432e1ec6f06db97f4d6aa00366949201d1874c78ef9e36c13522f69de00850f242ed0ec2dd30741876b758ee416a86850c61918c273d105d5e4818292739156c9240731a90b869883982d71b60c5faa7e7015ec74290e0aa2055ca3dde697d0ee57d4bd05b4c1f5d4b07fc77be0fbf397cfe43d4ee5e22962f5a6c87341e9341b90c59becc57ef6796f36b363de2315050c199adecebf60ac865108891f75395740e61d51b0f78d1c0dd9216c210ab2eb89661f09e90e6811902b6dcef8deaa85d751520f8db02f9649bc8ed21fdd3a1b67b047e7dff8af0d512d0fcf9216c7f10cc3d3ac9d41cdb5c60a318c80a4df6fa6b642dcbbe5a777a23b540ee997f2d77ebe52fc92ce9e0d3d42235aa155f02faf95264af28409cbc501ef025a18b38ae00ebb5f7590862caa4c64483ec656e40de1fbf9425ef826b34ccc7ae0a2036cf994b7bdeea6bd6c2703e5e8c818d4a3d9d7954d063e5e0d01032df3caf20aab5043f9705670e44c6d2df634ee3f23304fc577a9ec96abb70d2c82a78aef81acca934e29d1fd69194ab77b581969e6ce47ee8c16011951c1d3a212172cebabe581ab87e910855f87d16cfc624c7cfc6fd05eca5fb3f3ca70fc7fd38067f30ced8e724f003ccd81b65be5897759de55c7cc41a7508781cf6d8fe3fb6f3abfdb478c66fa212168c44eb5cb058fe013976c44cf00987c7c8b612fef0979440f2df5e89f5810db4fa792b22e7bd4e6dcbaf340fa75b4891209f0e424323e9ce255628329b2124def1ab9eb9bc4decb8cf0148e681b0954ebbbb7f3171726735598a11c4bd28b7c485e1ef274712f4e6c200b1fc1e375b2d7706f3d1bb01689493d0684c6479c289e3234b80239963ceb10221f17d1f353c284377bd70cf7bafe6352003cf24ab02e1d172c9b11984ff23f47c5e256c2fad7d34d9acd4aefe970330bd67998979c999ce9ef44591f76d76a1cfa6d1fb1f81a2765e3744ae3f91d6b54438d637f20a8c87aefc4fbb47b5a8adbd2ccc134e3662f775c2359ca618ef9e68c682e6dce7dfa3fa34346da934fc5e8612744c8e181144aa0be542404196bd7536220b08f0a98983a515b2a84f7fab75c07a9411e446138be1ffd73b291619245930a0365b8a952ad72f6511cd7fdbd12ca10920bfcfc6be6fb6b57f5937dfcd86115b94b21a181c124a397ca52c53f575e278e7024c0005a46835ac740449fc971be754451e5aeb16076526b7979ec9baa1039213169f736a70494afef75f031db774783daef2e83df204bbe11e27133fc3534a8a954d163f915f13b535f38db7d9f4468b743fb5180b51207be140de36cc69ed5faa79eed1c3724118082ba5ff3de7621dd679592d9a938221d4dba19ba375015cc5fd5a7726c85a4fc07546f21f593324c7f7a2ed77b7334485d41d4197e2f861f3fcde1b55a73c53e354693e910554d4108e5b79c20a1a101893b361ec2d3a45a7a95180ed1c21d90e58929ab08e50fa0fabc1d4796575107592dd4ece3918435263836a8e13111f71f8a230cec31facf4bb236ec8a4b6a8cffc2ccd8fa9235d683d071ca9ee8a7f747addeb06f03dd18b7722ed51a6a368234859a3f2647884d42cad2e39f1234c0dbfc154ebd5d283beb5593fa86d0209f0303594ce5cb333f91e3459b0593a157b2febd0587b27d07c84746d428645d5c5e7ffabff3521cd927811701973f5b44c599d32a09ef3d082f5fa026b2730f21a3a2d230e63239a514e36d9fd16436856f4df70c05e87e33e48c71b80bbb78e444cd36c6e3ef6a059a1a4778c765e3685334ba6cb11bc923092e123bd4d14a305a30b4b39a087075a6eb5a017f19be0c56ccc99a9de27c6dd46a5913c34d1da76cb755ebe0eb4b3e1756e07712f8e54bede6950259b10f7f74c97c7d827481d6e080b168d4ceb20f1aeb708b118e65d6645325ed898a9cce6fbe22ccf423dfa2aea4b487f28d473e5175922c48cdfc98147918a4428b0031a0ef3cc935bbea327deec726e1c95925a6d250ff527c639e9cdc656f0631edd4c15208e933d0e566960a5de593f8d73e07228dca2ff0a4a1fc28f0b93437a40287d9e28d5302b8d4316043e4632a21a6006507a5ba62638412d47e4a786a0c29d498c28dea8f7518f7a24a2d41ae91d305478587a9460fd81c1f4ad60b4ca7ae01ec9bfd8bce23f77537a0810b871671c1f64a4a5fe651cdebba249229bbe6d70b39c50439a2370bc76f8700eab2afdc427cdcc599674924fcdcd94b7e1238cbb8452e5bea4740428cc1ff1431e0d14e4d567fd7f048b3b61c7369c2bd220fbbf5d188902cb390ee129b71e7c12de4166387cdf38f12b3c52bd84fbc6d012d42fb6ebd29839ad455c5e866fb35c7c0266ad6981efb47b309bca1fbb357dc98a5d7dcbeda4bbc09636069b45f013b0771a5321ca6d1dac72d1374bacce871108eb136f7a8346672d82696681600bd84e6cc59bd81a088c394d147af01418c650cfc94608e75db0266886c216316abaa9e0c1a33c8208be62717b4a8d1e0beb5591a4b1caeeb07a26e5717de3e282725cf2f18ed323ce613e9914961a970488f45d1621dfdbe6e08f46fbeeb0ac56361faba78d897687027a659bf7c8ce969e69369b434e781124b8df233a2bc3ae818d3e600bef5c1ceaf9477472eb02ffb03da7d5f9154a83b780ee6d02604ca2e97b5a64fd308aaebbfe6bbdc350eca3d9ab981bd9b9041adb9207c81c32fa8b93f4599dbe6d02168e5c23b5bebbfac454635f0e7531a937c1d938a6e09d0810aebb3904868cf69b0936eb686563de99d097730c7fe11c9b17c76d1c8fcad5a30b061044362407631fe87523f3aaaa201ef25d60923f33d8aba4082986d91ca9bb10cde4c93b20bd8799e43eddb2795037f6bf01403679806f17c3174993cc9b8fcbc7ba8154c9e90a99e9647d11375cd29aca811a54135f4bb454ad42dc5d392ef90abd907d75f21f31ac9ed086375d28c35937d05c226dd891f49a3edbd3a7a3debdbee3bde2e91ea68ad3c09ae09e29719bf82fd49c4e5c625cb17c83a38466cc5d1c8a9f13af90863c90b6350bfb006a3ee6c530caae1f7875642dc20c1791add355e8335f88ad2b5fd56cc4241e084f88bc736d01761ab71843b6f1ca07e94938b70be446347333a07f430c7f291c5e08519d89582fa9fa509276d176bcdb46dfffdbb8d237d76a84e20856aae8872abd0c26ce5da4b86c470b83a707263275afb6e281e3af09477e27d4cc56d634089e99d27df6f143cda08f74ddc639c75249d0dbad441603305f1ec4182adda47adf273514ab31168d035ff5ed1d1fab3f606669246c9f8898c8cf9d66f51399eeb240c677cb361887b87ea511e0e1f70984fc646264d0c04a0d3f175cd7befd35837f89d27e6d0ff42808c7a32d52fb1c632acb43930d8ce576e2dc13982c78c3d27eec5686042ed7722b41629b321abc11bc603bc7dd2885046d2cec68aa70d83916a4605474418c4e99f12072b5ab36bf849bdf89fc6f622b8b2ec9f18a45811f31dc46780dc56190b2df8fbf68a47", 0x1000, r2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) 14:18:06 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x4000) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) 14:18:06 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r1, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}]}, 0x20}}, 0x8000) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x25}, @void, @void}}, ["", ""]}, 0x1c}}, 0x400000d) (async, rerun: 64) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$NBD_SET_SOCK(r2, 0x125e, 0xffffffffffffffff) 14:18:06 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x40000) fsopen(&(0x7f0000000040)='autofs\x00', 0x0) 14:18:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) (async) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x125d, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000880)='big_key\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='+', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r2, 0x0) (async) keyctl$set_timeout(0xf, r2, 0x0) add_key(&(0x7f00000000c0)='trusted\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="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", 0x1000, r2) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) 14:18:06 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, r1) 14:18:06 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRES32=r0, @ANYBLOB="00008000001600002eafc380faa52f66"]) socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, &(0x7f0000000280)={{0x4}, {0x8, 0x7}, 0x200}) (async) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, &(0x7f0000000280)={{0x4}, {0x8, 0x7}, 0x200}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x8054, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x800) sendmsg$can_raw(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x0, 0x0, 0x0, 0x1}, 0x3e, 0x1, 0x0, 0x0, "adda4b3e63d3c50e343cb1f7a3b8d75a00080372bfcf93298a77de431b858da8d22fa3654c55cd2987257d30abdce8cd11ca7faffec6bdf4c2d8fb0df84dbbee"}, 0x48}, 0x1, 0x0, 0x0, 0x20008040}, 0xc0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) r6 = inotify_add_watch(r1, &(0x7f0000000240)='\x00', 0x100) inotify_rm_watch(r5, r6) (async) inotify_rm_watch(r5, r6) 14:18:06 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x4000) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) 14:18:06 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x40000) fsopen(&(0x7f0000000040)='autofs\x00', 0x0) 14:18:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, 0x0, 0x0) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x125d, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000880)='big_key\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='+', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r2, 0x0) (async) keyctl$set_timeout(0xf, r2, 0x0) add_key(&(0x7f00000000c0)='trusted\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="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", 0x1000, r2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) 14:18:06 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80a01) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)={0x28, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '+%.+'}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}}, 0x0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x48004) 14:18:06 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) 14:18:06 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x40000) (async) fsopen(&(0x7f0000000040)='autofs\x00', 0x0) 14:18:06 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x4000) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) [ 2056.486843][T14833] block nbd1: NBD_DISCONNECT 14:18:06 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, r2}) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:06 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x84840) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) 14:18:06 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80a01) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NLBL_MGMT_C_ADD(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)={0x28, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '+%.+'}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}}, 0x0) (async) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x48004) 14:18:06 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 14:18:06 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) 14:18:06 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) read$fb(0xffffffffffffffff, &(0x7f0000000040)=""/101, 0x65) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x800) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) pidfd_send_signal(r0, 0xb, &(0x7f0000000140)={0x3b, 0x81, 0x80000001}, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000012, 0x40010, r0, 0x5d000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r1, 0x125f, 0xffffffffffffffff) 14:18:06 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_open_dev$media(&(0x7f0000000080), 0x1, 0x84840) (async) r2 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x84840) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) 14:18:06 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, r2}) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:06 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) 14:18:06 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) [ 2056.687977][T14842] block nbd1: NBD_DISCONNECT 14:18:06 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) read$fb(0xffffffffffffffff, &(0x7f0000000040)=""/101, 0x65) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x800) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) pidfd_send_signal(r0, 0xb, &(0x7f0000000140)={0x3b, 0x81, 0x80000001}, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000012, 0x40010, r0, 0x5d000) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r1, 0x125f, 0xffffffffffffffff) 14:18:06 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 14:18:06 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x84840) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) syz_open_dev$media(&(0x7f0000000080), 0x1, 0x84840) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) (async) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) (async) 14:18:06 executing program 0: r0 = add_key(&(0x7f0000000180)='user\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000900)="17", 0x1, 0xfffffffffffffffa) r1 = add_key(&(0x7f0000000880)='big_key\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='+', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r1, 0x0) keyctl$set_timeout(0xf, r1, 0x0) keyctl$negate(0xd, r0, 0x4, r1) keyctl$set_timeout(0xf, r0, 0x2) keyctl$setperm(0x5, r0, 0x0) keyctl$set_timeout(0xf, r0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "9572c552f6babc9317fccaa9cf111ea0ed006727538261c319296628a723655467546f172ff3ab9611b61cb82610a8b0d38a259f97cf9dae3d805ec89778bcdf", 0x11}, 0x48, r0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) ioctl$NBD_SET_SOCK(r2, 0x301, 0xffffffffffffffff) r3 = add_key(&(0x7f0000000880)='big_key\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='+', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x0) keyctl$set_timeout(0xf, r3, 0x0) keyctl$assume_authority(0x10, r3) r4 = fsmount(0xffffffffffffffff, 0x1, 0x4) getsockopt$packet_int(r4, 0x107, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x4) socket$inet_udplite(0x2, 0x2, 0x88) 14:18:06 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80a01) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)={0x28, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '+%.+'}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}}, 0x0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x48004) 14:18:06 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, r2}) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:06 executing program 2: openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000100), 0x200440, 0x47) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, &(0x7f0000000300)={{0x8}, {0x1, 0xf9}, 0x8}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x18}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "1447026de27af025a42a185a0ec7c90d"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x78, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "bb538317cf708586275f"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4000840) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x1d, r1, 0x1, {0x1, 0xf0, 0x3}, 0xff}, 0x18) r6 = fsmount(r2, 0x1, 0x72) process_mrelease(r6, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x6) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r7, 0x40206435, 0x0) sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0xb3b2286397a1ecef}, 0x60044400) 14:18:06 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='-\x00', &(0x7f0000000080)="c863b7564fdcb7563beb8a314b03ad90b5ff3b9741d61b3d2550f1e7c57c30c187e8f3", 0x23) 14:18:06 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) read$fb(0xffffffffffffffff, &(0x7f0000000040)=""/101, 0x65) (async, rerun: 64) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x800) (async, rerun: 64) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) pidfd_send_signal(r0, 0xb, &(0x7f0000000140)={0x3b, 0x81, 0x80000001}, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000012, 0x40010, r0, 0x5d000) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 32) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async, rerun: 32) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r1, 0x125f, 0xffffffffffffffff) 14:18:07 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000080)={0x448, 0x3f3, 0x400, 0x70bd2a, 0x25dfdbfc, {0x10, 0x1, 0x14, [0x3f, 0xffff, 0x8e, 0x1, 0x8001, 0x101, 0xffffffff, 0xffff0000, 0xff, 0x4, 0x8, 0x6, 0x5, 0x4, 0x0, 0x812, 0x0, 0x200, 0x8, 0x2, 0x0, 0xffffffff, 0x2, 0x4262079b, 0x6b606760, 0x4, 0x9, 0x0, 0x40, 0x9, 0x7f, 0x4, 0x81, 0xda, 0x4, 0x7, 0x7ff, 0x0, 0xfffffffe, 0x2, 0xd5a7, 0x2, 0xbd9a, 0x20, 0xffffff9a, 0x1, 0x7, 0xa1c7, 0x7ff, 0x492c48bd, 0xffffffff, 0x0, 0x0, 0x5, 0xfffffc00, 0x101, 0x8000, 0x8, 0x7ff, 0x3, 0x0, 0x3, 0x0, 0x6], [0x5, 0x1, 0x0, 0x9f3, 0x3, 0x7, 0xb88, 0x7, 0x81, 0xbd, 0x4, 0x800, 0x4, 0xf0, 0x81, 0x8001, 0xffffffff, 0x7, 0x6, 0x40, 0xde, 0x4, 0x8, 0x6571abc3, 0x80, 0x7, 0x1, 0x8001, 0x0, 0x2, 0x1, 0x3, 0x4, 0x200, 0x400, 0x8, 0x3, 0x10000, 0x1, 0xe04, 0x17, 0x6f3d, 0x100, 0xfffffffc, 0x3, 0xff, 0x3ff, 0x4, 0x841224e, 0x2, 0x4be0, 0x5, 0xfff, 0x6, 0x6, 0x0, 0x5, 0x128d, 0xffffffff, 0x5, 0x40, 0x8e17, 0x100, 0x7], [0x4, 0x9, 0x6000000, 0x0, 0x3, 0x3, 0x4, 0xff, 0x9, 0x9, 0x2b9, 0x7fff, 0xe223, 0xe6d, 0x1f, 0x8, 0x626, 0x4, 0x6, 0x7, 0x9, 0x3f, 0x0, 0x5, 0x971, 0xfff, 0x800, 0x3, 0x0, 0x6, 0xff, 0x5, 0x400, 0x4, 0x4259, 0x40, 0x5, 0x5, 0x4, 0x8000, 0x2, 0x2, 0x80, 0x2, 0x1d96, 0x3102, 0x77, 0x5, 0x10001, 0xe6b6, 0x7, 0x7, 0xc9f, 0x3, 0x0, 0xff, 0x1ff, 0x400, 0xce1, 0x8, 0x9, 0x0, 0x4, 0x100], [0x40, 0x7f, 0x9, 0x200, 0x9c63, 0xff, 0x2a3, 0x5, 0x400, 0x0, 0x10001, 0x6, 0x7fe0, 0x0, 0xffffffe0, 0xff, 0x6, 0x8, 0x5, 0xfffffeff, 0x5, 0x1, 0x401, 0x0, 0xc0c, 0x5, 0x3, 0x8, 0x1, 0x2, 0x6a2bcb39, 0x0, 0x7fff, 0xfffffc00, 0x3365, 0x2ac1, 0x800, 0x4, 0x4, 0x2, 0x4, 0xb4, 0x6294, 0xef, 0x635, 0x493, 0x1, 0x0, 0x2, 0x2, 0x2c68a18b, 0x4, 0x400, 0x57, 0x7ff, 0x8001, 0x3, 0xffffffff, 0x8, 0x7ff, 0x8, 0x3ff, 0x10001, 0x5d2], 0x26, ['/dev/nbd#\x00', '\\}W\x00', ')\x00', '*-}$\x00', '%@{^,.\x00', '/dev/nbd#\x00']}, ["", "", "", ""]}, 0x448}, 0x1, 0x0, 0x0, 0x24000011}, 0x2400a024) 14:18:07 executing program 0: r0 = add_key(&(0x7f0000000180)='user\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000900)="17", 0x1, 0xfffffffffffffffa) r1 = add_key(&(0x7f0000000880)='big_key\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='+', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r1, 0x0) keyctl$set_timeout(0xf, r1, 0x0) (async) keyctl$negate(0xd, r0, 0x4, r1) (async) keyctl$set_timeout(0xf, r0, 0x2) (async) keyctl$setperm(0x5, r0, 0x0) (async) keyctl$set_timeout(0xf, r0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "9572c552f6babc9317fccaa9cf111ea0ed006727538261c319296628a723655467546f172ff3ab9611b61cb82610a8b0d38a259f97cf9dae3d805ec89778bcdf", 0x11}, 0x48, r0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) ioctl$NBD_SET_SOCK(r2, 0x301, 0xffffffffffffffff) (async) r3 = add_key(&(0x7f0000000880)='big_key\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='+', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x0) (async) keyctl$set_timeout(0xf, r3, 0x0) (async) keyctl$assume_authority(0x10, r3) (async) r4 = fsmount(0xffffffffffffffff, 0x1, 0x4) getsockopt$packet_int(r4, 0x107, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) socket$inet_udplite(0x2, 0x2, 0x88) 14:18:07 executing program 2: openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000100), 0x200440, 0x47) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, &(0x7f0000000300)={{0x8}, {0x1, 0xf9}, 0x8}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x18}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "1447026de27af025a42a185a0ec7c90d"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x10) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x18}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "1447026de27af025a42a185a0ec7c90d"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x78, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "bb538317cf708586275f"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4000840) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x1d, r1, 0x1, {0x1, 0xf0, 0x3}, 0xff}, 0x18) r6 = fsmount(r2, 0x1, 0x72) process_mrelease(r6, 0x0) (async) process_mrelease(r6, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x6) (async) fsmount(0xffffffffffffffff, 0x0, 0x6) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r7, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r7, 0x40206435, 0x0) sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0xb3b2286397a1ecef}, 0x60044400) 14:18:07 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='-\x00', &(0x7f0000000080)="c863b7564fdcb7563beb8a314b03ad90b5ff3b9741d61b3d2550f1e7c57c30c187e8f3", 0x23) 14:18:07 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000080)={0x448, 0x3f3, 0x400, 0x70bd2a, 0x25dfdbfc, {0x10, 0x1, 0x14, [0x3f, 0xffff, 0x8e, 0x1, 0x8001, 0x101, 0xffffffff, 0xffff0000, 0xff, 0x4, 0x8, 0x6, 0x5, 0x4, 0x0, 0x812, 0x0, 0x200, 0x8, 0x2, 0x0, 0xffffffff, 0x2, 0x4262079b, 0x6b606760, 0x4, 0x9, 0x0, 0x40, 0x9, 0x7f, 0x4, 0x81, 0xda, 0x4, 0x7, 0x7ff, 0x0, 0xfffffffe, 0x2, 0xd5a7, 0x2, 0xbd9a, 0x20, 0xffffff9a, 0x1, 0x7, 0xa1c7, 0x7ff, 0x492c48bd, 0xffffffff, 0x0, 0x0, 0x5, 0xfffffc00, 0x101, 0x8000, 0x8, 0x7ff, 0x3, 0x0, 0x3, 0x0, 0x6], [0x5, 0x1, 0x0, 0x9f3, 0x3, 0x7, 0xb88, 0x7, 0x81, 0xbd, 0x4, 0x800, 0x4, 0xf0, 0x81, 0x8001, 0xffffffff, 0x7, 0x6, 0x40, 0xde, 0x4, 0x8, 0x6571abc3, 0x80, 0x7, 0x1, 0x8001, 0x0, 0x2, 0x1, 0x3, 0x4, 0x200, 0x400, 0x8, 0x3, 0x10000, 0x1, 0xe04, 0x17, 0x6f3d, 0x100, 0xfffffffc, 0x3, 0xff, 0x3ff, 0x4, 0x841224e, 0x2, 0x4be0, 0x5, 0xfff, 0x6, 0x6, 0x0, 0x5, 0x128d, 0xffffffff, 0x5, 0x40, 0x8e17, 0x100, 0x7], [0x4, 0x9, 0x6000000, 0x0, 0x3, 0x3, 0x4, 0xff, 0x9, 0x9, 0x2b9, 0x7fff, 0xe223, 0xe6d, 0x1f, 0x8, 0x626, 0x4, 0x6, 0x7, 0x9, 0x3f, 0x0, 0x5, 0x971, 0xfff, 0x800, 0x3, 0x0, 0x6, 0xff, 0x5, 0x400, 0x4, 0x4259, 0x40, 0x5, 0x5, 0x4, 0x8000, 0x2, 0x2, 0x80, 0x2, 0x1d96, 0x3102, 0x77, 0x5, 0x10001, 0xe6b6, 0x7, 0x7, 0xc9f, 0x3, 0x0, 0xff, 0x1ff, 0x400, 0xce1, 0x8, 0x9, 0x0, 0x4, 0x100], [0x40, 0x7f, 0x9, 0x200, 0x9c63, 0xff, 0x2a3, 0x5, 0x400, 0x0, 0x10001, 0x6, 0x7fe0, 0x0, 0xffffffe0, 0xff, 0x6, 0x8, 0x5, 0xfffffeff, 0x5, 0x1, 0x401, 0x0, 0xc0c, 0x5, 0x3, 0x8, 0x1, 0x2, 0x6a2bcb39, 0x0, 0x7fff, 0xfffffc00, 0x3365, 0x2ac1, 0x800, 0x4, 0x4, 0x2, 0x4, 0xb4, 0x6294, 0xef, 0x635, 0x493, 0x1, 0x0, 0x2, 0x2, 0x2c68a18b, 0x4, 0x400, 0x57, 0x7ff, 0x8001, 0x3, 0xffffffff, 0x8, 0x7ff, 0x8, 0x3ff, 0x10001, 0x5d2], 0x26, ['/dev/nbd#\x00', '\\}W\x00', ')\x00', '*-}$\x00', '%@{^,.\x00', '/dev/nbd#\x00']}, ["", "", "", ""]}, 0x448}, 0x1, 0x0, 0x0, 0x24000011}, 0x2400a024) 14:18:07 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(0xffffffffffffffff, 0x4600, &(0x7f00000000c0)) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc}) 14:18:07 executing program 0: r0 = add_key(&(0x7f0000000180)='user\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000900)="17", 0x1, 0xfffffffffffffffa) (async) r1 = add_key(&(0x7f0000000880)='big_key\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='+', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r1, 0x0) (async) keyctl$set_timeout(0xf, r1, 0x0) keyctl$negate(0xd, r0, 0x4, r1) (async) keyctl$set_timeout(0xf, r0, 0x2) (async) keyctl$setperm(0x5, r0, 0x0) keyctl$set_timeout(0xf, r0, 0x0) (async) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "9572c552f6babc9317fccaa9cf111ea0ed006727538261c319296628a723655467546f172ff3ab9611b61cb82610a8b0d38a259f97cf9dae3d805ec89778bcdf", 0x11}, 0x48, r0) (async) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) ioctl$NBD_SET_SOCK(r2, 0x301, 0xffffffffffffffff) (async) r3 = add_key(&(0x7f0000000880)='big_key\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='+', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x0) (async) keyctl$set_timeout(0xf, r3, 0x0) (async) keyctl$assume_authority(0x10, r3) r4 = fsmount(0xffffffffffffffff, 0x1, 0x4) getsockopt$packet_int(r4, 0x107, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x4) socket$inet_udplite(0x2, 0x2, 0x88) 14:18:07 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000001595300180080c0", @ANYRES32=r0, @ANYBLOB="06000000000000002e2f66696c653000"]) ioctl$NBD_SET_SOCK(r1, 0x125f, r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) 14:18:07 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000080)={0x448, 0x3f3, 0x400, 0x70bd2a, 0x25dfdbfc, {0x10, 0x1, 0x14, [0x3f, 0xffff, 0x8e, 0x1, 0x8001, 0x101, 0xffffffff, 0xffff0000, 0xff, 0x4, 0x8, 0x6, 0x5, 0x4, 0x0, 0x812, 0x0, 0x200, 0x8, 0x2, 0x0, 0xffffffff, 0x2, 0x4262079b, 0x6b606760, 0x4, 0x9, 0x0, 0x40, 0x9, 0x7f, 0x4, 0x81, 0xda, 0x4, 0x7, 0x7ff, 0x0, 0xfffffffe, 0x2, 0xd5a7, 0x2, 0xbd9a, 0x20, 0xffffff9a, 0x1, 0x7, 0xa1c7, 0x7ff, 0x492c48bd, 0xffffffff, 0x0, 0x0, 0x5, 0xfffffc00, 0x101, 0x8000, 0x8, 0x7ff, 0x3, 0x0, 0x3, 0x0, 0x6], [0x5, 0x1, 0x0, 0x9f3, 0x3, 0x7, 0xb88, 0x7, 0x81, 0xbd, 0x4, 0x800, 0x4, 0xf0, 0x81, 0x8001, 0xffffffff, 0x7, 0x6, 0x40, 0xde, 0x4, 0x8, 0x6571abc3, 0x80, 0x7, 0x1, 0x8001, 0x0, 0x2, 0x1, 0x3, 0x4, 0x200, 0x400, 0x8, 0x3, 0x10000, 0x1, 0xe04, 0x17, 0x6f3d, 0x100, 0xfffffffc, 0x3, 0xff, 0x3ff, 0x4, 0x841224e, 0x2, 0x4be0, 0x5, 0xfff, 0x6, 0x6, 0x0, 0x5, 0x128d, 0xffffffff, 0x5, 0x40, 0x8e17, 0x100, 0x7], [0x4, 0x9, 0x6000000, 0x0, 0x3, 0x3, 0x4, 0xff, 0x9, 0x9, 0x2b9, 0x7fff, 0xe223, 0xe6d, 0x1f, 0x8, 0x626, 0x4, 0x6, 0x7, 0x9, 0x3f, 0x0, 0x5, 0x971, 0xfff, 0x800, 0x3, 0x0, 0x6, 0xff, 0x5, 0x400, 0x4, 0x4259, 0x40, 0x5, 0x5, 0x4, 0x8000, 0x2, 0x2, 0x80, 0x2, 0x1d96, 0x3102, 0x77, 0x5, 0x10001, 0xe6b6, 0x7, 0x7, 0xc9f, 0x3, 0x0, 0xff, 0x1ff, 0x400, 0xce1, 0x8, 0x9, 0x0, 0x4, 0x100], [0x40, 0x7f, 0x9, 0x200, 0x9c63, 0xff, 0x2a3, 0x5, 0x400, 0x0, 0x10001, 0x6, 0x7fe0, 0x0, 0xffffffe0, 0xff, 0x6, 0x8, 0x5, 0xfffffeff, 0x5, 0x1, 0x401, 0x0, 0xc0c, 0x5, 0x3, 0x8, 0x1, 0x2, 0x6a2bcb39, 0x0, 0x7fff, 0xfffffc00, 0x3365, 0x2ac1, 0x800, 0x4, 0x4, 0x2, 0x4, 0xb4, 0x6294, 0xef, 0x635, 0x493, 0x1, 0x0, 0x2, 0x2, 0x2c68a18b, 0x4, 0x400, 0x57, 0x7ff, 0x8001, 0x3, 0xffffffff, 0x8, 0x7ff, 0x8, 0x3ff, 0x10001, 0x5d2], 0x26, ['/dev/nbd#\x00', '\\}W\x00', ')\x00', '*-}$\x00', '%@{^,.\x00', '/dev/nbd#\x00']}, ["", "", "", ""]}, 0x448}, 0x1, 0x0, 0x0, 0x24000011}, 0x2400a024) 14:18:07 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='-\x00', &(0x7f0000000080)="c863b7564fdcb7563beb8a314b03ad90b5ff3b9741d61b3d2550f1e7c57c30c187e8f3", 0x23) (async) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='-\x00', &(0x7f0000000080)="c863b7564fdcb7563beb8a314b03ad90b5ff3b9741d61b3d2550f1e7c57c30c187e8f3", 0x23) 14:18:07 executing program 2: openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000100), 0x200440, 0x47) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, &(0x7f0000000300)={{0x8}, {0x1, 0xf9}, 0x8}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x18}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "1447026de27af025a42a185a0ec7c90d"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x78, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "bb538317cf708586275f"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4000840) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x1d, r1, 0x1, {0x1, 0xf0, 0x3}, 0xff}, 0x18) r6 = fsmount(r2, 0x1, 0x72) process_mrelease(r6, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x6) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r7, 0x40206435, 0x0) sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0xb3b2286397a1ecef}, 0x60044400) openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000100), 0x200440, 0x47) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) (async) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, &(0x7f0000000300)={{0x8}, {0x1, 0xf9}, 0x8}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x18}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "1447026de27af025a42a185a0ec7c90d"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x10) (async) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x78, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "bb538317cf708586275f"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4000840) (async) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x1d, r1, 0x1, {0x1, 0xf0, 0x3}, 0xff}, 0x18) (async) fsmount(r2, 0x1, 0x72) (async) process_mrelease(r6, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x6) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r7, 0x40206435, 0x0) (async) sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0xb3b2286397a1ecef}, 0x60044400) (async) 14:18:07 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(0xffffffffffffffff, 0x4600, &(0x7f00000000c0)) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$FBIOGET_VSCREENINFO(0xffffffffffffffff, 0x4600, &(0x7f00000000c0)) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc}) (async) 14:18:07 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000001595300180080c0", @ANYRES32=r0, @ANYBLOB="06000000000000002e2f66696c653000"]) ioctl$NBD_SET_SOCK(r1, 0x125f, r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000001595300180080c0", @ANYRES32=r0, @ANYBLOB="06000000000000002e2f66696c653000"]) (async) ioctl$NBD_SET_SOCK(r1, 0x125f, r1) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) (async) 14:18:07 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @random="5df79a07e6d3"}, 0x10) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 14:18:07 executing program 4: ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000240)={'\x00', 0xfff, 0x0, 0x6}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) getsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000140)=""/129, &(0x7f0000000200)=0x81) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x8aac, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x49}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) write$tcp_congestion(r0, &(0x7f0000000300)='westwood\x00', 0x9) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f00000002c0)={{0xa20, 0xffff}, {0x2, 0x4}, 0x4}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x125e, 0xffffffffffffffff) pidfd_getfd(r0, r0, 0x0) 14:18:07 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) getsockopt$packet_int(r1, 0x107, 0x12, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000280)={0x7, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x4, 0x8}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1110000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x8001) sendto$packet(r0, &(0x7f0000000040)="96b156b22cebc0d4c29bf5b24230b1c4d5eba9a581afc1886e1248bd24210d818862c205792a10eb4f25924544b7e3bc961446e62fc3e4b81e69af605aa4756332633c58d37e5cde4c20cd9db644180fc80eae9d22826e15e48abbf5645fb14c75ee5a9f225fc29f40b3", 0x6a, 0x8004, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x1, 0x5, 0x6, @local}, 0x14) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0x125d, 0xffffffffffffffff) 14:18:07 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(0xffffffffffffffff, 0x4600, &(0x7f00000000c0)) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc}) 14:18:07 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0) pidfd_getfd(0xffffffffffffffff, r1, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000140)={0x7fff, 0x8, &(0x7f0000000040)=[0x7c8, 0xfff, 0xfff8, 0x0, 0x4, 0x4, 0x401, 0x1ff], &(0x7f0000000080)=[0x260b, 0x8, 0xffff], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0xfff, 0x1]}) 14:18:07 executing program 4: ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000240)={'\x00', 0xfff, 0x0, 0x6}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async) getsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000140)=""/129, &(0x7f0000000200)=0x81) (async) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x8aac, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x49}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) write$tcp_congestion(r0, &(0x7f0000000300)='westwood\x00', 0x9) (async) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f00000002c0)={{0xa20, 0xffff}, {0x2, 0x4}, 0x4}) (async) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x125e, 0xffffffffffffffff) pidfd_getfd(r0, r0, 0x0) 14:18:07 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000001595300180080c0", @ANYRES32=r0, @ANYBLOB="06000000000000002e2f66696c653000"]) (async) ioctl$NBD_SET_SOCK(r1, 0x125f, r1) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) 14:18:07 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @random="5df79a07e6d3"}, 0x10) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 14:18:07 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0) pidfd_getfd(0xffffffffffffffff, r1, 0x0) (async) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000140)={0x7fff, 0x8, &(0x7f0000000040)=[0x7c8, 0xfff, 0xfff8, 0x0, 0x4, 0x4, 0x401, 0x1ff], &(0x7f0000000080)=[0x260b, 0x8, 0xffff], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0xfff, 0x1]}) 14:18:07 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x81, 0x8840) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x6, 0x4}) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:07 executing program 4: ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000240)={'\x00', 0xfff, 0x0, 0x6}) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async) getsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000140)=""/129, &(0x7f0000000200)=0x81) (async, rerun: 64) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x8aac, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x49}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) (rerun: 64) write$tcp_congestion(r0, &(0x7f0000000300)='westwood\x00', 0x9) (async, rerun: 32) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f00000002c0)={{0xa20, 0xffff}, {0x2, 0x4}, 0x4}) (async, rerun: 32) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x125e, 0xffffffffffffffff) pidfd_getfd(r0, r0, 0x0) 14:18:07 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) getsockopt$packet_int(r1, 0x107, 0x12, &(0x7f00000003c0), &(0x7f0000000400)=0x4) (async) getsockopt$packet_int(r1, 0x107, 0x12, &(0x7f00000003c0), &(0x7f0000000400)=0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000280)={0x7, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x4, 0x8}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1110000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x8001) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1110000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x8001) sendto$packet(r0, &(0x7f0000000040)="96b156b22cebc0d4c29bf5b24230b1c4d5eba9a581afc1886e1248bd24210d818862c205792a10eb4f25924544b7e3bc961446e62fc3e4b81e69af605aa4756332633c58d37e5cde4c20cd9db644180fc80eae9d22826e15e48abbf5645fb14c75ee5a9f225fc29f40b3", 0x6a, 0x8004, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x1, 0x5, 0x6, @local}, 0x14) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0x125d, 0xffffffffffffffff) 14:18:07 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x72) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:07 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @random="5df79a07e6d3"}, 0x10) (async) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 14:18:07 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x81, 0x8840) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x6, 0x4}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x6, 0x4}) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:07 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0) pidfd_getfd(0xffffffffffffffff, r1, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000140)={0x7fff, 0x8, &(0x7f0000000040)=[0x7c8, 0xfff, 0xfff8, 0x0, 0x4, 0x4, 0x401, 0x1ff], &(0x7f0000000080)=[0x260b, 0x8, 0xffff], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0xfff, 0x1]}) 14:18:07 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x72) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:07 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, 0x28}}, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x101}}, './file0\x00'}) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000001c0)={0x448, 0x3f4, 0x100, 0x70bd27, 0x25dfdbfd, {0x10, 0x2, 0x32, [0x8, 0x800, 0x5, 0xffffffff, 0x81a101c, 0x80, 0x80000000, 0xffff, 0x1, 0x7fffffff, 0x40, 0x7, 0x20, 0x3, 0x2, 0x4, 0x7, 0x101, 0x3f, 0x7f, 0x7fffffff, 0x5, 0x4, 0x32, 0x1f, 0x80000001, 0xffff8000, 0x20, 0x9, 0x9, 0x48f, 0x1, 0x100, 0x3, 0x7, 0x0, 0x3f, 0x5, 0x4, 0xff4, 0x7, 0x9, 0x7, 0x2, 0x80000000, 0x68e, 0x8, 0xfff, 0x400, 0x1, 0x6, 0x5e0b82cb, 0x349b509e, 0x4, 0x1, 0x200, 0x5, 0x401, 0x0, 0x3, 0x5, 0x20, 0x100, 0xfffffff9], [0x10001, 0x14d, 0x6, 0xe85, 0x9, 0x6, 0x400, 0xfff, 0x9, 0xd6d0, 0x8001, 0xffff, 0x7, 0x0, 0x0, 0x800, 0x5, 0x9f5, 0x9, 0xd7, 0xce, 0x5, 0x8, 0xffffffff, 0x56db, 0x401, 0x101, 0x80, 0xf4, 0xf5a, 0xffffffff, 0x7, 0x5, 0x6, 0x1, 0x20, 0xa0, 0xe9, 0x7, 0x200, 0x1, 0xf6b2, 0x9, 0x100, 0x7f, 0x800, 0xc0000000, 0x4, 0xfff, 0x7fff, 0x8, 0x2, 0x7fff, 0x10000, 0xd9bd, 0x5, 0x0, 0xfffff000, 0x8, 0xfffffff9, 0x0, 0x20, 0x1ff, 0x2], [0xfffffffb, 0x3ff00000, 0x9, 0x3, 0x14ff, 0xb5, 0x10000, 0x20, 0x24000000, 0x9, 0x5, 0x234, 0x3, 0x1da153ae, 0x5, 0x7ff, 0x80, 0xef5, 0x3, 0x101, 0x1, 0x316, 0x101, 0x1, 0x8000, 0x3, 0x10001, 0xe11, 0xfffffffe, 0x6, 0x200, 0x8, 0x81, 0x7fffffff, 0x3, 0x101, 0x583a, 0x2, 0x5, 0xffffffff, 0x100, 0x3, 0x100, 0x7, 0x65, 0xdeeb, 0x8, 0xffff, 0x0, 0x3, 0xfcc, 0x14, 0x9, 0x3, 0x1000, 0xa7, 0x7, 0xf120, 0x1, 0x6, 0x0, 0x6, 0x100, 0x2], [0x9, 0x1f, 0x8, 0x9, 0x1ff, 0xd1b, 0x8, 0x6, 0x101, 0x2, 0x1, 0x6, 0x305, 0x7, 0xfffffffc, 0x4, 0x33, 0xfffffffc, 0x20000000, 0x8001, 0x1ff, 0x10000, 0x3f, 0x7, 0x3, 0x6, 0x3, 0x2, 0x3ff, 0x81, 0x14c, 0x5, 0x99d, 0x7, 0x953, 0xffff8001, 0x401, 0x4, 0x2, 0x4, 0x0, 0x4, 0x3, 0x4, 0x3ff, 0x3f, 0xffff, 0x1, 0xffff, 0x7fff, 0x4, 0x0, 0x0, 0x7fff, 0xffff573f, 0x982, 0xfffff8ca, 0x5, 0x1, 0x5, 0x5, 0x8000, 0x6, 0x5], 0x27, ['+$-\x00', '/dev/nbd#\x00', '/dev/nbd#\x00', '[[\\]\x00', '/dev/nbd#\x00']}, [""]}, 0x448}, 0x1, 0x0, 0x0, 0x42c286ec482cc977}, 0x20004801) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 14:18:07 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) getsockopt$packet_int(r1, 0x107, 0x12, &(0x7f00000003c0), &(0x7f0000000400)=0x4) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) (async) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000280)={0x7, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x4, 0x8}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1110000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x8001) (async) sendto$packet(r0, &(0x7f0000000040)="96b156b22cebc0d4c29bf5b24230b1c4d5eba9a581afc1886e1248bd24210d818862c205792a10eb4f25924544b7e3bc961446e62fc3e4b81e69af605aa4756332633c58d37e5cde4c20cd9db644180fc80eae9d22826e15e48abbf5645fb14c75ee5a9f225fc29f40b3", 0x6a, 0x8004, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x1, 0x5, 0x6, @local}, 0x14) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0x125d, 0xffffffffffffffff) 14:18:07 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)=')@\x00', 0x0, r0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x1c}}, './file0\x00'}) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x240408c4}, 0x40880) ioctl$NBD_SET_SOCK(r2, 0x125e, 0xffffffffffffffff) 14:18:07 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x81, 0x8840) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x6, 0x4}) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:07 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x72) (async) r1 = fsmount(0xffffffffffffffff, 0x1, 0x72) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:07 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)=')@\x00', 0x0, r0) (async, rerun: 64) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x1c}}, './file0\x00'}) (async) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x240408c4}, 0x40880) (async) ioctl$NBD_SET_SOCK(r2, 0x125e, 0xffffffffffffffff) 14:18:07 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, 0x28}}, 0x0) (async) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, 0x28}}, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x101}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x101}}, './file0\x00'}) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000001c0)={0x448, 0x3f4, 0x100, 0x70bd27, 0x25dfdbfd, {0x10, 0x2, 0x32, [0x8, 0x800, 0x5, 0xffffffff, 0x81a101c, 0x80, 0x80000000, 0xffff, 0x1, 0x7fffffff, 0x40, 0x7, 0x20, 0x3, 0x2, 0x4, 0x7, 0x101, 0x3f, 0x7f, 0x7fffffff, 0x5, 0x4, 0x32, 0x1f, 0x80000001, 0xffff8000, 0x20, 0x9, 0x9, 0x48f, 0x1, 0x100, 0x3, 0x7, 0x0, 0x3f, 0x5, 0x4, 0xff4, 0x7, 0x9, 0x7, 0x2, 0x80000000, 0x68e, 0x8, 0xfff, 0x400, 0x1, 0x6, 0x5e0b82cb, 0x349b509e, 0x4, 0x1, 0x200, 0x5, 0x401, 0x0, 0x3, 0x5, 0x20, 0x100, 0xfffffff9], [0x10001, 0x14d, 0x6, 0xe85, 0x9, 0x6, 0x400, 0xfff, 0x9, 0xd6d0, 0x8001, 0xffff, 0x7, 0x0, 0x0, 0x800, 0x5, 0x9f5, 0x9, 0xd7, 0xce, 0x5, 0x8, 0xffffffff, 0x56db, 0x401, 0x101, 0x80, 0xf4, 0xf5a, 0xffffffff, 0x7, 0x5, 0x6, 0x1, 0x20, 0xa0, 0xe9, 0x7, 0x200, 0x1, 0xf6b2, 0x9, 0x100, 0x7f, 0x800, 0xc0000000, 0x4, 0xfff, 0x7fff, 0x8, 0x2, 0x7fff, 0x10000, 0xd9bd, 0x5, 0x0, 0xfffff000, 0x8, 0xfffffff9, 0x0, 0x20, 0x1ff, 0x2], [0xfffffffb, 0x3ff00000, 0x9, 0x3, 0x14ff, 0xb5, 0x10000, 0x20, 0x24000000, 0x9, 0x5, 0x234, 0x3, 0x1da153ae, 0x5, 0x7ff, 0x80, 0xef5, 0x3, 0x101, 0x1, 0x316, 0x101, 0x1, 0x8000, 0x3, 0x10001, 0xe11, 0xfffffffe, 0x6, 0x200, 0x8, 0x81, 0x7fffffff, 0x3, 0x101, 0x583a, 0x2, 0x5, 0xffffffff, 0x100, 0x3, 0x100, 0x7, 0x65, 0xdeeb, 0x8, 0xffff, 0x0, 0x3, 0xfcc, 0x14, 0x9, 0x3, 0x1000, 0xa7, 0x7, 0xf120, 0x1, 0x6, 0x0, 0x6, 0x100, 0x2], [0x9, 0x1f, 0x8, 0x9, 0x1ff, 0xd1b, 0x8, 0x6, 0x101, 0x2, 0x1, 0x6, 0x305, 0x7, 0xfffffffc, 0x4, 0x33, 0xfffffffc, 0x20000000, 0x8001, 0x1ff, 0x10000, 0x3f, 0x7, 0x3, 0x6, 0x3, 0x2, 0x3ff, 0x81, 0x14c, 0x5, 0x99d, 0x7, 0x953, 0xffff8001, 0x401, 0x4, 0x2, 0x4, 0x0, 0x4, 0x3, 0x4, 0x3ff, 0x3f, 0xffff, 0x1, 0xffff, 0x7fff, 0x4, 0x0, 0x0, 0x7fff, 0xffff573f, 0x982, 0xfffff8ca, 0x5, 0x1, 0x5, 0x5, 0x8000, 0x6, 0x5], 0x27, ['+$-\x00', '/dev/nbd#\x00', '/dev/nbd#\x00', '[[\\]\x00', '/dev/nbd#\x00']}, [""]}, 0x448}, 0x1, 0x0, 0x0, 0x42c286ec482cc977}, 0x20004801) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 14:18:07 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x68, 0x0, &(0x7f00000001c0)=[@acquire_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0xa, 0x1, 0x29}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x1000}, @release={0x40046306, 0x3}], 0x97, 0x0, &(0x7f0000000240)="db9a6067a3e7ca671ce616c8435006b5935e5aca5cfbfacce57f7be5a17f68ae7edbe98c71e43d3ad89944fa4abbdb341677ccab6f0181550a294dd68f8838df2dceb5f253a7655ffd156823948affd756e30090d455e060d256cc4e0dd1c353d1dba118903f594c674f1c3aa91946df2268ca240dbcfd969cda66bfc73fb736ee8dce4278f46c6b0fec53515f5f122e36044978d630c9"}) getpeername$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) 14:18:07 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x10400) syz_open_dev$ndb(&(0x7f0000001040), 0x0, 0x484202) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/4096, 0x1000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000011c0)={&(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001100)=[0x0, 0x0, 0x0], &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001180)=[0x0], 0x7, 0x3, 0x7, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000001200)={r2}) 14:18:07 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x200) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x1260, r2) 14:18:08 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x10100) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:08 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, 0x28}}, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x101}}, './file0\x00'}) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000001c0)={0x448, 0x3f4, 0x100, 0x70bd27, 0x25dfdbfd, {0x10, 0x2, 0x32, [0x8, 0x800, 0x5, 0xffffffff, 0x81a101c, 0x80, 0x80000000, 0xffff, 0x1, 0x7fffffff, 0x40, 0x7, 0x20, 0x3, 0x2, 0x4, 0x7, 0x101, 0x3f, 0x7f, 0x7fffffff, 0x5, 0x4, 0x32, 0x1f, 0x80000001, 0xffff8000, 0x20, 0x9, 0x9, 0x48f, 0x1, 0x100, 0x3, 0x7, 0x0, 0x3f, 0x5, 0x4, 0xff4, 0x7, 0x9, 0x7, 0x2, 0x80000000, 0x68e, 0x8, 0xfff, 0x400, 0x1, 0x6, 0x5e0b82cb, 0x349b509e, 0x4, 0x1, 0x200, 0x5, 0x401, 0x0, 0x3, 0x5, 0x20, 0x100, 0xfffffff9], [0x10001, 0x14d, 0x6, 0xe85, 0x9, 0x6, 0x400, 0xfff, 0x9, 0xd6d0, 0x8001, 0xffff, 0x7, 0x0, 0x0, 0x800, 0x5, 0x9f5, 0x9, 0xd7, 0xce, 0x5, 0x8, 0xffffffff, 0x56db, 0x401, 0x101, 0x80, 0xf4, 0xf5a, 0xffffffff, 0x7, 0x5, 0x6, 0x1, 0x20, 0xa0, 0xe9, 0x7, 0x200, 0x1, 0xf6b2, 0x9, 0x100, 0x7f, 0x800, 0xc0000000, 0x4, 0xfff, 0x7fff, 0x8, 0x2, 0x7fff, 0x10000, 0xd9bd, 0x5, 0x0, 0xfffff000, 0x8, 0xfffffff9, 0x0, 0x20, 0x1ff, 0x2], [0xfffffffb, 0x3ff00000, 0x9, 0x3, 0x14ff, 0xb5, 0x10000, 0x20, 0x24000000, 0x9, 0x5, 0x234, 0x3, 0x1da153ae, 0x5, 0x7ff, 0x80, 0xef5, 0x3, 0x101, 0x1, 0x316, 0x101, 0x1, 0x8000, 0x3, 0x10001, 0xe11, 0xfffffffe, 0x6, 0x200, 0x8, 0x81, 0x7fffffff, 0x3, 0x101, 0x583a, 0x2, 0x5, 0xffffffff, 0x100, 0x3, 0x100, 0x7, 0x65, 0xdeeb, 0x8, 0xffff, 0x0, 0x3, 0xfcc, 0x14, 0x9, 0x3, 0x1000, 0xa7, 0x7, 0xf120, 0x1, 0x6, 0x0, 0x6, 0x100, 0x2], [0x9, 0x1f, 0x8, 0x9, 0x1ff, 0xd1b, 0x8, 0x6, 0x101, 0x2, 0x1, 0x6, 0x305, 0x7, 0xfffffffc, 0x4, 0x33, 0xfffffffc, 0x20000000, 0x8001, 0x1ff, 0x10000, 0x3f, 0x7, 0x3, 0x6, 0x3, 0x2, 0x3ff, 0x81, 0x14c, 0x5, 0x99d, 0x7, 0x953, 0xffff8001, 0x401, 0x4, 0x2, 0x4, 0x0, 0x4, 0x3, 0x4, 0x3ff, 0x3f, 0xffff, 0x1, 0xffff, 0x7fff, 0x4, 0x0, 0x0, 0x7fff, 0xffff573f, 0x982, 0xfffff8ca, 0x5, 0x1, 0x5, 0x5, 0x8000, 0x6, 0x5], 0x27, ['+$-\x00', '/dev/nbd#\x00', '/dev/nbd#\x00', '[[\\]\x00', '/dev/nbd#\x00']}, [""]}, 0x448}, 0x1, 0x0, 0x0, 0x42c286ec482cc977}, 0x20004801) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, 0x28}}, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x101}}, './file0\x00'}) (async) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000001c0)={0x448, 0x3f4, 0x100, 0x70bd27, 0x25dfdbfd, {0x10, 0x2, 0x32, [0x8, 0x800, 0x5, 0xffffffff, 0x81a101c, 0x80, 0x80000000, 0xffff, 0x1, 0x7fffffff, 0x40, 0x7, 0x20, 0x3, 0x2, 0x4, 0x7, 0x101, 0x3f, 0x7f, 0x7fffffff, 0x5, 0x4, 0x32, 0x1f, 0x80000001, 0xffff8000, 0x20, 0x9, 0x9, 0x48f, 0x1, 0x100, 0x3, 0x7, 0x0, 0x3f, 0x5, 0x4, 0xff4, 0x7, 0x9, 0x7, 0x2, 0x80000000, 0x68e, 0x8, 0xfff, 0x400, 0x1, 0x6, 0x5e0b82cb, 0x349b509e, 0x4, 0x1, 0x200, 0x5, 0x401, 0x0, 0x3, 0x5, 0x20, 0x100, 0xfffffff9], [0x10001, 0x14d, 0x6, 0xe85, 0x9, 0x6, 0x400, 0xfff, 0x9, 0xd6d0, 0x8001, 0xffff, 0x7, 0x0, 0x0, 0x800, 0x5, 0x9f5, 0x9, 0xd7, 0xce, 0x5, 0x8, 0xffffffff, 0x56db, 0x401, 0x101, 0x80, 0xf4, 0xf5a, 0xffffffff, 0x7, 0x5, 0x6, 0x1, 0x20, 0xa0, 0xe9, 0x7, 0x200, 0x1, 0xf6b2, 0x9, 0x100, 0x7f, 0x800, 0xc0000000, 0x4, 0xfff, 0x7fff, 0x8, 0x2, 0x7fff, 0x10000, 0xd9bd, 0x5, 0x0, 0xfffff000, 0x8, 0xfffffff9, 0x0, 0x20, 0x1ff, 0x2], [0xfffffffb, 0x3ff00000, 0x9, 0x3, 0x14ff, 0xb5, 0x10000, 0x20, 0x24000000, 0x9, 0x5, 0x234, 0x3, 0x1da153ae, 0x5, 0x7ff, 0x80, 0xef5, 0x3, 0x101, 0x1, 0x316, 0x101, 0x1, 0x8000, 0x3, 0x10001, 0xe11, 0xfffffffe, 0x6, 0x200, 0x8, 0x81, 0x7fffffff, 0x3, 0x101, 0x583a, 0x2, 0x5, 0xffffffff, 0x100, 0x3, 0x100, 0x7, 0x65, 0xdeeb, 0x8, 0xffff, 0x0, 0x3, 0xfcc, 0x14, 0x9, 0x3, 0x1000, 0xa7, 0x7, 0xf120, 0x1, 0x6, 0x0, 0x6, 0x100, 0x2], [0x9, 0x1f, 0x8, 0x9, 0x1ff, 0xd1b, 0x8, 0x6, 0x101, 0x2, 0x1, 0x6, 0x305, 0x7, 0xfffffffc, 0x4, 0x33, 0xfffffffc, 0x20000000, 0x8001, 0x1ff, 0x10000, 0x3f, 0x7, 0x3, 0x6, 0x3, 0x2, 0x3ff, 0x81, 0x14c, 0x5, 0x99d, 0x7, 0x953, 0xffff8001, 0x401, 0x4, 0x2, 0x4, 0x0, 0x4, 0x3, 0x4, 0x3ff, 0x3f, 0xffff, 0x1, 0xffff, 0x7fff, 0x4, 0x0, 0x0, 0x7fff, 0xffff573f, 0x982, 0xfffff8ca, 0x5, 0x1, 0x5, 0x5, 0x8000, 0x6, 0x5], 0x27, ['+$-\x00', '/dev/nbd#\x00', '/dev/nbd#\x00', '[[\\]\x00', '/dev/nbd#\x00']}, [""]}, 0x448}, 0x1, 0x0, 0x0, 0x42c286ec482cc977}, 0x20004801) (async) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) 14:18:08 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)=')@\x00', 0x0, r0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x1c}}, './file0\x00'}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x240408c4}, 0x40880) (async) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x240408c4}, 0x40880) ioctl$NBD_SET_SOCK(r2, 0x125e, 0xffffffffffffffff) 14:18:08 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x10400) syz_open_dev$ndb(&(0x7f0000001040), 0x0, 0x484202) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/4096, 0x1000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000011c0)={&(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001100)=[0x0, 0x0, 0x0], &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001180)=[0x0], 0x7, 0x3, 0x7, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000001200)={r2}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) (async) syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x10400) (async) syz_open_dev$ndb(&(0x7f0000001040), 0x0, 0x484202) (async) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/4096, 0x1000) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000011c0)={&(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001100)=[0x0, 0x0, 0x0], &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001180)=[0x0], 0x7, 0x3, 0x7, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000001200)={r2}) (async) 14:18:08 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x68, 0x0, &(0x7f00000001c0)=[@acquire_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0xa, 0x1, 0x29}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x1000}, @release={0x40046306, 0x3}], 0x97, 0x0, &(0x7f0000000240)="db9a6067a3e7ca671ce616c8435006b5935e5aca5cfbfacce57f7be5a17f68ae7edbe98c71e43d3ad89944fa4abbdb341677ccab6f0181550a294dd68f8838df2dceb5f253a7655ffd156823948affd756e30090d455e060d256cc4e0dd1c353d1dba118903f594c674f1c3aa91946df2268ca240dbcfd969cda66bfc73fb736ee8dce4278f46c6b0fec53515f5f122e36044978d630c9"}) getpeername$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) 14:18:08 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) inotify_init() (async) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x200) (async) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x200) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x1260, r2) 14:18:08 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x10100) socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 32) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) (rerun: 32) 14:18:08 executing program 0: ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000040)=""/22) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 14:18:08 executing program 4: sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x3f9, 0x1, 0x70bd25, 0x25dfdbfd, {0x1, 0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x2000c800) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:08 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x10400) (async, rerun: 32) syz_open_dev$ndb(&(0x7f0000001040), 0x0, 0x484202) (async, rerun: 32) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/4096, 0x1000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000011c0)={&(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001100)=[0x0, 0x0, 0x0], &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001180)=[0x0], 0x7, 0x3, 0x7, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000001200)={r2}) 14:18:08 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x200) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async, rerun: 32) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x1260, r2) 14:18:08 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x68, 0x0, &(0x7f00000001c0)=[@acquire_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0xa, 0x1, 0x29}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x1000}, @release={0x40046306, 0x3}], 0x97, 0x0, &(0x7f0000000240)="db9a6067a3e7ca671ce616c8435006b5935e5aca5cfbfacce57f7be5a17f68ae7edbe98c71e43d3ad89944fa4abbdb341677ccab6f0181550a294dd68f8838df2dceb5f253a7655ffd156823948affd756e30090d455e060d256cc4e0dd1c353d1dba118903f594c674f1c3aa91946df2268ca240dbcfd969cda66bfc73fb736ee8dce4278f46c6b0fec53515f5f122e36044978d630c9"}) getpeername$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x68, 0x0, &(0x7f00000001c0)=[@acquire_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0xa, 0x1, 0x29}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x1000}, @release={0x40046306, 0x3}], 0x97, 0x0, &(0x7f0000000240)="db9a6067a3e7ca671ce616c8435006b5935e5aca5cfbfacce57f7be5a17f68ae7edbe98c71e43d3ad89944fa4abbdb341677ccab6f0181550a294dd68f8838df2dceb5f253a7655ffd156823948affd756e30090d455e060d256cc4e0dd1c353d1dba118903f594c674f1c3aa91946df2268ca240dbcfd969cda66bfc73fb736ee8dce4278f46c6b0fec53515f5f122e36044978d630c9"}) (async) getpeername$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) 14:18:08 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x10100) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x10100) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:08 executing program 0: ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000040)=""/22) (async) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000040)=""/22) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 14:18:08 executing program 4: sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x3f9, 0x1, 0x70bd25, 0x25dfdbfd, {0x1, 0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x2000c800) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:08 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x4000) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) 14:18:08 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40100808}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="a400bfe66fe866f6facc0000", @ANYRES16=r1, @ANYBLOB="100027bd7000fedbdf250200000014000200736974300000000000000000000000000900030073797a32000000000900010073797a30000000000900010073797a32000000000900010073797a32000000000900010073797a31000000000900010073797a310000000014000200626f6e645f736c6176655f31000000000900030073797a32000000001400020064756d6d793000"/158], 0xa4}, 0x1, 0x0, 0x0, 0x4004448}, 0x4000000) r2 = fsmount(0xffffffffffffffff, 0x0, 0x8) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000200)={0x6, "5f48196692fd963a22a8701fcdc39403feff1a0e0f0d295d8c60c0991e4c6567"}) 14:18:08 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)=ANY=[@ANYBLOB="000001000000000000000000", @ANYRES32=r1, @ANYBLOB="000000696c6530010000000000000000"]) fsopen(&(0x7f0000000000)='romfs\x00', 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB="010100000000000018020000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0/file0\x00']) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) fsmount(0xffffffffffffffff, 0x0, 0x4) 14:18:08 executing program 1: sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x108, 0x70bd2a, 0x4, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000084}, 0x48001) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:08 executing program 4: sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x3f9, 0x1, 0x70bd25, 0x25dfdbfd, {0x1, 0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x2000c800) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:08 executing program 0: ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000040)=""/22) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 14:18:08 executing program 1: sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x108, 0x70bd2a, 0x4, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000084}, 0x48001) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:08 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)=ANY=[@ANYBLOB="000001000000000000000000", @ANYRES32=r1, @ANYBLOB="000000696c6530010000000000000000"]) fsopen(&(0x7f0000000000)='romfs\x00', 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB="010100000000000018020000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0/file0\x00']) (async) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) fsmount(0xffffffffffffffff, 0x0, 0x4) 14:18:08 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40100808}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="a400bfe66fe866f6facc0000", @ANYRES16=r1, @ANYBLOB="100027bd7000fedbdf250200000014000200736974300000000000000000000000000900030073797a32000000000900010073797a30000000000900010073797a32000000000900010073797a32000000000900010073797a31000000000900010073797a310000000014000200626f6e645f736c6176655f31000000000900030073797a32000000001400020064756d6d793000"/158], 0xa4}, 0x1, 0x0, 0x0, 0x4004448}, 0x4000000) r2 = fsmount(0xffffffffffffffff, 0x0, 0x8) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000200)={0x6, "5f48196692fd963a22a8701fcdc39403feff1a0e0f0d295d8c60c0991e4c6567"}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40100808}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="a400bfe66fe866f6facc0000", @ANYRES16=r1, @ANYBLOB="100027bd7000fedbdf250200000014000200736974300000000000000000000000000900030073797a32000000000900010073797a30000000000900010073797a32000000000900010073797a32000000000900010073797a31000000000900010073797a310000000014000200626f6e645f736c6176655f31000000000900030073797a32000000001400020064756d6d793000"/158], 0xa4}, 0x1, 0x0, 0x0, 0x4004448}, 0x4000000) (async) fsmount(0xffffffffffffffff, 0x0, 0x8) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000200)={0x6, "5f48196692fd963a22a8701fcdc39403feff1a0e0f0d295d8c60c0991e4c6567"}) (async) 14:18:08 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x4000) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) 14:18:08 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 14:18:08 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x125e, r1) 14:18:08 executing program 1: sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x108, 0x70bd2a, 0x4, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000084}, 0x48001) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:08 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x4000) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) 14:18:08 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)=ANY=[@ANYBLOB="000001000000000000000000", @ANYRES32=r1, @ANYBLOB="000000696c6530010000000000000000"]) fsopen(&(0x7f0000000000)='romfs\x00', 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB="010100000000000018020000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0/file0\x00']) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) fsmount(0xffffffffffffffff, 0x0, 0x4) (async) fsmount(0xffffffffffffffff, 0x0, 0x4) 14:18:08 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) 14:18:08 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40100808}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="a400bfe66fe866f6facc0000", @ANYRES16=r1, @ANYBLOB="100027bd7000fedbdf250200000014000200736974300000000000000000000000000900030073797a32000000000900010073797a30000000000900010073797a32000000000900010073797a32000000000900010073797a31000000000900010073797a310000000014000200626f6e645f736c6176655f31000000000900030073797a32000000001400020064756d6d793000"/158], 0xa4}, 0x1, 0x0, 0x0, 0x4004448}, 0x4000000) (async, rerun: 64) r2 = fsmount(0xffffffffffffffff, 0x0, 0x8) (rerun: 64) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000200)={0x6, "5f48196692fd963a22a8701fcdc39403feff1a0e0f0d295d8c60c0991e4c6567"}) 14:18:08 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x125e, r1) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, r1) (async) 14:18:08 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x290000) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:08 executing program 5: fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x7fffffff) 14:18:08 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) 14:18:08 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000480)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000280)=[{}, {}, {}], 0x1, 0x0, &(0x7f0000000400)=[{}], 0x1, 0x0, &(0x7f0000000440)=[{}]}) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x125d, 0xffffffffffffffff) 14:18:08 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x224502) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) 14:18:08 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x125e, r1) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, r1) (async) 14:18:08 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x290000) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:08 executing program 5: fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x7fffffff) 14:18:08 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x101}) 14:18:08 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async, rerun: 32) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000480)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000280)=[{}, {}, {}], 0x1, 0x0, &(0x7f0000000400)=[{}], 0x1, 0x0, &(0x7f0000000440)=[{}]}) (async, rerun: 32) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x125d, 0xffffffffffffffff) 14:18:09 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x224502) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) 14:18:09 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2e83) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc3}, &(0x7f0000000300)={0x0, "34c2241360778d9be9987dcfde54026977fd6935ce5e0b259c71360a9bebd913c736f140d98087ab00000000030c4a4b8f89f8f945e257655cb0e700", 0x12}, 0x48, r1) r3 = add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r2) r4 = request_key(&(0x7f0000000240)='.dead\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='-\x1f\x00', 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r3, r4, r2, 0x0) 14:18:09 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x290000) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x290000) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:09 executing program 5: fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x7fffffff) 14:18:09 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000480)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000280)=[{}, {}, {}], 0x1, 0x0, &(0x7f0000000400)=[{}], 0x1, 0x0, &(0x7f0000000440)=[{}]}) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x125d, 0xffffffffffffffff) 14:18:09 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x101}) 14:18:09 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x6080) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x100) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, r1) 14:18:09 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x224502) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) 14:18:09 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2e83) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc3}, &(0x7f0000000300)={0x0, "34c2241360778d9be9987dcfde54026977fd6935ce5e0b259c71360a9bebd913c736f140d98087ab00000000030c4a4b8f89f8f945e257655cb0e700", 0x12}, 0x48, r1) r3 = add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r2) r4 = request_key(&(0x7f0000000240)='.dead\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='-\x1f\x00', 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r3, r4, r2, 0x0) 14:18:09 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:09 executing program 3: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x105002, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) process_mrelease(r1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8002) ioctl$NBD_SET_SOCK(r2, 0x125d, 0xffffffffffffffff) 14:18:09 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x101}) 14:18:09 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) accept4$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x800) 14:18:09 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2e83) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async, rerun: 32) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (rerun: 32) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc3}, &(0x7f0000000300)={0x0, "34c2241360778d9be9987dcfde54026977fd6935ce5e0b259c71360a9bebd913c736f140d98087ab00000000030c4a4b8f89f8f945e257655cb0e700", 0x12}, 0x48, r1) r3 = add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r2) (async) r4 = request_key(&(0x7f0000000240)='.dead\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='-\x1f\x00', 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r3, r4, r2, 0x0) 14:18:09 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x6080) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) (async) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x100) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, r1) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, r1) 14:18:09 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:09 executing program 0: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x301, 0xffffffffffffffff) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x50001) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000380)={0xc}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x98, r3, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x101, 0x32}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}]}, 0x98}, 0x1, 0x0, 0x0, 0x8001}, 0xc000) 14:18:09 executing program 3: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x105002, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) process_mrelease(r1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8002) ioctl$NBD_SET_SOCK(r2, 0x125d, 0xffffffffffffffff) 14:18:09 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) accept4$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x800) 14:18:09 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x6080) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x100) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, r1) 14:18:09 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) (async) 14:18:09 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000000c0)) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) 14:18:09 executing program 3: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x105002, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) process_mrelease(r1, 0x0) (async) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8002) ioctl$NBD_SET_SOCK(r2, 0x125d, 0xffffffffffffffff) 14:18:09 executing program 0: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x301, 0xffffffffffffffff) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x50001) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000380)={0xc}) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x98, r3, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x101, 0x32}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}]}, 0x98}, 0x1, 0x0, 0x0, 0x8001}, 0xc000) 14:18:09 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) accept4$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x800) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) accept4$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x800) (async) 14:18:09 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000000c0)) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000000c0)) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) (async) 14:18:09 executing program 1: syz_open_dev$media(&(0x7f0000000040), 0x8, 0x22242) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4040) 14:18:09 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x7) r1 = fsmount(r0, 0x0, 0x90) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0xda, 0xeb8, 0x5, 0x3, 0x3, 0x8, "6bd0a54b510dab9aa172df09e197587f7623e78bfede27a6518c3bd5357d3814aa762ebd5d367c7a8e9ae5f2e8062909c86b0ccbfc6ba1480a7d27bf0019fc43b33bdef518480b5be7e57f2f39b3611dd5f1807d03697c4534e88e9be919d0c8c2c073ec5e4cedfdc07e3ee947f2fd0194f6fe40bc2274cb5911977969eb7fa465a425f6de4669ce8e3ef372d932305a6381ac22a2104444b615897a90687e9e74a10cfbc047f64d98ef5430ee9169bcbb95a61f37685629b4ba05d1677b14790108ae9ccbedc8597dd894c88739e15647b54dca2f62aa754ab8"}}, 0x1f2) ioctl$NBD_SET_SOCK(r1, 0x125f, r2) inotify_init() 14:18:09 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000700000018004000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="070000001a0000002e2f66696c653000"]) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) landlock_restrict_self(0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x125d, 0xffffffffffffffff) 14:18:09 executing program 0: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x301, 0xffffffffffffffff) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x50001) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000380)={0xc}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x98, r3, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x101, 0x32}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}]}, 0x98}, 0x1, 0x0, 0x0, 0x8001}, 0xc000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r1, 0x301, 0xffffffffffffffff) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) (async) syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x50001) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000380)={0xc}) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x98, r3, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x101, 0x32}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}]}, 0x98}, 0x1, 0x0, 0x0, 0x8001}, 0xc000) (async) 14:18:09 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000000000002e2f66696c6530002369792f35a3c9a9aab2fb18209354aaaaacf2ce5785f695ee040155eeae22018a4f06c0caea6c7506db14b2c833aa4bac7b5504263332ed44f86818ce52d651d339b3aa94bb9b2c4ff0ead1c29585e12ae371675de1284cb1563e194ccd75eb24604d3ba9209327e82025a0b64d003a0cf05c8e291cf825ce4fd02c99ccc4d55e244c66b1bfaec494788d05d57f4890063e34118bf2a1461bcd0774f2971a62917bd4b5f57ef072a9b009afe782023b2a56dc006ef3aa1dcb18556de8bb54da8d5bda74d04e55a00ccbecf8a43b8b4ed0e3007fb394b13fb4d046309b"]) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x44000000}, 0x4000) r2 = fsmount(r1, 0x1, 0x74) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) sendmsg$xdp(r4, &(0x7f0000000680)={&(0x7f0000000400)={0x2c, 0x1, 0x0, 0x5}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000440)="72c5c25393cc2d9bd88b5b0f1fc0b951c779534a717950865fdc66e5470714d1719e48626ab3d3bc1daf56f95c8308fd38bffadf711e04758d0bb8fcc7aa0697a3b4f84135c648761c342d5ddea8164c38739b908e62753574789d71ebb9df55ca73cb966d9caeac92f8f19888059dda0bb8718dd7ff7de202d30720edd99f980290290f4f34978fae9e710d743514fd9ab9f07ed9a78c210fd002103e34159b68f4a75d7a593716d40a2add64d1a095c2676fe5aa711db1ec3c2344110a539b0a639b971dd81056296f4077345cec8c2bb15a83c4e8b0cc68f38230ceb17e2d5ed36b59bca02754d17c596b9a861fab59cb3963854a86", 0xf7}, {&(0x7f0000000540)="91ddaa7203b304b74cbdc812b9354771f9cf816ebfa6844b4460dbdaa9edda480c0938fd79d07ba9ac9750cd210771a52cad78b8a6c59c83619b728c81ac60c61e7db714abc153312643a109cc6d90473719fab1745849e55391bbac60634269b53b9be974d7629105c1a7483c541ebeb4a0c2fb9dc888795e1889bcfdfa2feb6870b7705a63fc25e4bdad22fdb7caeef4dc5290fbff807d9cf0362c98875011311ef5c990c4935b0ec530df852688c80a948f96b7d3935b8a3fd864cf475ccc54bc9c6d1b", 0xc5}], 0x2, 0x0, 0x0, 0x4044}, 0x4880) landlock_restrict_self(r3, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) fsmount(r3, 0x0, 0x0) r7 = syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x260000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r9, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$NBD_SET_SOCK(r10, 0x1261, r8) 14:18:09 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x7) fsmount(r0, 0x0, 0x90) (async) r1 = fsmount(r0, 0x0, 0x90) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0xda, 0xeb8, 0x5, 0x3, 0x3, 0x8, "6bd0a54b510dab9aa172df09e197587f7623e78bfede27a6518c3bd5357d3814aa762ebd5d367c7a8e9ae5f2e8062909c86b0ccbfc6ba1480a7d27bf0019fc43b33bdef518480b5be7e57f2f39b3611dd5f1807d03697c4534e88e9be919d0c8c2c073ec5e4cedfdc07e3ee947f2fd0194f6fe40bc2274cb5911977969eb7fa465a425f6de4669ce8e3ef372d932305a6381ac22a2104444b615897a90687e9e74a10cfbc047f64d98ef5430ee9169bcbb95a61f37685629b4ba05d1677b14790108ae9ccbedc8597dd894c88739e15647b54dca2f62aa754ab8"}}, 0x1f2) ioctl$NBD_SET_SOCK(r1, 0x125f, r2) inotify_init() 14:18:09 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000700000018004000", @ANYRES32, @ANYBLOB="070000001a0000002e2f66696c653000"]) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000700000018004000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="070000001a0000002e2f66696c653000"]) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) landlock_restrict_self(0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x125d, 0xffffffffffffffff) 14:18:09 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xfff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000040)='}}\'}&\xfa\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 14:18:09 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000000c0)) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) 14:18:09 executing program 1: syz_open_dev$media(&(0x7f0000000040), 0x8, 0x22242) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4040) 14:18:09 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200000) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000000000002e2f66696c6530002369792f35a3c9a9aab2fb18209354aaaaacf2ce5785f695ee040155eeae22018a4f06c0caea6c7506db14b2c833aa4bac7b5504263332ed44f86818ce52d651d339b3aa94bb9b2c4ff0ead1c29585e12ae371675de1284cb1563e194ccd75eb24604d3ba9209327e82025a0b64d003a0cf05c8e291cf825ce4fd02c99ccc4d55e244c66b1bfaec494788d05d57f4890063e34118bf2a1461bcd0774f2971a62917bd4b5f57ef072a9b009afe782023b2a56dc006ef3aa1dcb18556de8bb54da8d5bda74d04e55a00ccbecf8a43b8b4ed0e3007fb394b13fb4d046309b"]) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x44000000}, 0x4000) r2 = fsmount(r1, 0x1, 0x74) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) sendmsg$xdp(r4, &(0x7f0000000680)={&(0x7f0000000400)={0x2c, 0x1, 0x0, 0x5}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000440)="72c5c25393cc2d9bd88b5b0f1fc0b951c779534a717950865fdc66e5470714d1719e48626ab3d3bc1daf56f95c8308fd38bffadf711e04758d0bb8fcc7aa0697a3b4f84135c648761c342d5ddea8164c38739b908e62753574789d71ebb9df55ca73cb966d9caeac92f8f19888059dda0bb8718dd7ff7de202d30720edd99f980290290f4f34978fae9e710d743514fd9ab9f07ed9a78c210fd002103e34159b68f4a75d7a593716d40a2add64d1a095c2676fe5aa711db1ec3c2344110a539b0a639b971dd81056296f4077345cec8c2bb15a83c4e8b0cc68f38230ceb17e2d5ed36b59bca02754d17c596b9a861fab59cb3963854a86", 0xf7}, {&(0x7f0000000540)="91ddaa7203b304b74cbdc812b9354771f9cf816ebfa6844b4460dbdaa9edda480c0938fd79d07ba9ac9750cd210771a52cad78b8a6c59c83619b728c81ac60c61e7db714abc153312643a109cc6d90473719fab1745849e55391bbac60634269b53b9be974d7629105c1a7483c541ebeb4a0c2fb9dc888795e1889bcfdfa2feb6870b7705a63fc25e4bdad22fdb7caeef4dc5290fbff807d9cf0362c98875011311ef5c990c4935b0ec530df852688c80a948f96b7d3935b8a3fd864cf475ccc54bc9c6d1b", 0xc5}], 0x2, 0x0, 0x0, 0x4044}, 0x4880) (async) sendmsg$xdp(r4, &(0x7f0000000680)={&(0x7f0000000400)={0x2c, 0x1, 0x0, 0x5}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000440)="72c5c25393cc2d9bd88b5b0f1fc0b951c779534a717950865fdc66e5470714d1719e48626ab3d3bc1daf56f95c8308fd38bffadf711e04758d0bb8fcc7aa0697a3b4f84135c648761c342d5ddea8164c38739b908e62753574789d71ebb9df55ca73cb966d9caeac92f8f19888059dda0bb8718dd7ff7de202d30720edd99f980290290f4f34978fae9e710d743514fd9ab9f07ed9a78c210fd002103e34159b68f4a75d7a593716d40a2add64d1a095c2676fe5aa711db1ec3c2344110a539b0a639b971dd81056296f4077345cec8c2bb15a83c4e8b0cc68f38230ceb17e2d5ed36b59bca02754d17c596b9a861fab59cb3963854a86", 0xf7}, {&(0x7f0000000540)="91ddaa7203b304b74cbdc812b9354771f9cf816ebfa6844b4460dbdaa9edda480c0938fd79d07ba9ac9750cd210771a52cad78b8a6c59c83619b728c81ac60c61e7db714abc153312643a109cc6d90473719fab1745849e55391bbac60634269b53b9be974d7629105c1a7483c541ebeb4a0c2fb9dc888795e1889bcfdfa2feb6870b7705a63fc25e4bdad22fdb7caeef4dc5290fbff807d9cf0362c98875011311ef5c990c4935b0ec530df852688c80a948f96b7d3935b8a3fd864cf475ccc54bc9c6d1b", 0xc5}], 0x2, 0x0, 0x0, 0x4044}, 0x4880) landlock_restrict_self(r3, 0x0) (async) landlock_restrict_self(r3, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) fsmount(r3, 0x0, 0x0) (async) fsmount(r3, 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x260000) (async) r7 = syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x260000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r9, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$NBD_SET_SOCK(r10, 0x1261, r8) 14:18:09 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000700000018004000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="070000001a0000002e2f66696c653000"]) (async, rerun: 64) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) (async, rerun: 64) landlock_restrict_self(0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$NBD_SET_SOCK(r1, 0x125d, 0xffffffffffffffff) 14:18:09 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) socketpair(0x22, 0x1, 0x8000, &(0x7f0000000040)) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r6, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r6, 0x125e, r5) 14:18:09 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x7) r1 = fsmount(r0, 0x0, 0x90) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0xda, 0xeb8, 0x5, 0x3, 0x3, 0x8, "6bd0a54b510dab9aa172df09e197587f7623e78bfede27a6518c3bd5357d3814aa762ebd5d367c7a8e9ae5f2e8062909c86b0ccbfc6ba1480a7d27bf0019fc43b33bdef518480b5be7e57f2f39b3611dd5f1807d03697c4534e88e9be919d0c8c2c073ec5e4cedfdc07e3ee947f2fd0194f6fe40bc2274cb5911977969eb7fa465a425f6de4669ce8e3ef372d932305a6381ac22a2104444b615897a90687e9e74a10cfbc047f64d98ef5430ee9169bcbb95a61f37685629b4ba05d1677b14790108ae9ccbedc8597dd894c88739e15647b54dca2f62aa754ab8"}}, 0x1f2) ioctl$NBD_SET_SOCK(r1, 0x125f, r2) inotify_init() syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) fsmount(0xffffffffffffffff, 0x1, 0x7) (async) fsmount(r0, 0x0, 0x90) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0xda, 0xeb8, 0x5, 0x3, 0x3, 0x8, "6bd0a54b510dab9aa172df09e197587f7623e78bfede27a6518c3bd5357d3814aa762ebd5d367c7a8e9ae5f2e8062909c86b0ccbfc6ba1480a7d27bf0019fc43b33bdef518480b5be7e57f2f39b3611dd5f1807d03697c4534e88e9be919d0c8c2c073ec5e4cedfdc07e3ee947f2fd0194f6fe40bc2274cb5911977969eb7fa465a425f6de4669ce8e3ef372d932305a6381ac22a2104444b615897a90687e9e74a10cfbc047f64d98ef5430ee9169bcbb95a61f37685629b4ba05d1677b14790108ae9ccbedc8597dd894c88739e15647b54dca2f62aa754ab8"}}, 0x1f2) (async) ioctl$NBD_SET_SOCK(r1, 0x125f, r2) (async) inotify_init() (async) 14:18:09 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xfff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000040)='}}\'}&\xfa\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 14:18:09 executing program 1: syz_open_dev$media(&(0x7f0000000040), 0x8, 0x22242) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async, rerun: 64) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4040) (rerun: 64) 14:18:10 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200000) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000000000002e2f66696c6530002369792f35a3c9a9aab2fb18209354aaaaacf2ce5785f695ee040155eeae22018a4f06c0caea6c7506db14b2c833aa4bac7b5504263332ed44f86818ce52d651d339b3aa94bb9b2c4ff0ead1c29585e12ae371675de1284cb1563e194ccd75eb24604d3ba9209327e82025a0b64d003a0cf05c8e291cf825ce4fd02c99ccc4d55e244c66b1bfaec494788d05d57f4890063e34118bf2a1461bcd0774f2971a62917bd4b5f57ef072a9b009afe782023b2a56dc006ef3aa1dcb18556de8bb54da8d5bda74d04e55a00ccbecf8a43b8b4ed0e3007fb394b13fb4d046309b"]) (async) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x44000000}, 0x4000) (async) r2 = fsmount(r1, 0x1, 0x74) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) (async) sendmsg$xdp(r4, &(0x7f0000000680)={&(0x7f0000000400)={0x2c, 0x1, 0x0, 0x5}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000440)="72c5c25393cc2d9bd88b5b0f1fc0b951c779534a717950865fdc66e5470714d1719e48626ab3d3bc1daf56f95c8308fd38bffadf711e04758d0bb8fcc7aa0697a3b4f84135c648761c342d5ddea8164c38739b908e62753574789d71ebb9df55ca73cb966d9caeac92f8f19888059dda0bb8718dd7ff7de202d30720edd99f980290290f4f34978fae9e710d743514fd9ab9f07ed9a78c210fd002103e34159b68f4a75d7a593716d40a2add64d1a095c2676fe5aa711db1ec3c2344110a539b0a639b971dd81056296f4077345cec8c2bb15a83c4e8b0cc68f38230ceb17e2d5ed36b59bca02754d17c596b9a861fab59cb3963854a86", 0xf7}, {&(0x7f0000000540)="91ddaa7203b304b74cbdc812b9354771f9cf816ebfa6844b4460dbdaa9edda480c0938fd79d07ba9ac9750cd210771a52cad78b8a6c59c83619b728c81ac60c61e7db714abc153312643a109cc6d90473719fab1745849e55391bbac60634269b53b9be974d7629105c1a7483c541ebeb4a0c2fb9dc888795e1889bcfdfa2feb6870b7705a63fc25e4bdad22fdb7caeef4dc5290fbff807d9cf0362c98875011311ef5c990c4935b0ec530df852688c80a948f96b7d3935b8a3fd864cf475ccc54bc9c6d1b", 0xc5}], 0x2, 0x0, 0x0, 0x4044}, 0x4880) (async) landlock_restrict_self(r3, 0x0) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) fsmount(r3, 0x0, 0x0) (async) r7 = syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x260000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) (async) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r9, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$NBD_SET_SOCK(r10, 0x1261, r8) 14:18:10 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xfff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000040)='}}\'}&\xfa\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 14:18:10 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f00000000c0)={0x5696, r2}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x8054, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x125d, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001800a70108d6826263f7cdbb32f05232daa1aa2b02639464a25af6a4f4fb5a22160ef74e807fa8e97a457984a35f5c4396d520c2ee328fd7c582916b9ad9c5b6afe2a37afae1d67ed7860cd9b86ba4afe5002a60ae7c0acd1527b71bcae72bf1f9cbba410c4cb4a23a7daa6a924a35cc1373e4ba72e5289e6895702a2912000f263b1e031353cc497fed3bfb3f4259060d5fb6113a22f182eadb8962f07ef118465d417bcb1d7af6c6ce6e6b45cd9c3ad4c0196607acc1a056186aa701a2435d59581ec054f72677eb8f1538dd5b123ffb516d3ae9319e6eba946e12ff70", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00.\x00']) accept4$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r4, 0x3ba0, &(0x7f0000000140)={0x38, 0x7, r0, 0x0, 0x1, 0x0, 0x7, 0x7fffffff}) openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x460000, 0x15) 14:18:10 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x195dc1) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:10 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) socketpair(0x22, 0x1, 0x8000, &(0x7f0000000040)) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r6, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r6, 0x125e, r5) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) (async) socketpair(0x22, 0x1, 0x8000, &(0x7f0000000040)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r6, 0x40206435, 0x0) (async) ioctl$NBD_SET_SOCK(r6, 0x125e, r5) (async) 14:18:10 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f00000000c0)={0x5696, r2}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x8054, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @broadcast}, 0x10) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x125d, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001800a70108d6826263f7cdbb32f05232daa1aa2b02639464a25af6a4f4fb5a22160ef74e807fa8e97a457984a35f5c4396d520c2ee328fd7c582916b9ad9c5b6afe2a37afae1d67ed7860cd9b86ba4afe5002a60ae7c0acd1527b71bcae72bf1f9cbba410c4cb4a23a7daa6a924a35cc1373e4ba72e5289e6895702a2912000f263b1e031353cc497fed3bfb3f4259060d5fb6113a22f182eadb8962f07ef118465d417bcb1d7af6c6ce6e6b45cd9c3ad4c0196607acc1a056186aa701a2435d59581ec054f72677eb8f1538dd5b123ffb516d3ae9319e6eba946e12ff70", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00.\x00']) accept4$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r4, 0x3ba0, &(0x7f0000000140)={0x38, 0x7, r0, 0x0, 0x1, 0x0, 0x7, 0x7fffffff}) openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x460000, 0x15) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async) socket$packet(0x11, 0x2, 0x300) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f00000000c0)={0x5696, r2}, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) (async) sendto$packet(r1, 0x0, 0x0, 0x8054, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @broadcast}, 0x10) (async) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x125d, 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001800a70108d6826263f7cdbb32f05232daa1aa2b02639464a25af6a4f4fb5a22160ef74e807fa8e97a457984a35f5c4396d520c2ee328fd7c582916b9ad9c5b6afe2a37afae1d67ed7860cd9b86ba4afe5002a60ae7c0acd1527b71bcae72bf1f9cbba410c4cb4a23a7daa6a924a35cc1373e4ba72e5289e6895702a2912000f263b1e031353cc497fed3bfb3f4259060d5fb6113a22f182eadb8962f07ef118465d417bcb1d7af6c6ce6e6b45cd9c3ad4c0196607acc1a056186aa701a2435d59581ec054f72677eb8f1538dd5b123ffb516d3ae9319e6eba946e12ff70", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00.\x00']) (async) accept4$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x0) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r4, 0x3ba0, &(0x7f0000000140)={0x38, 0x7, r0, 0x0, 0x1, 0x0, 0x7, 0x7fffffff}) (async) openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x460000, 0x15) (async) 14:18:10 executing program 0: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xdf5, 0x4f}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8}]}, 0x50}}, 0x1) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0x301, 0xffffffffffffffff) 14:18:10 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x195dc1) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:10 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x80) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000040)={0x31}) 14:18:10 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="000000e7ffffffff2d2f66696c653000b5ff315d00000000000000011b4c6db9cbaa6ca1895eb12506717bd16f868a3b4aacd79a155441da05460d8b848276150b0c88d8fccfcd9294e3290c0871882c7a4afedaa7cb4ad87776ca69a384f8e55e11d035fbf979c716"]) ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0106438, &(0x7f0000000080)={0x2}) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) 14:18:10 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) (async) socketpair(0x22, 0x1, 0x8000, &(0x7f0000000040)) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r6, 0x40206435, 0x0) (async) ioctl$NBD_SET_SOCK(r6, 0x125e, r5) 14:18:10 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x80) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000040)={0x31}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x80) (async) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000040)={0x31}) (async) 14:18:10 executing program 0: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xdf5, 0x4f}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8}]}, 0x50}}, 0x1) (async, rerun: 64) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$NBD_SET_SOCK(r3, 0x301, 0xffffffffffffffff) 14:18:10 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x195dc1) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x195dc1) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:10 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f00000000c0)={0x5696, r2}, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x8054, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @broadcast}, 0x10) (async) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x125d, 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001800a70108d6826263f7cdbb32f05232daa1aa2b02639464a25af6a4f4fb5a22160ef74e807fa8e97a457984a35f5c4396d520c2ee328fd7c582916b9ad9c5b6afe2a37afae1d67ed7860cd9b86ba4afe5002a60ae7c0acd1527b71bcae72bf1f9cbba410c4cb4a23a7daa6a924a35cc1373e4ba72e5289e6895702a2912000f263b1e031353cc497fed3bfb3f4259060d5fb6113a22f182eadb8962f07ef118465d417bcb1d7af6c6ce6e6b45cd9c3ad4c0196607acc1a056186aa701a2435d59581ec054f72677eb8f1538dd5b123ffb516d3ae9319e6eba946e12ff70", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00.\x00']) (async) accept4$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r4, 0x3ba0, &(0x7f0000000140)={0x38, 0x7, r0, 0x0, 0x1, 0x0, 0x7, 0x7fffffff}) (async) openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x460000, 0x15) 14:18:10 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1000) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="000000e7ffffffff2d2f66696c653000b5ff315d00000000000000011b4c6db9cbaa6ca1895eb12506717bd16f868a3b4aacd79a155441da05460d8b848276150b0c88d8fccfcd9294e3290c0871882c7a4afedaa7cb4ad87776ca69a384f8e55e11d035fbf979c716"]) ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0106438, &(0x7f0000000080)={0x2}) (async) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) 14:18:10 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x4}, 0x4) 14:18:10 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40000) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:10 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x400042, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x125d, 0xffffffffffffffff) 14:18:10 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x80) (async, rerun: 64) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (rerun: 64) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000040)={0x31}) 14:18:10 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40000) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:10 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x400042, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x400042, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x125d, 0xffffffffffffffff) 14:18:10 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x4}, 0x4) 14:18:10 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="000000e7ffffffff2d2f66696c653000b5ff315d00000000000000011b4c6db9cbaa6ca1895eb12506717bd16f868a3b4aacd79a155441da05460d8b848276150b0c88d8fccfcd9294e3290c0871882c7a4afedaa7cb4ad87776ca69a384f8e55e11d035fbf979c716"]) ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0106438, &(0x7f0000000080)={0x2}) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1000) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="000000e7ffffffff2d2f66696c653000b5ff315d00000000000000011b4c6db9cbaa6ca1895eb12506717bd16f868a3b4aacd79a155441da05460d8b848276150b0c88d8fccfcd9294e3290c0871882c7a4afedaa7cb4ad87776ca69a384f8e55e11d035fbf979c716"]) (async) ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0106438, &(0x7f0000000080)={0x2}) (async) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) (async) 14:18:10 executing program 0: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xdf5, 0x4f}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8}]}, 0x50}}, 0x1) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0x301, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xdf5, 0x4f}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8}]}, 0x50}}, 0x1) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r3, 0x301, 0xffffffffffffffff) (async) 14:18:10 executing program 2: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) read$char_usb(r0, &(0x7f00000000c0)=""/133, 0x85) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040)) ioctl$NBD_SET_SOCK(r1, 0x1261, 0xffffffffffffffff) 14:18:10 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40000) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:10 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x400042, 0x0) (async) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x125d, 0xffffffffffffffff) 14:18:10 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x4}, 0x4) 14:18:10 executing program 1: ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x3, {0x2, 0x1, 0x1}, 0xfd}, 0xffffffffffffffcb, &(0x7f0000000180)={&(0x7f0000000080)="add7ddb1d39b80ef2794baf26a1c8e8e63048f1eecbe6156abeadb8db4946e3a96e37b62988fd4473ede6f843312ccb1d35e88792e2f48298e8d09e0df6a9b6dba3e3353d12db4be22e01b2bb1b517a2f367ca86c8e779c14a8572d1a2e41449000c04e28bf954f39f6f9ac66fc7c6618d2874ac4602279ca7739bbed70ee883bccfafbef4a66e42a8ec59a37753264e8ca669efe3a01f900ad6439434daeff396c9ddd5d814c356fa458a4545491f6daa1d847409de189ac5e52737609f8c257ef2", 0xc2}}, 0x20000000) 14:18:10 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x2, 0x2576ab, 0x3a4968}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x18}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "14f95a0ec7c90d00"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x10) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/custom1\x00', 0x0, 0x0) getsockopt$packet_buf(r3, 0x107, 0xd, &(0x7f0000000340)=""/144, &(0x7f0000000400)=0x90) r6 = accept4$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x800) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000300)={0x4080, r6}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x33}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, '.^P9\r'}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "32352f3ad20cf00940d02f5b7b"}], @NL80211_ATTR_SSID={0x10, 0x34, @random="936455e85885879d4469ddb7"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="b57a54b01f5b"}, @NL80211_ATTR_SSID={0x5, 0x34, @random="c7"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x80) pidfd_getfd(r1, r0, 0x0) 14:18:10 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) 14:18:10 executing program 1: ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async, rerun: 64) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x3, {0x2, 0x1, 0x1}, 0xfd}, 0xffffffffffffffcb, &(0x7f0000000180)={&(0x7f0000000080)="add7ddb1d39b80ef2794baf26a1c8e8e63048f1eecbe6156abeadb8db4946e3a96e37b62988fd4473ede6f843312ccb1d35e88792e2f48298e8d09e0df6a9b6dba3e3353d12db4be22e01b2bb1b517a2f367ca86c8e779c14a8572d1a2e41449000c04e28bf954f39f6f9ac66fc7c6618d2874ac4602279ca7739bbed70ee883bccfafbef4a66e42a8ec59a37753264e8ca669efe3a01f900ad6439434daeff396c9ddd5d814c356fa458a4545491f6daa1d847409de189ac5e52737609f8c257ef2", 0xc2}}, 0x20000000) (rerun: 64) 14:18:10 executing program 2: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) read$char_usb(r0, &(0x7f00000000c0)=""/133, 0x85) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040)) ioctl$NBD_SET_SOCK(r1, 0x1261, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r1, 0x1261, 0xffffffffffffffff) 14:18:10 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 14:18:10 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2000) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) 14:18:11 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) 14:18:11 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x2, 0x2576ab, 0x3a4968}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x18}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "14f95a0ec7c90d00"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x10) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/custom1\x00', 0x0, 0x0) getsockopt$packet_buf(r3, 0x107, 0xd, &(0x7f0000000340)=""/144, &(0x7f0000000400)=0x90) r6 = accept4$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x800) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000300)={0x4080, r6}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x33}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, '.^P9\r'}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "32352f3ad20cf00940d02f5b7b"}], @NL80211_ATTR_SSID={0x10, 0x34, @random="936455e85885879d4469ddb7"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="b57a54b01f5b"}, @NL80211_ATTR_SSID={0x5, 0x34, @random="c7"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x80) pidfd_getfd(r1, r0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x38}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x2, 0x2576ab, 0x3a4968}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x18}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "14f95a0ec7c90d00"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x10) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/custom1\x00', 0x0, 0x0) (async) getsockopt$packet_buf(r3, 0x107, 0xd, &(0x7f0000000340)=""/144, &(0x7f0000000400)=0x90) (async) accept4$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x800) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000300)={0x4080, r6}, 0x0) (async) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x33}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, '.^P9\r'}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "32352f3ad20cf00940d02f5b7b"}], @NL80211_ATTR_SSID={0x10, 0x34, @random="936455e85885879d4469ddb7"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="b57a54b01f5b"}, @NL80211_ATTR_SSID={0x5, 0x34, @random="c7"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) pidfd_getfd(r1, r0, 0x0) (async) 14:18:11 executing program 2: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) read$char_usb(r0, &(0x7f00000000c0)=""/133, 0x85) (async, rerun: 64) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040)) (async, rerun: 64) ioctl$NBD_SET_SOCK(r1, 0x1261, 0xffffffffffffffff) (rerun: 64) 14:18:11 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 14:18:11 executing program 1: ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x3, {0x2, 0x1, 0x1}, 0xfd}, 0xffffffffffffffcb, &(0x7f0000000180)={&(0x7f0000000080)="add7ddb1d39b80ef2794baf26a1c8e8e63048f1eecbe6156abeadb8db4946e3a96e37b62988fd4473ede6f843312ccb1d35e88792e2f48298e8d09e0df6a9b6dba3e3353d12db4be22e01b2bb1b517a2f367ca86c8e779c14a8572d1a2e41449000c04e28bf954f39f6f9ac66fc7c6618d2874ac4602279ca7739bbed70ee883bccfafbef4a66e42a8ec59a37753264e8ca669efe3a01f900ad6439434daeff396c9ddd5d814c356fa458a4545491f6daa1d847409de189ac5e52737609f8c257ef2", 0xc2}}, 0x20000000) 14:18:11 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x2, 0x2576ab, 0x3a4968}) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x18}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "14f95a0ec7c90d00"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x10) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/custom1\x00', 0x0, 0x0) getsockopt$packet_buf(r3, 0x107, 0xd, &(0x7f0000000340)=""/144, &(0x7f0000000400)=0x90) r6 = accept4$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x800) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000300)={0x4080, r6}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x33}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, '.^P9\r'}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "32352f3ad20cf00940d02f5b7b"}], @NL80211_ATTR_SSID={0x10, 0x34, @random="936455e85885879d4469ddb7"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="b57a54b01f5b"}, @NL80211_ATTR_SSID={0x5, 0x34, @random="c7"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) pidfd_getfd(r1, r0, 0x0) 14:18:11 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) (async) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) 14:18:11 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2000) (async) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) 14:18:11 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 14:18:11 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f0000000000)='bfs\x00', 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x1261, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000a098d9b5d21d3b6f25902cb134419956ceb81766ae30b8a07722838bd10928ce30a97a82e01f4f788826b1e64ccb1afce55b8779f9fcd021109918f2269c49fff68fc7118e2b11ee93dee7c92d2daf21c9000000000000000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x000\b\x00\x00le0\x00']) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x30400, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x3, 0x60}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8050) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x174, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x72, 0x63}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x3ff}, @NL80211_ATTR_IE={0x142, 0x2a, [@supported_rates, @tim={0x5, 0x56, {0x9, 0x75, 0x0, "28d7eba8e3f808e183852bd89c74593ae42bd29bf4863bcad05f0d275057bbc8d8f81fa4e7a01af562fd1f88ce5c487f4430b537e4131af0bc769996bebea4731a6cadbddd8dbab6cc194920e49f191edb4250"}}, @tim={0x5, 0xe2, {0x6, 0x16, 0x6, "304a022cbdebeb490f0d688c576d6c3d240d116a56cb510e272ae0b826d40c300352cfb3bf6dfe2b0faf692d81ece63072e362d0d47d13b6e886758679fedc9c20f65762623ceec8bbd5867b4779cffd09dbf50d1d3dd55f8a949cbd1fe222c7109367de8119a8a67af538ac37060ac9ae27d9ab6217af3241dea798e972ea84630cc81623ab32813719646d58ff7f40fd9f49dcc483f3f182679955563642a41dea1b5b0e1189e55f2808a7a5ef998f7231ccaa7a453ac6396a5adf2d20a01b0a8709f42ad1bf1e90242680d6afa59578f2c96d4fa615d7ed9b738ba2ce03"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x3}]}, 0x174}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r2, 0x201, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x24000845) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x4182, 0x0) 14:18:11 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x18}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "1447026de27af025a42a185a0ec7c90d"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x0, 0x70bd28, 0x25dfdc01, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1010}, 0x8000) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000080)={0x203, r1}, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x21, 0x4) 14:18:11 executing program 5: syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0xd2ee8b7f57c6f06) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x30000) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x40) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x400200) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:11 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f0000000000)='bfs\x00', 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:11 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2000) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2000) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) 14:18:11 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$can_j1939(r0, &(0x7f0000001100)={&(0x7f0000000080)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x4}, 0xfd}, 0x18, &(0x7f00000010c0)={&(0x7f00000000c0)="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", 0x1000}, 0x1, 0x0, 0x0, 0x50}, 0x4) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r1 = syz_open_dev$ndb(&(0x7f0000001140), 0x0, 0x280) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001180)=0x14) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000001200)={0x0, 0x6}) bind$can_j1939(r0, &(0x7f00000011c0)={0x1d, r2, 0x1, {0x1, 0x28cac3d0d7128467}, 0x1}, 0x18) ioctl$NBD_SET_SOCK(r1, 0x125d, 0xffffffffffffffff) 14:18:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x1261, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000a098d9b5d21d3b6f25902cb134419956ceb81766ae30b8a07722838bd10928ce30a97a82e01f4f788826b1e64ccb1afce55b8779f9fcd021109918f2269c49fff68fc7118e2b11ee93dee7c92d2daf21c9000000000000000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x000\b\x00\x00le0\x00']) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x30400, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x3, 0x60}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8050) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x174, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x72, 0x63}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x3ff}, @NL80211_ATTR_IE={0x142, 0x2a, [@supported_rates, @tim={0x5, 0x56, {0x9, 0x75, 0x0, "28d7eba8e3f808e183852bd89c74593ae42bd29bf4863bcad05f0d275057bbc8d8f81fa4e7a01af562fd1f88ce5c487f4430b537e4131af0bc769996bebea4731a6cadbddd8dbab6cc194920e49f191edb4250"}}, @tim={0x5, 0xe2, {0x6, 0x16, 0x6, "304a022cbdebeb490f0d688c576d6c3d240d116a56cb510e272ae0b826d40c300352cfb3bf6dfe2b0faf692d81ece63072e362d0d47d13b6e886758679fedc9c20f65762623ceec8bbd5867b4779cffd09dbf50d1d3dd55f8a949cbd1fe222c7109367de8119a8a67af538ac37060ac9ae27d9ab6217af3241dea798e972ea84630cc81623ab32813719646d58ff7f40fd9f49dcc483f3f182679955563642a41dea1b5b0e1189e55f2808a7a5ef998f7231ccaa7a453ac6396a5adf2d20a01b0a8709f42ad1bf1e90242680d6afa59578f2c96d4fa615d7ed9b738ba2ce03"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x3}]}, 0x174}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r2, 0x201, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x24000845) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x4182, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r1, 0x1261, 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000a098d9b5d21d3b6f25902cb134419956ceb81766ae30b8a07722838bd10928ce30a97a82e01f4f788826b1e64ccb1afce55b8779f9fcd021109918f2269c49fff68fc7118e2b11ee93dee7c92d2daf21c9000000000000000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x000\b\x00\x00le0\x00']) (async) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x30400, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x3, 0x60}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8050) (async) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x174, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x72, 0x63}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x3ff}, @NL80211_ATTR_IE={0x142, 0x2a, [@supported_rates, @tim={0x5, 0x56, {0x9, 0x75, 0x0, "28d7eba8e3f808e183852bd89c74593ae42bd29bf4863bcad05f0d275057bbc8d8f81fa4e7a01af562fd1f88ce5c487f4430b537e4131af0bc769996bebea4731a6cadbddd8dbab6cc194920e49f191edb4250"}}, @tim={0x5, 0xe2, {0x6, 0x16, 0x6, "304a022cbdebeb490f0d688c576d6c3d240d116a56cb510e272ae0b826d40c300352cfb3bf6dfe2b0faf692d81ece63072e362d0d47d13b6e886758679fedc9c20f65762623ceec8bbd5867b4779cffd09dbf50d1d3dd55f8a949cbd1fe222c7109367de8119a8a67af538ac37060ac9ae27d9ab6217af3241dea798e972ea84630cc81623ab32813719646d58ff7f40fd9f49dcc483f3f182679955563642a41dea1b5b0e1189e55f2808a7a5ef998f7231ccaa7a453ac6396a5adf2d20a01b0a8709f42ad1bf1e90242680d6afa59578f2c96d4fa615d7ed9b738ba2ce03"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x3}]}, 0x174}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r2, 0x201, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x24000845) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x4182, 0x0) (async) 14:18:11 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f0000000000)='bfs\x00', 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:11 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x18}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "1447026de27af025a42a185a0ec7c90d"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x10) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x0, 0x70bd28, 0x25dfdc01, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1010}, 0x8000) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000080)={0x203, r1}, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x21, 0x4) 14:18:11 executing program 5: syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0xd2ee8b7f57c6f06) (async) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x30000) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x40) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x400200) (async) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:11 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$can_j1939(r0, &(0x7f0000001100)={&(0x7f0000000080)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x4}, 0xfd}, 0x18, &(0x7f00000010c0)={&(0x7f00000000c0)="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", 0x1000}, 0x1, 0x0, 0x0, 0x50}, 0x4) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async) r1 = syz_open_dev$ndb(&(0x7f0000001140), 0x0, 0x280) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001180)=0x14) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000001200)={0x0, 0x6}) (async) bind$can_j1939(r0, &(0x7f00000011c0)={0x1d, r2, 0x1, {0x1, 0x28cac3d0d7128467}, 0x1}, 0x18) ioctl$NBD_SET_SOCK(r1, 0x125d, 0xffffffffffffffff) 14:18:11 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x30) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000001) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000001c0)={0x80000000, &(0x7f0000000100), &(0x7f0000000140)=[{{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000200)={{0x80000000, 0x0, 0x3, [0x80, 0x8001]}, {0x80000000, r2, 0x7, [0x0, 0x4]}, 0x1, [0x1, 0x8]}) write$yama_ptrace_scope(0xffffffffffffffff, &(0x7f0000000040)='3\x00', 0x2) 14:18:11 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='\\.,\x00', &(0x7f0000000080)='(]-\x00', 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:11 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x1261, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000a098d9b5d21d3b6f25902cb134419956ceb81766ae30b8a07722838bd10928ce30a97a82e01f4f788826b1e64ccb1afce55b8779f9fcd021109918f2269c49fff68fc7118e2b11ee93dee7c92d2daf21c9000000000000000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x000\b\x00\x00le0\x00']) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x30400, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x3, 0x60}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8050) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x174, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x72, 0x63}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x3ff}, @NL80211_ATTR_IE={0x142, 0x2a, [@supported_rates, @tim={0x5, 0x56, {0x9, 0x75, 0x0, "28d7eba8e3f808e183852bd89c74593ae42bd29bf4863bcad05f0d275057bbc8d8f81fa4e7a01af562fd1f88ce5c487f4430b537e4131af0bc769996bebea4731a6cadbddd8dbab6cc194920e49f191edb4250"}}, @tim={0x5, 0xe2, {0x6, 0x16, 0x6, "304a022cbdebeb490f0d688c576d6c3d240d116a56cb510e272ae0b826d40c300352cfb3bf6dfe2b0faf692d81ece63072e362d0d47d13b6e886758679fedc9c20f65762623ceec8bbd5867b4779cffd09dbf50d1d3dd55f8a949cbd1fe222c7109367de8119a8a67af538ac37060ac9ae27d9ab6217af3241dea798e972ea84630cc81623ab32813719646d58ff7f40fd9f49dcc483f3f182679955563642a41dea1b5b0e1189e55f2808a7a5ef998f7231ccaa7a453ac6396a5adf2d20a01b0a8709f42ad1bf1e90242680d6afa59578f2c96d4fa615d7ed9b738ba2ce03"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x3}]}, 0x174}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r2, 0x201, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x24000845) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x4182, 0x0) 14:18:11 executing program 5: syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0xd2ee8b7f57c6f06) (async, rerun: 64) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x30000) (rerun: 64) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x40) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x400200) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:11 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x30) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000001) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000001c0)={0x80000000, &(0x7f0000000100), &(0x7f0000000140)=[{{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000200)={{0x80000000, 0x0, 0x3, [0x80, 0x8001]}, {0x80000000, r2, 0x7, [0x0, 0x4]}, 0x1, [0x1, 0x8]}) (async) write$yama_ptrace_scope(0xffffffffffffffff, &(0x7f0000000040)='3\x00', 0x2) 14:18:11 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x18}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "1447026de27af025a42a185a0ec7c90d"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x10) (async, rerun: 64) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x0, 0x70bd28, 0x25dfdc01, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1010}, 0x8000) (rerun: 64) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000080)={0x203, r1}, 0x0) (async, rerun: 64) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x21, 0x4) (rerun: 64) 14:18:11 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$can_j1939(r0, &(0x7f0000001100)={&(0x7f0000000080)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x4}, 0xfd}, 0x18, &(0x7f00000010c0)={&(0x7f00000000c0)="0c0ea98dec06f5478aca86116a1de7651ee500a12b0b3ef24d0589f7438ec7c54a5e680b1a3b5d418a765e6c57c6f228282289271b8b6085782ea96ce57626da02ebd77e761ca7e100e332601275c5635fde3fa5cd87e19554553cc5f54a6d09e9f03d630979dc57ab7e5f06f133bbf8bdad98d5d4058a0a093bad12a49d8be1ce450ab8aafa3e86bfaf1fb1b77e80bf4a046e5893b234a637827a042a21704e6cd47e6fad0012aaa1a84d375f2e9884f9747dddd96697108d6261b365469a29188867e0d5f1ec24a73455366f68ac2fa041bd116b1478a1ddad75fe3c29fb394e9faf2973a88f147c67379a8a96fcfcbdeaceb48c21514c454ba1c44e328efaeb7d3a18afcb8a1d593cd614736363ac93d8c9eb9938ba98810775f0a4b452b47992c9bb141033dd5be375b421558ed6eb867c6b1e6d08a7c178b259ab9920f93688d89a613e7ce26f54b70b5d63673f20602d534a94969ea7ce519da6df12ff381ff8a6ad7a4981eb6cc0e4c7988dcb63420efeb801a053423a9398e34c46fbf30e1bd3be06a4f8c59da9c012159a88d6a1cb021d27112be04a6774ad1ddf83077c05bf1eff97b3713f672a89d3bb9971c5f4335447e32a43bf0d9d17bbc8b0d93ea17cdfd8fbee8d479c77f82d24cb071307a4f438fcbaf96e36efa46d283d075e3f93fbf3187e05d013ad6f4deecff122918e8350b3b15e6ca300d91b626f52f7bb5ec93a4bbce03d7ef70c457074b8a01ac86f6fcf647cebb7436681ed957356c35ebb519a2294fca13f8f996d1c43df173fbb50c718838ad332ea676396012518bce7eddbcc3bab0d7943f79f9d09ed89271bb282910168b01518bafe734ecaed195940db20692ee0bcba8d4530e538c023b1ec6c9687756303728e5dd729cb4d293a15422ac9a1a7ea5fd5756e1d7d35375e1e8b1d266e098e3638ef9d73ae1f411ec509110e12ab7aea73813e624621d2470095ec09ae045d74f7dda58aaf28feac309e8fa8a3c5fed1d3b3855e7213758269e3042a3b5a4114830ff31012cbb19f33bebc69191fed6e252c734176b7d2462f99500080d43dcfe09c5ba370913f8e96fb5459aba4022e71a05ce4d0d595c5614bd91f42f0e33da76e89fc2081efba5b947798d12126ac12b18dd631682e7234f277d00afade688bd2bcbbf2088ae74b654480ba245ec9e7632181cfdaa4de38392018dd6f5cabd1f28b1a440538f3a5d0dbced87c23797b67924b17b5865114d85d28de1f84710d42bec2aef3d533e4c9c879fd2984590164485ea6376c9642bc03a27cfa53847fceabf7f6179775db01fb71de7a66f29e7710fda1016ad6b464b0e060b05159fc73b95e5aeccf4c90828058c992cbf501c240e799ade0ff4c83e1ca3c3ba94b17cfa7947946d17b2662a8a1d4fc6c56af0be594dc14e9d9b05e9f07d18ecd0b4ea833ef4635d5d2dee30b8f68ab5e118a790d2098a4e58672c13f146649bcbef622799a854cb56ec050d920bbbae8116172769c03c47527b7168ee5cfc1c693d450b9ec16c464228ab2f847e3b7692c575ac4de4d808cdb9afcc4b023bafd7a2c57b6183c2da4df29f51a5d96d47ba11c46aa2c340d75a8c30a4cc7851be2a46611dae80e7571d7ec376c59ca1dae1dde29859ed9edaf26fbfd4c524d3014ecbd98666e76631e59720ff8afb0f53e4b231dd899801e324af76d036321f39321f011c5daeaba5baab1d5cddfc01c6adf9f2d58f21f7e9ebbb92609f6bccd045a52d9ec0c35c2e7f642774d8271269b7fc186ed25cab1a5f006438917ab6233a4464d7f93b41e32afe2c26db1b24b79408d8d0b7a11197cd668caecb994c51f55ef3003bc4896511625016ae2da651a90727c80ecaeface1f51c57a157bfdcf6b2155828868b563a9e67480a805bd30ebc047922fa3e90a94bbdab3791c21864ac8b2fd356f8c0f22d7ef56705526e96f1a883b86eed2f3052b02145d4e79122210a542caad24c8d13d3aa31ee9acc8f555f3e80b513de8a5ca63077653a98639f09ae478a764d4fa8b3f7e0776acf9fc4fde1935481b4157939327d61e0ca1103daf371c9fb811d81ad33cdbdf456c0f88825ddd90710c70820efeacfe448e77215ef006e6f4b1838481a0061f412606bf9b389243a25929b3461ac97dc5ab1b4d6c7ee33c622680f201b567911255d11c564a20951ef4e71393a2cd6104a575b346ec6667e0660c58e923b64b60bb211830189d6929969d9a07cba61e83b1325f1a10fa328076f581fa674e12e7537f7707ea5e9d528f1407857b5236d2c97f93f437d86479bce977c66a1b247b3311c4d6d295d9551382e31603bdb911e4df929423c1d3a341b3560523d017368b74958642468e234b7fe8cb1f72e0af3f9c450edffecfb55f7358c2abeb2ebdd5dd93b47931f934406ff74ff0a1c27426265306f75663ecfb6b4caef1bdaa9aadbd57e7db6c291561d4e3679ac2f7c1e9d320636b6c530149f8a7ef68c8caac626ca0a7fccaf3951aad80d1d3ed36332de39e2509aef662fccb38abf5cabfbc11ce382606fe016fac1eeef565d75b243345e3e23135dbf0c8a5bde17263eacce344a30b390be4069c203362dfdf8350ba0efb043c4e5f511fd915e8893dccb90372b94c3fdbabd7717d390b1112b1458c9accf69b9e7cd00271d674372d9daf13560d9f6e49f2e14f24b36480fee144d02241c8921b2c2a6b39834df8de23d4a1565c1280d1bba2c39379d01b9ecde6a1acc9170faafcf2cc31f36873242f119affe4d73d82e7da491b4d0b3cc70cb4089e8f91e9e9be0956175e4ebf45c8abe341ae8e8de62856f2276e610b3f37bcbdbe6299b18990f1e69e0f8685836ec0b63fc6096ebcaa3ca7135caf65bb7250e65207851fa42fc88fa6ecfed84a99302f7dc2b75b52ca37b9905f608214d760cc4e7e6f42a6b61348c7f12ad1441cc833bcc740c0c2a7e8604bb4bb8d70a7794405a394111f00968921a1d369fe21aa5779aa339780f0b87bd21f2fb1060378d451df372f7b3dd258637fee73a2250616a8f1171730bd71b81605794299324325c69cf905d62a59eea80dd61acc5e9c66e8525965fc44c2c806404ff31662d40601706d0db2523297458de01f2d85216618b4b376adfd8b06d3b76fbaaaf7f8902ef41cb0a2fca3c3c0e2b72761423fc6cc746227c33ed18b3a2d620b7957ac8b75d5d14f60896a0a482c91322375c3315245a4e040acdc71ce692ef96632ae5cfb4da6073e710aaf00d6079a9379472d7a0681b718d86f3787f6dda09abec0568383b90dbe3ec6a2063e501d2dae841e23355adc6cbb18e82b2e8cedc905069b541f33ad13c4f0e0083a1c84571d09e5e5ac9f5e05b41a430af275c19f324e8df59eb3e28de2ec83b47e15f971c314460c77e53631ebeaf04659e4c6cec7584cf98a234df321861675f777dc2d651588c9d2d604e9dcc679210aecb69e1c18ab61ec8fa7c44e649cdeeec98cc0cf6546c04daf48b98ac3afd0509ef3d17212bc320f4f52f37e00fddd48ee9c585a0a4f9dcd6365a3834bc7772562b608a513620794077d53eeaa0b0e8826402e4df903e78856a20b024dfd8419482fff0a176ffa69544fdc32780e6537dd532977cdae41d38b28ef19bb25fc0c12cfa64881e6bd0bf06a75222f8695d5b6226846a2020512109f361530ed11684a8f55ea6b4380bde7e36c5ea2b6f7b2b40f5b89bc45625d8eef57506c043cb7a0d8f6a8045bed6acc448dcd44c13008cbbf5bd062cc4fadf905adc59c7de3140029d0d18f62c57bba8ced4534b1e1712a28e297fb15143a4be5f4db81d1cb3185e884a6aa1a2b5de4f5047f65e71af573ebd748739255958410987cc936bb0da0d08f38a3b625f87d2b868be2262ebfc34118d788baad49267f0f64361602578b87ce9c80d1ec96d3398ffc71f4d54d3f2e14a50bfbb461fa04c216b6b04b5d7c3ca20354fa73559509f53e99928b653875b521703023ade0024d68394cc5d4f2884a2208fba25e832e2593dd7c07b4337312e60e4d5a2033b3a847ad69b4f7e02f7a15d118d8d6627129a020791aa29a6e05181bbd88259e278f48cf712026ac1a420ae6b7930865cd6162ff6cda445133513ed67e626e22e51cfd04cbb70da9667d1b27e54f09bab8447368a3bb33312dd855efb3981f582647052d60df6d5ef42ee833503447e85fa9e5bc890ce7b5dd068e8c8fc7cbbbe9aa1fc36fda90b7131d26d66930097711f285007db5d1071193a47fb02d0b2eaf17707b287f1386920971248245d09719a0957bac0e7a34b8ede42449a4c29bbc15567593ffc104de4b2d506de84409be5226b2959f14ea3c0c084a1548239e4e93b8ee6ae229590ae7c7dda23f73ffd3804d651795b3704be25571a6c905c327b1705b54a16a6b3b19254816e2619d86a15352bcf1da380f7c7418b9a02e796e73769ea49262d299781c881527dd757b5a085734a8fd79d69210b8288b1f3155e71d87fc78ed13f77cd224948a52d998074c849aa06d3011ac201d2cf860a8f1cd7461790b06c38717449970718002c485e9bb2512937dba7dea2e95aec33640af15e9f941acbfac850ae97afa930f49b7efe0f378a54f12e480f226162a0f24d78f02e391b6fad8e22306452ce8971bf44b215c9aaa3b682a058638bc90b68bf5226746dd9362b85f97ff50a788b79f3c7b3e908973acdc26bfbfa6026d54a13b1c5d6ea23fe57a75b0be6f0dc54f24da75de1c2aa66b71e170828bec66f20f38b664676e203b3fe763265d3d9c3e5323236530a2e19980e02521fc77dc66609d58049e196d17db13d16e8c0e36376eac0d082909cbd787bbe84dacc308dfc3e394551c089b86c4f89b0b5b860f4d56e8c4998fb0ac6125de8a207fb4bd0682e0b4b63891819caa277d38f5025ad2d291eeed7c1ba574c8a0320221960fa8920d545bdc4bbfaec0c464a1c19d149198a2ae82c43d92e010eb5c884ce91c782c46bcbb9700210ccd2e0c66422fd1e253983f32be17c3e4d32ed2d69f64840fdf2022ab01caf89e69515d56bb7fa5ef5f70b1ac732d93716846eb27c61b637262bfffeb18204187ca02fc28f0af797f47263c9a123fa950781ef560ec7b3c756695559e5e30b03975e306f2c85b848093a4b36272e1a3d929240caccb20d95954a998b764f2a7bfe4ad31920a41809bb98650eda3b304aa24e35de6b7afac85ca269a77eb5362d5bf4f988b8d1fc3dc5f1049acead079e668196a41d5604a36fec743193afa1be77b4b26a002e15244a8d53370a813ca91191e3f36d8247cc84548309280dfed3fece528482afe0c8a029a648904d9c59540d07d8c2de0ce6978b529aafbb1508a5ce310f0129ec2b48078ca565c043033b9ed4c395ea3d8c2b0c8fab83dc4da4bfb17c743481f674894c9dc48be9548b31c537ff2047fb6e59e755aaaed20ed40f7733066215a2bac2a519ff363be70536b4bf5233e1abe9e56d629202cc93a81339c253a8cd5135869b2b7b238086b19637a6a3eaf58120f76b50cf94006445b38c0235c5354d87995d0e82941d79e83e6a36dd794779521d7d5e3be90e3987e20d5a2cdf47dffd15f3f05b7a292bed4b72fd22378f412d2141574b01b0b0bb9cecc40c87f719f9d59222c73bc1c939bc8a06d2318df47b2e101dad18a152ba5a4eb8dcb450f5bea745251599c4cb775fad532d50b32ddcf6e97f081929f608a8edbdcd9133c2d24513d4fb95ba7137668e7038fa4cfa54494342e03e8dda1db5a3626423cb875aa54", 0x1000}, 0x1, 0x0, 0x0, 0x50}, 0x4) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r1 = syz_open_dev$ndb(&(0x7f0000001140), 0x0, 0x280) (async) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001180)=0x14) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000001200)={0x0, 0x6}) (async) bind$can_j1939(r0, &(0x7f00000011c0)={0x1d, r2, 0x1, {0x1, 0x28cac3d0d7128467}, 0x1}, 0x18) (async) ioctl$NBD_SET_SOCK(r1, 0x125d, 0xffffffffffffffff) 14:18:11 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='\\.,\x00', &(0x7f0000000080)='(]-\x00', 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:11 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x20001) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{0x0, 0x1, 0x1, 0x1}, 0x4, 0x0, 0x0, 0x0, "f0e15536dcc87df2"}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000040)='lp\x00', 0x3) 14:18:11 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x109040) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) 14:18:11 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x30) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000001) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000001c0)={0x80000000, &(0x7f0000000100), &(0x7f0000000140)=[{{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000200)={{0x80000000, 0x0, 0x3, [0x80, 0x8001]}, {0x80000000, r2, 0x7, [0x0, 0x4]}, 0x1, [0x1, 0x8]}) (async, rerun: 32) write$yama_ptrace_scope(0xffffffffffffffff, &(0x7f0000000040)='3\x00', 0x2) (rerun: 32) 14:18:11 executing program 5: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0xffffffff, 0x9, 0x10001, 0x8, 0x7, 0x0, 0x3}, 0x1c) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x125f, r5) 14:18:11 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20000000) inotify_rm_watch(r1, r2) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:11 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x20001) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{0x0, 0x1, 0x1, 0x1}, 0x4, 0x0, 0x0, 0x0, "f0e15536dcc87df2"}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000040)='lp\x00', 0x3) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x20001) (async) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{0x0, 0x1, 0x1, 0x1}, 0x4, 0x0, 0x0, 0x0, "f0e15536dcc87df2"}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840) (async) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000040)='lp\x00', 0x3) (async) 14:18:11 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='\\.,\x00', &(0x7f0000000080)='(]-\x00', 0x0) (async, rerun: 64) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (rerun: 64) 14:18:11 executing program 0: clock_getres(0x4, &(0x7f0000000040)) clock_gettime(0x4, &(0x7f0000000080)) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) clock_getres(0x7, &(0x7f0000000140)) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 14:18:11 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x109040) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) 14:18:11 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20000000) inotify_rm_watch(r1, r2) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:11 executing program 5: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0xffffffff, 0x9, 0x10001, 0x8, 0x7, 0x0, 0x3}, 0x1c) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x125f, r5) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0xffffffff, 0x9, 0x10001, 0x8, 0x7, 0x0, 0x3}, 0x1c) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) ioctl$NBD_SET_SOCK(r0, 0x125f, r5) (async) 14:18:12 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x20001) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{0x0, 0x1, 0x1, 0x1}, 0x4, 0x0, 0x0, 0x0, "f0e15536dcc87df2"}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000040)='lp\x00', 0x3) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x20001) (async) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{0x0, 0x1, 0x1, 0x1}, 0x4, 0x0, 0x0, 0x0, "f0e15536dcc87df2"}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840) (async) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000040)='lp\x00', 0x3) (async) 14:18:12 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x800, 0x70bd29, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000040}, 0x8800) 14:18:12 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x109040) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) 14:18:12 executing program 0: clock_getres(0x4, &(0x7f0000000040)) clock_gettime(0x4, &(0x7f0000000080)) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) clock_getres(0x7, &(0x7f0000000140)) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) clock_getres(0x4, &(0x7f0000000040)) (async) clock_gettime(0x4, &(0x7f0000000080)) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) clock_getres(0x7, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) (async) pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async) 14:18:12 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20000000) (async) r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20000000) inotify_rm_watch(r1, r2) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:12 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x800, 0x70bd29, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000040}, 0x8800) 14:18:12 executing program 2: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000540)={&(0x7f0000000080), 0xc, &(0x7f0000000500)={&(0x7f00000000c0)={0x43d, 0x3f4, 0x8, 0x70bd2c, 0x25dfdbfc, {0x10, 0x0, 0x36, [0x7ff, 0x5, 0x94, 0xfffffff9, 0x1, 0x2, 0xff4, 0x80, 0x4b7faab3, 0x0, 0x8, 0x100, 0x5, 0x1, 0x3, 0x7fff, 0x8, 0x5, 0xfffffffb, 0x2b000000, 0x81, 0x9, 0x5, 0x10000, 0xfff, 0xffffffc0, 0x100, 0xfffffff9, 0x1, 0x29be5f93, 0x3, 0x7fffffff, 0x100, 0x0, 0x3, 0xe8, 0x3e9, 0x80000000, 0xfcc2ff3b, 0x1c22, 0x0, 0x1, 0x10001, 0x20, 0x6, 0x7, 0x8001, 0x9, 0x10a3, 0x1, 0x2, 0x6, 0x1f, 0x2, 0x400, 0xfff, 0x9, 0x1, 0x52e7, 0x4, 0x9, 0x1, 0x6, 0x5], [0x7, 0x9, 0x100, 0x5, 0x81, 0x0, 0x5, 0x5f, 0x9, 0x3, 0xbe, 0x4, 0x60000000, 0x0, 0x800, 0xffffff81, 0x1f, 0x7, 0x9, 0x8, 0x6, 0x2, 0x100, 0x0, 0x7, 0x4, 0x2d8, 0x0, 0xd546, 0x3, 0xff, 0x9, 0x7fff, 0x5, 0xffff, 0x80000001, 0x4, 0x6, 0x4, 0x9, 0xfffffffb, 0x7, 0x7, 0x3f, 0x10000, 0x8001, 0x9, 0x3, 0x0, 0x4, 0xc0e8, 0xc31, 0x8, 0x7, 0x4, 0x3, 0x5, 0x4, 0xf0c, 0x7fff, 0x80, 0x0, 0xc4, 0x4800000], [0x3f, 0x1ff, 0x2e, 0x7, 0xb9, 0xb22e, 0x5, 0x6, 0x2b00f2b4, 0x2, 0x9, 0x2, 0x1, 0x2, 0x401, 0x7183, 0x7, 0x7, 0x9, 0x3, 0xaf, 0x7, 0x4, 0x1, 0xec1d, 0xa52, 0x8, 0x6, 0x1f, 0x0, 0x3d64cd56, 0x1, 0x100, 0x4, 0x1, 0x3, 0x7fffffff, 0x0, 0x20, 0x6db, 0x5, 0x9, 0x6, 0x7ff, 0xa5, 0x100, 0xfffffffd, 0xffff0b85, 0x6, 0x0, 0x7, 0x3, 0x5, 0x3, 0x0, 0x3, 0x1000, 0xff, 0xca, 0x7, 0x8, 0x3, 0x80000001, 0x1], [0x6, 0x5, 0x0, 0x80, 0x9, 0x7, 0x100, 0x4, 0x0, 0x7, 0x9, 0x10001, 0x101, 0x28000, 0x5, 0xffffffff, 0x6, 0xfffffffb, 0xd82, 0x7, 0x1, 0x4a28, 0x8, 0x2, 0x10000, 0x0, 0x10000, 0x7ff, 0x7, 0x101, 0x8000, 0x266, 0x9, 0x8, 0x23d50890, 0xffffff81, 0x0, 0x9, 0x8, 0x1ff, 0xffffffff, 0x5, 0x779a897, 0x4, 0x1000, 0xfff, 0x3f, 0xffffffff, 0xfffff000, 0xfffffffe, 0x9, 0x7fff, 0xa3e9, 0x7, 0x200, 0x2, 0x4, 0x400, 0x1, 0x800, 0x9, 0xff, 0x38000, 0x3ff], 0x7, [':%$*[-\x00']}, ["", "", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x44}, 0x832d0603f54db1b5) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000580)=':%$*[-\x00', 0x0, r2) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0x1261, 0xffffffffffffffff) 14:18:12 executing program 5: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0xffffffff, 0x9, 0x10001, 0x8, 0x7, 0x0, 0x3}, 0x1c) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x125f, r5) 14:18:12 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, r1) 14:18:12 executing program 0: clock_getres(0x4, &(0x7f0000000040)) (async) clock_gettime(0x4, &(0x7f0000000080)) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) clock_getres(0x7, &(0x7f0000000140)) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) (async) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 14:18:12 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x800, 0x70bd29, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000040}, 0x8800) 14:18:12 executing program 2: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000540)={&(0x7f0000000080), 0xc, &(0x7f0000000500)={&(0x7f00000000c0)={0x43d, 0x3f4, 0x8, 0x70bd2c, 0x25dfdbfc, {0x10, 0x0, 0x36, [0x7ff, 0x5, 0x94, 0xfffffff9, 0x1, 0x2, 0xff4, 0x80, 0x4b7faab3, 0x0, 0x8, 0x100, 0x5, 0x1, 0x3, 0x7fff, 0x8, 0x5, 0xfffffffb, 0x2b000000, 0x81, 0x9, 0x5, 0x10000, 0xfff, 0xffffffc0, 0x100, 0xfffffff9, 0x1, 0x29be5f93, 0x3, 0x7fffffff, 0x100, 0x0, 0x3, 0xe8, 0x3e9, 0x80000000, 0xfcc2ff3b, 0x1c22, 0x0, 0x1, 0x10001, 0x20, 0x6, 0x7, 0x8001, 0x9, 0x10a3, 0x1, 0x2, 0x6, 0x1f, 0x2, 0x400, 0xfff, 0x9, 0x1, 0x52e7, 0x4, 0x9, 0x1, 0x6, 0x5], [0x7, 0x9, 0x100, 0x5, 0x81, 0x0, 0x5, 0x5f, 0x9, 0x3, 0xbe, 0x4, 0x60000000, 0x0, 0x800, 0xffffff81, 0x1f, 0x7, 0x9, 0x8, 0x6, 0x2, 0x100, 0x0, 0x7, 0x4, 0x2d8, 0x0, 0xd546, 0x3, 0xff, 0x9, 0x7fff, 0x5, 0xffff, 0x80000001, 0x4, 0x6, 0x4, 0x9, 0xfffffffb, 0x7, 0x7, 0x3f, 0x10000, 0x8001, 0x9, 0x3, 0x0, 0x4, 0xc0e8, 0xc31, 0x8, 0x7, 0x4, 0x3, 0x5, 0x4, 0xf0c, 0x7fff, 0x80, 0x0, 0xc4, 0x4800000], [0x3f, 0x1ff, 0x2e, 0x7, 0xb9, 0xb22e, 0x5, 0x6, 0x2b00f2b4, 0x2, 0x9, 0x2, 0x1, 0x2, 0x401, 0x7183, 0x7, 0x7, 0x9, 0x3, 0xaf, 0x7, 0x4, 0x1, 0xec1d, 0xa52, 0x8, 0x6, 0x1f, 0x0, 0x3d64cd56, 0x1, 0x100, 0x4, 0x1, 0x3, 0x7fffffff, 0x0, 0x20, 0x6db, 0x5, 0x9, 0x6, 0x7ff, 0xa5, 0x100, 0xfffffffd, 0xffff0b85, 0x6, 0x0, 0x7, 0x3, 0x5, 0x3, 0x0, 0x3, 0x1000, 0xff, 0xca, 0x7, 0x8, 0x3, 0x80000001, 0x1], [0x6, 0x5, 0x0, 0x80, 0x9, 0x7, 0x100, 0x4, 0x0, 0x7, 0x9, 0x10001, 0x101, 0x28000, 0x5, 0xffffffff, 0x6, 0xfffffffb, 0xd82, 0x7, 0x1, 0x4a28, 0x8, 0x2, 0x10000, 0x0, 0x10000, 0x7ff, 0x7, 0x101, 0x8000, 0x266, 0x9, 0x8, 0x23d50890, 0xffffff81, 0x0, 0x9, 0x8, 0x1ff, 0xffffffff, 0x5, 0x779a897, 0x4, 0x1000, 0xfff, 0x3f, 0xffffffff, 0xfffff000, 0xfffffffe, 0x9, 0x7fff, 0xa3e9, 0x7, 0x200, 0x2, 0x4, 0x400, 0x1, 0x800, 0x9, 0xff, 0x38000, 0x3ff], 0x7, [':%$*[-\x00']}, ["", "", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x44}, 0x832d0603f54db1b5) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000580)=':%$*[-\x00', 0x0, r2) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0x1261, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000540)={&(0x7f0000000080), 0xc, &(0x7f0000000500)={&(0x7f00000000c0)={0x43d, 0x3f4, 0x8, 0x70bd2c, 0x25dfdbfc, {0x10, 0x0, 0x36, [0x7ff, 0x5, 0x94, 0xfffffff9, 0x1, 0x2, 0xff4, 0x80, 0x4b7faab3, 0x0, 0x8, 0x100, 0x5, 0x1, 0x3, 0x7fff, 0x8, 0x5, 0xfffffffb, 0x2b000000, 0x81, 0x9, 0x5, 0x10000, 0xfff, 0xffffffc0, 0x100, 0xfffffff9, 0x1, 0x29be5f93, 0x3, 0x7fffffff, 0x100, 0x0, 0x3, 0xe8, 0x3e9, 0x80000000, 0xfcc2ff3b, 0x1c22, 0x0, 0x1, 0x10001, 0x20, 0x6, 0x7, 0x8001, 0x9, 0x10a3, 0x1, 0x2, 0x6, 0x1f, 0x2, 0x400, 0xfff, 0x9, 0x1, 0x52e7, 0x4, 0x9, 0x1, 0x6, 0x5], [0x7, 0x9, 0x100, 0x5, 0x81, 0x0, 0x5, 0x5f, 0x9, 0x3, 0xbe, 0x4, 0x60000000, 0x0, 0x800, 0xffffff81, 0x1f, 0x7, 0x9, 0x8, 0x6, 0x2, 0x100, 0x0, 0x7, 0x4, 0x2d8, 0x0, 0xd546, 0x3, 0xff, 0x9, 0x7fff, 0x5, 0xffff, 0x80000001, 0x4, 0x6, 0x4, 0x9, 0xfffffffb, 0x7, 0x7, 0x3f, 0x10000, 0x8001, 0x9, 0x3, 0x0, 0x4, 0xc0e8, 0xc31, 0x8, 0x7, 0x4, 0x3, 0x5, 0x4, 0xf0c, 0x7fff, 0x80, 0x0, 0xc4, 0x4800000], [0x3f, 0x1ff, 0x2e, 0x7, 0xb9, 0xb22e, 0x5, 0x6, 0x2b00f2b4, 0x2, 0x9, 0x2, 0x1, 0x2, 0x401, 0x7183, 0x7, 0x7, 0x9, 0x3, 0xaf, 0x7, 0x4, 0x1, 0xec1d, 0xa52, 0x8, 0x6, 0x1f, 0x0, 0x3d64cd56, 0x1, 0x100, 0x4, 0x1, 0x3, 0x7fffffff, 0x0, 0x20, 0x6db, 0x5, 0x9, 0x6, 0x7ff, 0xa5, 0x100, 0xfffffffd, 0xffff0b85, 0x6, 0x0, 0x7, 0x3, 0x5, 0x3, 0x0, 0x3, 0x1000, 0xff, 0xca, 0x7, 0x8, 0x3, 0x80000001, 0x1], [0x6, 0x5, 0x0, 0x80, 0x9, 0x7, 0x100, 0x4, 0x0, 0x7, 0x9, 0x10001, 0x101, 0x28000, 0x5, 0xffffffff, 0x6, 0xfffffffb, 0xd82, 0x7, 0x1, 0x4a28, 0x8, 0x2, 0x10000, 0x0, 0x10000, 0x7ff, 0x7, 0x101, 0x8000, 0x266, 0x9, 0x8, 0x23d50890, 0xffffff81, 0x0, 0x9, 0x8, 0x1ff, 0xffffffff, 0x5, 0x779a897, 0x4, 0x1000, 0xfff, 0x3f, 0xffffffff, 0xfffff000, 0xfffffffe, 0x9, 0x7fff, 0xa3e9, 0x7, 0x200, 0x2, 0x4, 0x400, 0x1, 0x800, 0x9, 0xff, 0x38000, 0x3ff], 0x7, [':%$*[-\x00']}, ["", "", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x44}, 0x832d0603f54db1b5) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000580)=':%$*[-\x00', 0x0, r2) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r3, 0x1261, 0xffffffffffffffff) (async) 14:18:12 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r0, {0x81}}, './file0\x00'}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) getsockopt$packet_buf(r1, 0x107, 0x5, &(0x7f0000000500)=""/223, &(0x7f0000000780)=0xdf) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000600)={0x0, 0x7, 0x0, &(0x7f0000000080)=[{}, {}, {0x80000000}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000340)=[{}, {}], 0x5, 0x0, &(0x7f0000000440)=[{}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000500)}) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000740)={0x80000000, &(0x7f0000000680)=[{}, {0x80000000, 0x0}], &(0x7f00000006c0)}) r5 = add_key(&(0x7f0000000880)='big_key\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='+', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r5, 0x0) keyctl$set_timeout(0xf, r5, 0x0) r6 = add_key(&(0x7f0000000880)='big_key\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='+', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r6, 0x0) keyctl$set_timeout(0xf, r6, 0x0) keyctl$negate(0xd, r5, 0x81, r6) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000800)={{r3, r4, 0x3, [0x6c3, 0xffff]}, {0x80000000, 0x0, 0x2, [0x3, 0x3]}, 0x4, [0x2, 0xfffffffe]}) 14:18:12 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20003) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:12 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, r1) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x125d, r1) (async) 14:18:12 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) read$fb(0xffffffffffffffff, &(0x7f0000000240)=""/80, 0x50) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3fa, 0x400, 0x70bd29, 0x25dfdbfc, {0x1, 0x0, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24048005}, 0x44001) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x3f7, 0x20, 0x70bd29, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4081}, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x3f7, 0x20, 0x70bd29, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 14:18:12 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r0, {0x81}}, './file0\x00'}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) getsockopt$packet_buf(r1, 0x107, 0x5, &(0x7f0000000500)=""/223, &(0x7f0000000780)=0xdf) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000600)={0x0, 0x7, 0x0, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000340)=[{}, {}], 0x5, 0x0, &(0x7f0000000440)=[{}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000500)}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000600)={0x0, 0x7, 0x0, &(0x7f0000000080)=[{}, {}, {0x80000000}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000340)=[{}, {}], 0x5, 0x0, &(0x7f0000000440)=[{}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000500)}) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000740)={0x80000000, &(0x7f0000000680)=[{}, {0x80000000, 0x0}], &(0x7f00000006c0)}) r5 = add_key(&(0x7f0000000880)='big_key\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='+', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r5, 0x0) keyctl$set_timeout(0xf, r5, 0x0) r6 = add_key(&(0x7f0000000880)='big_key\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='+', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r6, 0x0) keyctl$set_timeout(0xf, r6, 0x0) (async) keyctl$set_timeout(0xf, r6, 0x0) keyctl$negate(0xd, r5, 0x81, r6) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000800)={{r3, r4, 0x3, [0x6c3, 0xffff]}, {0x80000000, 0x0, 0x2, [0x3, 0x3]}, 0x4, [0x2, 0xfffffffe]}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000800)={{r3, r4, 0x3, [0x6c3, 0xffff]}, {0x80000000, 0x0, 0x2, [0x3, 0x3]}, 0x4, [0x2, 0xfffffffe]}) 14:18:12 executing program 2: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000540)={&(0x7f0000000080), 0xc, &(0x7f0000000500)={&(0x7f00000000c0)={0x43d, 0x3f4, 0x8, 0x70bd2c, 0x25dfdbfc, {0x10, 0x0, 0x36, [0x7ff, 0x5, 0x94, 0xfffffff9, 0x1, 0x2, 0xff4, 0x80, 0x4b7faab3, 0x0, 0x8, 0x100, 0x5, 0x1, 0x3, 0x7fff, 0x8, 0x5, 0xfffffffb, 0x2b000000, 0x81, 0x9, 0x5, 0x10000, 0xfff, 0xffffffc0, 0x100, 0xfffffff9, 0x1, 0x29be5f93, 0x3, 0x7fffffff, 0x100, 0x0, 0x3, 0xe8, 0x3e9, 0x80000000, 0xfcc2ff3b, 0x1c22, 0x0, 0x1, 0x10001, 0x20, 0x6, 0x7, 0x8001, 0x9, 0x10a3, 0x1, 0x2, 0x6, 0x1f, 0x2, 0x400, 0xfff, 0x9, 0x1, 0x52e7, 0x4, 0x9, 0x1, 0x6, 0x5], [0x7, 0x9, 0x100, 0x5, 0x81, 0x0, 0x5, 0x5f, 0x9, 0x3, 0xbe, 0x4, 0x60000000, 0x0, 0x800, 0xffffff81, 0x1f, 0x7, 0x9, 0x8, 0x6, 0x2, 0x100, 0x0, 0x7, 0x4, 0x2d8, 0x0, 0xd546, 0x3, 0xff, 0x9, 0x7fff, 0x5, 0xffff, 0x80000001, 0x4, 0x6, 0x4, 0x9, 0xfffffffb, 0x7, 0x7, 0x3f, 0x10000, 0x8001, 0x9, 0x3, 0x0, 0x4, 0xc0e8, 0xc31, 0x8, 0x7, 0x4, 0x3, 0x5, 0x4, 0xf0c, 0x7fff, 0x80, 0x0, 0xc4, 0x4800000], [0x3f, 0x1ff, 0x2e, 0x7, 0xb9, 0xb22e, 0x5, 0x6, 0x2b00f2b4, 0x2, 0x9, 0x2, 0x1, 0x2, 0x401, 0x7183, 0x7, 0x7, 0x9, 0x3, 0xaf, 0x7, 0x4, 0x1, 0xec1d, 0xa52, 0x8, 0x6, 0x1f, 0x0, 0x3d64cd56, 0x1, 0x100, 0x4, 0x1, 0x3, 0x7fffffff, 0x0, 0x20, 0x6db, 0x5, 0x9, 0x6, 0x7ff, 0xa5, 0x100, 0xfffffffd, 0xffff0b85, 0x6, 0x0, 0x7, 0x3, 0x5, 0x3, 0x0, 0x3, 0x1000, 0xff, 0xca, 0x7, 0x8, 0x3, 0x80000001, 0x1], [0x6, 0x5, 0x0, 0x80, 0x9, 0x7, 0x100, 0x4, 0x0, 0x7, 0x9, 0x10001, 0x101, 0x28000, 0x5, 0xffffffff, 0x6, 0xfffffffb, 0xd82, 0x7, 0x1, 0x4a28, 0x8, 0x2, 0x10000, 0x0, 0x10000, 0x7ff, 0x7, 0x101, 0x8000, 0x266, 0x9, 0x8, 0x23d50890, 0xffffff81, 0x0, 0x9, 0x8, 0x1ff, 0xffffffff, 0x5, 0x779a897, 0x4, 0x1000, 0xfff, 0x3f, 0xffffffff, 0xfffff000, 0xfffffffe, 0x9, 0x7fff, 0xa3e9, 0x7, 0x200, 0x2, 0x4, 0x400, 0x1, 0x800, 0x9, 0xff, 0x38000, 0x3ff], 0x7, [':%$*[-\x00']}, ["", "", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x44}, 0x832d0603f54db1b5) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000580)=':%$*[-\x00', 0x0, r2) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0x1261, 0xffffffffffffffff) 14:18:12 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4b0d00) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:12 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20003) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:12 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) read$fb(0xffffffffffffffff, &(0x7f0000000240)=""/80, 0x50) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3fa, 0x400, 0x70bd29, 0x25dfdbfc, {0x1, 0x0, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24048005}, 0x44001) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x3f7, 0x20, 0x70bd29, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4081}, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x3f7, 0x20, 0x70bd29, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x80) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) (async) read$fb(0xffffffffffffffff, &(0x7f0000000240)=""/80, 0x50) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3fa, 0x400, 0x70bd29, 0x25dfdbfc, {0x1, 0x0, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24048005}, 0x44001) (async) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x3f7, 0x20, 0x70bd29, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4081}, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x3f7, 0x20, 0x70bd29, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x80) (async) 14:18:12 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x125d, r1) 14:18:12 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r0, {0x81}}, './file0\x00'}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) getsockopt$packet_buf(r1, 0x107, 0x5, &(0x7f0000000500)=""/223, &(0x7f0000000780)=0xdf) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000600)={0x0, 0x7, 0x0, &(0x7f0000000080)=[{}, {}, {0x80000000}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000340)=[{}, {}], 0x5, 0x0, &(0x7f0000000440)=[{}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000500)}) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000740)={0x80000000, &(0x7f0000000680)=[{}, {0x80000000, 0x0}], &(0x7f00000006c0)}) (async) r5 = add_key(&(0x7f0000000880)='big_key\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='+', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r5, 0x0) (async) keyctl$set_timeout(0xf, r5, 0x0) (async) r6 = add_key(&(0x7f0000000880)='big_key\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='+', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r6, 0x0) (async) keyctl$set_timeout(0xf, r6, 0x0) (async) keyctl$negate(0xd, r5, 0x81, r6) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000800)={{r3, r4, 0x3, [0x6c3, 0xffff]}, {0x80000000, 0x0, 0x2, [0x3, 0x3]}, 0x4, [0x2, 0xfffffffe]}) 14:18:12 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4b0d00) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4b0d00) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async) 14:18:12 executing program 2: openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000000c0)=ANY=[]) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000080)='\x00', 0x0, r4) 14:18:12 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20003) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:12 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x5}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) 14:18:12 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x2000}, 0x4) 14:18:12 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4b0d00) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4b0d00) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async) 14:18:12 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) (async) read$fb(0xffffffffffffffff, &(0x7f0000000240)=""/80, 0x50) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3fa, 0x400, 0x70bd29, 0x25dfdbfc, {0x1, 0x0, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24048005}, 0x44001) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x3f7, 0x20, 0x70bd29, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4081}, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x3f7, 0x20, 0x70bd29, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 14:18:12 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x98, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x400}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x6, 0x2, 0x13}, @fda={0x66646185, 0xc2, 0x2, 0x34}, @fda={0x66646185, 0x6, 0x0, 0x19}}, &(0x7f00000001c0)={0x0, 0x20, 0x40}}}, @acquire={0x40046305, 0x2}], 0x52, 0x0, &(0x7f00000002c0)="f5dc3613153d39977ee50d7545423ee5b686ff58fc5c1eb8f526b69ddc8ea6e7fd327bed3c150e95676ecc2351bd9d142e243997e40026c4d51575e5c5836e4ba4a7c10d3ebb2b614defe16542d09f178d95"}) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f8, 0x10, 0x70bd2d, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc000}, 0x800) 14:18:12 executing program 2: openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000000c0)=ANY=[]) (async) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) (async) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000080)='\x00', 0x0, r4) 14:18:12 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:12 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x2000}, 0x4) 14:18:12 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x280001) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x95}, 0x20048805) 14:18:12 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x5}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x5}, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) (async) 14:18:12 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x98, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x400}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x6, 0x2, 0x13}, @fda={0x66646185, 0xc2, 0x2, 0x34}, @fda={0x66646185, 0x6, 0x0, 0x19}}, &(0x7f00000001c0)={0x0, 0x20, 0x40}}}, @acquire={0x40046305, 0x2}], 0x52, 0x0, &(0x7f00000002c0)="f5dc3613153d39977ee50d7545423ee5b686ff58fc5c1eb8f526b69ddc8ea6e7fd327bed3c150e95676ecc2351bd9d142e243997e40026c4d51575e5c5836e4ba4a7c10d3ebb2b614defe16542d09f178d95"}) (async) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f8, 0x10, 0x70bd2d, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc000}, 0x800) 14:18:12 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x2000}, 0x4) 14:18:12 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:12 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x280001) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x95}, 0x20048805) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x280001) (async) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x95}, 0x20048805) (async) 14:18:13 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x5}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) 14:18:13 executing program 2: openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000000c0)=ANY=[]) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (rerun: 64) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async, rerun: 32) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) (async) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000080)='\x00', 0x0, r4) 14:18:13 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x98, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x400}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x6, 0x2, 0x13}, @fda={0x66646185, 0xc2, 0x2, 0x34}, @fda={0x66646185, 0x6, 0x0, 0x19}}, &(0x7f00000001c0)={0x0, 0x20, 0x40}}}, @acquire={0x40046305, 0x2}], 0x52, 0x0, &(0x7f00000002c0)="f5dc3613153d39977ee50d7545423ee5b686ff58fc5c1eb8f526b69ddc8ea6e7fd327bed3c150e95676ecc2351bd9d142e243997e40026c4d51575e5c5836e4ba4a7c10d3ebb2b614defe16542d09f178d95"}) (async, rerun: 32) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f8, 0x10, 0x70bd2d, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc000}, 0x800) 14:18:13 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:13 executing program 3: getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x80) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x125d, 0xffffffffffffffff) 14:18:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x280001) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async, rerun: 32) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x95}, 0x20048805) 14:18:13 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2cc082) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x3f2, 0x701, 0x70bd26, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008081}, 0x20000011) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x7}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nicvf0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x400c080}, 0x10000800) 14:18:13 executing program 3: getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x80) (async, rerun: 32) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (rerun: 32) landlock_restrict_self(r0, 0x0) (async, rerun: 64) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$NBD_SET_SOCK(r1, 0x125d, 0xffffffffffffffff) 14:18:13 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400640) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 14:18:13 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) accept4$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$FBIOGET_VSCREENINFO(r1, 0x4600, &(0x7f0000000040)) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:13 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2cc082) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000140), r3) ioctl$NBD_SET_SOCK(r0, 0x301, r2) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x300000f, 0x10, r4, 0xef000) 14:18:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x3f2, 0x701, 0x70bd26, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008081}, 0x20000011) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x7}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nicvf0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x400c080}, 0x10000800) 14:18:13 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400640) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400640) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) 14:18:13 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) accept4$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$FBIOGET_VSCREENINFO(r1, 0x4600, &(0x7f0000000040)) (async) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:13 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2cc082) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2cc082) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) 14:18:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000140), r3) ioctl$NBD_SET_SOCK(r0, 0x301, r2) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x300000f, 0x10, r4, 0xef000) 14:18:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x3f2, 0x701, 0x70bd26, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008081}, 0x20000011) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x7}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nicvf0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x400c080}, 0x10000800) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x3f2, 0x701, 0x70bd26, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008081}, 0x20000011) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x7}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nicvf0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x400c080}, 0x10000800) (async) 14:18:13 executing program 3: getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x80) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x125d, 0xffffffffffffffff) 14:18:13 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400640) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400640) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) 14:18:13 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) sendmsg$NLBL_MGMT_C_ADD(r1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14}]}, 0x58}}, 0x4004000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r6, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r7, 0xc0189371, &(0x7f0000000500)=ANY=[@ANYBLOB="010000080100000018000000c88000000000000000d2000046225857c2778673d86a71c1815cbb3c2516113bd200be60f0d5718b4ac67a476c6dbc87bc7e88188c9f496a95b8fe28d9bbe5e22e4b", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r10, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r12 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r12, 0x40206435, 0x0) r13 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r13, 0x40206435, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa4, r3, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4d}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8, 0x1, r13}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fffffffffffffff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fffffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80000001}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20008814}, 0x810) 14:18:13 executing program 3: sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000180)={'\x00', 0x4, 0x2, 0x7}) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) 14:18:13 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) accept4$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$FBIOGET_VSCREENINFO(r1, 0x4600, &(0x7f0000000040)) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:13 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000140), r3) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000140), r3) ioctl$NBD_SET_SOCK(r0, 0x301, r2) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x300000f, 0x10, r4, 0xef000) 14:18:13 executing program 2: accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000000c0)={0x904, r2}, 0x0) 14:18:13 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x44011}, 0x8000) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x143640) ioctl$NBD_SET_SOCK(r1, 0x1260, 0xffffffffffffffff) 14:18:13 executing program 5: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200800) ioctl$NBD_SET_SOCK(r1, 0x125f, 0xffffffffffffffff) 14:18:13 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) sendmsg$NLBL_MGMT_C_ADD(r1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14}]}, 0x58}}, 0x4004000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r6, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r7, 0xc0189371, &(0x7f0000000500)=ANY=[@ANYBLOB="010000080100000018000000c88000000000000000d2000046225857c2778673d86a71c1815cbb3c2516113bd200be60f0d5718b4ac67a476c6dbc87bc7e88188c9f496a95b8fe28d9bbe5e22e4b", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r10, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r12 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r12, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r12, 0x40206435, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r13 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r13, 0x40206435, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa4, r3, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4d}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8, 0x1, r13}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fffffffffffffff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fffffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80000001}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20008814}, 0x810) 14:18:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x600, 0x70bd27, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008851}, 0x80) 14:18:13 executing program 2: accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000000c0)={0x904, r2}, 0x0) 14:18:13 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x44011}, 0x8000) (async) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x143640) ioctl$NBD_SET_SOCK(r1, 0x1260, 0xffffffffffffffff) 14:18:13 executing program 5: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200800) ioctl$NBD_SET_SOCK(r1, 0x125f, 0xffffffffffffffff) 14:18:13 executing program 3: sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000180)={'\x00', 0x4, 0x2, 0x7}) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000180)={'\x00', 0x4, 0x2, 0x7}) (async) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) (async) 14:18:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x600, 0x70bd27, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008851}, 0x80) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x600, 0x70bd27, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008851}, 0x80) (async) 14:18:13 executing program 2: accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000000c0)={0x904, r2}, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000000c0)={0x904, r2}, 0x0) (async) 14:18:13 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) sendmsg$NLBL_MGMT_C_ADD(r1, 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14}]}, 0x58}}, 0x4004000) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) (async, rerun: 32) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r6, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r7, 0xc0189371, &(0x7f0000000500)=ANY=[@ANYBLOB="010000080100000018000000c88000000000000000d2000046225857c2778673d86a71c1815cbb3c2516113bd200be60f0d5718b4ac67a476c6dbc87bc7e88188c9f496a95b8fe28d9bbe5e22e4b", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) (async) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r10, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r12 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r12, 0x40206435, 0x0) (async) r13 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r13, 0x40206435, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa4, r3, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4d}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8, 0x1, r13}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fffffffffffffff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fffffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80000001}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20008814}, 0x810) 14:18:13 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x44011}, 0x8000) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x143640) ioctl$NBD_SET_SOCK(r1, 0x1260, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x44011}, 0x8000) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x143640) (async) ioctl$NBD_SET_SOCK(r1, 0x1260, 0xffffffffffffffff) (async) 14:18:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x600, 0x70bd27, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008851}, 0x80) 14:18:13 executing program 5: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200800) ioctl$NBD_SET_SOCK(r1, 0x125f, 0xffffffffffffffff) 14:18:13 executing program 3: sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000180)={'\x00', 0x4, 0x2, 0x7}) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) 14:18:14 executing program 4: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x125e, 0xffffffffffffffff) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f00000000c0)={'\x00', 0x20, 0x1, 0x80000000}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\xbe\xfd{\x80\xff\xff\x00\xde\xfb9d\xff\x00\xcd\xedH{\x9a}\xc2\xbe\x05\x9b\xe1\x12:\xf3l2\x8e\x85\xd8Q\x9fE4\x04er0}, './file0\x00'}) ioctl$NBD_SET_SOCK(r0, 0x125f, r1) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x200, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000080)={r2, 0x55b8}) 14:18:14 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) pidfd_send_signal(r1, 0x1c, &(0x7f0000000080)={0x28, 0x5, 0x186}, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="000068e982c89db1f9f4d6a2", @ANYRES32=r0, @ANYBLOB="02000000000000002e2f66696c653000"]) r5 = pidfd_getfd(r4, r0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r6, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r5, 0x301, r6) 14:18:14 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x2, 0x10b3, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x240040a0) 14:18:14 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x70}}, './file0\x00'}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, &(0x7f0000000140)={{0x4, 0x9}, {0x3, 0x3fffffff}, 0x5, 0x4}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r1, 0x0, 0x1, 0x0, 0x800, 0x6}) 14:18:14 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="08630100"/18], 0x30, 0x0, &(0x7f0000000080)="ca068f51e93cc591d8fe4785ee7f914da4a2a02e3fcb9825f5c06fbeaf833d03756d75f38929cd59ddaa58eec9429b50"}) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) 14:18:14 executing program 4: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x125e, 0xffffffffffffffff) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f00000000c0)={'\x00', 0x20, 0x1, 0x80000000}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\xbe\xfd{\x80\xff\xff\x00\xde\xfb9d\xff\x00\xcd\xedH{\x9a}\xc2\xbe\x05\x9b\xe1\x12:\xf3l2\x8e\x85\xd8Q\x9fE4\x04er0, @ANYBLOB="02000000000000002e2f66696c653000"]) r5 = pidfd_getfd(r4, r0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r6, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r5, 0x301, r6) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) pidfd_send_signal(r1, 0x1c, &(0x7f0000000080)={0x28, 0x5, 0x186}, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="000068e982c89db1f9f4d6a2", @ANYRES32=r0, @ANYBLOB="02000000000000002e2f66696c653000"]) (async) pidfd_getfd(r4, r0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r6, 0x40206435, 0x0) (async) ioctl$NBD_SET_SOCK(r5, 0x301, r6) (async) 14:18:14 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x44040) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$NBD_SET_SOCK(r0, 0x125f, r1) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x200, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000080)={r2, 0x55b8}) 14:18:14 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="08630100"/18], 0x30, 0x0, &(0x7f0000000080)="ca068f51e93cc591d8fe4785ee7f914da4a2a02e3fcb9825f5c06fbeaf833d03756d75f38929cd59ddaa58eec9429b50"}) (async) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) 14:18:14 executing program 4: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x125e, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f00000000c0)={'\x00', 0x20, 0x1, 0x80000000}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\xbe\xfd{\x80\xff\xff\x00\xde\xfb9d\xff\x00\xcd\xedH{\x9a}\xc2\xbe\x05\x9b\xe1\x12:\xf3l2\x8e\x85\xd8Q\x9fE4\x04er0, {0x70}}, './file0\x00'}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, &(0x7f0000000140)={{0x4, 0x9}, {0x3, 0x3fffffff}, 0x5, 0x4}) (async) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r1, 0x0, 0x1, 0x0, 0x800, 0x6}) 14:18:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x2, 0x10b3, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x240040a0) 14:18:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x3a800) 14:18:14 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x44040) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$NBD_SET_SOCK(r0, 0x125f, r1) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x200, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000080)={r2, 0x55b8}) 14:18:14 executing program 4: socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x6b2041) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:14 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x70}}, './file0\x00'}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, &(0x7f0000000140)={{0x4, 0x9}, {0x3, 0x3fffffff}, 0x5, 0x4}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r1, 0x0, 0x1, 0x0, 0x800, 0x6}) 14:18:14 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) pidfd_send_signal(r1, 0x1c, &(0x7f0000000080)={0x28, 0x5, 0x186}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="000068e982c89db1f9f4d6a2", @ANYRES32=r0, @ANYBLOB="02000000000000002e2f66696c653000"]) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="000068e982c89db1f9f4d6a2", @ANYRES32=r0, @ANYBLOB="02000000000000002e2f66696c653000"]) pidfd_getfd(r4, r0, 0x0) (async) r5 = pidfd_getfd(r4, r0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r6, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r5, 0x301, r6) 14:18:14 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="08630100"/18], 0x30, 0x0, &(0x7f0000000080)="ca068f51e93cc591d8fe4785ee7f914da4a2a02e3fcb9825f5c06fbeaf833d03756d75f38929cd59ddaa58eec9429b50"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="08630100"/18], 0x30, 0x0, &(0x7f0000000080)="ca068f51e93cc591d8fe4785ee7f914da4a2a02e3fcb9825f5c06fbeaf833d03756d75f38929cd59ddaa58eec9429b50"}) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) 14:18:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x3a800) 14:18:14 executing program 4: socket$nl_audit(0x10, 0x3, 0x9) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x6b2041) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:14 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) write$yama_ptrace_scope(0xffffffffffffffff, &(0x7f0000000040)='3\x00', 0x2) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:14 executing program 1: ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000080)={"23a47a33a7559390341d6340fb7a22e0a29ac21a19b482b2c63ec97371ef9009"}) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:14 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x111041) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) 14:18:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x3a800) 14:18:14 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) write$yama_ptrace_scope(0xffffffffffffffff, &(0x7f0000000040)='3\x00', 0x2) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:14 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) socketpair(0x10, 0x4, 0x1, &(0x7f0000000040)) 14:18:14 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x111041) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x111041) (async) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) 14:18:14 executing program 4: socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x6b2041) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:14 executing program 1: ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000080)={"23a47a33a7559390341d6340fb7a22e0a29ac21a19b482b2c63ec97371ef9009"}) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:14 executing program 2: ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x7, "cc75a44155bce1bbe98a8d33b3b78fe5e84fb19bbb3b66fd507eeb0a427aa1df"}) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000080)=[@free_buffer, @decrefs={0x40046307, 0x3}], 0xc0, 0x0, &(0x7f00000000c0)="09f429bb832c903ad90ead03138ea18c9b6d18aaa8135c0672420143493fd6a344c2c2ad820eb03b810c736768aa4014463a6bbdd8f1adfe8edf7fcdaea5053d118e14820af91fe6af30939d97d90c3d94f89751eec9c0e5c9b7168bd3456d86c62241c327315fce3d4d2163259dc24d55cf98a5f64906da63f7abfe0884fd1166bb48d37cf63a2c8d33afa503da234624222bab641235c198f117334fb2d09db3bd45074c835ecee17737ab237d4ccdaaf01d6f15f1480b44c912e101255f67"}) 14:18:14 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) socketpair(0x10, 0x4, 0x1, &(0x7f0000000040)) 14:18:14 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) write$yama_ptrace_scope(0xffffffffffffffff, &(0x7f0000000040)='3\x00', 0x2) (async) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:14 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x111041) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) 14:18:14 executing program 1: ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000080)={"23a47a33a7559390341d6340fb7a22e0a29ac21a19b482b2c63ec97371ef9009"}) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000080)={"23a47a33a7559390341d6340fb7a22e0a29ac21a19b482b2c63ec97371ef9009"}) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async) 14:18:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '+%.+'}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4000004) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0x125e, 0xffffffffffffffff) 14:18:14 executing program 2: ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x7, "cc75a44155bce1bbe98a8d33b3b78fe5e84fb19bbb3b66fd507eeb0a427aa1df"}) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000080)=[@free_buffer, @decrefs={0x40046307, 0x3}], 0xc0, 0x0, &(0x7f00000000c0)="09f429bb832c903ad90ead03138ea18c9b6d18aaa8135c0672420143493fd6a344c2c2ad820eb03b810c736768aa4014463a6bbdd8f1adfe8edf7fcdaea5053d118e14820af91fe6af30939d97d90c3d94f89751eec9c0e5c9b7168bd3456d86c62241c327315fce3d4d2163259dc24d55cf98a5f64906da63f7abfe0884fd1166bb48d37cf63a2c8d33afa503da234624222bab641235c198f117334fb2d09db3bd45074c835ecee17737ab237d4ccdaaf01d6f15f1480b44c912e101255f67"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x7, "cc75a44155bce1bbe98a8d33b3b78fe5e84fb19bbb3b66fd507eeb0a427aa1df"}) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40) (async) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) fsmount(0xffffffffffffffff, 0x0, 0x2) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000080)=[@free_buffer, @decrefs={0x40046307, 0x3}], 0xc0, 0x0, &(0x7f00000000c0)="09f429bb832c903ad90ead03138ea18c9b6d18aaa8135c0672420143493fd6a344c2c2ad820eb03b810c736768aa4014463a6bbdd8f1adfe8edf7fcdaea5053d118e14820af91fe6af30939d97d90c3d94f89751eec9c0e5c9b7168bd3456d86c62241c327315fce3d4d2163259dc24d55cf98a5f64906da63f7abfe0884fd1166bb48d37cf63a2c8d33afa503da234624222bab641235c198f117334fb2d09db3bd45074c835ecee17737ab237d4ccdaaf01d6f15f1480b44c912e101255f67"}) (async) 14:18:14 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) socketpair(0x10, 0x4, 0x1, &(0x7f0000000040)) 14:18:14 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x9400) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) 14:18:14 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r1, 0x0, 0x1, 0x0, 0x1, 0xe78fb, 0x3ed24b}) 14:18:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '+%.+'}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}}, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4000004) (async) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0x125e, 0xffffffffffffffff) 14:18:15 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x12540) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000040)={'\x00', 0x9, 0x2, 0x6}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000100)={'\x00', 0x7fff, 0x1, 0xfffffff8}) r2 = fsmount(r1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), r1) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x40) ioctl$PTP_PIN_GETFUNC2(r2, 0xc0603d0f, &(0x7f0000000180)={'\x00', 0x4, 0x0, 0x5}) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) 14:18:15 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x381002) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:15 executing program 2: ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x7, "cc75a44155bce1bbe98a8d33b3b78fe5e84fb19bbb3b66fd507eeb0a427aa1df"}) (async) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000080)=[@free_buffer, @decrefs={0x40046307, 0x3}], 0xc0, 0x0, &(0x7f00000000c0)="09f429bb832c903ad90ead03138ea18c9b6d18aaa8135c0672420143493fd6a344c2c2ad820eb03b810c736768aa4014463a6bbdd8f1adfe8edf7fcdaea5053d118e14820af91fe6af30939d97d90c3d94f89751eec9c0e5c9b7168bd3456d86c62241c327315fce3d4d2163259dc24d55cf98a5f64906da63f7abfe0884fd1166bb48d37cf63a2c8d33afa503da234624222bab641235c198f117334fb2d09db3bd45074c835ecee17737ab237d4ccdaaf01d6f15f1480b44c912e101255f67"}) 14:18:15 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x9400) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x9400) (async) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) (async) 14:18:15 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r1, 0x0, 0x1, 0x0, 0x1, 0xe78fb, 0x3ed24b}) 14:18:15 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '+%.+'}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}}, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4000004) (async) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0x125e, 0xffffffffffffffff) 14:18:15 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x381002) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) process_madvise(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="224ee4f1da27d651835d9915088ef32552e73f89452478ecf4a1b505ebc38fe8deb531c529271dc75ff0ea5123766c2181bfa77402211c28bd1d0cc43029677c9705a8f640fb133ef7c97776926766494ef3f3b4283226710a49328525501077816ebec6565d6b9dc81ad1fbf3a8f6fa00b288a9a7698872b588fba6b80e2862d1a541894f602f99ac8580bfdbf37d922b66bfae4e054be9aeb33c0ee0bc8aa3eeed8811dbd7c256c4316f20f6ac57406545321b6f2c8f89f68a30", 0xbb}, {&(0x7f0000000100)="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", 0xfa}], 0x2, 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0x1261, 0xffffffffffffffff) 14:18:15 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x12540) (async) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000040)={'\x00', 0x9, 0x2, 0x6}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000100)={'\x00', 0x7fff, 0x1, 0xfffffff8}) r2 = fsmount(r1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), r1) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x40) (async) ioctl$PTP_PIN_GETFUNC2(r2, 0xc0603d0f, &(0x7f0000000180)={'\x00', 0x4, 0x0, 0x5}) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) 14:18:15 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x9400) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) 14:18:15 executing program 4: syz_open_dev$media(&(0x7f0000000040), 0x3, 0x402500) r0 = fsmount(0xffffffffffffffff, 0x1, 0x80) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000140)={0x80000000, &(0x7f0000000080), &(0x7f00000000c0)}) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x125e, 0xffffffffffffffff) 14:18:15 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r1, 0x0, 0x1, 0x0, 0x1, 0xe78fb, 0x3ed24b}) 14:18:15 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x381002) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:15 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x12540) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000040)={'\x00', 0x9, 0x2, 0x6}) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (rerun: 64) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000100)={'\x00', 0x7fff, 0x1, 0xfffffff8}) (async) r2 = fsmount(r1, 0x0, 0x0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), r1) (rerun: 64) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x40) (async) ioctl$PTP_PIN_GETFUNC2(r2, 0xc0603d0f, &(0x7f0000000180)={'\x00', 0x4, 0x0, 0x5}) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) 14:18:15 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8880}, 0x44004) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '/dev/nbd#\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000000000000000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x80) 14:18:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async, rerun: 64) process_madvise(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="224ee4f1da27d651835d9915088ef32552e73f89452478ecf4a1b505ebc38fe8deb531c529271dc75ff0ea5123766c2181bfa77402211c28bd1d0cc43029677c9705a8f640fb133ef7c97776926766494ef3f3b4283226710a49328525501077816ebec6565d6b9dc81ad1fbf3a8f6fa00b288a9a7698872b588fba6b80e2862d1a541894f602f99ac8580bfdbf37d922b66bfae4e054be9aeb33c0ee0bc8aa3eeed8811dbd7c256c4316f20f6ac57406545321b6f2c8f89f68a30", 0xbb}, {&(0x7f0000000100)="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", 0xfa}], 0x2, 0x0, 0x0) (async, rerun: 64) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0x1261, 0xffffffffffffffff) 14:18:15 executing program 4: syz_open_dev$media(&(0x7f0000000040), 0x3, 0x402500) (async) r0 = fsmount(0xffffffffffffffff, 0x1, 0x80) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000140)={0x80000000, &(0x7f0000000080), &(0x7f00000000c0)}) (async) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x125e, 0xffffffffffffffff) 14:18:15 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffb, r0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$NBD_SET_SOCK(r1, 0x301, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 14:18:15 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) socketpair(0x1, 0x3, 0x200, &(0x7f0000000040)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x241bdb854c5be28e}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '/dev/nbd#\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '/dev/nbd#\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2c}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xa60}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008010}, 0x20000800) 14:18:15 executing program 4: syz_open_dev$media(&(0x7f0000000040), 0x3, 0x402500) r0 = fsmount(0xffffffffffffffff, 0x1, 0x80) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000140)={0x80000000, &(0x7f0000000080), &(0x7f00000000c0)}) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x125e, 0xffffffffffffffff) syz_open_dev$media(&(0x7f0000000040), 0x3, 0x402500) (async) fsmount(0xffffffffffffffff, 0x1, 0x80) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000140)={0x80000000, &(0x7f0000000080), &(0x7f00000000c0)}) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r1, 0x125e, 0xffffffffffffffff) (async) 14:18:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) process_madvise(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="224ee4f1da27d651835d9915088ef32552e73f89452478ecf4a1b505ebc38fe8deb531c529271dc75ff0ea5123766c2181bfa77402211c28bd1d0cc43029677c9705a8f640fb133ef7c97776926766494ef3f3b4283226710a49328525501077816ebec6565d6b9dc81ad1fbf3a8f6fa00b288a9a7698872b588fba6b80e2862d1a541894f602f99ac8580bfdbf37d922b66bfae4e054be9aeb33c0ee0bc8aa3eeed8811dbd7c256c4316f20f6ac57406545321b6f2c8f89f68a30", 0xbb}, {&(0x7f0000000100)="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", 0xfa}], 0x2, 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0x1261, 0xffffffffffffffff) 14:18:15 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffb, r0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$NBD_SET_SOCK(r1, 0x301, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) (async) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffb, r0, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$NBD_SET_SOCK(r1, 0x301, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) 14:18:15 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8880}, 0x44004) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '/dev/nbd#\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000000000000000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x80) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) (async) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8880}, 0x44004) (async) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '/dev/nbd#\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000000000000000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async) 14:18:15 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async) socketpair(0x1, 0x3, 0x200, &(0x7f0000000040)) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x241bdb854c5be28e}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '/dev/nbd#\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '/dev/nbd#\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2c}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xa60}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008010}, 0x20000800) 14:18:15 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x1261, 0xffffffffffffffff) prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/4096) 14:18:15 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffb, r0, 0x0) (async) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$NBD_SET_SOCK(r1, 0x301, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 14:18:15 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x105000, 0x3) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:15 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x3, 0x60}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8050) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x174, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x72, 0x63}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x3ff}, @NL80211_ATTR_IE={0x142, 0x2a, [@supported_rates, @tim={0x5, 0x56, {0x9, 0x75, 0x0, "28d7eba8e3f808e183852bd89c74593ae42bd29bf4863bcad05f0d275057bbc8d8f81fa4e7a01af562fd1f88ce5c487f4430b537e4131af0bc769996bebea4731a6cadbddd8dbab6cc194920e49f191edb4250"}}, @tim={0x5, 0xe2, {0x6, 0x16, 0x6, "304a022cbdebeb490f0d688c576d6c3d240d116a56cb510e272ae0b826d40c300352cfb3bf6dfe2b0faf692d81ece63072e362d0d47d13b6e886758679fedc9c20f65762623ceec8bbd5867b4779cffd09dbf50d1d3dd55f8a949cbd1fe222c7109367de8119a8a67af538ac37060ac9ae27d9ab6217af3241dea798e972ea84630cc81623ab32813719646d58ff7f40fd9f49dcc483f3f182679955563642a41dea1b5b0e1189e55f2808a7a5ef998f7231ccaa7a453ac6396a5adf2d20a01b0a8709f42ad1bf1e90242680d6afa59578f2c96d4fa615d7ed9b738ba2ce03"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x3}]}, 0x174}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r1, 0x201, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x24000845) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6b3, 0x53}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x20008091) 14:18:15 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) (async) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8880}, 0x44004) (async) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '/dev/nbd#\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000000000000000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x80) 14:18:15 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x1261, 0xffffffffffffffff) prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/4096) 14:18:15 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async) socketpair(0x1, 0x3, 0x200, &(0x7f0000000040)) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x241bdb854c5be28e}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '/dev/nbd#\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '/dev/nbd#\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2c}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xa60}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008010}, 0x20000800) 14:18:15 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x404c00) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) socketpair(0x11, 0x5, 0x7f, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 14:18:15 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x3, 0x60}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8050) (async) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x174, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x72, 0x63}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x3ff}, @NL80211_ATTR_IE={0x142, 0x2a, [@supported_rates, @tim={0x5, 0x56, {0x9, 0x75, 0x0, "28d7eba8e3f808e183852bd89c74593ae42bd29bf4863bcad05f0d275057bbc8d8f81fa4e7a01af562fd1f88ce5c487f4430b537e4131af0bc769996bebea4731a6cadbddd8dbab6cc194920e49f191edb4250"}}, @tim={0x5, 0xe2, {0x6, 0x16, 0x6, "304a022cbdebeb490f0d688c576d6c3d240d116a56cb510e272ae0b826d40c300352cfb3bf6dfe2b0faf692d81ece63072e362d0d47d13b6e886758679fedc9c20f65762623ceec8bbd5867b4779cffd09dbf50d1d3dd55f8a949cbd1fe222c7109367de8119a8a67af538ac37060ac9ae27d9ab6217af3241dea798e972ea84630cc81623ab32813719646d58ff7f40fd9f49dcc483f3f182679955563642a41dea1b5b0e1189e55f2808a7a5ef998f7231ccaa7a453ac6396a5adf2d20a01b0a8709f42ad1bf1e90242680d6afa59578f2c96d4fa615d7ed9b738ba2ce03"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x3}]}, 0x174}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r1, 0x201, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x24000845) (async) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6b3, 0x53}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x20008091) 14:18:15 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x105000, 0x3) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:15 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x1261, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x1261, 0xffffffffffffffff) prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/4096) 14:18:15 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) read$ptp(r0, &(0x7f0000000040)=""/248, 0xf8) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) ioctl$NBD_SET_SOCK(r0, 0x125f, r0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000200)) 14:18:15 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x404c00) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) socketpair(0x11, 0x5, 0x7f, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x404c00) (async) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) socketpair(0x11, 0x5, 0x7f, &(0x7f0000000040)) (async) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) 14:18:15 executing program 1: ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)}) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:15 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x105000, 0x3) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x105000, 0x3) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) 14:18:15 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x3, 0x60}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8050) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x174, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x72, 0x63}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x3ff}, @NL80211_ATTR_IE={0x142, 0x2a, [@supported_rates, @tim={0x5, 0x56, {0x9, 0x75, 0x0, "28d7eba8e3f808e183852bd89c74593ae42bd29bf4863bcad05f0d275057bbc8d8f81fa4e7a01af562fd1f88ce5c487f4430b537e4131af0bc769996bebea4731a6cadbddd8dbab6cc194920e49f191edb4250"}}, @tim={0x5, 0xe2, {0x6, 0x16, 0x6, "304a022cbdebeb490f0d688c576d6c3d240d116a56cb510e272ae0b826d40c300352cfb3bf6dfe2b0faf692d81ece63072e362d0d47d13b6e886758679fedc9c20f65762623ceec8bbd5867b4779cffd09dbf50d1d3dd55f8a949cbd1fe222c7109367de8119a8a67af538ac37060ac9ae27d9ab6217af3241dea798e972ea84630cc81623ab32813719646d58ff7f40fd9f49dcc483f3f182679955563642a41dea1b5b0e1189e55f2808a7a5ef998f7231ccaa7a453ac6396a5adf2d20a01b0a8709f42ad1bf1e90242680d6afa59578f2c96d4fa615d7ed9b738ba2ce03"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x3}]}, 0x174}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r1, 0x201, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x24000845) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6b3, 0x53}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x20008091) 14:18:16 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) read$ptp(r0, &(0x7f0000000040)=""/248, 0xf8) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) (async) ioctl$NBD_SET_SOCK(r0, 0x125f, r0) (async) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000200)) 14:18:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000080)='dctcp\x00', 0x6) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000100)={0x9, 0x0}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000140)={r2, 0x8}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) 14:18:16 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000240)={0x42c, 0x3f4, 0x10, 0x70bd2c, 0x25dfdbfe, {0x1, 0x2, 0xc, [0x3, 0x2, 0x22b, 0x7, 0x8000, 0x8cf, 0x800, 0x7, 0x3f, 0x10001, 0x81ba, 0x7fff, 0x9, 0xffffffff, 0x0, 0x1, 0x9, 0x7, 0x401, 0x8, 0x4f7d, 0x2db2, 0x200, 0x5, 0x0, 0x35, 0x8, 0x0, 0x7b, 0x400, 0x3, 0x2, 0x1f, 0x6b, 0x400, 0x4, 0xfc, 0x92d5, 0x9, 0xda43, 0x8000, 0x5, 0x8, 0x400, 0x4, 0x7, 0x8000, 0x8, 0x5, 0x5, 0x4, 0x100, 0x1, 0x5, 0x2b221434, 0x6, 0x1f, 0x80000000, 0x7, 0x8000, 0x80, 0x7e, 0x9, 0x2], [0x100, 0x100, 0xfff, 0x1, 0x6, 0x5, 0x10000, 0xfffffffa, 0x2, 0x8, 0x370e1e8c, 0x5, 0x38, 0x1, 0x92c, 0x9, 0x6, 0x7, 0x3, 0x2, 0x9, 0x78, 0x2, 0x9, 0x2b73, 0x7, 0xffffffff, 0x4, 0x0, 0x300000, 0x3, 0x80000001, 0x5, 0x2, 0x3f, 0x0, 0x20400, 0x80000001, 0xcb8d, 0x9, 0x10001, 0x1, 0xfd, 0xe3b, 0x6, 0xf6, 0x2a3, 0x9, 0x7fffffff, 0x9, 0xfffff8a2, 0x3, 0x9, 0xfeb4b361, 0x4, 0x800, 0x46, 0x800, 0x0, 0xe0, 0x3, 0x5, 0x1, 0xfffff2be], [0x0, 0x8, 0x8, 0x5, 0x0, 0x8, 0x1ff, 0xffffffff, 0x9c54, 0x7, 0x1, 0xfff, 0x7f, 0x9, 0x1, 0x8, 0x0, 0x7, 0x8, 0x3, 0xff, 0x80000001, 0x7, 0x7, 0x9, 0x1, 0x3, 0x7fff, 0x80000000, 0x1ff, 0x2, 0x4, 0xffffffff, 0x80, 0x1a5, 0xea6, 0x401, 0x40, 0xc87, 0x75, 0x1, 0x7ff, 0x9, 0xdd81, 0x4, 0x2, 0x7, 0x0, 0x81, 0x5, 0x4, 0x2, 0x4e2a, 0x0, 0x9b, 0x9, 0x9, 0x4, 0x247e, 0x5, 0x1, 0x0, 0x2, 0x1], [0x7, 0x2b2, 0x1, 0x66, 0x0, 0x3f, 0x7, 0x2, 0x40, 0x40, 0x0, 0x0, 0x2, 0x3ff, 0x1, 0x8000, 0x1, 0x65321f97, 0x5, 0xfff, 0x6, 0x2, 0x7, 0x8001, 0x7f, 0x7, 0x1, 0x905, 0x9, 0x9, 0x200, 0x800, 0xffff, 0x0, 0x7, 0x8, 0x1, 0x0, 0x78a, 0x1, 0x0, 0x200000, 0x6c1, 0x7fffffff, 0x38e6, 0x100, 0xc2f, 0x8, 0xffff, 0x159, 0x3, 0x3, 0x6, 0xffff, 0x6, 0xffff, 0x1, 0x9, 0x6, 0x1000, 0x3, 0x200, 0xfff, 0x8], 0x9, ['+-:+.,(]\x00']}, ["", "", "", "", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$NBD_SET_SOCK(r1, 0x125e, r3) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) read$ptp(r4, &(0x7f0000000100)=""/63, 0x3f) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) pidfd_send_signal(r5, 0xd, &(0x7f0000000080)={0x14, 0x8, 0x40800}, 0x0) 14:18:16 executing program 1: ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)}) (async, rerun: 64) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:16 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x20}, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x840000, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x0, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) 14:18:16 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x404c00) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) socketpair(0x11, 0x5, 0x7f, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 14:18:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000080)='dctcp\x00', 0x6) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000100)={0x9, 0x0}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000140)={r2, 0x8}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000080)='dctcp\x00', 0x6) (async) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000100)={0x9}) (async) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000140)={r2, 0x8}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) 14:18:16 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) read$ptp(r0, &(0x7f0000000040)=""/248, 0xf8) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) (async) ioctl$NBD_SET_SOCK(r0, 0x125f, r0) (async, rerun: 32) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000200)) (rerun: 32) 14:18:16 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8400) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 14:18:16 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000240)={0x42c, 0x3f4, 0x10, 0x70bd2c, 0x25dfdbfe, {0x1, 0x2, 0xc, [0x3, 0x2, 0x22b, 0x7, 0x8000, 0x8cf, 0x800, 0x7, 0x3f, 0x10001, 0x81ba, 0x7fff, 0x9, 0xffffffff, 0x0, 0x1, 0x9, 0x7, 0x401, 0x8, 0x4f7d, 0x2db2, 0x200, 0x5, 0x0, 0x35, 0x8, 0x0, 0x7b, 0x400, 0x3, 0x2, 0x1f, 0x6b, 0x400, 0x4, 0xfc, 0x92d5, 0x9, 0xda43, 0x8000, 0x5, 0x8, 0x400, 0x4, 0x7, 0x8000, 0x8, 0x5, 0x5, 0x4, 0x100, 0x1, 0x5, 0x2b221434, 0x6, 0x1f, 0x80000000, 0x7, 0x8000, 0x80, 0x7e, 0x9, 0x2], [0x100, 0x100, 0xfff, 0x1, 0x6, 0x5, 0x10000, 0xfffffffa, 0x2, 0x8, 0x370e1e8c, 0x5, 0x38, 0x1, 0x92c, 0x9, 0x6, 0x7, 0x3, 0x2, 0x9, 0x78, 0x2, 0x9, 0x2b73, 0x7, 0xffffffff, 0x4, 0x0, 0x300000, 0x3, 0x80000001, 0x5, 0x2, 0x3f, 0x0, 0x20400, 0x80000001, 0xcb8d, 0x9, 0x10001, 0x1, 0xfd, 0xe3b, 0x6, 0xf6, 0x2a3, 0x9, 0x7fffffff, 0x9, 0xfffff8a2, 0x3, 0x9, 0xfeb4b361, 0x4, 0x800, 0x46, 0x800, 0x0, 0xe0, 0x3, 0x5, 0x1, 0xfffff2be], [0x0, 0x8, 0x8, 0x5, 0x0, 0x8, 0x1ff, 0xffffffff, 0x9c54, 0x7, 0x1, 0xfff, 0x7f, 0x9, 0x1, 0x8, 0x0, 0x7, 0x8, 0x3, 0xff, 0x80000001, 0x7, 0x7, 0x9, 0x1, 0x3, 0x7fff, 0x80000000, 0x1ff, 0x2, 0x4, 0xffffffff, 0x80, 0x1a5, 0xea6, 0x401, 0x40, 0xc87, 0x75, 0x1, 0x7ff, 0x9, 0xdd81, 0x4, 0x2, 0x7, 0x0, 0x81, 0x5, 0x4, 0x2, 0x4e2a, 0x0, 0x9b, 0x9, 0x9, 0x4, 0x247e, 0x5, 0x1, 0x0, 0x2, 0x1], [0x7, 0x2b2, 0x1, 0x66, 0x0, 0x3f, 0x7, 0x2, 0x40, 0x40, 0x0, 0x0, 0x2, 0x3ff, 0x1, 0x8000, 0x1, 0x65321f97, 0x5, 0xfff, 0x6, 0x2, 0x7, 0x8001, 0x7f, 0x7, 0x1, 0x905, 0x9, 0x9, 0x200, 0x800, 0xffff, 0x0, 0x7, 0x8, 0x1, 0x0, 0x78a, 0x1, 0x0, 0x200000, 0x6c1, 0x7fffffff, 0x38e6, 0x100, 0xc2f, 0x8, 0xffff, 0x159, 0x3, 0x3, 0x6, 0xffff, 0x6, 0xffff, 0x1, 0x9, 0x6, 0x1000, 0x3, 0x200, 0xfff, 0x8], 0x9, ['+-:+.,(]\x00']}, ["", "", "", "", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) (async) ioctl$NBD_SET_SOCK(r1, 0x125e, r3) (async) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) read$ptp(r4, &(0x7f0000000100)=""/63, 0x3f) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) pidfd_send_signal(r5, 0xd, &(0x7f0000000080)={0x14, 0x8, 0x40800}, 0x0) 14:18:16 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x20}, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x840000, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x0, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x20}, 0x8) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x840000, 0x0) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100), 0x8) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) (async) 14:18:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000080)='dctcp\x00', 0x6) (async) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000100)={0x9, 0x0}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000140)={r2, 0x8}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) 14:18:16 executing program 1: ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)}) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:16 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:16 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8400) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8400) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 14:18:16 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x6, 0x2, 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000180)={r2}) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 14:18:16 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x1261, 0xffffffffffffffff) 14:18:16 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:16 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x20}, 0x8) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x840000, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x0, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) 14:18:16 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000240)={0x42c, 0x3f4, 0x10, 0x70bd2c, 0x25dfdbfe, {0x1, 0x2, 0xc, [0x3, 0x2, 0x22b, 0x7, 0x8000, 0x8cf, 0x800, 0x7, 0x3f, 0x10001, 0x81ba, 0x7fff, 0x9, 0xffffffff, 0x0, 0x1, 0x9, 0x7, 0x401, 0x8, 0x4f7d, 0x2db2, 0x200, 0x5, 0x0, 0x35, 0x8, 0x0, 0x7b, 0x400, 0x3, 0x2, 0x1f, 0x6b, 0x400, 0x4, 0xfc, 0x92d5, 0x9, 0xda43, 0x8000, 0x5, 0x8, 0x400, 0x4, 0x7, 0x8000, 0x8, 0x5, 0x5, 0x4, 0x100, 0x1, 0x5, 0x2b221434, 0x6, 0x1f, 0x80000000, 0x7, 0x8000, 0x80, 0x7e, 0x9, 0x2], [0x100, 0x100, 0xfff, 0x1, 0x6, 0x5, 0x10000, 0xfffffffa, 0x2, 0x8, 0x370e1e8c, 0x5, 0x38, 0x1, 0x92c, 0x9, 0x6, 0x7, 0x3, 0x2, 0x9, 0x78, 0x2, 0x9, 0x2b73, 0x7, 0xffffffff, 0x4, 0x0, 0x300000, 0x3, 0x80000001, 0x5, 0x2, 0x3f, 0x0, 0x20400, 0x80000001, 0xcb8d, 0x9, 0x10001, 0x1, 0xfd, 0xe3b, 0x6, 0xf6, 0x2a3, 0x9, 0x7fffffff, 0x9, 0xfffff8a2, 0x3, 0x9, 0xfeb4b361, 0x4, 0x800, 0x46, 0x800, 0x0, 0xe0, 0x3, 0x5, 0x1, 0xfffff2be], [0x0, 0x8, 0x8, 0x5, 0x0, 0x8, 0x1ff, 0xffffffff, 0x9c54, 0x7, 0x1, 0xfff, 0x7f, 0x9, 0x1, 0x8, 0x0, 0x7, 0x8, 0x3, 0xff, 0x80000001, 0x7, 0x7, 0x9, 0x1, 0x3, 0x7fff, 0x80000000, 0x1ff, 0x2, 0x4, 0xffffffff, 0x80, 0x1a5, 0xea6, 0x401, 0x40, 0xc87, 0x75, 0x1, 0x7ff, 0x9, 0xdd81, 0x4, 0x2, 0x7, 0x0, 0x81, 0x5, 0x4, 0x2, 0x4e2a, 0x0, 0x9b, 0x9, 0x9, 0x4, 0x247e, 0x5, 0x1, 0x0, 0x2, 0x1], [0x7, 0x2b2, 0x1, 0x66, 0x0, 0x3f, 0x7, 0x2, 0x40, 0x40, 0x0, 0x0, 0x2, 0x3ff, 0x1, 0x8000, 0x1, 0x65321f97, 0x5, 0xfff, 0x6, 0x2, 0x7, 0x8001, 0x7f, 0x7, 0x1, 0x905, 0x9, 0x9, 0x200, 0x800, 0xffff, 0x0, 0x7, 0x8, 0x1, 0x0, 0x78a, 0x1, 0x0, 0x200000, 0x6c1, 0x7fffffff, 0x38e6, 0x100, 0xc2f, 0x8, 0xffff, 0x159, 0x3, 0x3, 0x6, 0xffff, 0x6, 0xffff, 0x1, 0x9, 0x6, 0x1000, 0x3, 0x200, 0xfff, 0x8], 0x9, ['+-:+.,(]\x00']}, ["", "", "", "", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$NBD_SET_SOCK(r1, 0x125e, r3) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) (async, rerun: 32) read$ptp(r4, &(0x7f0000000100)=""/63, 0x3f) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) pidfd_send_signal(r5, 0xd, &(0x7f0000000080)={0x14, 0x8, 0x40800}, 0x0) 14:18:16 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8400) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8400) (async) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) (async) 14:18:16 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x6, 0x2, 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000180)={r2}) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 14:18:16 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:16 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) 14:18:16 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x1261, 0xffffffffffffffff) 14:18:16 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:16 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) 14:18:16 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x6, 0x2, 0x8}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x6, 0x2, 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000180)={r2}) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 14:18:16 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x1261, 0xffffffffffffffff) 14:18:16 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) 14:18:16 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) 14:18:16 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) 14:18:16 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200080) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 14:18:16 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x1) r1 = pidfd_getfd(r0, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$NBD_SET_SOCK(r2, 0x125f, r1) r3 = pidfd_getfd(r2, r1, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r5 = fsmount(r1, 0x0, 0x6) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000080)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f00000000c0)={0x38, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x200}}, './file0\x00'}) 14:18:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x103000) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x105000, 0x0) 14:18:16 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) 14:18:16 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) 14:18:16 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200080) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 14:18:16 executing program 3: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) 14:18:16 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = fsmount(0xffffffffffffffff, 0x0, 0x1) r1 = pidfd_getfd(r0, r0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$NBD_SET_SOCK(r2, 0x125f, r1) (async) r3 = pidfd_getfd(r2, r1, 0x0) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r5 = fsmount(r1, 0x0, 0x6) (async) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000080)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f00000000c0)={0x38, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x200}}, './file0\x00'}) 14:18:17 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:17 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x103000) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x105000, 0x0) 14:18:17 executing program 0: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff}}, './file0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002480), 0x40480, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000024c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendmsg$xdp(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000080)="0d8c5fef79d51f6e5b29139842bd59815aad0b07f889b8c499b11d51d6a5d4aab816166e98ea35014de87cfebb28bcc7966b66473aa427b18a48e2d884f0d62136e9228c3b41022d2816f51c061fad9c9076a71f8d735874d9bea1b22aedb1fd0f829dd70d95a7de0b0313bf734b342067f873e60273d9fdbf951a0dd2a41de6a24fda", 0x83}, {&(0x7f0000002500)="4e197ef7de2680db338a1844c958e95501b365666726c39e41adfca58df8423a10b5969c0b3f4cbfed8f7ec6c34a6e3bad9677b4e24cff2c92cd05422535c418a7db9556053d12abf2ea80f1fba0c9dcb6a770dbc91ef9ea70bbc5a94c806a114b5643059367b69cee01ab19275f18edf47b6e0bf77721a2827e95d5e5234f9193106a020fb3ec29e3d78e8007949b8927dffc1a53dc1af36528a37912c89d31e81fad1161085f57447441390061831ee71141c24aa378959914bac705d81a8de14c89a5999f40221ac67ce1bbca3e1d4ce9d6e4", 0xd4}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="fb146953d9250cb0f6c4859c198064d0cc000bc055e7feb64d46e859345cb3fb210b347f756abe24616f91b7d3df16d6793c70c6a522f1be8231cb0bc09ea591ec687a669d0c2d5dc2ed70195dc27d163ecd4b6e0b4b102409fd119cc0bcd2f8fd3e2ec1a1c34059b04dbebc0bdf9cd71711c04a41c4aabfce27b6c34bba6699e6cf73596da4ca22f77cc6d266fd7f7f3cc29a2212696800f9726554192dd5470251e08d37ce20419a", 0xa9}, {&(0x7f0000001240)="47feb23911d0b837497980d1e1981ebd02ba63cd8decc5d87415c0e853cedd6f0dd3836f0da89bbe420ad797d4ed47a36f25492f7b85416de66a21ca383b72733e7bcc5d347d0a4ace574176a3190408351e16f94e48fc121be07dbe006a85568cd3b79dd664cd08e97f8bb8789d73dbe162c1a8f83749730d48e07c4a37d361b5ed1626b53426162bcf0c7e2a4b47e7db51b819c4c0526edf7010b122b050", 0x9f}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="4e823b8e0ce0ede45809ed1d40e013098ad36ee1ff7e4b3793acb112909e26b3c898931a53f6c138818efc89ef2d913bc4e5db2eeb0d8d7c8a0b23adeb58f04c6486f0ed4a9656607dc9dd6d1ce6a3240908a91123c8a10e4c1a0762c480b3f1f00bec99ab4386839ed8d2c04db11ec3f590cb9d72cc6a300dc750a59f4876823b228d92", 0x84}], 0x7, 0x0, 0x0, 0x800}, 0x800) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0x301, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000002600)={{0x1, 0x1, 0x18, r4, {0xffffffff}}, './file0\x00'}) 14:18:17 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200080) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 14:18:17 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000080)={0x900, r2}, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) 14:18:17 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:17 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x1) r1 = pidfd_getfd(r0, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$NBD_SET_SOCK(r2, 0x125f, r1) r3 = pidfd_getfd(r2, r1, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r5 = fsmount(r1, 0x0, 0x6) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000080)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f00000000c0)={0x38, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x200}}, './file0\x00'}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x1) (async) pidfd_getfd(r0, r0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) (async) ioctl$NBD_SET_SOCK(r2, 0x125f, r1) (async) pidfd_getfd(r2, r1, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async) fsmount(r1, 0x0, 0x6) (async) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000080)={0xc}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f00000000c0)={0x38, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x200}}, './file0\x00'}) (async) 14:18:17 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xa00) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x8054, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) recvfrom$packet(r0, &(0x7f0000000240)=""/191, 0xbf, 0x140, &(0x7f0000000100)={0x11, 0xf5, r2, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r4, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}]}, 0x20}}, 0x8000) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0d4}, 0x8000) 14:18:17 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x103000) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x105000, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x103000) (async) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x105000, 0x0) (async) 14:18:17 executing program 0: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff}}, './file0\x00'}) openat$autofs(0xffffffffffffff9c, &(0x7f0000002480), 0x40480, 0x0) (async) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002480), 0x40480, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000024c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendmsg$xdp(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000080)="0d8c5fef79d51f6e5b29139842bd59815aad0b07f889b8c499b11d51d6a5d4aab816166e98ea35014de87cfebb28bcc7966b66473aa427b18a48e2d884f0d62136e9228c3b41022d2816f51c061fad9c9076a71f8d735874d9bea1b22aedb1fd0f829dd70d95a7de0b0313bf734b342067f873e60273d9fdbf951a0dd2a41de6a24fda", 0x83}, {&(0x7f0000002500)="4e197ef7de2680db338a1844c958e95501b365666726c39e41adfca58df8423a10b5969c0b3f4cbfed8f7ec6c34a6e3bad9677b4e24cff2c92cd05422535c418a7db9556053d12abf2ea80f1fba0c9dcb6a770dbc91ef9ea70bbc5a94c806a114b5643059367b69cee01ab19275f18edf47b6e0bf77721a2827e95d5e5234f9193106a020fb3ec29e3d78e8007949b8927dffc1a53dc1af36528a37912c89d31e81fad1161085f57447441390061831ee71141c24aa378959914bac705d81a8de14c89a5999f40221ac67ce1bbca3e1d4ce9d6e4", 0xd4}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="fb146953d9250cb0f6c4859c198064d0cc000bc055e7feb64d46e859345cb3fb210b347f756abe24616f91b7d3df16d6793c70c6a522f1be8231cb0bc09ea591ec687a669d0c2d5dc2ed70195dc27d163ecd4b6e0b4b102409fd119cc0bcd2f8fd3e2ec1a1c34059b04dbebc0bdf9cd71711c04a41c4aabfce27b6c34bba6699e6cf73596da4ca22f77cc6d266fd7f7f3cc29a2212696800f9726554192dd5470251e08d37ce20419a", 0xa9}, {&(0x7f0000001240)="47feb23911d0b837497980d1e1981ebd02ba63cd8decc5d87415c0e853cedd6f0dd3836f0da89bbe420ad797d4ed47a36f25492f7b85416de66a21ca383b72733e7bcc5d347d0a4ace574176a3190408351e16f94e48fc121be07dbe006a85568cd3b79dd664cd08e97f8bb8789d73dbe162c1a8f83749730d48e07c4a37d361b5ed1626b53426162bcf0c7e2a4b47e7db51b819c4c0526edf7010b122b050", 0x9f}, {&(0x7f0000001300)="457aca510ee5346ed520a2ebce77de5ffbdd596d8c6b560a62427b66b9dfbed29e2d3710ab2e08ba42f2a340197720461d74e35cec14d6cf97f69940191a889a6fc15c5e525d3b6b104522dcb6d24bfa156716aa767bd8723128c78dcbe701b00c790c26a4432ee23ce20486711ed2492acf51ae57bb5ab6da22fee300877f6c35f2397208f39a4f44f222410a87b290d4258b98bbcfc9fb4d6da1a4a38e154c46d209b4bf071058650d7c87e32fb8f5f7f2e53fdf19cab3d9d4d1352cde9e2a2d564f100bb8fe3ef2f09b73de9ad91e8ae49dd0e3fc89c03c471475f50969ae4c0bd7c5742544cec3c725b005b565aab6eacec3046c80251a96d6bb8c4eddd90f221f04de085567ef200fbc1f82162ecd418e33a5e80b401fcbe52788e8f84330c7dd652ee25254c1b08963c0ed3b71cdc0396c902098c7dfa36134f7ed57371d97b153229237c88e1a28644bdab92e2b5c2ad6c5f06968c8d33392f61395c8115435621881c6e9963b26d8298ca4d4a90ab73be746066e3bed30c3437cfe6f2042e112f898800475a949b4a64b42e6061bc1adcb769864713c6fe8147184311010e725bacd3832fc46df07f9bdbcea934824ea41f6d5309a006e8d272b2d6a2e08c39e7728924b85ba6df0f22e9901f8bb4215e97fcdbe2745bf79e3ec6e5d8d988d398f2606615811355c18652eb2dec89018325a906698fb03982344303107eb68d80dd2c4c29cbeafdac4c16df4d25e6a1c17f9e8d325f08a9512ac56cecca3a55b3c8f6896f897695802694ab9eb29ff27d93b2b33d10be85dc475db519883f46083bbf0a54509efa81cd33f1050e15704c10202477ab0cb7884fffefea8f5ad38bcf95f3e886abf020ad47391a56bc1c2cd6e8c292c11a2dfb7e85f4301e11b6269f0014961de2d4a3b63c31ce3049ece26cf6818fb0fea63cf2fe6b2a7637a140a06e1a9aa931826bb5f6b9a9927bb5ea093406a5ac3d4aaeffa6dc864a06ec82e6fd812139f86dfacfa74583a80b71a59d1df6d6d849d6d78729bcef4312d4b0984cf12b14a87c900967d428319304808582153cefab5d9eb2eb17485e87c4f1f43b3f5731483e6c7db3a2724ed2b47f1d8869d976ef4dbb962ec9a4a226f76d41538dbc4c1646930eccae0b369748957c54fa4de0c0c5e616c1897c4c2ee734d1d09eefbf7bbed122a1f923c6646f8cc04e10a3b1cc57cf7faac4f336fe6360c1769f2678a6deafb9b2dcb4037295320c8397e096d9247ea0217a45883d0efa520c34ddab57562cdf2592d033b4eab8302b7e0edc2132537929ae0b39557c1605e98f7322374363d885d110ed13a3f05736eaa7cde260e3a50277deece89d3df677cd6a5809bfe3793ce16d31bdb560f35de14ff4462c95baa69959a1b92afb3d9d65517b73844b9bb58a2e9b6def8c2a1e9404e20329b3a85c78d536a3eea16418b1e9aad01ae96a71845bda9d3be46f5744df6e2a2aa12f5466830e78ba27083230b57045fe70a5264e4558d3858f6a2d45f21833b48559e49587940a203af5e26a7b6146925c48f1ef75f55db21cedd84a1eafe8fde32425b277da43e53cb90c67ec9eaf6893d64ef7fad9d8cfe2ff4eb8fe2f21f7f97516af96ee69365e2885f321672c695b135bc03cd58aaa92bd0539458c2123ad8a844f1b0f89bd16673a7fceadd6b30f877a2eac20b9919c362a512a8fd9cf9353c860607bc0af73964b2f6153be030e3ade1cde9b09157426c91a9e8485f53e696d7d0f8ee7e4546107e3ff32c8e9d2d1fc64c9939e9b97f1cf1d165011a07739f6d000564cbe9fea34a94d46646edfaa62060b40ec9df7e56abe5e16e58f0a804707ce52c72012e1f0787ed7cc14ea4864e81e9e702e4734ff0918ff571d75aa620581683d842ddc5b485a9a84d3cded2e1cc71a989ab5cd1b1f4a16bee54537504a3e0dca4fb6482d3f8b66ee557ba6c6a8015a9ec302c512d5decbdc6b0ec2aff39a21c14601367d0af50475b4f6b61321d63e370ea2a312d3d3f23d12701cacc81c6bbccf7c734bf4f8b14b02564f83b8058f6f168d5487ee218af59622aa4c6d55aa941a5312d550d9d15e897956307c73e300f2bbf73e3bb64a883cb33fa523a50b9a0367706b96c5e5eaa2c4540c3db0b46990247fdf16c020651c530c7ff7ae2f1fa4a17171324f5d9375890d1b07cd140a3d05d6c4ec773fb75803d22240f2f3ee2a847fb2c51667d6c8f84771b4398c08282360c3307cc4f461df90d1be89c7c97b5be49a40848c83a2a93b2480a0ef57b9ae3c70602a5dc4388c2a6603437b0949fece7ef4ba2a21a85fb6cbac14db39aeaf0d8d0c9da5818f74c01d59a67a04b5cb44f5c85614ba5d002500e55c7da750a03e7c7f1338c90b1eeb4baab5e05e61f4950d9e352a84895b71fc12cd6a1dc9bd54bd5aa4d1bf3e368c01fb924964abcf89cc648cd0f3997c719247473e6a7719a1cbc38ffbd947fe9ff5d76add195f1b41ea5f92e2a3d3400effd1f93fb63cb06cb9a122f719882d58a3173d3a7170076effadb4a6d364a3dd2b1c2867b0abeacbd2abb2191d26c9416d8b739dc37dc340f636403532c582e1ff00dc0c1952415d9a41599c6d052265b4713311706c892b54c27345aed733cc05ab522863616d1b01b090963d0adc901b24e6ed9df793e2e5bdb69ecc93e2fe2071542009012f598cdd1b9fa93c3896be99fedc0b4c809f860bd469ba7bd7e9b82bf826985beaba5e0ec7bd323ff7623a925d89f1c53cfb76d719980c86e84cf812c54e7b042f1fa457b4f40fc9c0bbbc3a1087a9c411da8438c183372ad50d241346210c7760d26f9b30693bf26c1c753c6918847bad86acc0d7f5a0cffe11c1dc0591dbcc023e25ce41c00523efecc71c4db5ff32b00c61b2627df96fd7a110a8a6ac40fed48f5d2138ba3cf61ef04a80c6bc8213beb02cac8d0092967d09cde16e84808f64f18cbc80c861e5f53805941c760f70d2ace45037444f31692e9365359ca1a4ec683214e2d85201d3b3b3b3da61dd14e2ee4d410e340bb607f7a7d848e12aa3ce68cf6ced6df6d076154f1365325a9d70d22ea334e268a173aa4ae82607042ead53dff2c0d8cb8a1cb9a841f3c191f440850ad29b4b5feb6b2bf2eb81b543a001ad5ba124ddd088b14e403b8dce8879d29e146e71e6ac5f808c57d1154a3658d19ed711de5312bbfaf266da8d5ad6d7bc669ac5bffab64c277d01c1ba107924aa2a05bff990f0bfbb49bc77bc6403d0511fcc6ae8c6496095ebff84765b8fac877d67069411ac3febe9aca2e20b48008890f3d9f22c53b977b13781cf21239bc58a73aca85648912672d138be77e3abc15f511faf249ba1e4f51a0ec3d2b2cfed9c5e174740cc7c8a0c45d0afa71cb913dc05f6cbb64d05df0edfdc1b8b1db7d0b59a0f6a2b6ad50775732b660c5efdf4b49f1f92202379c275161b1f8e949beb0b13883f91f78b07281b8e09a6638d4a022643386fa00f461264fa6a67230f0f4235ab68c8563c7b7640d9d91facd782f75b023ff171c386d1cf946b86dfb7c35f7b200e1b12d4f64f1656bd1096b6f8579aab7b98defa95a31e5ef125a6c1920a756282e23abdae620f6f5babd5a62010f11f57f627e90ca35c81c6376832e00567816ee8900a1c5226100c202f91870ba62889cb4c813d1ffcf2c3fe72b8d2f83c24333e2ebfc5ecfd90aa43acd122624b5b92492646a2f84ed6da9a43e5e9f71d92dfa4588b8ebc0157b4c30562cc4f4eb08540b0a42d9aa4ec8ce0a5f13860fd3ea0f8bc6bf6198f96989daedc780d62170ffcb1e7ded556e1aff69bc3ff71711fd7f40628a1c80932912eff7748df6b4acc8ec360a9aa9d511abb4b4ff58c17192b9a6173c309c63f6c377c05ed5c9343ef748e5e24235e99baf3c37b305254487036c1f7d8c5e524d6b6245089f1f2a01266bc868f41374c6db13f441ac85a5b744712eba43de512109319e746acdd00bdd2cd95d9a14d81149f5be7438bc225fd388ed9374ceeea405ea13ad10463d9680b48109674233b6a3278f1205e2d848b9c77377393fa8a4daad63f2f7dbdec2ef97a562cc7bea7a1137846fb282234fc9308d1906f6ffb3ade7a9505b65206692904ee778e3087a3447f9cd03355d2d22170ac8dca4d96f7d4f13e823c3aff6b04a2241d2dab5ec7bc396456fbaa0a6d589de85aa00e156983a25d234081104463a5fb2dbbd6dd0543eeed0396e6a29b98fb5d6cff8b3d0837645f2bfb72d2df7890408292e5d1ca89ff5ccb775bfd6f4a4985d3a74ec49619f1b82fdf61f668a3a0846cfee104a36b520f6bad7a324219f1c3beaacf30e2d13e8946411b92cb245658fe19384f79439229398c4845d9041f491c1a7b26a0c176eedeae8e02176efc15baf6e14a712006649a4c2471f47ae04e5fbccad05bf0f97158cb09991d5a871cea91f2ebaff46c683994e030de59a728b83c270a4386c99867fc478a3b148c0574fce13632a3015aaa6d37b0fef93311309d9e4cb7d2d5f698865bdfae1ea2bdbc8acd01957a8dd426ce607e2d89c478010abe5592648d5bd6a2474c5383af40d0a986e8afad798c5430d360b49cff34b73f039b900ab6bb3c42577be35c3d28f811dc082dae28acc0193a23db8bd4965a12297e7f7956675a3d9e6bea2122286b2a88febb21ede12990ff49fa7ecc525c76217223a2d29aeec6f836b1157a9b6e4bfbe9ec2e2134156d5a372d2ca81962c458a486f5497f85ccd027ba5762437c7aa4362a643cb73132e70e38d966d4db902bb800957080568cec46d8b0f16f8f96f938819b351439b3268dd030363b5acfa4038ec9ebb30516a59e13abff70ca05cd4ba9af6e1d142a1234b2c9fdc35253d73194d3ede26f0e369fcc3719d99563d9088f20d40654b61ad77c25462651a7050aac6ba9ad51e4ba8f6797dff14fbfa26f790aab8883f8e733df6c654fb040a4b1c71a427f42a6473c99c98b66b2e7c6b6d00f9796ee822529ad63f8cae335b8c3dd1eecbad90b08a5288dbfe1b40560f12aa8ddbd62f437fbc488198cc8794ff2726d8f0121bab143ad9079fa0e234326c6129fe631c56983dfbc72e79ae978f421408d4d2f884029afcd6d2abc48a6232e764214f6e1ba4f6203ed35eabb3f4a501c2c6c86a3295fa1d96dc3c3bc94df2352a4dc3dd0bf3e50ca74a01a5ec7dc09c0247b554545e1a236993444931f2d5710f3154f5d5c7ea222f51b9b452c6e1d108e4cbba22c39a3beefa8ba33ae58519b48782e83703b1aac857986503434f988922cc15e5f3831f33220b84492b50f18d3e342321588d90ec0982d76c9f5e632a31384db8312586b61da3c9186d764d874ecdc8a673635cceacc0451347e89a606301d4a51c3385011b555a0475e4e6af303793979362eed05c0fc725af355b804a45faa309b8f73c8ea265f51ff9febf9d341f51b65d0acc5212911bee3318ccdcc3899415ce01cd56af966f1a6a249ed4d6669ac1bb57453c73ce5b7159c84ed9c42954da460942c486073a9ea7c3dfd460d85ed13ce7e2bba49f53ec88205fd839326077053cb65e2fc0638b40a2af439e8bf8c631e4a4ffbf8ad37a612909078e21f8516c6147661864f8b56d259c7cf8fa2a055031a83bb48e5ebaeedd22baef51ada58ec0c1c05007f88c5c03eacdbefe7dc3f68683e9cf05c58218eeacbe8f9e7c03934d88f9a9deab27395544fb73d970045ec562ec43e13d31bab42bae3fb131a237d5f96702fed59c3af5dac5af63821dde88e76636c5abaf3c", 0x1000}, {&(0x7f0000002300)="4e823b8e0ce0ede45809ed1d40e013098ad36ee1ff7e4b3793acb112909e26b3c898931a53f6c138818efc89ef2d913bc4e5db2eeb0d8d7c8a0b23adeb58f04c6486f0ed4a9656607dc9dd6d1ce6a3240908a91123c8a10e4c1a0762c480b3f1f00bec99ab4386839ed8d2c04db11ec3f590cb9d72cc6a300dc750a59f4876823b228d92", 0x84}], 0x7, 0x0, 0x0, 0x800}, 0x800) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0x301, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r2, 0x301, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000002600)={{0x1, 0x1, 0x18, r4, {0xffffffff}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000002600)={{0x1, 0x1, 0x18, r4, {0xffffffff}}, './file0\x00'}) 14:18:17 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r2 = socket$nl_audit(0x10, 0x3, 0x9) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000080)={0x900, r2}, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) 14:18:17 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:17 executing program 0: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff}}, './file0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002480), 0x40480, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000024c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendmsg$xdp(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000080)="0d8c5fef79d51f6e5b29139842bd59815aad0b07f889b8c499b11d51d6a5d4aab816166e98ea35014de87cfebb28bcc7966b66473aa427b18a48e2d884f0d62136e9228c3b41022d2816f51c061fad9c9076a71f8d735874d9bea1b22aedb1fd0f829dd70d95a7de0b0313bf734b342067f873e60273d9fdbf951a0dd2a41de6a24fda", 0x83}, {&(0x7f0000002500)="4e197ef7de2680db338a1844c958e95501b365666726c39e41adfca58df8423a10b5969c0b3f4cbfed8f7ec6c34a6e3bad9677b4e24cff2c92cd05422535c418a7db9556053d12abf2ea80f1fba0c9dcb6a770dbc91ef9ea70bbc5a94c806a114b5643059367b69cee01ab19275f18edf47b6e0bf77721a2827e95d5e5234f9193106a020fb3ec29e3d78e8007949b8927dffc1a53dc1af36528a37912c89d31e81fad1161085f57447441390061831ee71141c24aa378959914bac705d81a8de14c89a5999f40221ac67ce1bbca3e1d4ce9d6e4", 0xd4}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="fb146953d9250cb0f6c4859c198064d0cc000bc055e7feb64d46e859345cb3fb210b347f756abe24616f91b7d3df16d6793c70c6a522f1be8231cb0bc09ea591ec687a669d0c2d5dc2ed70195dc27d163ecd4b6e0b4b102409fd119cc0bcd2f8fd3e2ec1a1c34059b04dbebc0bdf9cd71711c04a41c4aabfce27b6c34bba6699e6cf73596da4ca22f77cc6d266fd7f7f3cc29a2212696800f9726554192dd5470251e08d37ce20419a", 0xa9}, {&(0x7f0000001240)="47feb23911d0b837497980d1e1981ebd02ba63cd8decc5d87415c0e853cedd6f0dd3836f0da89bbe420ad797d4ed47a36f25492f7b85416de66a21ca383b72733e7bcc5d347d0a4ace574176a3190408351e16f94e48fc121be07dbe006a85568cd3b79dd664cd08e97f8bb8789d73dbe162c1a8f83749730d48e07c4a37d361b5ed1626b53426162bcf0c7e2a4b47e7db51b819c4c0526edf7010b122b050", 0x9f}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="4e823b8e0ce0ede45809ed1d40e013098ad36ee1ff7e4b3793acb112909e26b3c898931a53f6c138818efc89ef2d913bc4e5db2eeb0d8d7c8a0b23adeb58f04c6486f0ed4a9656607dc9dd6d1ce6a3240908a91123c8a10e4c1a0762c480b3f1f00bec99ab4386839ed8d2c04db11ec3f590cb9d72cc6a300dc750a59f4876823b228d92", 0x84}], 0x7, 0x0, 0x0, 0x800}, 0x800) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0x301, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000002600)={{0x1, 0x1, 0x18, r4, {0xffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff}}, './file0\x00'}) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000002480), 0x40480, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000024c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async) sendmsg$xdp(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000080)="0d8c5fef79d51f6e5b29139842bd59815aad0b07f889b8c499b11d51d6a5d4aab816166e98ea35014de87cfebb28bcc7966b66473aa427b18a48e2d884f0d62136e9228c3b41022d2816f51c061fad9c9076a71f8d735874d9bea1b22aedb1fd0f829dd70d95a7de0b0313bf734b342067f873e60273d9fdbf951a0dd2a41de6a24fda", 0x83}, {&(0x7f0000002500)="4e197ef7de2680db338a1844c958e95501b365666726c39e41adfca58df8423a10b5969c0b3f4cbfed8f7ec6c34a6e3bad9677b4e24cff2c92cd05422535c418a7db9556053d12abf2ea80f1fba0c9dcb6a770dbc91ef9ea70bbc5a94c806a114b5643059367b69cee01ab19275f18edf47b6e0bf77721a2827e95d5e5234f9193106a020fb3ec29e3d78e8007949b8927dffc1a53dc1af36528a37912c89d31e81fad1161085f57447441390061831ee71141c24aa378959914bac705d81a8de14c89a5999f40221ac67ce1bbca3e1d4ce9d6e4", 0xd4}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="fb146953d9250cb0f6c4859c198064d0cc000bc055e7feb64d46e859345cb3fb210b347f756abe24616f91b7d3df16d6793c70c6a522f1be8231cb0bc09ea591ec687a669d0c2d5dc2ed70195dc27d163ecd4b6e0b4b102409fd119cc0bcd2f8fd3e2ec1a1c34059b04dbebc0bdf9cd71711c04a41c4aabfce27b6c34bba6699e6cf73596da4ca22f77cc6d266fd7f7f3cc29a2212696800f9726554192dd5470251e08d37ce20419a", 0xa9}, {&(0x7f0000001240)="47feb23911d0b837497980d1e1981ebd02ba63cd8decc5d87415c0e853cedd6f0dd3836f0da89bbe420ad797d4ed47a36f25492f7b85416de66a21ca383b72733e7bcc5d347d0a4ace574176a3190408351e16f94e48fc121be07dbe006a85568cd3b79dd664cd08e97f8bb8789d73dbe162c1a8f83749730d48e07c4a37d361b5ed1626b53426162bcf0c7e2a4b47e7db51b819c4c0526edf7010b122b050", 0x9f}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="4e823b8e0ce0ede45809ed1d40e013098ad36ee1ff7e4b3793acb112909e26b3c898931a53f6c138818efc89ef2d913bc4e5db2eeb0d8d7c8a0b23adeb58f04c6486f0ed4a9656607dc9dd6d1ce6a3240908a91123c8a10e4c1a0762c480b3f1f00bec99ab4386839ed8d2c04db11ec3f590cb9d72cc6a300dc750a59f4876823b228d92", 0x84}], 0x7, 0x0, 0x0, 0x800}, 0x800) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r2, 0x301, 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000002600)={{0x1, 0x1, 0x18, r4, {0xffffffff}}, './file0\x00'}) (async) 14:18:17 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4000) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) 14:18:17 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xa00) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x8054, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) (async) sendto$packet(r1, 0x0, 0x0, 0x8054, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) recvfrom$packet(r0, &(0x7f0000000240)=""/191, 0xbf, 0x140, &(0x7f0000000100)={0x11, 0xf5, r2, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r4, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}]}, 0x20}}, 0x8000) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0d4}, 0x8000) 14:18:17 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0x0, "66df1f4b21fe71de64c15013d191d571987d9fc975616336ce5fc2047632cea8", 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 14:18:17 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000080)={0x900, r2}, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000080)={0x900, r2}, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) 14:18:17 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x191001) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:17 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xa00) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x8054, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) (async) recvfrom$packet(r0, &(0x7f0000000240)=""/191, 0xbf, 0x140, &(0x7f0000000100)={0x11, 0xf5, r2, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r4, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}]}, 0x20}}, 0x8000) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0d4}, 0x8000) 14:18:17 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4000) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) 14:18:17 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0x0, "66df1f4b21fe71de64c15013d191d571987d9fc975616336ce5fc2047632cea8", 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 14:18:17 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80000) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 14:18:17 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x191001) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:17 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x85c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040804}, 0x4000000) 14:18:17 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4000) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) 14:18:17 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0x0, "66df1f4b21fe71de64c15013d191d571987d9fc975616336ce5fc2047632cea8", 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 14:18:17 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 14:18:17 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x191001) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:17 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80000) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80000) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 14:18:17 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) (async) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x85c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040804}, 0x4000000) 14:18:17 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x8054, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) bind$xdp(r1, &(0x7f0000000040)={0x2c, 0xc, r3, 0x22, r1}, 0x10) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) process_mrelease(r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x1, 0x6}, 0x10) 14:18:17 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) r3 = fsmount(r1, 0x0, 0x81) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) ioctl$NBD_SET_SOCK(r2, 0x125f, r1) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) 14:18:17 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 14:18:17 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x85c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040804}, 0x4000000) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) (async) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x85c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040804}, 0x4000000) (async) 14:18:17 executing program 4: socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x7}, 0x4) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4c001) 14:18:17 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80000) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 14:18:17 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x8054, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) bind$xdp(r1, &(0x7f0000000040)={0x2c, 0xc, r3, 0x22, r1}, 0x10) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) process_mrelease(r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x1, 0x6}, 0x10) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) (async) sendto$packet(r2, 0x0, 0x0, 0x8054, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) (async) bind$xdp(r1, &(0x7f0000000040)={0x2c, 0xc, r3, 0x22, r1}, 0x10) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) process_mrelease(r1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) (async) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x1, 0x6}, 0x10) (async) 14:18:17 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) r3 = fsmount(r1, 0x0, 0x81) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) ioctl$NBD_SET_SOCK(r2, 0x125f, r1) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) 14:18:17 executing program 3: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x4, 0x70bd26, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x4000008) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) r3 = add_key(&(0x7f0000000880)='big_key\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='+', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x0) keyctl$set_timeout(0xf, r3, 0x0) keyctl$invalidate(0x15, r3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fbdbdf253500000008000300", @ANYRES32=r4, @ANYBLOB="0c009900020000000a0006005050505050500000100000000000006de26c7bf025a42a185a0ec7c90d4026d32c5a9f0ab9056a6c352b512fc75cb831ad2dd905b1f2cc71afe56b001efe5a0000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x10) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r1, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xf}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x2e, 0xbe, "3613a35ada5d6d3e9526e38957e8f2078f51ca06e0788870af00d9986d9fd23c9ca6774db0a2edbf2281"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x9}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x4000}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4) 14:18:17 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 14:18:17 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 14:18:17 executing program 4: socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x7}, 0x4) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4c001) socket$can_j1939(0x1d, 0x2, 0x7) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x7}, 0x4) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4c001) (async) 14:18:18 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) r3 = fsmount(r1, 0x0, 0x81) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) (async) ioctl$NBD_SET_SOCK(r2, 0x125f, r1) (async, rerun: 32) r4 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) 14:18:18 executing program 3: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x4, 0x70bd26, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x4000008) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) r3 = add_key(&(0x7f0000000880)='big_key\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='+', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x0) keyctl$set_timeout(0xf, r3, 0x0) keyctl$invalidate(0x15, r3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fbdbdf253500000008000300", @ANYRES32=r4, @ANYBLOB="0c009900020000000a0006005050505050500000100000000000006de26c7bf025a42a185a0ec7c90d4026d32c5a9f0ab9056a6c352b512fc75cb831ad2dd905b1f2cc71afe56b001efe5a0000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x10) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r1, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xf}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x2e, 0xbe, "3613a35ada5d6d3e9526e38957e8f2078f51ca06e0788870af00d9986d9fd23c9ca6774db0a2edbf2281"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x9}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x4000}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x4, 0x70bd26, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x4000008) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) add_key(&(0x7f0000000880)='big_key\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='+', 0x1, 0xfffffffffffffffd) (async) keyctl$setperm(0x5, r3, 0x0) (async) keyctl$set_timeout(0xf, r3, 0x0) (async) keyctl$invalidate(0x15, r3) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fbdbdf253500000008000300", @ANYRES32=r4, @ANYBLOB="0c009900020000000a0006005050505050500000100000000000006de26c7bf025a42a185a0ec7c90d4026d32c5a9f0ab9056a6c352b512fc75cb831ad2dd905b1f2cc71afe56b001efe5a0000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x10) (async) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r1, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xf}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x2e, 0xbe, "3613a35ada5d6d3e9526e38957e8f2078f51ca06e0788870af00d9986d9fd23c9ca6774db0a2edbf2281"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x9}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x4000}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4) (async) 14:18:18 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x8054, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) bind$xdp(r1, &(0x7f0000000040)={0x2c, 0xc, r3, 0x22, r1}, 0x10) (async) bind$xdp(r1, &(0x7f0000000040)={0x2c, 0xc, r3, 0x22, r1}, 0x10) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) process_mrelease(r1, 0x0) (async) process_mrelease(r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x1, 0x6}, 0x10) (async) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x1, 0x6}, 0x10) 14:18:18 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 14:18:18 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) pidfd_getfd(r1, r0, 0x0) 14:18:18 executing program 4: socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x7}, 0x4) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4c001) socket$can_j1939(0x1d, 0x2, 0x7) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x7}, 0x4) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4c001) (async) 14:18:18 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) socket$can_j1939(0x1d, 0x2, 0x7) 14:18:18 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 14:18:18 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = fsopen(&(0x7f0000000040)='ufs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000080)='/dev/nbd#\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) 14:18:18 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) pidfd_getfd(r1, r0, 0x0) 14:18:18 executing program 3: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x4, 0x70bd26, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x4000008) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) r3 = add_key(&(0x7f0000000880)='big_key\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='+', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x0) (async, rerun: 64) keyctl$set_timeout(0xf, r3, 0x0) (async, rerun: 64) keyctl$invalidate(0x15, r3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fbdbdf253500000008000300", @ANYRES32=r4, @ANYBLOB="0c009900020000000a0006005050505050500000100000000000006de26c7bf025a42a185a0ec7c90d4026d32c5a9f0ab9056a6c352b512fc75cb831ad2dd905b1f2cc71afe56b001efe5a0000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x10) (async, rerun: 32) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r1, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xf}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x2e, 0xbe, "3613a35ada5d6d3e9526e38957e8f2078f51ca06e0788870af00d9986d9fd23c9ca6774db0a2edbf2281"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x9}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x4000}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4) (rerun: 32) 14:18:18 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r1 = fsopen(&(0x7f0000000040)='ufs\x00', 0x0) (rerun: 32) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000080)='/dev/nbd#\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) (async, rerun: 32) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (rerun: 32) 14:18:18 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) pidfd_getfd(r1, r0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async) pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async) pidfd_getfd(r1, r0, 0x0) (async) 14:18:18 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)=ANY=[@ANYBLOB="0163e70001000000180000004d4f90489a8ada63626b6c54a3f1c13ea566d83da1c9078aafa44564e0eb85d203dcedd55d5172473139f1bb0d0f110db4f073068986ec428f144180d21db99ae88b26d839ca5d97aa0795a9bba21fbf95", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x301, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 14:18:18 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) (async) socket$can_j1939(0x1d, 0x2, 0x7) 14:18:18 executing program 4: getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x30) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x115d00) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x10001, 0x2c0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r1, 0x125e, r3) 14:18:18 executing program 3: r0 = request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='}(%-[,,,&\x00', 0xfffffffffffffffc) r1 = request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x1}, &(0x7f0000001080)='[-\x00', 0x0) keyctl$setperm(0x5, 0x0, 0x0) add_key(&(0x7f0000000280)='pkcs7_test\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f00000010c0)="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", 0x1000, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='syzkaller\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r1}) request_key(&(0x7f0000000480)='encrypted\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='pkcs7_test\x00', 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0x125d, 0xffffffffffffffff) 14:18:18 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) (async, rerun: 64) socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64) 14:18:18 executing program 4: getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x30) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x115d00) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x10001, 0x2c0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async) ioctl$NBD_SET_SOCK(r1, 0x125e, r3) 14:18:18 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x1, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100fb0000000000", @ANYRES32, @ANYBLOB="faffffff000000002e2f66696c653000"]) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000100", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r6, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r5, 0x1260, r6) 14:18:18 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)=ANY=[@ANYBLOB="0163e70001000000180000004d4f90489a8ada63626b6c54a3f1c13ea566d83da1c9078aafa44564e0eb85d203dcedd55d5172473139f1bb0d0f110db4f073068986ec428f144180d21db99ae88b26d839ca5d97aa0795a9bba21fbf95", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x301, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)=ANY=[@ANYBLOB="0163e70001000000180000004d4f90489a8ada63626b6c54a3f1c13ea566d83da1c9078aafa44564e0eb85d203dcedd55d5172473139f1bb0d0f110db4f073068986ec428f144180d21db99ae88b26d839ca5d97aa0795a9bba21fbf95", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r1, 0x301, 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) 14:18:18 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = fsopen(&(0x7f0000000040)='ufs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000080)='/dev/nbd#\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) 14:18:18 executing program 3: r0 = request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='}(%-[,,,&\x00', 0xfffffffffffffffc) r1 = request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x1}, &(0x7f0000001080)='[-\x00', 0x0) keyctl$setperm(0x5, 0x0, 0x0) add_key(&(0x7f0000000280)='pkcs7_test\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f00000010c0)="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", 0x1000, r1) (async) add_key(&(0x7f0000000280)='pkcs7_test\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f00000010c0)="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", 0x1000, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='syzkaller\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r1}) request_key(&(0x7f0000000480)='encrypted\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='pkcs7_test\x00', 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0x125d, 0xffffffffffffffff) 14:18:18 executing program 4: getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x30) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x115d00) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x10001, 0x2c0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async) ioctl$NBD_SET_SOCK(r1, 0x125e, r3) 14:18:18 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x1, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100fb0000000000", @ANYRES32, @ANYBLOB="faffffff000000002e2f66696c653000"]) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000100", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r6, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r5, 0x1260, r6) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x1, 0x0, 0x10001}) (async) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100fb0000000000", @ANYRES32, @ANYBLOB="faffffff000000002e2f66696c653000"]) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000100", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r6, 0x40206435, 0x0) (async) ioctl$NBD_SET_SOCK(r5, 0x1260, r6) (async) 14:18:18 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) r1 = fsmount(r0, 0x1, 0x3) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000040)={'\x00', 0x6b0, 0x0, 0x1}) 14:18:18 executing program 3: r0 = request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='}(%-[,,,&\x00', 0xfffffffffffffffc) r1 = request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x1}, &(0x7f0000001080)='[-\x00', 0x0) keyctl$setperm(0x5, 0x0, 0x0) add_key(&(0x7f0000000280)='pkcs7_test\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f00000010c0)="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", 0x1000, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='syzkaller\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r1}) request_key(&(0x7f0000000480)='encrypted\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='pkcs7_test\x00', 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0x125d, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='}(%-[,,,&\x00', 0xfffffffffffffffc) (async) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x1}, &(0x7f0000001080)='[-\x00', 0x0) (async) keyctl$setperm(0x5, 0x0, 0x0) (async) add_key(&(0x7f0000000280)='pkcs7_test\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f00000010c0)="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", 0x1000, r1) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='syzkaller\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r1}) (async) request_key(&(0x7f0000000480)='encrypted\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='pkcs7_test\x00', 0x0) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r2, 0x125d, 0xffffffffffffffff) (async) 14:18:18 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f00000002c0)=[@release={0x40046306, 0x2}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/128, 0x80, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/100, 0x64, 0x0, 0x19}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/73, 0x49, 0x1, 0x5}}, &(0x7f0000000280)={0x0, 0x28, 0x50}}}, @release], 0x56, 0x0, &(0x7f0000000340)="f1e32ad29fab1c77c8aa9b74a4a2a03b063f8e9db7a5c5d1a09b6fa733454da1887addb4c067b927939f86445892faa5ce8b29a1b06ca259a7c83c3280d3251490277728fb315b704a50ef402890da50b88ccb52dacc"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001540)={0x78, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}, @free_buffer, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000400)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x4, 0x1, 0x1}}, &(0x7f0000000480)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x1}], 0x1000, 0x0, &(0x7f0000000540)="0d38b3d8a9be5fee08d26c4fd40cd64911096990dfd3b04bfa761950312d16a0fda96595b49e0c3bd80b3918b98ef8043ac0461cdc92298e2fc0203ceb94f655812ae294f8456362a3f5f7262634cbba244f92baaa7abad9573ac3aa04d27b54b750d8e1df1eb7512e1491ca145ee13c78062adbc99cf360a659641ca986f94f07815bd017f847931ce5055f7d17dca260c84b31bfbf60858de8f07faad46643abcc3495aad2d804ebb932f48d5c0100d1160477883e121365175ec0eb3d48f3baac0cdf187ae989e691501816378cd725b485b536fa710277f38ffbd455b95b76ef783f8dc5f1da0d4b8b692c7ad7f76e1896c6a4bf1faa5af6c108baffc5ff9b0e22dce220307f0838e0d2da4c79e543f85f0c5d73ed20afb7e939da299ff40d725cb020ffd398dc2969eefc53c6aeb6aa3ef7cbfe5b15207236dd7faabc6f65d1b1efdd0a25b22c10f15fe0b1a80fa46dc2bb15511450ff1f90f28cffa89b5eb1093729f82418825a6088b07b58d1dee5dc25b7c87e09d4c655cd522091a2f7fafba748f9f7f6275bd9c7be1a904b2473d3d9b81de9bacc9ad0d3b188215bd7034e4fa35ca0de0c114262277adb0af6428442e95d4ddd2248f7e5dd9aa1fd53d99a2c109ef13b6cc4bb6d0fe8d8e3a09a27955cbdad75f31eaf2922479aebb017b3df382f1d0ac55c7560af16ea31487866f174dc3850c0f1c5392203e2f7b81df44802f182259f4ead1f6c9df5ae06f8892e0f978e44c0e36b804ce6485a765706ebccc7465406c36b0e56d6267f120262091922824877f53dbd052cae8d473a69e36869caddcd33c5cb03807fd0df2640e0561801b0a2766e444ce218b54858456c79743f1d226b6e65ff6249baa5c742e80bda441f8e9bab92b5c71c557a447a90c4c40357140edf0f5c4a24cb633d17d739718827b64898c55cb46f12760607cb1f1b808cafc4c1f6087d4245ab69bef9ca5e36f818d0bc4634a3cf925ace246461a1af7bf1b3120b44bfd719047db564c803fe9894d0e065f30938df65fc6b3e8ea451c95bf87d2d41feeafbb4fb49739e98b5aaf2b5dc2035165a95fe7d0d10c44de0230af2e652962303b30ebc957c861504e73cfd0f985cb491af5a13d8a1a9f92174d510fc82b8d9be6e0ffb0d3ce63ecabd4795be3f640f329c6e8b41efcf0bfd8f93025e6a38dd231ca5de010ea2871425d48e3c80cac9801ade02032301879709e983484890c5c85cada864a3df6795eed50ca5498e9f57562c017762e8de722049f88aa8e57b75d2ffb93b468e1fda23ca4aec5fb918b98a9d152df4e15e24b537a8a7787704c4148039c21c1d346b7fac40b64df6b018a0f7b4a1e7f1ee77b85378596cc28d74ad7737f4dc2ce0aa83424780652cd562ce14ff24fd5dbffa26f36e989f7f84555c5238d6235c775e1e632bcc2fb56259c2fe034bedcf3f76c1bb3517039b112050d882bff76e112a026b01d8c4ed3820568da8e9a51b775171acf76b1e813598324a82a8355f566f149285391eca53c56e86c3da456c03488f1abdf66e554e407a14d57db6cc075bbd81593c806d1ad4dc399a2704ff25adb47381ada81dbf778713673112bb8fcc57ed5504952fd9203eb4b393316b25bb9bb2401afb20b41f69598e0a90856b27e91686b690d49308bd0d689da4b059fda7569015efdf39e999b0def5840ce20fc72ba5ecf35a8fb90c6cc5a53c905c528eeb1aa5b6af3f6abe68399dadc2350e0654fe0b0e33dfe2eff2f2c8b8a02f37be922156ddb050a1c50c2bd65e6fe5e6b16e8b33f553ef97cb635a04f53edd040ee22422d4acf8a8052cbcfc154b05378f92777b4ca76aa37b1ffce620981d8d1bb67e0d1c83c45225d4420cb1a9190fe6428c5d5f28b914fd2eb5c037d9b01fca0d10b27a1db54e7969cf3679dd21ae3b45f6de2b84b0e33ff722e54103ad2a65af68acd3a471cee398ce17ad19040de9b282190a5daf6fd29aec09da0cdd04a268ead7bc6eed47303ac1f0796f36e30331717f7e0b53518df59a7ed99c82fbbaec75f0ef6df7afad9b0e763f2cc47ed1369310dfb95f53c79cb401f60ca4ecf84a74ee7db923ec67b4d16985a3254b279a90643355069697bfdf9c868b345657fedfa6f089a9b1e2a82e3856d87a5201087e8010f56ada3eda3a20b8bc949b1e5a1504aaf9180417052577212aaa5db04e99711985c5999fb9cea4ee04c3be8a08ece43ed91b181bb213d8130042a1d06337e339f2e6936624f8406a71a3400354da2bdde47d15673505d81dae37cf83f6d93f67dd76774c7db5bd05b854e369705cfa793ca500bbc1b71953532db09667882c990bc5c75b8b827432256a75b9e11da19a40f5e1b954432168317bf19727a108a10f335bcef315075c7db7c6fec027dfd5cc4ccd666272514ae0f7407d1428f55e0942d3e948c2137665d979f152e43b2d9f30e6672fcdc6bc85d8fbd94d4f091e57da62a01b4802d5ab5ec1fd67b48c84e87470ef25ca7022f2b21e6ddeb56f7a849266be4b45d2e9afd522a9921e6e6049de038b1dd0bf2c9bcc5bc6c447095f3ab32571ddab62087d7c3848cbf44f2159f08301d9577b662312c9138913fa181dbc0b0a0e7acc7942380033f1b914948994ab9f92fb56b0505854ae8f88d07fcc7b4978c239fb17fbb245b1a719aeeb60867ca30979ca090af0e376e1eca8a1e4e02020b8a8d8b171e049661574a4b05e5eea9c9e98331d4c3550b7463e7dc95354f2106f157afa195046ffa7d91c25565eadc59d298fe57e2bf20bf59f536485b08bc58948b454f80b5df0e5c1fb9acfd8256cb85f702d7a73c22b746cee98dc0e03805339a8d399897a63c4250c780b9f0a9c620cc2710b8f62f26fe73397d73a02658aa4a40da5ed6d0ae2cea4dc72344001cdc285fead2ea6583da2fd27bf9da6a03f1ec6cbd187c4a63ab3c4c382271bda424631052ec9a3d2d82f28a528ef8743e176de069b7a6ac8f22f0384c1ce9eb43847d1a4f4953a09b272c90afe64d286dab2b31344eb76aec49333c998d0924e9e395a25c15863944a193233b0f9253672ae67ceccc97beb62c62a82bdfcfcd33390bbd9f412b0ac9ef9ad9796f1c40e94df02a5c18c39a592721b614769bc281548332832e9d33dd8e741fa9cceab2a7a5b2f473961956268ef189009866c4c7ca29c0782a8a2c478125a075f9634b1ef2c919698ef2ca44916062f8ebec857c375a2d94e8b20a105ccc61cac676dfdb269693f29d18d231a4ebd00e3a5a065d8dcef8504e56a8132d82dae1f461d88c4e038ebd7271ff93c78d09d58a604d66d06db4ca4cd6112f544d11c9de4c73722451bdc64efc70a8764b4101a98dfad0d5298d0b9b9e7487e61aa8816278deafa0a30817a163fcc2720d213e902eff05799df4fdfa0b13bf5cdf26e7dbd426ff90041d8a1faa02e89993a8c2334faff8ded148be195dc04fe5cde473ec8060b4d000afe11f446a265b38d362b4291570aeb8f52fd153bc82d62f2e8dc90e17f62105f2edb789a7b5686d3a1801872b4a4456439371cd7774e1090fc7129a724f554540de8cb0eb7381cc3b9654932d249224adecbe9a773e3c6df5a8481ce376c3d70bc2a958ac87b22f21d7a592c0b26414ee76b1bdd82c26db242b16e6b29ae8c31e79062d550422e72fc8744b3d6e8340db25e9a5294652b11adab5b27581016d975d61e30253702bcdcbba7812a43e5b6276cc6e136f2bbfb8c4a1dfe6a51b25f3dbd26c3c917233e1cbc57295bac8008deaf216f7c6f254792b08fa22e0e1d64b0d7a446eceeba907595989884b62b056fa245cd785eb13f627caa77db756bf4af064b5ece3402e19f16dd7c3e521fa5fe934cfdf8142fbd8b9afdc96b09beffd33d74c4ff5c612c8ab96fdf7fb8bd3521863e0de49489ba849aa64ee4620c143003b307393d79934df96dfcdab5b12d48209878adb0e5b35aaa2a58c7b14cc70b6a048e3ae5fe2827c440aae37f9f66a2a5fdd263afbd1c8feb2584a76655898749017e4572dbfdbbc91dbbe7cc4a93b38f33264d629d36d193bbf6a20279caa6a28b3e9caa6c5aa06b73b2eacdb2ef2800f7c036f2fe1e684428a43394ad25dff9f9eafb85afbcdf32eb82d6464037632328a8f6a244d15e63dadfed3be56be005cf1aacf53fc2a038b4661035e96a087d38b73c31bfd62d5a5dd0bbc9d1076a5e695055dc13c259fb5c57852d0e3cad69ed94dc30de8af8c6a4c7764982a01f14d3192518e742a68d8aed2004e80ddf74efafbacc4fcfa948fbded980fa96d71c266d967ecf15ddb895a5dcd17798f5c6dfb705961bc1d216ff784adbbfaf3f3d663bdd603d1cde9d3c8163b3419fc521a5cdbc9dd8e705b8a5c00df3dfce411b3f7928ea835e9ca85eda29ecca8fc1a42178cd5602d86ee57041b13c20587b7f9dea5f6a26579b1bc68d3fc54d58968f49fe21638ac7de2139ab1f283d6e19be8bbf3c58e51b98c27133cb75e39490fbd67cac6937f26d4d9d1531637827c8c6f878eb25144059a216b0c8224997ca7b586480d707ec6dfb5f0d76260f5e4027ae5eee3eed9c91d5db8713a080f9733140a04211d8a00d76f9c6a8378d4cfad42cb7abff6ffb464fefff74f652615041834f884a6079f2362fb9fc3e6999e483badc9d745dc46442e18095048569391ce99ecb48be3291882f711b48c6279e4125adeb0777bbd7af933ecb6a80bd438c3a5e500d1dc8b7dc66a78b21b314dd39e5a4291dc962a174972578ca2900548028240db2a407f942f7423d3601fb9274ab5ab646e950d1dce24bf6626a697914f74b9a451e8002c6748e3f8c8d58c29b1d84e4208bb18b1fcc1d2abf8fe0131790ef6ff9757407be47189921fe6bde917a1bee8867f3bb8b0985e17cf62bb6fbec45db895be6d31498b9b342edef3955b9f40eec32a758e1ad4adb2816375f37e8e451ed5d56e0ba7a0f1bc1c560f26d1b3c25f1cdb7d2f9f9d00de96ef06f227d2359efd1cd5f212fdd3b59623366205b2f44c80c00b1a79c3feee6a872161d3af70d5d4b8a1ec1139c49670cf0c8a36d3f7bdf0a172deee0b49e298473908cd501deca916f817c7709884e0ba0d216a56077374fc45541ca87ac742f9289cce99f7178ed73ab9c5370a57261001c7aedbfa3ddc882bf8fe8d314b4cef7c2722bb0f1d107bb67d1552d26b611aaa6df4fd4abd761fc1d3e47d741802b52796868da21bc08906931dfd9100a8dd0fc5390b9d9f258121d6598710564b1bf0fff0a4771f160d5d92cccbac102d472aa54e54bb001e0f7019aa2d87e009a847f8354db5899b411c9928ccd73189730f5ebf7243d3608f51951ed4684fe55555cc8eac8a55de33b05700e2b33851037b6679b68486e302a7075d1f7ff85f02caebf84dc074bb47afb10b51266fd45e999c57c2936fafadd60fa49263cca6080210943af50547f178e27b489ec2b767e48bd4481014dc6d8bf717beb00daaf5be155652daad8b042fa85fac7c5150d131643a88714ce3d51b68c1de8752bdc9a1d0619b907610f5a0aef00041cdadc6d38e71f17b8688cdf6bfa0f2097a7735436e13ea0e2c9a019d984e5d2f9f595098c5f0c92f8ea1fa905015658a33a0be15124789e6b7ef9515414a7d5a7065f4433ba5ac08e5b4231b2bb78c31d2c6b4e87a19f8090ce82e2bd7628e2650b585c1f9c0738fce34b3f3195afb78c02f9aa4886da671db3ab10b3616a8767836a34e7d6e4d8500c519fc60ff5f0a72ab1c732a3ad77f2a454043f082e8439"}) 14:18:18 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)=ANY=[@ANYBLOB="0163e70001000000180000004d4f90489a8ada63626b6c54a3f1c13ea566d83da1c9078aafa44564e0eb85d203dcedd55d5172473139f1bb0d0f110db4f073068986ec428f144180d21db99ae88b26d839ca5d97aa0795a9bba21fbf95", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x301, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 14:18:18 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) getsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000040)=""/199, &(0x7f0000000140)=0xc7) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:18 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) r1 = fsmount(r0, 0x1, 0x3) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000040)={'\x00', 0x6b0, 0x0, 0x1}) 14:18:18 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f00000002c0)=[@release={0x40046306, 0x2}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/128, 0x80, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/100, 0x64, 0x0, 0x19}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/73, 0x49, 0x1, 0x5}}, &(0x7f0000000280)={0x0, 0x28, 0x50}}}, @release], 0x56, 0x0, &(0x7f0000000340)="f1e32ad29fab1c77c8aa9b74a4a2a03b063f8e9db7a5c5d1a09b6fa733454da1887addb4c067b927939f86445892faa5ce8b29a1b06ca259a7c83c3280d3251490277728fb315b704a50ef402890da50b88ccb52dacc"}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001540)={0x78, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}, @free_buffer, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000400)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x4, 0x1, 0x1}}, &(0x7f0000000480)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x1}], 0x1000, 0x0, &(0x7f0000000540)="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"}) (rerun: 32) 14:18:18 executing program 3: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000040)={0x0, 0x0, 0xbf}, &(0x7f0000000700)=ANY=[@ANYBLOB="656e633d6f61657020686173683d616b6532622d32353600000000000000000d000000000000000000000018000000000000000000000000000000000000000000b6ff5cf64da3eac16152b4302734830a00"/94], &(0x7f0000000100), &(0x7f0000000140)=""/191) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000200)={0x45c, 0x3f4, 0x200, 0x70bd25, 0x25dfdbfc, {0x4, 0x2, 0x33, [0x7, 0x100, 0x99, 0x7, 0xff, 0xfffff00d, 0x5, 0x8, 0x20, 0x4, 0x2, 0x0, 0xfffffff7, 0xffffff30, 0x7f, 0xa, 0x0, 0x8, 0x8000, 0x7f, 0x2, 0x6, 0x3, 0x200, 0x7, 0x7, 0x2, 0xfff, 0x101, 0x4587644f, 0x2, 0x800000, 0x0, 0x2, 0x6, 0x1ff, 0x5, 0x3, 0x8000, 0x1, 0x33a0, 0x5, 0x4c, 0x5, 0x8, 0x3, 0x8, 0x0, 0x6, 0x100, 0x6, 0x534, 0xff, 0x16, 0x1f, 0x918a, 0x0, 0xff, 0x6, 0xa2, 0x6, 0x2, 0x100, 0xffffffff], [0xbae, 0x101, 0x726b34ee, 0x10001, 0x512a0, 0x8, 0x7, 0x97, 0x6, 0x4, 0x4, 0x2, 0xffffffff, 0x3f, 0xeb70, 0x2, 0x7fffffff, 0x3, 0x5, 0xfb49, 0x200, 0x4d0, 0x3, 0x3, 0x6, 0x5, 0x8001, 0x7, 0x9, 0x401, 0x6, 0x7, 0x9, 0x5, 0x8000, 0x1f, 0x0, 0x3, 0xd1a9, 0x8b6, 0x81, 0x0, 0x8001, 0xfff, 0x0, 0x8a, 0x200, 0x0, 0x3, 0xffff, 0xffffffff, 0x6, 0x0, 0x2, 0x7f, 0x80, 0x8, 0x7, 0x6, 0x1000, 0xa202, 0x8, 0x9, 0x4], [0x910, 0x6, 0x4, 0xcad5, 0x81, 0x5, 0x4, 0xc5d2, 0x80000000, 0x10001, 0x80000000, 0x401, 0x40, 0x9, 0x6, 0x3, 0x6, 0x40, 0x40, 0x9, 0xcb, 0x1000, 0x6, 0x5, 0x4, 0xff, 0x7f, 0x8, 0x8001, 0x2, 0x9, 0x4da, 0x5, 0x5, 0x1f, 0x10040, 0x2, 0x1, 0xff, 0x4, 0x1f, 0x100, 0x68, 0x7fff, 0x476, 0x20, 0xfffff676, 0x0, 0x1, 0x7, 0x6, 0x1, 0x1ff, 0x1, 0x2, 0x57f, 0xea, 0x4, 0x7, 0xe1, 0x8, 0x9, 0x5, 0x6], [0x1000, 0x100, 0x475, 0x1, 0x9, 0x52, 0x6, 0x9, 0x7, 0x4, 0x3, 0x1f, 0x8001, 0xffffffff, 0x7, 0x0, 0xe0000000, 0x5, 0x40, 0x7f, 0x4, 0x4, 0xf9, 0x800, 0x5d7, 0xdb8d, 0xfffffffd, 0x7fffffff, 0xfe75, 0x1, 0x4, 0x9, 0x20, 0x8, 0x1, 0x7ff, 0x8, 0x44d, 0x80, 0x4, 0x7f, 0x8, 0x800, 0x6, 0x6, 0x0, 0x2c, 0x9, 0x8001, 0x4, 0x2, 0xf0d7, 0x0, 0x3, 0x7, 0x8, 0x4, 0x0, 0x9, 0x99c, 0x3, 0x4, 0x4, 0x293], 0x39, ['*{\x00', 'oaep', 'blake2b-256\x00', 'blake2b-256\x00', '/dev/nbd#\x00', '/dev/nbd#\x00', ']\x00', 'oaep']}, ["", "", ""]}, 0x45c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000804) 14:18:18 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x1, 0x0, 0x10001}) (async) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100fb0000000000", @ANYRES32, @ANYBLOB="faffffff000000002e2f66696c653000"]) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000100", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r6, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r5, 0x1260, r6) 14:18:18 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="00000000000000002eee2f66696c653000"/27]) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x642100) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000080)={0x0, 0x91}) 14:18:18 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f00000002c0)=[@release={0x40046306, 0x2}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/128, 0x80, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/100, 0x64, 0x0, 0x19}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/73, 0x49, 0x1, 0x5}}, &(0x7f0000000280)={0x0, 0x28, 0x50}}}, @release], 0x56, 0x0, &(0x7f0000000340)="f1e32ad29fab1c77c8aa9b74a4a2a03b063f8e9db7a5c5d1a09b6fa733454da1887addb4c067b927939f86445892faa5ce8b29a1b06ca259a7c83c3280d3251490277728fb315b704a50ef402890da50b88ccb52dacc"}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001540)={0x78, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}, @free_buffer, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000400)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x4, 0x1, 0x1}}, &(0x7f0000000480)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x1}], 0x1000, 0x0, &(0x7f0000000540)="0d38b3d8a9be5fee08d26c4fd40cd64911096990dfd3b04bfa761950312d16a0fda96595b49e0c3bd80b3918b98ef8043ac0461cdc92298e2fc0203ceb94f655812ae294f8456362a3f5f7262634cbba244f92baaa7abad9573ac3aa04d27b54b750d8e1df1eb7512e1491ca145ee13c78062adbc99cf360a659641ca986f94f07815bd017f847931ce5055f7d17dca260c84b31bfbf60858de8f07faad46643abcc3495aad2d804ebb932f48d5c0100d1160477883e121365175ec0eb3d48f3baac0cdf187ae989e691501816378cd725b485b536fa710277f38ffbd455b95b76ef783f8dc5f1da0d4b8b692c7ad7f76e1896c6a4bf1faa5af6c108baffc5ff9b0e22dce220307f0838e0d2da4c79e543f85f0c5d73ed20afb7e939da299ff40d725cb020ffd398dc2969eefc53c6aeb6aa3ef7cbfe5b15207236dd7faabc6f65d1b1efdd0a25b22c10f15fe0b1a80fa46dc2bb15511450ff1f90f28cffa89b5eb1093729f82418825a6088b07b58d1dee5dc25b7c87e09d4c655cd522091a2f7fafba748f9f7f6275bd9c7be1a904b2473d3d9b81de9bacc9ad0d3b188215bd7034e4fa35ca0de0c114262277adb0af6428442e95d4ddd2248f7e5dd9aa1fd53d99a2c109ef13b6cc4bb6d0fe8d8e3a09a27955cbdad75f31eaf2922479aebb017b3df382f1d0ac55c7560af16ea31487866f174dc3850c0f1c5392203e2f7b81df44802f182259f4ead1f6c9df5ae06f8892e0f978e44c0e36b804ce6485a765706ebccc7465406c36b0e56d6267f120262091922824877f53dbd052cae8d473a69e36869caddcd33c5cb03807fd0df2640e0561801b0a2766e444ce218b54858456c79743f1d226b6e65ff6249baa5c742e80bda441f8e9bab92b5c71c557a447a90c4c40357140edf0f5c4a24cb633d17d739718827b64898c55cb46f12760607cb1f1b808cafc4c1f6087d4245ab69bef9ca5e36f818d0bc4634a3cf925ace246461a1af7bf1b3120b44bfd719047db564c803fe9894d0e065f30938df65fc6b3e8ea451c95bf87d2d41feeafbb4fb49739e98b5aaf2b5dc2035165a95fe7d0d10c44de0230af2e652962303b30ebc957c861504e73cfd0f985cb491af5a13d8a1a9f92174d510fc82b8d9be6e0ffb0d3ce63ecabd4795be3f640f329c6e8b41efcf0bfd8f93025e6a38dd231ca5de010ea2871425d48e3c80cac9801ade02032301879709e983484890c5c85cada864a3df6795eed50ca5498e9f57562c017762e8de722049f88aa8e57b75d2ffb93b468e1fda23ca4aec5fb918b98a9d152df4e15e24b537a8a7787704c4148039c21c1d346b7fac40b64df6b018a0f7b4a1e7f1ee77b85378596cc28d74ad7737f4dc2ce0aa83424780652cd562ce14ff24fd5dbffa26f36e989f7f84555c5238d6235c775e1e632bcc2fb56259c2fe034bedcf3f76c1bb3517039b112050d882bff76e112a026b01d8c4ed3820568da8e9a51b775171acf76b1e813598324a82a8355f566f149285391eca53c56e86c3da456c03488f1abdf66e554e407a14d57db6cc075bbd81593c806d1ad4dc399a2704ff25adb47381ada81dbf778713673112bb8fcc57ed5504952fd9203eb4b393316b25bb9bb2401afb20b41f69598e0a90856b27e91686b690d49308bd0d689da4b059fda7569015efdf39e999b0def5840ce20fc72ba5ecf35a8fb90c6cc5a53c905c528eeb1aa5b6af3f6abe68399dadc2350e0654fe0b0e33dfe2eff2f2c8b8a02f37be922156ddb050a1c50c2bd65e6fe5e6b16e8b33f553ef97cb635a04f53edd040ee22422d4acf8a8052cbcfc154b05378f92777b4ca76aa37b1ffce620981d8d1bb67e0d1c83c45225d4420cb1a9190fe6428c5d5f28b914fd2eb5c037d9b01fca0d10b27a1db54e7969cf3679dd21ae3b45f6de2b84b0e33ff722e54103ad2a65af68acd3a471cee398ce17ad19040de9b282190a5daf6fd29aec09da0cdd04a268ead7bc6eed47303ac1f0796f36e30331717f7e0b53518df59a7ed99c82fbbaec75f0ef6df7afad9b0e763f2cc47ed1369310dfb95f53c79cb401f60ca4ecf84a74ee7db923ec67b4d16985a3254b279a90643355069697bfdf9c868b345657fedfa6f089a9b1e2a82e3856d87a5201087e8010f56ada3eda3a20b8bc949b1e5a1504aaf9180417052577212aaa5db04e99711985c5999fb9cea4ee04c3be8a08ece43ed91b181bb213d8130042a1d06337e339f2e6936624f8406a71a3400354da2bdde47d15673505d81dae37cf83f6d93f67dd76774c7db5bd05b854e369705cfa793ca500bbc1b71953532db09667882c990bc5c75b8b827432256a75b9e11da19a40f5e1b954432168317bf19727a108a10f335bcef315075c7db7c6fec027dfd5cc4ccd666272514ae0f7407d1428f55e0942d3e948c2137665d979f152e43b2d9f30e6672fcdc6bc85d8fbd94d4f091e57da62a01b4802d5ab5ec1fd67b48c84e87470ef25ca7022f2b21e6ddeb56f7a849266be4b45d2e9afd522a9921e6e6049de038b1dd0bf2c9bcc5bc6c447095f3ab32571ddab62087d7c3848cbf44f2159f08301d9577b662312c9138913fa181dbc0b0a0e7acc7942380033f1b914948994ab9f92fb56b0505854ae8f88d07fcc7b4978c239fb17fbb245b1a719aeeb60867ca30979ca090af0e376e1eca8a1e4e02020b8a8d8b171e049661574a4b05e5eea9c9e98331d4c3550b7463e7dc95354f2106f157afa195046ffa7d91c25565eadc59d298fe57e2bf20bf59f536485b08bc58948b454f80b5df0e5c1fb9acfd8256cb85f702d7a73c22b746cee98dc0e03805339a8d399897a63c4250c780b9f0a9c620cc2710b8f62f26fe73397d73a02658aa4a40da5ed6d0ae2cea4dc72344001cdc285fead2ea6583da2fd27bf9da6a03f1ec6cbd187c4a63ab3c4c382271bda424631052ec9a3d2d82f28a528ef8743e176de069b7a6ac8f22f0384c1ce9eb43847d1a4f4953a09b272c90afe64d286dab2b31344eb76aec49333c998d0924e9e395a25c15863944a193233b0f9253672ae67ceccc97beb62c62a82bdfcfcd33390bbd9f412b0ac9ef9ad9796f1c40e94df02a5c18c39a592721b614769bc281548332832e9d33dd8e741fa9cceab2a7a5b2f473961956268ef189009866c4c7ca29c0782a8a2c478125a075f9634b1ef2c919698ef2ca44916062f8ebec857c375a2d94e8b20a105ccc61cac676dfdb269693f29d18d231a4ebd00e3a5a065d8dcef8504e56a8132d82dae1f461d88c4e038ebd7271ff93c78d09d58a604d66d06db4ca4cd6112f544d11c9de4c73722451bdc64efc70a8764b4101a98dfad0d5298d0b9b9e7487e61aa8816278deafa0a30817a163fcc2720d213e902eff05799df4fdfa0b13bf5cdf26e7dbd426ff90041d8a1faa02e89993a8c2334faff8ded148be195dc04fe5cde473ec8060b4d000afe11f446a265b38d362b4291570aeb8f52fd153bc82d62f2e8dc90e17f62105f2edb789a7b5686d3a1801872b4a4456439371cd7774e1090fc7129a724f554540de8cb0eb7381cc3b9654932d249224adecbe9a773e3c6df5a8481ce376c3d70bc2a958ac87b22f21d7a592c0b26414ee76b1bdd82c26db242b16e6b29ae8c31e79062d550422e72fc8744b3d6e8340db25e9a5294652b11adab5b27581016d975d61e30253702bcdcbba7812a43e5b6276cc6e136f2bbfb8c4a1dfe6a51b25f3dbd26c3c917233e1cbc57295bac8008deaf216f7c6f254792b08fa22e0e1d64b0d7a446eceeba907595989884b62b056fa245cd785eb13f627caa77db756bf4af064b5ece3402e19f16dd7c3e521fa5fe934cfdf8142fbd8b9afdc96b09beffd33d74c4ff5c612c8ab96fdf7fb8bd3521863e0de49489ba849aa64ee4620c143003b307393d79934df96dfcdab5b12d48209878adb0e5b35aaa2a58c7b14cc70b6a048e3ae5fe2827c440aae37f9f66a2a5fdd263afbd1c8feb2584a76655898749017e4572dbfdbbc91dbbe7cc4a93b38f33264d629d36d193bbf6a20279caa6a28b3e9caa6c5aa06b73b2eacdb2ef2800f7c036f2fe1e684428a43394ad25dff9f9eafb85afbcdf32eb82d6464037632328a8f6a244d15e63dadfed3be56be005cf1aacf53fc2a038b4661035e96a087d38b73c31bfd62d5a5dd0bbc9d1076a5e695055dc13c259fb5c57852d0e3cad69ed94dc30de8af8c6a4c7764982a01f14d3192518e742a68d8aed2004e80ddf74efafbacc4fcfa948fbded980fa96d71c266d967ecf15ddb895a5dcd17798f5c6dfb705961bc1d216ff784adbbfaf3f3d663bdd603d1cde9d3c8163b3419fc521a5cdbc9dd8e705b8a5c00df3dfce411b3f7928ea835e9ca85eda29ecca8fc1a42178cd5602d86ee57041b13c20587b7f9dea5f6a26579b1bc68d3fc54d58968f49fe21638ac7de2139ab1f283d6e19be8bbf3c58e51b98c27133cb75e39490fbd67cac6937f26d4d9d1531637827c8c6f878eb25144059a216b0c8224997ca7b586480d707ec6dfb5f0d76260f5e4027ae5eee3eed9c91d5db8713a080f9733140a04211d8a00d76f9c6a8378d4cfad42cb7abff6ffb464fefff74f652615041834f884a6079f2362fb9fc3e6999e483badc9d745dc46442e18095048569391ce99ecb48be3291882f711b48c6279e4125adeb0777bbd7af933ecb6a80bd438c3a5e500d1dc8b7dc66a78b21b314dd39e5a4291dc962a174972578ca2900548028240db2a407f942f7423d3601fb9274ab5ab646e950d1dce24bf6626a697914f74b9a451e8002c6748e3f8c8d58c29b1d84e4208bb18b1fcc1d2abf8fe0131790ef6ff9757407be47189921fe6bde917a1bee8867f3bb8b0985e17cf62bb6fbec45db895be6d31498b9b342edef3955b9f40eec32a758e1ad4adb2816375f37e8e451ed5d56e0ba7a0f1bc1c560f26d1b3c25f1cdb7d2f9f9d00de96ef06f227d2359efd1cd5f212fdd3b59623366205b2f44c80c00b1a79c3feee6a872161d3af70d5d4b8a1ec1139c49670cf0c8a36d3f7bdf0a172deee0b49e298473908cd501deca916f817c7709884e0ba0d216a56077374fc45541ca87ac742f9289cce99f7178ed73ab9c5370a57261001c7aedbfa3ddc882bf8fe8d314b4cef7c2722bb0f1d107bb67d1552d26b611aaa6df4fd4abd761fc1d3e47d741802b52796868da21bc08906931dfd9100a8dd0fc5390b9d9f258121d6598710564b1bf0fff0a4771f160d5d92cccbac102d472aa54e54bb001e0f7019aa2d87e009a847f8354db5899b411c9928ccd73189730f5ebf7243d3608f51951ed4684fe55555cc8eac8a55de33b05700e2b33851037b6679b68486e302a7075d1f7ff85f02caebf84dc074bb47afb10b51266fd45e999c57c2936fafadd60fa49263cca6080210943af50547f178e27b489ec2b767e48bd4481014dc6d8bf717beb00daaf5be155652daad8b042fa85fac7c5150d131643a88714ce3d51b68c1de8752bdc9a1d0619b907610f5a0aef00041cdadc6d38e71f17b8688cdf6bfa0f2097a7735436e13ea0e2c9a019d984e5d2f9f595098c5f0c92f8ea1fa905015658a33a0be15124789e6b7ef9515414a7d5a7065f4433ba5ac08e5b4231b2bb78c31d2c6b4e87a19f8090ce82e2bd7628e2650b585c1f9c0738fce34b3f3195afb78c02f9aa4886da671db3ab10b3616a8767836a34e7d6e4d8500c519fc60ff5f0a72ab1c732a3ad77f2a454043f082e8439"}) (rerun: 64) 14:18:18 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) getsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000040)=""/199, &(0x7f0000000140)=0xc7) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:18 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) r1 = fsmount(r0, 0x1, 0x3) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000040)={'\x00', 0x6b0, 0x0, 0x1}) 14:18:19 executing program 3: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000040)={0x0, 0x0, 0xbf}, &(0x7f0000000700)=ANY=[@ANYBLOB="656e633d6f61657020686173683d616b6532622d32353600000000000000000d000000000000000000000018000000000000000000000000000000000000000000b6ff5cf64da3eac16152b4302734830a00"/94], &(0x7f0000000100), &(0x7f0000000140)=""/191) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000200)={0x45c, 0x3f4, 0x200, 0x70bd25, 0x25dfdbfc, {0x4, 0x2, 0x33, [0x7, 0x100, 0x99, 0x7, 0xff, 0xfffff00d, 0x5, 0x8, 0x20, 0x4, 0x2, 0x0, 0xfffffff7, 0xffffff30, 0x7f, 0xa, 0x0, 0x8, 0x8000, 0x7f, 0x2, 0x6, 0x3, 0x200, 0x7, 0x7, 0x2, 0xfff, 0x101, 0x4587644f, 0x2, 0x800000, 0x0, 0x2, 0x6, 0x1ff, 0x5, 0x3, 0x8000, 0x1, 0x33a0, 0x5, 0x4c, 0x5, 0x8, 0x3, 0x8, 0x0, 0x6, 0x100, 0x6, 0x534, 0xff, 0x16, 0x1f, 0x918a, 0x0, 0xff, 0x6, 0xa2, 0x6, 0x2, 0x100, 0xffffffff], [0xbae, 0x101, 0x726b34ee, 0x10001, 0x512a0, 0x8, 0x7, 0x97, 0x6, 0x4, 0x4, 0x2, 0xffffffff, 0x3f, 0xeb70, 0x2, 0x7fffffff, 0x3, 0x5, 0xfb49, 0x200, 0x4d0, 0x3, 0x3, 0x6, 0x5, 0x8001, 0x7, 0x9, 0x401, 0x6, 0x7, 0x9, 0x5, 0x8000, 0x1f, 0x0, 0x3, 0xd1a9, 0x8b6, 0x81, 0x0, 0x8001, 0xfff, 0x0, 0x8a, 0x200, 0x0, 0x3, 0xffff, 0xffffffff, 0x6, 0x0, 0x2, 0x7f, 0x80, 0x8, 0x7, 0x6, 0x1000, 0xa202, 0x8, 0x9, 0x4], [0x910, 0x6, 0x4, 0xcad5, 0x81, 0x5, 0x4, 0xc5d2, 0x80000000, 0x10001, 0x80000000, 0x401, 0x40, 0x9, 0x6, 0x3, 0x6, 0x40, 0x40, 0x9, 0xcb, 0x1000, 0x6, 0x5, 0x4, 0xff, 0x7f, 0x8, 0x8001, 0x2, 0x9, 0x4da, 0x5, 0x5, 0x1f, 0x10040, 0x2, 0x1, 0xff, 0x4, 0x1f, 0x100, 0x68, 0x7fff, 0x476, 0x20, 0xfffff676, 0x0, 0x1, 0x7, 0x6, 0x1, 0x1ff, 0x1, 0x2, 0x57f, 0xea, 0x4, 0x7, 0xe1, 0x8, 0x9, 0x5, 0x6], [0x1000, 0x100, 0x475, 0x1, 0x9, 0x52, 0x6, 0x9, 0x7, 0x4, 0x3, 0x1f, 0x8001, 0xffffffff, 0x7, 0x0, 0xe0000000, 0x5, 0x40, 0x7f, 0x4, 0x4, 0xf9, 0x800, 0x5d7, 0xdb8d, 0xfffffffd, 0x7fffffff, 0xfe75, 0x1, 0x4, 0x9, 0x20, 0x8, 0x1, 0x7ff, 0x8, 0x44d, 0x80, 0x4, 0x7f, 0x8, 0x800, 0x6, 0x6, 0x0, 0x2c, 0x9, 0x8001, 0x4, 0x2, 0xf0d7, 0x0, 0x3, 0x7, 0x8, 0x4, 0x0, 0x9, 0x99c, 0x3, 0x4, 0x4, 0x293], 0x39, ['*{\x00', 'oaep', 'blake2b-256\x00', 'blake2b-256\x00', '/dev/nbd#\x00', '/dev/nbd#\x00', ']\x00', 'oaep']}, ["", "", ""]}, 0x45c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000804) 14:18:19 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="00000000000000002eee2f66696c653000"/27]) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x642100) (async) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000080)={0x0, 0x91}) 14:18:19 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000040)='%[}),.%\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f00000000c0)='@-\x00', &(0x7f0000000100)='./file0\x00', r2) 14:18:19 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) getsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000040)=""/199, &(0x7f0000000140)=0xc7) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) fsmount(0xffffffffffffffff, 0x1, 0x2) (async) getsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000040)=""/199, &(0x7f0000000140)=0xc7) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) 14:18:19 executing program 5: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x0, 0x1, 0x1, 0x3f}, 0x10) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x282000) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:19 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000040)={'\x00', 0xffffbffb, 0x1, 0xb}) 14:18:19 executing program 3: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000040)={0x0, 0x0, 0xbf}, &(0x7f0000000700)=ANY=[@ANYBLOB="656e633d6f61657020686173683d616b6532622d32353600000000000000000d000000000000000000000018000000000000000000000000000000000000000000b6ff5cf64da3eac16152b4302734830a00"/94], &(0x7f0000000100), &(0x7f0000000140)=""/191) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000200)={0x45c, 0x3f4, 0x200, 0x70bd25, 0x25dfdbfc, {0x4, 0x2, 0x33, [0x7, 0x100, 0x99, 0x7, 0xff, 0xfffff00d, 0x5, 0x8, 0x20, 0x4, 0x2, 0x0, 0xfffffff7, 0xffffff30, 0x7f, 0xa, 0x0, 0x8, 0x8000, 0x7f, 0x2, 0x6, 0x3, 0x200, 0x7, 0x7, 0x2, 0xfff, 0x101, 0x4587644f, 0x2, 0x800000, 0x0, 0x2, 0x6, 0x1ff, 0x5, 0x3, 0x8000, 0x1, 0x33a0, 0x5, 0x4c, 0x5, 0x8, 0x3, 0x8, 0x0, 0x6, 0x100, 0x6, 0x534, 0xff, 0x16, 0x1f, 0x918a, 0x0, 0xff, 0x6, 0xa2, 0x6, 0x2, 0x100, 0xffffffff], [0xbae, 0x101, 0x726b34ee, 0x10001, 0x512a0, 0x8, 0x7, 0x97, 0x6, 0x4, 0x4, 0x2, 0xffffffff, 0x3f, 0xeb70, 0x2, 0x7fffffff, 0x3, 0x5, 0xfb49, 0x200, 0x4d0, 0x3, 0x3, 0x6, 0x5, 0x8001, 0x7, 0x9, 0x401, 0x6, 0x7, 0x9, 0x5, 0x8000, 0x1f, 0x0, 0x3, 0xd1a9, 0x8b6, 0x81, 0x0, 0x8001, 0xfff, 0x0, 0x8a, 0x200, 0x0, 0x3, 0xffff, 0xffffffff, 0x6, 0x0, 0x2, 0x7f, 0x80, 0x8, 0x7, 0x6, 0x1000, 0xa202, 0x8, 0x9, 0x4], [0x910, 0x6, 0x4, 0xcad5, 0x81, 0x5, 0x4, 0xc5d2, 0x80000000, 0x10001, 0x80000000, 0x401, 0x40, 0x9, 0x6, 0x3, 0x6, 0x40, 0x40, 0x9, 0xcb, 0x1000, 0x6, 0x5, 0x4, 0xff, 0x7f, 0x8, 0x8001, 0x2, 0x9, 0x4da, 0x5, 0x5, 0x1f, 0x10040, 0x2, 0x1, 0xff, 0x4, 0x1f, 0x100, 0x68, 0x7fff, 0x476, 0x20, 0xfffff676, 0x0, 0x1, 0x7, 0x6, 0x1, 0x1ff, 0x1, 0x2, 0x57f, 0xea, 0x4, 0x7, 0xe1, 0x8, 0x9, 0x5, 0x6], [0x1000, 0x100, 0x475, 0x1, 0x9, 0x52, 0x6, 0x9, 0x7, 0x4, 0x3, 0x1f, 0x8001, 0xffffffff, 0x7, 0x0, 0xe0000000, 0x5, 0x40, 0x7f, 0x4, 0x4, 0xf9, 0x800, 0x5d7, 0xdb8d, 0xfffffffd, 0x7fffffff, 0xfe75, 0x1, 0x4, 0x9, 0x20, 0x8, 0x1, 0x7ff, 0x8, 0x44d, 0x80, 0x4, 0x7f, 0x8, 0x800, 0x6, 0x6, 0x0, 0x2c, 0x9, 0x8001, 0x4, 0x2, 0xf0d7, 0x0, 0x3, 0x7, 0x8, 0x4, 0x0, 0x9, 0x99c, 0x3, 0x4, 0x4, 0x293], 0x39, ['*{\x00', 'oaep', 'blake2b-256\x00', 'blake2b-256\x00', '/dev/nbd#\x00', '/dev/nbd#\x00', ']\x00', 'oaep']}, ["", "", ""]}, 0x45c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000804) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) (async) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000040)={0x0, 0x0, 0xbf}, &(0x7f0000000700)=ANY=[@ANYBLOB="656e633d6f61657020686173683d616b6532622d32353600000000000000000d000000000000000000000018000000000000000000000000000000000000000000b6ff5cf64da3eac16152b4302734830a00"/94], &(0x7f0000000100), &(0x7f0000000140)=""/191) (async) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000200)={0x45c, 0x3f4, 0x200, 0x70bd25, 0x25dfdbfc, {0x4, 0x2, 0x33, [0x7, 0x100, 0x99, 0x7, 0xff, 0xfffff00d, 0x5, 0x8, 0x20, 0x4, 0x2, 0x0, 0xfffffff7, 0xffffff30, 0x7f, 0xa, 0x0, 0x8, 0x8000, 0x7f, 0x2, 0x6, 0x3, 0x200, 0x7, 0x7, 0x2, 0xfff, 0x101, 0x4587644f, 0x2, 0x800000, 0x0, 0x2, 0x6, 0x1ff, 0x5, 0x3, 0x8000, 0x1, 0x33a0, 0x5, 0x4c, 0x5, 0x8, 0x3, 0x8, 0x0, 0x6, 0x100, 0x6, 0x534, 0xff, 0x16, 0x1f, 0x918a, 0x0, 0xff, 0x6, 0xa2, 0x6, 0x2, 0x100, 0xffffffff], [0xbae, 0x101, 0x726b34ee, 0x10001, 0x512a0, 0x8, 0x7, 0x97, 0x6, 0x4, 0x4, 0x2, 0xffffffff, 0x3f, 0xeb70, 0x2, 0x7fffffff, 0x3, 0x5, 0xfb49, 0x200, 0x4d0, 0x3, 0x3, 0x6, 0x5, 0x8001, 0x7, 0x9, 0x401, 0x6, 0x7, 0x9, 0x5, 0x8000, 0x1f, 0x0, 0x3, 0xd1a9, 0x8b6, 0x81, 0x0, 0x8001, 0xfff, 0x0, 0x8a, 0x200, 0x0, 0x3, 0xffff, 0xffffffff, 0x6, 0x0, 0x2, 0x7f, 0x80, 0x8, 0x7, 0x6, 0x1000, 0xa202, 0x8, 0x9, 0x4], [0x910, 0x6, 0x4, 0xcad5, 0x81, 0x5, 0x4, 0xc5d2, 0x80000000, 0x10001, 0x80000000, 0x401, 0x40, 0x9, 0x6, 0x3, 0x6, 0x40, 0x40, 0x9, 0xcb, 0x1000, 0x6, 0x5, 0x4, 0xff, 0x7f, 0x8, 0x8001, 0x2, 0x9, 0x4da, 0x5, 0x5, 0x1f, 0x10040, 0x2, 0x1, 0xff, 0x4, 0x1f, 0x100, 0x68, 0x7fff, 0x476, 0x20, 0xfffff676, 0x0, 0x1, 0x7, 0x6, 0x1, 0x1ff, 0x1, 0x2, 0x57f, 0xea, 0x4, 0x7, 0xe1, 0x8, 0x9, 0x5, 0x6], [0x1000, 0x100, 0x475, 0x1, 0x9, 0x52, 0x6, 0x9, 0x7, 0x4, 0x3, 0x1f, 0x8001, 0xffffffff, 0x7, 0x0, 0xe0000000, 0x5, 0x40, 0x7f, 0x4, 0x4, 0xf9, 0x800, 0x5d7, 0xdb8d, 0xfffffffd, 0x7fffffff, 0xfe75, 0x1, 0x4, 0x9, 0x20, 0x8, 0x1, 0x7ff, 0x8, 0x44d, 0x80, 0x4, 0x7f, 0x8, 0x800, 0x6, 0x6, 0x0, 0x2c, 0x9, 0x8001, 0x4, 0x2, 0xf0d7, 0x0, 0x3, 0x7, 0x8, 0x4, 0x0, 0x9, 0x99c, 0x3, 0x4, 0x4, 0x293], 0x39, ['*{\x00', 'oaep', 'blake2b-256\x00', 'blake2b-256\x00', '/dev/nbd#\x00', '/dev/nbd#\x00', ']\x00', 'oaep']}, ["", "", ""]}, 0x45c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000804) (async) 14:18:19 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="00000000000000002eee2f66696c653000"/27]) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x642100) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000080)={0x0, 0x91}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="00000000000000002eee2f66696c653000"/27]) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x642100) (async) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000080)={0x0, 0x91}) (async) 14:18:19 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000040)='%[}),.%\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f00000000c0)='@-\x00', &(0x7f0000000100)='./file0\x00', r2) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000040)='%[}),.%\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f00000000c0)='@-\x00', &(0x7f0000000100)='./file0\x00', r2) (async) 14:18:19 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000080), 0x798200, 0x90) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x1) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:19 executing program 5: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x0, 0x1, 0x1, 0x3f}, 0x10) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x282000) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:19 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000040)={'\x00', 0xffffbffb, 0x1, 0xb}) 14:18:19 executing program 3: r0 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='/dev/nbd#\x00', &(0x7f00000000c0)='$[*/(%&\x00', 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2000) ioctl$NBD_SET_SOCK(r1, 0x125d, 0xffffffffffffffff) 14:18:19 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000080), 0x798200, 0x90) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x1) (async) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x1) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:19 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = pidfd_getfd(r0, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000080)={0x0, 0x200}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000000c0)='}/a&[\'#$$\x00\x01\x00\xc7\xdfd\xa8\x17\xc1c%2\x9f\xb0\xf7a\xbctL\xe3\x0f\x00\xe3\x04%7J\xbb\xff\xcf7\xf52\xa9\xc5\f\x01\xd1\xe4?\xbeMK\x9eo\xecnlO\xc6\x87\x9f\x15|C\xf9AZndR\x02\xa0\xbf\xebzX\x05\xe6i\xe5\xaf*V#\xb4A\xfeyX\xeb^;\xee\xd15\xc7\xda\xc5\x9dE\xa7L\xf2\x17v\xcc)[', &(0x7f0000000040)='./file0\x00', r3) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x301, 0xffffffffffffffff) 14:18:19 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000040)='%[}),.%\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f00000000c0)='@-\x00', &(0x7f0000000100)='./file0\x00', r2) (async) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f00000000c0)='@-\x00', &(0x7f0000000100)='./file0\x00', r2) 14:18:19 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000040)={'\x00', 0xffffbffb, 0x1, 0xb}) 14:18:19 executing program 5: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x0, 0x1, 0x1, 0x3f}, 0x10) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x282000) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:19 executing program 3: r0 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='/dev/nbd#\x00', &(0x7f00000000c0)='$[*/(%&\x00', 0x0) (async) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2000) ioctl$NBD_SET_SOCK(r1, 0x125d, 0xffffffffffffffff) 14:18:19 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000080), 0x798200, 0x90) (async) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x1) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:19 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x1a5842) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz0\x00', 0x200002, 0x0) write$cgroup_pressure(r2, &(0x7f0000000600)={'full', 0x20, 0x8, 0x20, 0x8}, 0x2f) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x9c, 0x0, &(0x7f00000003c0)=[@register_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0x10a, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/178, 0xb2, 0x1, 0x1f}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x400}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/24, 0x18, 0x2, 0x10}, @fda={0x66646185, 0x4, 0x1, 0xa}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/157, 0x9d, 0x2, 0x14}}, &(0x7f0000000380)={0x0, 0x28, 0x48}}}, @acquire={0x40046305, 0x3}], 0x92, 0x0, &(0x7f0000000480)="a0c8910d047417a2df541d35d0e3d0c542e2a9c2403e32e2aec013906cbe46a1b53a9756e842a199f2b3c97efab1d2be56b5c556eb313ec11da30da0ce493c859b93b9e9c8f0336be70d6ae39d2300eddc9a8c231c97c5d347439981d5320083954551d818855a5701cb2b084844e28ab79418dec6463e1988bfad2cd8c5a35e88071a48f0024700f6019fdf1db56214e67c"}) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) 14:18:19 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x6) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4050}, 0x20000000) 14:18:19 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:19 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) r2 = pidfd_getfd(r0, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000080)={0x0, 0x200}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async, rerun: 64) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000000c0)='}/a&[\'#$$\x00\x01\x00\xc7\xdfd\xa8\x17\xc1c%2\x9f\xb0\xf7a\xbctL\xe3\x0f\x00\xe3\x04%7J\xbb\xff\xcf7\xf52\xa9\xc5\f\x01\xd1\xe4?\xbeMK\x9eo\xecnlO\xc6\x87\x9f\x15|C\xf9AZndR\x02\xa0\xbf\xebzX\x05\xe6i\xe5\xaf*V#\xb4A\xfeyX\xeb^;\xee\xd15\xc7\xda\xc5\x9dE\xa7L\xf2\x17v\xcc)[', &(0x7f0000000040)='./file0\x00', r3) (async, rerun: 64) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x301, 0xffffffffffffffff) 14:18:19 executing program 3: r0 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='/dev/nbd#\x00', &(0x7f00000000c0)='$[*/(%&\x00', 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2000) ioctl$NBD_SET_SOCK(r1, 0x125d, 0xffffffffffffffff) 14:18:19 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, r2) 14:18:19 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) (async) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) (async) 14:18:19 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x6) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4050}, 0x20000000) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x6) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async) syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4050}, 0x20000000) (async) 14:18:19 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = pidfd_getfd(r0, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000080)={0x0, 0x200}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000000c0)='}/a&[\'#$$\x00\x01\x00\xc7\xdfd\xa8\x17\xc1c%2\x9f\xb0\xf7a\xbctL\xe3\x0f\x00\xe3\x04%7J\xbb\xff\xcf7\xf52\xa9\xc5\f\x01\xd1\xe4?\xbeMK\x9eo\xecnlO\xc6\x87\x9f\x15|C\xf9AZndR\x02\xa0\xbf\xebzX\x05\xe6i\xe5\xaf*V#\xb4A\xfeyX\xeb^;\xee\xd15\xc7\xda\xc5\x9dE\xa7L\xf2\x17v\xcc)[', &(0x7f0000000040)='./file0\x00', r3) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x301, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) pidfd_getfd(r0, r1, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000080)={0x0, 0x200}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000000c0)='}/a&[\'#$$\x00\x01\x00\xc7\xdfd\xa8\x17\xc1c%2\x9f\xb0\xf7a\xbctL\xe3\x0f\x00\xe3\x04%7J\xbb\xff\xcf7\xf52\xa9\xc5\f\x01\xd1\xe4?\xbeMK\x9eo\xecnlO\xc6\x87\x9f\x15|C\xf9AZndR\x02\xa0\xbf\xebzX\x05\xe6i\xe5\xaf*V#\xb4A\xfeyX\xeb^;\xee\xd15\xc7\xda\xc5\x9dE\xa7L\xf2\x17v\xcc)[', &(0x7f0000000040)='./file0\x00', r3) (async) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x301, 0xffffffffffffffff) (async) 14:18:19 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) 14:18:19 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x1a5842) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz0\x00', 0x200002, 0x0) write$cgroup_pressure(r2, &(0x7f0000000600)={'full', 0x20, 0x8, 0x20, 0x8}, 0x2f) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) (async) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x9c, 0x0, &(0x7f00000003c0)=[@register_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0x10a, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/178, 0xb2, 0x1, 0x1f}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x400}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/24, 0x18, 0x2, 0x10}, @fda={0x66646185, 0x4, 0x1, 0xa}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/157, 0x9d, 0x2, 0x14}}, &(0x7f0000000380)={0x0, 0x28, 0x48}}}, @acquire={0x40046305, 0x3}], 0x92, 0x0, &(0x7f0000000480)="a0c8910d047417a2df541d35d0e3d0c542e2a9c2403e32e2aec013906cbe46a1b53a9756e842a199f2b3c97efab1d2be56b5c556eb313ec11da30da0ce493c859b93b9e9c8f0336be70d6ae39d2300eddc9a8c231c97c5d347439981d5320083954551d818855a5701cb2b084844e28ab79418dec6463e1988bfad2cd8c5a35e88071a48f0024700f6019fdf1db56214e67c"}) (async) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) 14:18:19 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, r2) 14:18:19 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:19 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x6) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async) syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4050}, 0x20000000) 14:18:19 executing program 0: request_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff) r0 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x2800) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 14:18:19 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) 14:18:19 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400380) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x20040, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f00000000c0), 0x2, &(0x7f0000000140)) 14:18:19 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, r2) 14:18:19 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x1a5842) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz0\x00', 0x200002, 0x0) write$cgroup_pressure(r2, &(0x7f0000000600)={'full', 0x20, 0x8, 0x20, 0x8}, 0x2f) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x9c, 0x0, &(0x7f00000003c0)=[@register_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0x10a, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/178, 0xb2, 0x1, 0x1f}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x400}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/24, 0x18, 0x2, 0x10}, @fda={0x66646185, 0x4, 0x1, 0xa}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/157, 0x9d, 0x2, 0x14}}, &(0x7f0000000380)={0x0, 0x28, 0x48}}}, @acquire={0x40046305, 0x3}], 0x92, 0x0, &(0x7f0000000480)="a0c8910d047417a2df541d35d0e3d0c542e2a9c2403e32e2aec013906cbe46a1b53a9756e842a199f2b3c97efab1d2be56b5c556eb313ec11da30da0ce493c859b93b9e9c8f0336be70d6ae39d2300eddc9a8c231c97c5d347439981d5320083954551d818855a5701cb2b084844e28ab79418dec6463e1988bfad2cd8c5a35e88071a48f0024700f6019fdf1db56214e67c"}) (async, rerun: 32) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) 14:18:19 executing program 0: request_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff) (async) r0 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x2800) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 14:18:20 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000080)='/dev/nbd#\x00', 0x0, r1) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x5, 0x3, 0x8001, 0x7a2d}, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x2240) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) 14:18:20 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) 14:18:20 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400380) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x20040, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f00000000c0), 0x2, &(0x7f0000000140)) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400380) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) (async) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x20040, 0x0) (async) waitid$P_PIDFD(0x3, r1, &(0x7f00000000c0), 0x2, &(0x7f0000000140)) (async) 14:18:20 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) inotify_init() ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:20 executing program 0: request_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff) r0 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x2800) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) request_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff) (async) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x2800) (async) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) 14:18:20 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000080)='/dev/nbd#\x00', 0x0, r1) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x5, 0x3, 0x8001, 0x7a2d}, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) r3 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x2240) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) 14:18:20 executing program 2: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000040)=0xbbc0000, 0x4) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) socket$can_j1939(0x1d, 0x2, 0x7) 14:18:20 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400380) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) (async) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x20040, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f00000000c0), 0x2, &(0x7f0000000140)) 14:18:20 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8c00) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x40240) 14:18:20 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) inotify_init() (async) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:20 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000080)='/dev/nbd#\x00', 0x0, r1) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x5, 0x3, 0x8001, 0x7a2d}, 0x10) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) r3 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x2240) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) 14:18:20 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:20 executing program 2: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000040)=0xbbc0000, 0x4) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) socket$can_j1939(0x1d, 0x2, 0x7) 14:18:20 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000040)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x43) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f00000000c0)='/dev/nbd#\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff) r3 = add_key(&(0x7f0000000880)='big_key\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='+', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x0) keyctl$set_timeout(0xf, r3, 0x0) keyctl$describe(0x6, r3, &(0x7f0000000140)=""/253, 0xfd) 14:18:20 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8c00) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x40240) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8c00) (async) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x40240) (async) 14:18:20 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:20 executing program 2: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000040)=0xbbc0000, 0x4) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) socket$can_j1939(0x1d, 0x2, 0x7) 14:18:20 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) inotify_init() ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) inotify_init() (async) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) 14:18:20 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000040)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x43) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f00000000c0)='/dev/nbd#\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff) r3 = add_key(&(0x7f0000000880)='big_key\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='+', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x0) keyctl$set_timeout(0xf, r3, 0x0) keyctl$describe(0x6, r3, &(0x7f0000000140)=""/253, 0xfd) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000040)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x43) (async) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f00000000c0)='/dev/nbd#\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff) (async) add_key(&(0x7f0000000880)='big_key\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='+', 0x1, 0xfffffffffffffffd) (async) keyctl$setperm(0x5, r3, 0x0) (async) keyctl$set_timeout(0xf, r3, 0x0) (async) keyctl$describe(0x6, r3, &(0x7f0000000140)=""/253, 0xfd) (async) 14:18:20 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x208000) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:20 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8c00) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x40240) 14:18:20 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000040)={0x0, 0xff}) 14:18:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '+%.+'}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}}, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc4c1}, 0x1) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80000) ioctl$NBD_SET_SOCK(r3, 0x125e, 0xffffffffffffffff) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) inotify_init1(0x0) brk(0x8000000000000001) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) 14:18:20 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:20 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x208000) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:20 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x500443) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000200000000d54b3be9001800000a", @ANYRES32=r0, @ANYBLOB="0000000000000000008945a07a14f027f3ee4c537232d148ffff4f07c5dbbb496b22d6bccf64b3c45de23b397ea4a570d83e5e7c00ef26f3e1e94e19be5a67160bf205f8beba7e3cdf584c56d52ea700246667b8abafec370a38713c872d4d5575", @ANYRES32=r0, @ANYRES32=r0]) socketpair(0xf, 0x5, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0x125f, r3) 14:18:20 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000040)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x43) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f00000000c0)='/dev/nbd#\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff) r3 = add_key(&(0x7f0000000880)='big_key\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='+', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x0) keyctl$set_timeout(0xf, r3, 0x0) keyctl$describe(0x6, r3, &(0x7f0000000140)=""/253, 0xfd) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000040)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x43) (async) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f00000000c0)='/dev/nbd#\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff) (async) add_key(&(0x7f0000000880)='big_key\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='+', 0x1, 0xfffffffffffffffd) (async) keyctl$setperm(0x5, r3, 0x0) (async) keyctl$set_timeout(0xf, r3, 0x0) (async) keyctl$describe(0x6, r3, &(0x7f0000000140)=""/253, 0xfd) (async) 14:18:20 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x400, 0x70bd2d, 0x25dfdbfd, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000}, 0x820) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) 14:18:20 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000040)={0x0, 0xff}) 14:18:20 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x208000) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:20 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x400, 0x70bd2d, 0x25dfdbfd, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000}, 0x820) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) 14:18:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '+%.+'}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}}, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '+%.+'}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}}, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc4c1}, 0x1) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80000) ioctl$NBD_SET_SOCK(r3, 0x125e, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r3, 0x125e, 0xffffffffffffffff) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) inotify_init1(0x0) (async) inotify_init1(0x0) brk(0x8000000000000001) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) 14:18:20 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000040)={0x0, 0xff}) 14:18:20 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f00000000c0)={'\x00', 0x96, 0x0, 0xffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000100000001000800696c653000"]) ioctl$NBD_SET_SOCK(r0, 0x1260, r2) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x684641) 14:18:20 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x500443) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000200000000d54b3be9001800000a", @ANYRES32=r0, @ANYBLOB="0000000000000000008945a07a14f027f3ee4c537232d148ffff4f07c5dbbb496b22d6bccf64b3c45de23b397ea4a570d83e5e7c00ef26f3e1e94e19be5a67160bf205f8beba7e3cdf584c56d52ea700246667b8abafec370a38713c872d4d5575", @ANYRES32=r0, @ANYRES32=r0]) (async, rerun: 32) socketpair(0xf, 0x5, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0x125f, r3) 14:18:20 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0xce, 0x8071, 0x1, 0x1ff, 0x39530000, 0x200, "d68477d0a559932bf74b5cf2f30917844d235e5f634040ab29b604a9f7584b7d6d10cda74e5e2ff280a3d089ac0003f714481a3a42f09c2c922fc8f003938404a6cbb8454db56aec1d25351e8d0756ea4db6b9270dff2df616828b2ca6e085ddbf91e5e424b8d88f702fc383fb74d0aa7665fd2e63f4aaece7393c1d82a016a7fa056397932c3bf94cd0e0e8f671a689004212dbe8a278270415ce0e622c05eaa32d9767b658a2f36317aa7b56fd1cdf6418406eacf5870d5d443bfde11106780e011844b97c2d3dbb680397e90d"}}, 0x1e6) write$char_usb(0xffffffffffffffff, &(0x7f0000000240)="d682562294b9672017dcce5a3d8ed24a378a2b005eaf68229490330f429ff6459012b8b6efc3ad54947ec87c2abcacad4b5d3653d290f0aaf92cb50198c305022300e34a0124e0aae51886c3ee179077943c6de64beb6212403562cda347c89e14f06fdedcd850e25041a083d27796d8", 0x70) 14:18:20 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x86000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000080), 0x10, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "5c048de3e9dfd37a"}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) 14:18:20 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x400, 0x70bd2d, 0x25dfdbfd, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000}, 0x820) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x400, 0x70bd2d, 0x25dfdbfd, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000}, 0x820) (async) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) (async) 14:18:20 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '+%.+'}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}}, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc4c1}, 0x1) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80000) ioctl$NBD_SET_SOCK(r3, 0x125e, 0xffffffffffffffff) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) inotify_init1(0x0) brk(0x8000000000000001) (async) brk(0x8000000000000001) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) 14:18:20 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30) (async) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0xce, 0x8071, 0x1, 0x1ff, 0x39530000, 0x200, "d68477d0a559932bf74b5cf2f30917844d235e5f634040ab29b604a9f7584b7d6d10cda74e5e2ff280a3d089ac0003f714481a3a42f09c2c922fc8f003938404a6cbb8454db56aec1d25351e8d0756ea4db6b9270dff2df616828b2ca6e085ddbf91e5e424b8d88f702fc383fb74d0aa7665fd2e63f4aaece7393c1d82a016a7fa056397932c3bf94cd0e0e8f671a689004212dbe8a278270415ce0e622c05eaa32d9767b658a2f36317aa7b56fd1cdf6418406eacf5870d5d443bfde11106780e011844b97c2d3dbb680397e90d"}}, 0x1e6) write$char_usb(0xffffffffffffffff, &(0x7f0000000240)="d682562294b9672017dcce5a3d8ed24a378a2b005eaf68229490330f429ff6459012b8b6efc3ad54947ec87c2abcacad4b5d3653d290f0aaf92cb50198c305022300e34a0124e0aae51886c3ee179077943c6de64beb6212403562cda347c89e14f06fdedcd850e25041a083d27796d8", 0x70) 14:18:20 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x500443) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000200000000d54b3be9001800000a", @ANYRES32=r0, @ANYBLOB="0000000000000000008945a07a14f027f3ee4c537232d148ffff4f07c5dbbb496b22d6bccf64b3c45de23b397ea4a570d83e5e7c00ef26f3e1e94e19be5a67160bf205f8beba7e3cdf584c56d52ea700246667b8abafec370a38713c872d4d5575", @ANYRES32=r0, @ANYRES32=r0]) socketpair(0xf, 0x5, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0x125f, r3) 14:18:20 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f00000000c0)={'\x00', 0x96, 0x0, 0xffff}) (async) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f00000000c0)={'\x00', 0x96, 0x0, 0xffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000100000001000800696c653000"]) ioctl$NBD_SET_SOCK(r0, 0x1260, r2) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x684641) 14:18:21 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x86000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000080), 0x10, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "5c048de3e9dfd37a"}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x86000) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000080), 0x10, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "5c048de3e9dfd37a"}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) 14:18:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:18:21 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000040)='hybla\x00', 0x6) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x420300, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x1, 0xa}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:21 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0xce, 0x8071, 0x1, 0x1ff, 0x39530000, 0x200, "d68477d0a559932bf74b5cf2f30917844d235e5f634040ab29b604a9f7584b7d6d10cda74e5e2ff280a3d089ac0003f714481a3a42f09c2c922fc8f003938404a6cbb8454db56aec1d25351e8d0756ea4db6b9270dff2df616828b2ca6e085ddbf91e5e424b8d88f702fc383fb74d0aa7665fd2e63f4aaece7393c1d82a016a7fa056397932c3bf94cd0e0e8f671a689004212dbe8a278270415ce0e622c05eaa32d9767b658a2f36317aa7b56fd1cdf6418406eacf5870d5d443bfde11106780e011844b97c2d3dbb680397e90d"}}, 0x1e6) write$char_usb(0xffffffffffffffff, &(0x7f0000000240)="d682562294b9672017dcce5a3d8ed24a378a2b005eaf68229490330f429ff6459012b8b6efc3ad54947ec87c2abcacad4b5d3653d290f0aaf92cb50198c305022300e34a0124e0aae51886c3ee179077943c6de64beb6212403562cda347c89e14f06fdedcd850e25041a083d27796d8", 0x70) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30) (async) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0xce, 0x8071, 0x1, 0x1ff, 0x39530000, 0x200, "d68477d0a559932bf74b5cf2f30917844d235e5f634040ab29b604a9f7584b7d6d10cda74e5e2ff280a3d089ac0003f714481a3a42f09c2c922fc8f003938404a6cbb8454db56aec1d25351e8d0756ea4db6b9270dff2df616828b2ca6e085ddbf91e5e424b8d88f702fc383fb74d0aa7665fd2e63f4aaece7393c1d82a016a7fa056397932c3bf94cd0e0e8f671a689004212dbe8a278270415ce0e622c05eaa32d9767b658a2f36317aa7b56fd1cdf6418406eacf5870d5d443bfde11106780e011844b97c2d3dbb680397e90d"}}, 0x1e6) (async) write$char_usb(0xffffffffffffffff, &(0x7f0000000240)="d682562294b9672017dcce5a3d8ed24a378a2b005eaf68229490330f429ff6459012b8b6efc3ad54947ec87c2abcacad4b5d3653d290f0aaf92cb50198c305022300e34a0124e0aae51886c3ee179077943c6de64beb6212403562cda347c89e14f06fdedcd850e25041a083d27796d8", 0x70) (async) 14:18:21 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040), 0x1000000, &(0x7f00000000c0)) 14:18:21 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f00000000c0)={'\x00', 0x96, 0x0, 0xffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000100000001000800696c653000"]) ioctl$NBD_SET_SOCK(r0, 0x1260, r2) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x684641) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8000) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f00000000c0)={'\x00', 0x96, 0x0, 0xffff}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="0000000100000001000800696c653000"]) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, r2) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x684641) (async) 14:18:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:18:21 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x86000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000080), 0x10, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "5c048de3e9dfd37a"}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x86000) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000080), 0x10, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "5c048de3e9dfd37a"}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) 14:18:21 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$NBD_SET_SOCK(r0, 0x301, r1) 14:18:21 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040), 0x1000000, &(0x7f00000000c0)) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040), 0x1000000, &(0x7f00000000c0)) (async) 14:18:21 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000040)='hybla\x00', 0x6) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x420300, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x1, 0xa}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000040)='hybla\x00', 0x6) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x420300, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x1, 0xa}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) (async) 14:18:21 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r1 = fsmount(0xffffffffffffffff, 0x0, 0x2) (rerun: 32) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$NBD_SET_SOCK(r0, 0x301, r1) 14:18:21 executing program 1: r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x1260, 0xffffffffffffffff) 14:18:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) 14:18:21 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000040)={0xf86}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"6ccdc1d9cab9be285b5354f2856be64b95f4505e326e8cf1a9102fca5900b74a"}) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) 14:18:21 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$NBD_SET_SOCK(r0, 0x301, r1) 14:18:21 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040), 0x1000000, &(0x7f00000000c0)) 14:18:21 executing program 1: r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x1260, 0xffffffffffffffff) 14:18:21 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000040)='hybla\x00', 0x6) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x420300, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x1, 0xa}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 14:18:21 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000040)={0xf86}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"6ccdc1d9cab9be285b5354f2856be64b95f4505e326e8cf1a9102fca5900b74a"}) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000040)={0xf86}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"6ccdc1d9cab9be285b5354f2856be64b95f4505e326e8cf1a9102fca5900b74a"}) (async) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) 14:18:21 executing program 1: r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) (async) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x1260, 0xffffffffffffffff) 14:18:21 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 14:18:21 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x603481) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004010}, 0x20000000) 14:18:21 executing program 5: r0 = add_key(&(0x7f0000000880)='big_key\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='+', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$set_timeout(0xf, r0, 0x0) keyctl$link(0x8, 0x0, r0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x125f, 0xffffffffffffffff) 14:18:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 14:18:21 executing program 1: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0xa2500) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x1260, 0xffffffffffffffff) r0 = landlock_create_ruleset(&(0x7f0000000000)={0x1}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) 14:18:21 executing program 5: r0 = add_key(&(0x7f0000000880)='big_key\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='+', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) (async) keyctl$set_timeout(0xf, r0, 0x0) keyctl$link(0x8, 0x0, r0) (async) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x125f, 0xffffffffffffffff) 14:18:21 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 14:18:21 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000040)={0xf86}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"6ccdc1d9cab9be285b5354f2856be64b95f4505e326e8cf1a9102fca5900b74a"}) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) 14:18:21 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async) pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 14:18:21 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x603481) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004010}, 0x20000000) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x603481) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004010}, 0x20000000) (async) 14:18:21 executing program 1: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0xa2500) (async) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x1260, 0xffffffffffffffff) (async) r0 = landlock_create_ruleset(&(0x7f0000000000)={0x1}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) 14:18:21 executing program 2: getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x30) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) mmap$xdp(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x8, 0x13, 0xffffffffffffffff, 0x100000000) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x2c, 0x0, r1, 0x3f}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)="0fa428cf20c6470c2499737ad35986dfbafb8b31cf33fdc134986ddf5fdba589d3c0cb453e519cadde7fc548cb0e824093f35a7fe99423cdb0f88023578a342eead24d335f1683f5a4050de962fbd66c27befdd3dc824c12ddc9c4aba6652d5ba9960d2a7c4d9efccd23a39d3a8eeedf44c0018ac49db9cfa7b59ab2a4fff5e08c24", 0x82}, {&(0x7f0000000240)="cf2fbd8ff8a41c8eb95f19c29867510762bc7e5978c88114b30ba4e31e7922d89400d547bde63f0c6ed1a349095bc03de3893555c83684ff7b62a77fb8c9489b1090881ad8c144d31fbbbbbadb36aff7ade95400ebddf74fe30cafa658be8f4e570a0b6a3edd55db9f7271e0ad", 0x6d}], 0x2, 0x0, 0x0, 0x4c0d0}, 0x80) 14:18:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fffffffffffffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000055) 14:18:21 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) (async) pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) 14:18:21 executing program 5: r0 = add_key(&(0x7f0000000880)='big_key\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='+', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) (async) keyctl$set_timeout(0xf, r0, 0x0) (async) keyctl$link(0x8, 0x0, r0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x125f, 0xffffffffffffffff) 14:18:21 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x603481) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004010}, 0x20000000) 14:18:21 executing program 1: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0xa2500) (async) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x1260, 0xffffffffffffffff) r0 = landlock_create_ruleset(&(0x7f0000000000)={0x1}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) 14:18:21 executing program 2: getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x30) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) mmap$xdp(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x8, 0x13, 0xffffffffffffffff, 0x100000000) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x2c, 0x0, r1, 0x3f}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)="0fa428cf20c6470c2499737ad35986dfbafb8b31cf33fdc134986ddf5fdba589d3c0cb453e519cadde7fc548cb0e824093f35a7fe99423cdb0f88023578a342eead24d335f1683f5a4050de962fbd66c27befdd3dc824c12ddc9c4aba6652d5ba9960d2a7c4d9efccd23a39d3a8eeedf44c0018ac49db9cfa7b59ab2a4fff5e08c24", 0x82}, {&(0x7f0000000240)="cf2fbd8ff8a41c8eb95f19c29867510762bc7e5978c88114b30ba4e31e7922d89400d547bde63f0c6ed1a349095bc03de3893555c83684ff7b62a77fb8c9489b1090881ad8c144d31fbbbbbadb36aff7ade95400ebddf74fe30cafa658be8f4e570a0b6a3edd55db9f7271e0ad", 0x6d}], 0x2, 0x0, 0x0, 0x4c0d0}, 0x80) 14:18:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fffffffffffffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000055) 14:18:21 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0xd) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x20, 0x70bd25, 0x25dfdbff, "", [""]}, 0x10}}, 0x800) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:22 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x406000) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/56, 0x38) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000080)) 14:18:22 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x8054, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) 14:18:22 executing program 2: getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x30) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) mmap$xdp(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x8, 0x13, 0xffffffffffffffff, 0x100000000) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x2c, 0x0, r1, 0x3f}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)="0fa428cf20c6470c2499737ad35986dfbafb8b31cf33fdc134986ddf5fdba589d3c0cb453e519cadde7fc548cb0e824093f35a7fe99423cdb0f88023578a342eead24d335f1683f5a4050de962fbd66c27befdd3dc824c12ddc9c4aba6652d5ba9960d2a7c4d9efccd23a39d3a8eeedf44c0018ac49db9cfa7b59ab2a4fff5e08c24", 0x82}, {&(0x7f0000000240)="cf2fbd8ff8a41c8eb95f19c29867510762bc7e5978c88114b30ba4e31e7922d89400d547bde63f0c6ed1a349095bc03de3893555c83684ff7b62a77fb8c9489b1090881ad8c144d31fbbbbbadb36aff7ade95400ebddf74fe30cafa658be8f4e570a0b6a3edd55db9f7271e0ad", 0x6d}], 0x2, 0x0, 0x0, 0x4c0d0}, 0x80) 14:18:22 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) read$char_usb(r1, &(0x7f0000000080)=""/128, 0x80) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:22 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fffffffffffffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000055) 14:18:22 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0xd) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x20, 0x70bd25, 0x25dfdbff, "", [""]}, 0x10}}, 0x800) (async) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:22 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x406000) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/56, 0x38) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000080)) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x406000) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) (async) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/56, 0x38) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000080)) (async) 14:18:22 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) (async) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x8054, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) 14:18:22 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) read$char_usb(r1, &(0x7f0000000080)=""/128, 0x80) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:22 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4427c1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 14:18:22 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0xd) (async, rerun: 64) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x20, 0x70bd25, 0x25dfdbff, "", [""]}, 0x10}}, 0x800) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:22 executing program 3: keyctl$assume_authority(0x10, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) keyctl$setperm(0x5, 0x0, 0x0) r1 = add_key(&(0x7f0000000880)='big_key\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='+', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r1, 0x0) keyctl$set_timeout(0xf, r1, 0x0) r2 = add_key(&(0x7f0000000880)='big_key\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='+', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r2, 0x0) keyctl$set_timeout(0xf, r2, 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffa, r2, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r3, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x401}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040000}, 0x84) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000380)={0x2, [0x0, 0x0]}) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x10000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nicvf0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000804}, 0x41) 14:18:22 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) read$char_usb(r1, &(0x7f0000000080)=""/128, 0x80) (async) read$char_usb(r1, &(0x7f0000000080)=""/128, 0x80) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:22 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x406000) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/56, 0x38) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000080)) 14:18:22 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) (async) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x8054, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) 14:18:22 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4427c1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 14:18:22 executing program 3: keyctl$assume_authority(0x10, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) keyctl$setperm(0x5, 0x0, 0x0) (async) r1 = add_key(&(0x7f0000000880)='big_key\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='+', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r1, 0x0) (async) keyctl$set_timeout(0xf, r1, 0x0) (async) r2 = add_key(&(0x7f0000000880)='big_key\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='+', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r2, 0x0) keyctl$set_timeout(0xf, r2, 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffa, r2, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r3, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x401}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040000}, 0x84) (async) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000380)={0x2, [0x0, 0x0]}) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x10000) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nicvf0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000804}, 0x41) 14:18:22 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4427c1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 14:18:22 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1200) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x29542538}}, './file0\x00'}) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x3) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x8000) 14:18:22 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x600080) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000080)={0x5, r1}, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 14:18:22 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:22 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=r2, @ANYBLOB="20002abd7000fddbdf25e0ffffff0900010073797a32000000000900010073797a310000000005000400010000000900030073797a30010000000500e2ff000000000500040002000000"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:22 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040800}, 0x20) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000180)={0x0, 0x2}) ioctl$NBD_SET_SOCK(r2, 0x1261, 0xffffffffffffffff) 14:18:22 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x600080) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000080)={0x5, r1}, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 14:18:22 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:22 executing program 3: keyctl$assume_authority(0x10, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8000) (async) keyctl$setperm(0x5, 0x0, 0x0) (async, rerun: 32) r1 = add_key(&(0x7f0000000880)='big_key\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='+', 0x1, 0xfffffffffffffffd) (rerun: 32) keyctl$setperm(0x5, r1, 0x0) (async) keyctl$set_timeout(0xf, r1, 0x0) r2 = add_key(&(0x7f0000000880)='big_key\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='+', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r2, 0x0) (async) keyctl$set_timeout(0xf, r2, 0x0) (async) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffa, r2, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r3, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x401}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040000}, 0x84) (async, rerun: 32) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) (rerun: 32) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000380)={0x2, [0x0, 0x0]}) (async, rerun: 32) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x10000) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nicvf0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000804}, 0x41) 14:18:22 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=r2, @ANYBLOB="20002abd7000fddbdf25e0ffffff0900010073797a32000000000900010073797a310000000005000400010000000900030073797a30010000000500e2ff000000000500040002000000"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:22 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1200) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x29542538}}, './file0\x00'}) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x3) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x8000) 14:18:22 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x600080) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000080)={0x5, r1}, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x600080) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000080)={0x5, r1}, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) 14:18:22 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040800}, 0x20) (async, rerun: 32) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000180)={0x0, 0x2}) ioctl$NBD_SET_SOCK(r2, 0x1261, 0xffffffffffffffff) 14:18:22 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:22 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1200) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x29542538}}, './file0\x00'}) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x3) (async) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x3) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x8000) 14:18:22 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=r2, @ANYBLOB="20002abd7000fddbdf25e0ffffff0900010073797a32000000000900010073797a310000000005000400010000000900030073797a30010000000500e2ff000000000500040002000000"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:22 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x30180, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x2) ioctl$NBD_SET_SOCK(r0, 0x125f, r1) 14:18:22 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x48}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x885}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f00000001c0)={0x4}) openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000200), 0xa8000, 0x80) 14:18:22 executing program 3: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4}) r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vxcan1\x00'}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x6, 0x8, 0x1, 0x2}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000400)={r1, r4, r5, 0x1, 0x8, 0x100, 0x20, 0xfffff5e9, 0x9, 0x8, 0x0, 0x7}) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fbdbdf255100000008000300", @ANYRES32=r0, @ANYBLOB="260006000802110000010000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008840) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000480)={&(0x7f0000000440)=[0x0, 0x0], 0x2, r3}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x125d, 0xffffffffffffffff) 14:18:22 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040800}, 0x20) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000180)={0x0, 0x2}) ioctl$NBD_SET_SOCK(r2, 0x1261, 0xffffffffffffffff) 14:18:22 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, 0x0, 0x2, {0x1, 0xf0, 0x1}, 0x1}, 0x18) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:22 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x1, "09b85f94893f405e113cf5f936d1c40496389eed7cbbb4c125c4bb64d9a6e981", 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$NBD_SET_SOCK(r1, 0x125e, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000100)='}#\x00', &(0x7f0000000140)='./file0\x00', r4) socket$packet(0x11, 0x2, 0x300) 14:18:22 executing program 3: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4}) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async) r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vxcan1\x00'}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x6, 0x8, 0x1, 0x2}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000400)={r1, r4, r5, 0x1, 0x8, 0x100, 0x20, 0xfffff5e9, 0x9, 0x8, 0x0, 0x7}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000400)={r1, r4, r5, 0x1, 0x8, 0x100, 0x20, 0xfffff5e9, 0x9, 0x8, 0x0, 0x7}) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fbdbdf255100000008000300", @ANYRES32=r0, @ANYBLOB="260006000802110000010000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008840) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000480)={&(0x7f0000000440)=[0x0, 0x0], 0x2, r3}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x125d, 0xffffffffffffffff) 14:18:22 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x30180, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x2) ioctl$NBD_SET_SOCK(r0, 0x125f, r1) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x30180, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x2) (async) ioctl$NBD_SET_SOCK(r0, 0x125f, r1) (async) 14:18:22 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x48}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x885}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f00000001c0)={0x4}) openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000200), 0xa8000, 0x80) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x48}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x885}, 0x94) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f00000001c0)={0x4}) (async) openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000200), 0xa8000, 0x80) (async) 14:18:23 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000a5f3fad12a15e9b14253dec3f05877e2c456d23b35b8b57bdf781b59f80542c4fc0728e69788d91ab78605281a25708c6197618f", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="de08ca4b0d18a3ad061a9e00", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) 14:18:23 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, 0x0, 0x2, {0x1, 0xf0, 0x1}, 0x1}, 0x18) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x1, "09b85f94893f405e113cf5f936d1c40496389eed7cbbb4c125c4bb64d9a6e981", 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$NBD_SET_SOCK(r1, 0x125e, 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000100)='}#\x00', &(0x7f0000000140)='./file0\x00', r4) socket$packet(0x11, 0x2, 0x300) 14:18:23 executing program 3: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4}) (rerun: 32) r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vxcan1\x00'}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x6, 0x8, 0x1, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000400)={r1, r4, r5, 0x1, 0x8, 0x100, 0x20, 0xfffff5e9, 0x9, 0x8, 0x0, 0x7}) (async, rerun: 32) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fbdbdf255100000008000300", @ANYRES32=r0, @ANYBLOB="260006000802110000010000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008840) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000480)={&(0x7f0000000440)=[0x0, 0x0], 0x2, r3}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x125d, 0xffffffffffffffff) 14:18:23 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x30180, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x2) (async) ioctl$NBD_SET_SOCK(r0, 0x125f, r1) 14:18:23 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x48}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x885}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f00000001c0)={0x4}) openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000200), 0xa8000, 0x80) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x48}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x885}, 0x94) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f00000001c0)={0x4}) (async) openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000200), 0xa8000, 0x80) (async) 14:18:23 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000a5f3fad12a15e9b14253dec3f05877e2c456d23b35b8b57bdf781b59f80542c4fc0728e69788d91ab78605281a25708c6197618f", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="de08ca4b0d18a3ad061a9e00", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000a5f3fad12a15e9b14253dec3f05877e2c456d23b35b8b57bdf781b59f80542c4fc0728e69788d91ab78605281a25708c6197618f", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="de08ca4b0d18a3ad061a9e00", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) 14:18:23 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000100)={'\x00', 0xaed, 0x3, 0x4}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xff}}, './file0\x00'}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="02300000000000000000210000000000"]) accept4$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14, 0x800) 14:18:23 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, 0x0, 0x2, {0x1, 0xf0, 0x1}, 0x1}, 0x18) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x1, "09b85f94893f405e113cf5f936d1c40496389eed7cbbb4c125c4bb64d9a6e981", 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$NBD_SET_SOCK(r1, 0x125e, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000100)='}#\x00', &(0x7f0000000140)='./file0\x00', r4) socket$packet(0x11, 0x2, 0x300) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x1, "09b85f94893f405e113cf5f936d1c40496389eed7cbbb4c125c4bb64d9a6e981"}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) ioctl$NBD_SET_SOCK(r1, 0x125e, 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000100)='}#\x00', &(0x7f0000000140)='./file0\x00', r4) (async) socket$packet(0x11, 0x2, 0x300) (async) 14:18:23 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000a5f3fad12a15e9b14253dec3f05877e2c456d23b35b8b57bdf781b59f80542c4fc0728e69788d91ab78605281a25708c6197618f", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="de08ca4b0d18a3ad061a9e00", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000a5f3fad12a15e9b14253dec3f05877e2c456d23b35b8b57bdf781b59f80542c4fc0728e69788d91ab78605281a25708c6197618f", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="de08ca4b0d18a3ad061a9e00", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) 14:18:23 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x464, 0x10, 0x70bd27, 0x25dfdbfe, "7da49db3aa1925d74c19b61367cc282adb04d680db4412f9e61a91eb652b8bf9d5e69c70", ["", "", "", "", "", ""]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x1, 0x67}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20048884}, 0x4004000) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) write$yama_ptrace_scope(r0, &(0x7f0000000180)='0\x00', 0x2) ioctl$NBD_SET_SOCK(r1, 0x301, 0xffffffffffffffff) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x8, 0x5, 0x700, 0x80, 0x3ff, 0x9, 0x7fff}, 0x1c) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000002c0)={0x6, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000300)={r3, 0x200}) 14:18:23 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$NBD_SET_SOCK(r1, 0x125f, 0xffffffffffffffff) 14:18:23 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000100)={'\x00', 0xaed, 0x3, 0x4}) (async) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000100)={'\x00', 0xaed, 0x3, 0x4}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xff}}, './file0\x00'}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x7) (async) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="02300000000000000000210000000000"]) accept4$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14, 0x800) 14:18:23 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1470c2) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:23 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$NBD_SET_SOCK(r1, 0x125f, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$NBD_SET_SOCK(r1, 0x125f, 0xffffffffffffffff) (async) 14:18:23 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:23 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x8054, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) connect$can_j1939(r1, &(0x7f0000000200)={0x1d, r3, 0x3, {0x2, 0xff, 0x4}, 0x1}, 0x18) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x209c0, 0x0) pidfd_getfd(r4, r0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r1, 0x1261, 0xffffffffffffffff) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x6, 0x1, 0x1, 0x1}) 14:18:23 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x464, 0x10, 0x70bd27, 0x25dfdbfe, "7da49db3aa1925d74c19b61367cc282adb04d680db4412f9e61a91eb652b8bf9d5e69c70", ["", "", "", "", "", ""]}, 0x34}}, 0x0) (async) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x464, 0x10, 0x70bd27, 0x25dfdbfe, "7da49db3aa1925d74c19b61367cc282adb04d680db4412f9e61a91eb652b8bf9d5e69c70", ["", "", "", "", "", ""]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x1, 0x67}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20048884}, 0x4004000) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) write$yama_ptrace_scope(r0, &(0x7f0000000180)='0\x00', 0x2) ioctl$NBD_SET_SOCK(r1, 0x301, 0xffffffffffffffff) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x8, 0x5, 0x700, 0x80, 0x3ff, 0x9, 0x7fff}, 0x1c) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x8, 0x5, 0x700, 0x80, 0x3ff, 0x9, 0x7fff}, 0x1c) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000002c0)={0x6, 0x0, 0x10000}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000002c0)={0x6, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000300)={r3, 0x200}) 14:18:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1470c2) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1470c2) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) 14:18:23 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000100)={'\x00', 0xaed, 0x3, 0x4}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xff}}, './file0\x00'}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="02300000000000000000210000000000"]) accept4$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14, 0x800) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) (async) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000100)={'\x00', 0xaed, 0x3, 0x4}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xff}}, './file0\x00'}) (async) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x7) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="02300000000000000000210000000000"]) (async) accept4$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14, 0x800) (async) 14:18:23 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$NBD_SET_SOCK(r1, 0x125f, 0xffffffffffffffff) 14:18:23 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1470c2) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1470c2) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:23 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:23 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x464, 0x10, 0x70bd27, 0x25dfdbfe, "7da49db3aa1925d74c19b61367cc282adb04d680db4412f9e61a91eb652b8bf9d5e69c70", ["", "", "", "", "", ""]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x1, 0x67}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20048884}, 0x4004000) (async, rerun: 64) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (rerun: 64) write$yama_ptrace_scope(r0, &(0x7f0000000180)='0\x00', 0x2) (async) ioctl$NBD_SET_SOCK(r1, 0x301, 0xffffffffffffffff) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x8, 0x5, 0x700, 0x80, 0x3ff, 0x9, 0x7fff}, 0x1c) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000002c0)={0x6, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000300)={r3, 0x200}) 14:18:23 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x8054, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) (async, rerun: 64) connect$can_j1939(r1, &(0x7f0000000200)={0x1d, r3, 0x3, {0x2, 0xff, 0x4}, 0x1}, 0x18) (async, rerun: 64) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x209c0, 0x0) (async) pidfd_getfd(r4, r0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) (async) ioctl$NBD_SET_SOCK(r1, 0x1261, 0xffffffffffffffff) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x6, 0x1, 0x1, 0x1}) (rerun: 32) 14:18:23 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x10400) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f5, 0x300, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004}, 0x40000000) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f2, 0x2, 0x70bd27, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000004) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) 14:18:23 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x141001, 0x0) read$fb(0xffffffffffffffff, &(0x7f0000000040)=""/184, 0xb8) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) process_mrelease(0xffffffffffffffff, 0x0) 14:18:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"7ac036ee35cb3b9d5d9089b9df995241661db66282ae355912fb5c3fd70e03ac", r4}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000000100)=0x4, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:23 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000140)='/dev/nbd#\x00', &(0x7f0000000180)='./file0\x00', r0) brk(0x1) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x20000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) r3 = fsmount(r2, 0x1, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="000000000000fd002e2f66696c653000"]) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$NBD_SET_SOCK(r4, 0x1260, r5) 14:18:23 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x10400) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (rerun: 64) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f5, 0x300, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004}, 0x40000000) (async) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f2, 0x2, 0x70bd27, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000004) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (rerun: 32) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) 14:18:23 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x141001, 0x0) (async) read$fb(0xffffffffffffffff, &(0x7f0000000040)=""/184, 0xb8) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) (async) process_mrelease(0xffffffffffffffff, 0x0) 14:18:23 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x8054, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) connect$can_j1939(r1, &(0x7f0000000200)={0x1d, r3, 0x3, {0x2, 0xff, 0x4}, 0x1}, 0x18) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x209c0, 0x0) pidfd_getfd(r4, r0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r1, 0x1261, 0xffffffffffffffff) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x6, 0x1, 0x1, 0x1}) 14:18:23 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000140)='/dev/nbd#\x00', &(0x7f0000000180)='./file0\x00', r0) brk(0x1) (async) brk(0x1) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x20000) (async) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x20000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) fsmount(r2, 0x1, 0x3) (async) r3 = fsmount(r2, 0x1, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="000000000000fd002e2f66696c653000"]) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$NBD_SET_SOCK(r4, 0x1260, r5) 14:18:23 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x2, 0x2, 0x3, 0x2}) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f2, 0x10, 0x70bd2d, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4001}, 0x2404c0c8) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000200)={r2, 0x0, r3, 0x6, 0x8, 0x3, 0x2, 0x9, 0x5, 0x1, 0x2289ffe1, 0x3}) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 14:18:23 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x10400) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f5, 0x300, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004}, 0x40000000) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f2, 0x2, 0x70bd27, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000004) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x10400) (async) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f5, 0x300, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004}, 0x40000000) (async) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f2, 0x2, 0x70bd27, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000004) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) (async) 14:18:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) (async) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"7ac036ee35cb3b9d5d9089b9df995241661db66282ae355912fb5c3fd70e03ac", r4}) (async) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000000100)=0x4, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4}) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 14:18:23 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x84800) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x886, "11f15433e4651fb07feed19b56ad9e9dbcebfffa7e3f4f15e056b06f6a5ee5d2", 0xffffffffffffffff}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="05000000", @ANYRES16=r1, @ANYBLOB="00032abd7000fbdbdf25040000000900030073797a32000000000500040002000000"], 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x81) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000240)={0x3c1cc7ec, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, &(0x7f0000000280)={0x0, r5}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000080)={"bcba4a7fa5bcf7b405cdc8af492a929795255684007181ede468d0e096a3720e", r2}) 14:18:24 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x141001, 0x0) read$fb(0xffffffffffffffff, &(0x7f0000000040)=""/184, 0xb8) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) process_mrelease(0xffffffffffffffff, 0x0) (async) process_mrelease(0xffffffffffffffff, 0x0) 14:18:24 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000140)='/dev/nbd#\x00', &(0x7f0000000180)='./file0\x00', r0) (async) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000140)='/dev/nbd#\x00', &(0x7f0000000180)='./file0\x00', r0) brk(0x1) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x20000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) fsmount(r2, 0x1, 0x3) (async) r3 = fsmount(r2, 0x1, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="000000000000fd002e2f66696c653000"]) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="000000000000fd002e2f66696c653000"]) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$NBD_SET_SOCK(r4, 0x1260, r5) 14:18:24 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x36}}, '.\x00'}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) accept4$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000180)={0x0, 0x9, &(0x7f0000000080)=[0x7, 0xfff, 0x1, 0x8000, 0x7f, 0x2c, 0x40, 0x6, 0x800], &(0x7f00000000c0), &(0x7f00000000c0)=[0x9, 0xd, 0x40, 0xf1d8, 0x7, 0x8, 0x1f], &(0x7f0000000140)=[0x40, 0xfffb]}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf25020000000c0004000100000000000000aa8bb1fb9791bc230000000008000000ffffffff00000000"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x4008801) 14:18:24 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x2, 0x2, 0x3, 0x2}) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f2, 0x10, 0x70bd2d, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4001}, 0x2404c0c8) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000200)={r2, 0x0, r3, 0x6, 0x8, 0x3, 0x2, 0x9, 0x5, 0x1, 0x2289ffe1, 0x3}) (async, rerun: 32) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 14:18:24 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x84800) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x886, "11f15433e4651fb07feed19b56ad9e9dbcebfffa7e3f4f15e056b06f6a5ee5d2", 0xffffffffffffffff}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="05000000", @ANYRES16=r1, @ANYBLOB="00032abd7000fbdbdf25040000000900030073797a32000000000500040002000000"], 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x81) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000240)={0x3c1cc7ec, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, &(0x7f0000000280)={0x0, r5}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000080)={"bcba4a7fa5bcf7b405cdc8af492a929795255684007181ede468d0e096a3720e", r2}) 14:18:24 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) landlock_restrict_self(r1, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:24 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"7ac036ee35cb3b9d5d9089b9df995241661db66282ae355912fb5c3fd70e03ac", r4}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000000100)=0x4, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) (async) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"7ac036ee35cb3b9d5d9089b9df995241661db66282ae355912fb5c3fd70e03ac", r4}) (async) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000000100)=0x4, 0x4) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4}) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) 14:18:24 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) pidfd_send_signal(0xffffffffffffffff, 0x2f, &(0x7f0000000040)={0x1e, 0x0, 0xfaa}, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f00000000c0)) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r3, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}]}, 0x20}}, 0x8000) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r3, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}}, 0x800) 14:18:24 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x36}}, '.\x00'}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) accept4$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000180)={0x0, 0x9, &(0x7f0000000080)=[0x7, 0xfff, 0x1, 0x8000, 0x7f, 0x2c, 0x40, 0x6, 0x800], &(0x7f00000000c0), &(0x7f00000000c0)=[0x9, 0xd, 0x40, 0xf1d8, 0x7, 0x8, 0x1f], &(0x7f0000000140)=[0x40, 0xfffb]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf25020000000c0004000100000000000000aa8bb1fb9791bc230000000008000000ffffffff00000000"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x4008801) 14:18:24 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) landlock_restrict_self(r1, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:24 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x84800) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x886, "11f15433e4651fb07feed19b56ad9e9dbcebfffa7e3f4f15e056b06f6a5ee5d2", 0xffffffffffffffff}) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="05000000", @ANYRES16=r1, @ANYBLOB="00032abd7000fbdbdf25040000000900030073797a32000000000500040002000000"], 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x81) (async, rerun: 32) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000240)={0x3c1cc7ec, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, &(0x7f0000000280)={0x0, r5}) (async) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000080)={"bcba4a7fa5bcf7b405cdc8af492a929795255684007181ede468d0e096a3720e", r2}) 14:18:24 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req={0xffffffff, 0x8, 0x8, 0x5}, 0x10) 14:18:24 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x2, 0x2, 0x3, 0x2}) (async) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f2, 0x10, 0x70bd2d, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4001}, 0x2404c0c8) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000200)={r2, 0x0, r3, 0x6, 0x8, 0x3, 0x2, 0x9, 0x5, 0x1, 0x2289ffe1, 0x3}) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 14:18:24 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) pidfd_send_signal(0xffffffffffffffff, 0x2f, &(0x7f0000000040)={0x1e, 0x0, 0xfaa}, 0x0) (async) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f00000000c0)) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r3, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}]}, 0x20}}, 0x8000) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r3, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}}, 0x800) 14:18:24 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req={0xffffffff, 0x8, 0x8, 0x5}, 0x10) 14:18:24 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) landlock_restrict_self(r1, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:24 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x36}}, '.\x00'}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) accept4$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000180)={0x0, 0x9, &(0x7f0000000080)=[0x7, 0xfff, 0x1, 0x8000, 0x7f, 0x2c, 0x40, 0x6, 0x800], &(0x7f00000000c0), &(0x7f00000000c0)=[0x9, 0xd, 0x40, 0xf1d8, 0x7, 0x8, 0x1f], &(0x7f0000000140)=[0x40, 0xfffb]}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 32) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf25020000000c0004000100000000000000aa8bb1fb9791bc230000000008000000ffffffff00000000"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x4008801) 14:18:24 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='rw\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x301, 0xffffffffffffffff) 14:18:24 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 14:18:24 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x8054, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, r2, 0x3, {0x1, 0x1, 0x4}, 0x1}, 0x18, &(0x7f0000000140)={&(0x7f0000000080)="60e044778f413005fa710a92901a74b6adcf7fc55296866b101075827499622b4bfe9c393368a27e5a1b10fe62e63494d52feb0d8b4e1c43f164c021d0d4a8e24be1fe8a4359f3207eea9a05e3c41f2509ecbe53e0e7146b395f0b4dffb2ea1af1ff05e288647c53985fdf7a9f4d0619dcaeea2e90b9bf4358c557ec9409481db7", 0x81}, 0x1, 0x0, 0x0, 0x40000}, 0x4010) 14:18:24 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) pidfd_send_signal(0xffffffffffffffff, 0x2f, &(0x7f0000000040)={0x1e, 0x0, 0xfaa}, 0x0) (async) pidfd_send_signal(0xffffffffffffffff, 0x2f, &(0x7f0000000040)={0x1e, 0x0, 0xfaa}, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f00000000c0)) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r3, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}]}, 0x20}}, 0x8000) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r3, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}}, 0x800) 14:18:24 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req={0xffffffff, 0x8, 0x8, 0x5}, 0x10) (async) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req={0xffffffff, 0x8, 0x8, 0x5}, 0x10) 14:18:24 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='rw\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x301, 0xffffffffffffffff) 14:18:24 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 14:18:24 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x8054, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) (async) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, r2, 0x3, {0x1, 0x1, 0x4}, 0x1}, 0x18, &(0x7f0000000140)={&(0x7f0000000080)="60e044778f413005fa710a92901a74b6adcf7fc55296866b101075827499622b4bfe9c393368a27e5a1b10fe62e63494d52feb0d8b4e1c43f164c021d0d4a8e24be1fe8a4359f3207eea9a05e3c41f2509ecbe53e0e7146b395f0b4dffb2ea1af1ff05e288647c53985fdf7a9f4d0619dcaeea2e90b9bf4358c557ec9409481db7", 0x81}, 0x1, 0x0, 0x0, 0x40000}, 0x4010) 14:18:24 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '+%.+'}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="a883ba593a927dea149391102ed15b6f91a886633cc536b4897b46334db37a96a7cfecab077c04ff24e143261bfac696e8", @ANYRES16=r2, @ANYBLOB="00022cbd7000ffdbdf25020000000c00050004000000000000000c00060000000000000000000c00080000000000000000000c0003000180ffffffffffff"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4040014) r3 = fsmount(0xffffffffffffffff, 0x1, 0x84) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 14:18:24 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 14:18:24 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='rw\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x301, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='rw\x00', 0x0, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r1, 0x301, 0xffffffffffffffff) (async) 14:18:24 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) 14:18:24 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:24 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x8054, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) (async) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, r2, 0x3, {0x1, 0x1, 0x4}, 0x1}, 0x18, &(0x7f0000000140)={&(0x7f0000000080)="60e044778f413005fa710a92901a74b6adcf7fc55296866b101075827499622b4bfe9c393368a27e5a1b10fe62e63494d52feb0d8b4e1c43f164c021d0d4a8e24be1fe8a4359f3207eea9a05e3c41f2509ecbe53e0e7146b395f0b4dffb2ea1af1ff05e288647c53985fdf7a9f4d0619dcaeea2e90b9bf4358c557ec9409481db7", 0x81}, 0x1, 0x0, 0x0, 0x40000}, 0x4010) [ 2074.780279][T17144] block nbd4: NBD_DISCONNECT 14:18:24 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = fsmount(r2, 0x1, 0x72) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x60}}, './file0\x00'}) socketpair(0x9, 0x5, 0x9, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r8, 0x40206435, 0x0) sendmsg$NBD_CMD_STATUS(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xac, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x10, 0xa, '/dev/autofs\x00'}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x400}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x200}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x86a8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3f}]}, 0xac}, 0x1, 0x0, 0x0, 0x40800}, 0x24000000) 14:18:24 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '+%.+'}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="a883ba593a927dea149391102ed15b6f91a886633cc536b4897b46334db37a96a7cfecab077c04ff24e143261bfac696e8", @ANYRES16=r2, @ANYBLOB="00022cbd7000ffdbdf25020000000c00050004000000000000000c00060000000000000000000c00080000000000000000000c0003000180ffffffffffff"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4040014) r3 = fsmount(0xffffffffffffffff, 0x1, 0x84) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '+%.+'}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}}, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="a883ba593a927dea149391102ed15b6f91a886633cc536b4897b46334db37a96a7cfecab077c04ff24e143261bfac696e8", @ANYRES16=r2, @ANYBLOB="00022cbd7000ffdbdf25020000000c00050004000000000000000c00060000000000000000000c00080000000000000000000c0003000180ffffffffffff"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4040014) (async) fsmount(0xffffffffffffffff, 0x1, 0x84) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) [ 2074.854292][T17150] block nbd1: shutting down sockets 14:18:24 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:24 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) (async) 14:18:24 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x197440) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 14:18:24 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) [ 2074.944398][T17163] block nbd4: NBD_DISCONNECT 14:18:25 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = fsmount(r2, 0x1, 0x72) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x60}}, './file0\x00'}) (async) socketpair(0x9, 0x5, 0x9, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) (async) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r8, 0x40206435, 0x0) (async) sendmsg$NBD_CMD_STATUS(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xac, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x10, 0xa, '/dev/autofs\x00'}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x400}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x200}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x86a8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3f}]}, 0xac}, 0x1, 0x0, 0x0, 0x40800}, 0x24000000) 14:18:25 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '+%.+'}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="a883ba593a927dea149391102ed15b6f91a886633cc536b4897b46334db37a96a7cfecab077c04ff24e143261bfac696e8", @ANYRES16=r2, @ANYBLOB="00022cbd7000ffdbdf25020000000c00050004000000000000000c00060000000000000000000c00080000000000000000000c0003000180ffffffffffff"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4040014) r3 = fsmount(0xffffffffffffffff, 0x1, 0x84) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 14:18:25 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) 14:18:25 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) [ 2075.033810][T17166] block nbd1: shutting down sockets 14:18:25 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x197440) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 14:18:25 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) 14:18:25 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = fsmount(r2, 0x1, 0x72) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x60}}, './file0\x00'}) (async) socketpair(0x9, 0x5, 0x9, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r8, 0x40206435, 0x0) (async) sendmsg$NBD_CMD_STATUS(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xac, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x10, 0xa, '/dev/autofs\x00'}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x400}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x200}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x86a8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3f}]}, 0xac}, 0x1, 0x0, 0x0, 0x40800}, 0x24000000) 14:18:25 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x300, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8011}, 0x20001004) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0xc92) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0x125d, 0xffffffffffffffff) [ 2075.148090][T17191] block nbd4: NBD_DISCONNECT 14:18:25 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x197440) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 14:18:25 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000080)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x15, 0x300, 0xf6, 0x1000, 0x0, 0x10000, "a3f3acfc2f3963936d7618258265b33b1d57cc4e3c"}}, 0x12d) ioctl$NBD_SET_SOCK(r1, 0x125e, 0xffffffffffffffff) 14:18:25 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2000) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r4, 0x1260, r2) [ 2075.203783][T17192] block nbd1: shutting down sockets 14:18:25 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) 14:18:25 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x300, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8011}, 0x20001004) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0xc92) (async) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0x125d, 0xffffffffffffffff) 14:18:25 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2000) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r4, 0x1260, r2) (async) ioctl$NBD_SET_SOCK(r4, 0x1260, r2) 14:18:25 executing program 2: ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000040)) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) socket$can_raw(0x1d, 0x3, 0x1) 14:18:25 executing program 5: openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x2100, 0x152) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$PTP_PIN_GETFUNC(r2, 0xc0603d06, &(0x7f0000000180)={'\x00', 0x80, 0x1, 0x2}) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r4, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r6) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r7, 0x40d, 0x0, 0x0, {}, [@NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x24}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r7, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '@\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x38}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8810}, 0x20000000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x90, r3, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_BACKEND_IDENTIFIER={0x34, 0xa, '/sys/kernel/debug/binder/failed_transaction_log\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x43}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffff662}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}]}, 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x20048001) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x144, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x3d}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0xb2a58ae3dbbcf0b8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_SSID={0x23, 0x34, @random="08d0bcc820e43a196874f4ac1204b82d66523d486da430fc374ee16b9ecc16"}, @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "885b003343746c49b4a81713ec"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "03005db61a"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "82f0fa141f499a824d91a40388"}, @NL80211_KEY_SEQ={0x13, 0x4, "0d193be2eecc3a3d6dc449738813bc"}]}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "e81dbdceb4"}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}]]}, 0x144}, 0x1, 0x0, 0x0, 0x44}, 0x8810) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:25 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0xffffff7f00000000}}, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 14:18:25 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x300, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8011}, 0x20001004) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0xc92) (async) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0x125d, 0xffffffffffffffff) 14:18:25 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000080)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x15, 0x300, 0xf6, 0x1000, 0x0, 0x10000, "a3f3acfc2f3963936d7618258265b33b1d57cc4e3c"}}, 0x12d) ioctl$NBD_SET_SOCK(r1, 0x125e, 0xffffffffffffffff) 14:18:25 executing program 2: ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000040)) (async, rerun: 32) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) socket$can_raw(0x1d, 0x3, 0x1) 14:18:25 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, 0x0, 0x0) (async) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2000) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) (async) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r4, 0x1260, r2) 14:18:25 executing program 5: openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x2100, 0x152) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async, rerun: 64) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async, rerun: 32) ioctl$PTP_PIN_GETFUNC(r2, 0xc0603d06, &(0x7f0000000180)={'\x00', 0x80, 0x1, 0x2}) (rerun: 32) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r4, 0x0, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r6) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r7, 0x40d, 0x0, 0x0, {}, [@NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x24}}, 0x0) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r7, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '@\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x38}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8810}, 0x20000000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x90, r3, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_BACKEND_IDENTIFIER={0x34, 0xa, '/sys/kernel/debug/binder/failed_transaction_log\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x43}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffff662}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}]}, 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x20048001) (async) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x144, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x3d}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0xb2a58ae3dbbcf0b8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_SSID={0x23, 0x34, @random="08d0bcc820e43a196874f4ac1204b82d66523d486da430fc374ee16b9ecc16"}, @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "885b003343746c49b4a81713ec"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "03005db61a"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "82f0fa141f499a824d91a40388"}, @NL80211_KEY_SEQ={0x13, 0x4, "0d193be2eecc3a3d6dc449738813bc"}]}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "e81dbdceb4"}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}]]}, 0x144}, 0x1, 0x0, 0x0, 0x44}, 0x8810) (async, rerun: 64) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) (rerun: 64) 14:18:25 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async, rerun: 32) write$UHID_CREATE2(r2, &(0x7f0000000080)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x15, 0x300, 0xf6, 0x1000, 0x0, 0x10000, "a3f3acfc2f3963936d7618258265b33b1d57cc4e3c"}}, 0x12d) (async, rerun: 32) ioctl$NBD_SET_SOCK(r1, 0x125e, 0xffffffffffffffff) 14:18:25 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0xffffff7f00000000}}, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 14:18:25 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x68, 0x0, &(0x7f0000000140)=[@dead_binder_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0x5, 0x2, 0x4}, @flat=@handle={0x73682a85, 0x0, 0x3}, @fd}, &(0x7f0000000100)={0x0, 0x20, 0x38}}}, @increfs={0x40046304, 0x3}, @clear_death], 0xbb, 0x0, &(0x7f00000001c0)="e1528a08b7cf65b8eb2a5a9844eb93b26aa34a67b479e9920a584512bc034164fd77d2836ea5a9aaaf50aedbb18ca76566f581eb15c72c32cc464a919876ccbdfe271cbf481d41e1b4bee8dcdcdff349ddfd0e5a72a3325d899cd9b2cf9fa3e01c88e532fadd68721fb5a72548618ae91b230ea4d45f912f97b1b16932164e1f0e6d914575040f9b62f82b7b2fc338bab41d83e1823dcc07157c7df51bd879bfe54d230054fc9b77aaddd5f5daaf5c643b65feaf007622fd056379"}) 14:18:25 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) write$damon_contexts(r0, &(0x7f0000000340)=[{' ', './file1'}], 0x1) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x300) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r5 = syz_open_dev$ndb(&(0x7f0000000300), 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r2) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000280)='netdevsim0\x00', &(0x7f00000002c0)='./file1\x00', r4) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0xc1000894) ioctl$NBD_SET_SOCK(r1, 0x1260, 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netdevsim0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040880}, 0x1) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r6, 0x40206435, 0x0) sendmsg$AUDIT_TTY_GET(r6, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f8, 0x200, 0x70bd25, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) 14:18:25 executing program 2: ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000040)) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) socket$can_raw(0x1d, 0x3, 0x1) 14:18:25 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 14:18:25 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x68, 0x0, &(0x7f0000000140)=[@dead_binder_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0x5, 0x2, 0x4}, @flat=@handle={0x73682a85, 0x0, 0x3}, @fd}, &(0x7f0000000100)={0x0, 0x20, 0x38}}}, @increfs={0x40046304, 0x3}, @clear_death], 0xbb, 0x0, &(0x7f00000001c0)="e1528a08b7cf65b8eb2a5a9844eb93b26aa34a67b479e9920a584512bc034164fd77d2836ea5a9aaaf50aedbb18ca76566f581eb15c72c32cc464a919876ccbdfe271cbf481d41e1b4bee8dcdcdff349ddfd0e5a72a3325d899cd9b2cf9fa3e01c88e532fadd68721fb5a72548618ae91b230ea4d45f912f97b1b16932164e1f0e6d914575040f9b62f82b7b2fc338bab41d83e1823dcc07157c7df51bd879bfe54d230054fc9b77aaddd5f5daaf5c643b65feaf007622fd056379"}) 14:18:25 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0xffffff7f00000000}}, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 14:18:25 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 14:18:25 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x420800) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) 14:18:25 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = fsopen(&(0x7f0000000080)='esdfs\x00', 0x1) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f00000001c0)='\"a\xeb\x99/?\xaf\x96j\x8f\xb1\xdc\x91B\x976I\x10\x1b4\xe0U\xaf3eZ\x906\x9c\xe8\xa4\xc5q*}\xf5\a\x89\x90\x7f`=\xce]^\x83$8\xb3\x00\x00\"\x00\x00\x00\x00\x00`p\x9f\xd3\xe2\xe40\x00\xa4+\x99Ks%\x8c\x1cV\x06\xc8P\x810\x9f\x8e\xfd\x85\xe8T\x1a\xa7\xde\x03#\xc6.\x0et\b[', &(0x7f0000000100)='./file0\x00', r1) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 14:18:25 executing program 5: openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x2100, 0x152) (async, rerun: 32) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) (async, rerun: 32) ioctl$PTP_PIN_GETFUNC(r2, 0xc0603d06, &(0x7f0000000180)={'\x00', 0x80, 0x1, 0x2}) (rerun: 32) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r4, 0x0, 0x0) (async, rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r6) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r7, 0x40d, 0x0, 0x0, {}, [@NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x24}}, 0x0) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r7, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '@\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x38}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8810}, 0x20000000) (async, rerun: 32) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x90, r3, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_BACKEND_IDENTIFIER={0x34, 0xa, '/sys/kernel/debug/binder/failed_transaction_log\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x43}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffff662}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}]}, 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x20048001) (async, rerun: 32) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x144, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x3d}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0xb2a58ae3dbbcf0b8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_SSID={0x23, 0x34, @random="08d0bcc820e43a196874f4ac1204b82d66523d486da430fc374ee16b9ecc16"}, @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "885b003343746c49b4a81713ec"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "03005db61a"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "82f0fa141f499a824d91a40388"}, @NL80211_KEY_SEQ={0x13, 0x4, "0d193be2eecc3a3d6dc449738813bc"}]}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "e81dbdceb4"}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}]]}, 0x144}, 0x1, 0x0, 0x0, 0x44}, 0x8810) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:25 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x68, 0x0, &(0x7f0000000140)=[@dead_binder_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0x5, 0x2, 0x4}, @flat=@handle={0x73682a85, 0x0, 0x3}, @fd}, &(0x7f0000000100)={0x0, 0x20, 0x38}}}, @increfs={0x40046304, 0x3}, @clear_death], 0xbb, 0x0, &(0x7f00000001c0)="e1528a08b7cf65b8eb2a5a9844eb93b26aa34a67b479e9920a584512bc034164fd77d2836ea5a9aaaf50aedbb18ca76566f581eb15c72c32cc464a919876ccbdfe271cbf481d41e1b4bee8dcdcdff349ddfd0e5a72a3325d899cd9b2cf9fa3e01c88e532fadd68721fb5a72548618ae91b230ea4d45f912f97b1b16932164e1f0e6d914575040f9b62f82b7b2fc338bab41d83e1823dcc07157c7df51bd879bfe54d230054fc9b77aaddd5f5daaf5c643b65feaf007622fd056379"}) 14:18:25 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) write$damon_contexts(r0, &(0x7f0000000340)=[{' ', './file1'}], 0x1) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x300) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r5 = syz_open_dev$ndb(&(0x7f0000000300), 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r2) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000280)='netdevsim0\x00', &(0x7f00000002c0)='./file1\x00', r4) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0xc1000894) ioctl$NBD_SET_SOCK(r1, 0x1260, 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netdevsim0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040880}, 0x1) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r6, 0x40206435, 0x0) sendmsg$AUDIT_TTY_GET(r6, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f8, 0x200, 0x70bd25, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async) write$damon_contexts(r0, &(0x7f0000000340)=[{' ', './file1'}], 0x1) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x300) (async) fsmount(0xffffffffffffffff, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r5, 0xab00, r2) (async) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) (async) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000280)='netdevsim0\x00', &(0x7f00000002c0)='./file1\x00', r4) (async) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0xc1000894) (async) ioctl$NBD_SET_SOCK(r1, 0x1260, 0xffffffffffffffff) (async) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netdevsim0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040880}, 0x1) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r6, 0x40206435, 0x0) (async) sendmsg$AUDIT_TTY_GET(r6, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f8, 0x200, 0x70bd25, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) (async) 14:18:25 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 14:18:25 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x420800) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) 14:18:26 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x74}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x24942, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={0xffffffffffffffff}, 0x4) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380), 0x8040, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) add_key$keyring(&(0x7f0000000040), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x10080) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x10, 0x3f2, 0x400, 0x70bd28, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r8, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}]}, 0x20}}, 0x8000) sendmsg$NL80211_CMD_TDLS_OPER(r6, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r8, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f00000003c0)=ANY=[@ANYBLOB="01a6c21471387da721e5f3f36b6db746faa7a7f60afc1e27110b7b704eddc1f32eab", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 14:18:26 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), r0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="0027418478413e85390eb11de710e4fc9a64935e332d4edeb554b5264d1acfe9ca3d245c609784187050164a7885dffab867eb75f4e86f21285fa3df70dcb5e8a457fbe2d74ae16090dd5ee4ed3e22072bf9371120b6e9093949de24e0a6bba13ceb424001aa5d29fddb464ded72887bfdc52b14356bae1c197aca59093fe2a602b577c82b99a369f9b6cdeee8c8e2fb2af3b16a7a2d629c449d2fda8e599ecb2f82bb71721486b94ab335235bfa42a9d1f862ba698b4df713d30358143356e6b44113510f3243cf26449802a1e57348c04c606878221107de8ad1957b729262c9d4e20091a333fd424e327f7a97102e", @ANYRES16=r1, @ANYBLOB="20032cbd7000fbdbdf25020000000900030073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x448b1}, 0x44001) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x62c543) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0xb9b1}}, './file0\x00'}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r5, 0x125d, r4) 14:18:26 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x420800) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x420800) (async) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) 14:18:26 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x207) inotify_rm_watch(r1, r2) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="000000000000b8cb9e94320b7da03000"]) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) 14:18:26 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async, rerun: 64) write$damon_contexts(r0, &(0x7f0000000340)=[{' ', './file1'}], 0x1) (async, rerun: 64) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x300) (async) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async, rerun: 32) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (rerun: 32) r5 = syz_open_dev$ndb(&(0x7f0000000300), 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r2) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) (async) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000280)='netdevsim0\x00', &(0x7f00000002c0)='./file1\x00', r4) (async) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0xc1000894) (async) ioctl$NBD_SET_SOCK(r1, 0x1260, 0xffffffffffffffff) (async, rerun: 32) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netdevsim0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040880}, 0x1) (async, rerun: 32) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r6, 0x40206435, 0x0) (async) sendmsg$AUDIT_TTY_GET(r6, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f8, 0x200, 0x70bd25, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) 14:18:26 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async, rerun: 32) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async, rerun: 32) r2 = fsopen(&(0x7f0000000080)='esdfs\x00', 0x1) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f00000001c0)='\"a\xeb\x99/?\xaf\x96j\x8f\xb1\xdc\x91B\x976I\x10\x1b4\xe0U\xaf3eZ\x906\x9c\xe8\xa4\xc5q*}\xf5\a\x89\x90\x7f`=\xce]^\x83$8\xb3\x00\x00\"\x00\x00\x00\x00\x00`p\x9f\xd3\xe2\xe40\x00\xa4+\x99Ks%\x8c\x1cV\x06\xc8P\x810\x9f\x8e\xfd\x85\xe8T\x1a\xa7\xde\x03#\xc6.\x0et\b[', &(0x7f0000000100)='./file0\x00', r1) (async, rerun: 32) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async, rerun: 32) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 14:18:26 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x74}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) (async) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x24942, 0x0) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={0xffffffffffffffff}, 0x4) (async) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380), 0x8040, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) add_key$keyring(&(0x7f0000000040), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x10080) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) (async) sendmsg$AUDIT_SIGNAL_INFO(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x10, 0x3f2, 0x400, 0x70bd28, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r8, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}]}, 0x20}}, 0x8000) (async) sendmsg$NL80211_CMD_TDLS_OPER(r6, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r8, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x800) (async) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f00000003c0)=ANY=[@ANYBLOB="01a6c21471387da721e5f3f36b6db746faa7a7f60afc1e27110b7b704eddc1f32eab", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 14:18:26 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x207) inotify_rm_watch(r1, r2) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="000000000000b8cb9e94320b7da03000"]) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="000000000000b8cb9e94320b7da03000"]) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) 14:18:26 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), r0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="0027418478413e85390eb11de710e4fc9a64935e332d4edeb554b5264d1acfe9ca3d245c609784187050164a7885dffab867eb75f4e86f21285fa3df70dcb5e8a457fbe2d74ae16090dd5ee4ed3e22072bf9371120b6e9093949de24e0a6bba13ceb424001aa5d29fddb464ded72887bfdc52b14356bae1c197aca59093fe2a602b577c82b99a369f9b6cdeee8c8e2fb2af3b16a7a2d629c449d2fda8e599ecb2f82bb71721486b94ab335235bfa42a9d1f862ba698b4df713d30358143356e6b44113510f3243cf26449802a1e57348c04c606878221107de8ad1957b729262c9d4e20091a333fd424e327f7a97102e", @ANYRES16=r1, @ANYBLOB="20032cbd7000fbdbdf25020000000900030073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x448b1}, 0x44001) (async) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="0027418478413e85390eb11de710e4fc9a64935e332d4edeb554b5264d1acfe9ca3d245c609784187050164a7885dffab867eb75f4e86f21285fa3df70dcb5e8a457fbe2d74ae16090dd5ee4ed3e22072bf9371120b6e9093949de24e0a6bba13ceb424001aa5d29fddb464ded72887bfdc52b14356bae1c197aca59093fe2a602b577c82b99a369f9b6cdeee8c8e2fb2af3b16a7a2d629c449d2fda8e599ecb2f82bb71721486b94ab335235bfa42a9d1f862ba698b4df713d30358143356e6b44113510f3243cf26449802a1e57348c04c606878221107de8ad1957b729262c9d4e20091a333fd424e327f7a97102e", @ANYRES16=r1, @ANYBLOB="20032cbd7000fbdbdf25020000000900030073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x448b1}, 0x44001) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x62c543) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0xb9b1}}, './file0\x00'}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r5, 0x125d, r4) 14:18:26 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x202c80) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) 14:18:26 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = fsopen(&(0x7f0000000080)='esdfs\x00', 0x1) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f00000001c0)='\"a\xeb\x99/?\xaf\x96j\x8f\xb1\xdc\x91B\x976I\x10\x1b4\xe0U\xaf3eZ\x906\x9c\xe8\xa4\xc5q*}\xf5\a\x89\x90\x7f`=\xce]^\x83$8\xb3\x00\x00\"\x00\x00\x00\x00\x00`p\x9f\xd3\xe2\xe40\x00\xa4+\x99Ks%\x8c\x1cV\x06\xc8P\x810\x9f\x8e\xfd\x85\xe8T\x1a\xa7\xde\x03#\xc6.\x0et\b[', &(0x7f0000000100)='./file0\x00', r1) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 14:18:26 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x20000) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:26 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x202c80) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) 14:18:26 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x74}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x24942, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={0xffffffffffffffff}, 0x4) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380), 0x8040, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) add_key$keyring(&(0x7f0000000040), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x10080) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x10, 0x3f2, 0x400, 0x70bd28, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r8, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}]}, 0x20}}, 0x8000) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r8, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}]}, 0x20}}, 0x8000) sendmsg$NL80211_CMD_TDLS_OPER(r6, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r8, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x800) (async) sendmsg$NL80211_CMD_TDLS_OPER(r6, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r8, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f00000003c0)=ANY=[@ANYBLOB="01a6c21471387da721e5f3f36b6db746faa7a7f60afc1e27110b7b704eddc1f32eab", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 14:18:26 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x207) inotify_rm_watch(r1, r2) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="000000000000b8cb9e94320b7da03000"]) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x207) (async) inotify_rm_watch(r1, r2) (async) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="000000000000b8cb9e94320b7da03000"]) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) (async) 14:18:26 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) (async) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), r0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="0027418478413e85390eb11de710e4fc9a64935e332d4edeb554b5264d1acfe9ca3d245c609784187050164a7885dffab867eb75f4e86f21285fa3df70dcb5e8a457fbe2d74ae16090dd5ee4ed3e22072bf9371120b6e9093949de24e0a6bba13ceb424001aa5d29fddb464ded72887bfdc52b14356bae1c197aca59093fe2a602b577c82b99a369f9b6cdeee8c8e2fb2af3b16a7a2d629c449d2fda8e599ecb2f82bb71721486b94ab335235bfa42a9d1f862ba698b4df713d30358143356e6b44113510f3243cf26449802a1e57348c04c606878221107de8ad1957b729262c9d4e20091a333fd424e327f7a97102e", @ANYRES16=r1, @ANYBLOB="20032cbd7000fbdbdf25020000000900030073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x448b1}, 0x44001) (async) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x62c543) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0xb9b1}}, './file0\x00'}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) (async) ioctl$NBD_SET_SOCK(r5, 0x125d, r4) 14:18:26 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x20000) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:26 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x202c80) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) 14:18:26 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf9) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x20008040) 14:18:26 executing program 4: write$damon_contexts(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="20fb38a1a06c6530202e2f66696c6530"], 0x2) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80400) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"e529b336ace4c8344130df317d5110b890676e965971acc0aabbc1fbc8190e66"}) 14:18:26 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r1 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0xfff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x18, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='@', @ANYRES64=r1], 0x4c, 0x0, &(0x7f00000000c0)="7a30012cf78420cb6a1a5c3a422c4a13e24db468e3b073a4b595c0948b619c67610e5e9369e20f9b21a91683c837e7c774dbb049fef9c7958bed01874be85e284aed4ca92a0ebd82460b5fa8"}) 14:18:26 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$yama_ptrace_scope(r1, &(0x7f0000000080)='0\x00', 0x2) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:26 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) keyctl$assume_authority(0x10, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) 14:18:26 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) (async) r1 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0xfff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x18, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='@', @ANYRES64=r1], 0x4c, 0x0, &(0x7f00000000c0)="7a30012cf78420cb6a1a5c3a422c4a13e24db468e3b073a4b595c0948b619c67610e5e9369e20f9b21a91683c837e7c774dbb049fef9c7958bed01874be85e284aed4ca92a0ebd82460b5fa8"}) 14:18:26 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x20000) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) 14:18:26 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf9) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x20008040) 14:18:26 executing program 4: write$damon_contexts(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="20fb38a1a06c6530202e2f66696c6530"], 0x2) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80400) (async) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80400) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"e529b336ace4c8344130df317d5110b890676e965971acc0aabbc1fbc8190e66"}) 14:18:26 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$yama_ptrace_scope(r1, &(0x7f0000000080)='0\x00', 0x2) (async) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:26 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) keyctl$assume_authority(0x10, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) 14:18:26 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf9) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x20008040) 14:18:26 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r1 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0xfff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x18, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='@', @ANYRES64=r1], 0x4c, 0x0, &(0x7f00000000c0)="7a30012cf78420cb6a1a5c3a422c4a13e24db468e3b073a4b595c0948b619c67610e5e9369e20f9b21a91683c837e7c774dbb049fef9c7958bed01874be85e284aed4ca92a0ebd82460b5fa8"}) 14:18:26 executing program 4: write$damon_contexts(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="20fb38a1a06c6530202e2f66696c6530"], 0x2) (async) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80400) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"e529b336ace4c8344130df317d5110b890676e965971acc0aabbc1fbc8190e66"}) 14:18:26 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400000) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000680)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {0x80000000}, {}], 0x0, 0x0, &(0x7f0000000280), 0x5, 0x0, &(0x7f00000004c0)=[{}, {}, {0x0, 0x80000000}, {}, {}], 0x0, 0x0, &(0x7f0000000580)}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000700)={{r2, 0x0, 0x7, [0xfffffffd, 0x7]}, {0x80000000, 0x0, 0x4, [0x1, 0xe00]}, 0x10000003, [0xe47, 0x80]}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) write$char_usb(r3, &(0x7f00000008c0)="cc7e9253cb90ac06dc7ed1d082665d71788214291cd70a1ca200e0bbcccb9e71467f912770d4d32aef68136243e94ce2f3174a82db51870a44dd7369a66048dcb5d270cec9935943045b722f14d3b4dd2b482b2b910b961fa63a3e560580a67efff314d5aa5c04094d9df1144fe8e901a2ead3667b6680a4e86b1e7b48ba84f4e72fba3a6d2d51eb16a2bf55da0c6de2ef3d9c2157de443f0dff4f03da7207dd1942eeace1519f59bce844d7326c48907e5f0c9347d2967c8741efe3", 0xbc) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000800)={r1, &(0x7f0000000740), &(0x7f0000000780)}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000840)=ANY=[@ANYBLOB='1', @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000880)='\'{+\x00', 0x0, r5) 14:18:26 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$yama_ptrace_scope(r1, &(0x7f0000000080)='0\x00', 0x2) (async) write$yama_ptrace_scope(r1, &(0x7f0000000080)='0\x00', 0x2) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:26 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) keyctl$assume_authority(0x10, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) 14:18:26 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400000) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000680)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {0x80000000}, {}], 0x0, 0x0, &(0x7f0000000280), 0x5, 0x0, &(0x7f00000004c0)=[{}, {}, {0x0, 0x80000000}, {}, {}], 0x0, 0x0, &(0x7f0000000580)}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000700)={{r2, 0x0, 0x7, [0xfffffffd, 0x7]}, {0x80000000, 0x0, 0x4, [0x1, 0xe00]}, 0x10000003, [0xe47, 0x80]}) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async) write$char_usb(r3, &(0x7f00000008c0)="cc7e9253cb90ac06dc7ed1d082665d71788214291cd70a1ca200e0bbcccb9e71467f912770d4d32aef68136243e94ce2f3174a82db51870a44dd7369a66048dcb5d270cec9935943045b722f14d3b4dd2b482b2b910b961fa63a3e560580a67efff314d5aa5c04094d9df1144fe8e901a2ead3667b6680a4e86b1e7b48ba84f4e72fba3a6d2d51eb16a2bf55da0c6de2ef3d9c2157de443f0dff4f03da7207dd1942eeace1519f59bce844d7326c48907e5f0c9347d2967c8741efe3", 0xbc) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000800)={r1, &(0x7f0000000740), &(0x7f0000000780)}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000840)=ANY=[@ANYBLOB='1', @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) (async) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000880)='\'{+\x00', 0x0, r5) 14:18:27 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x58140) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r1) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) pidfd_getfd(r1, r0, 0x0) 14:18:27 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) sendmsg$can_j1939(r0, &(0x7f00000018c0)={&(0x7f0000000840)={0x1d, 0x0, 0x0, {0x2, 0xf0, 0x4}, 0x2}, 0x18, &(0x7f0000001880)={&(0x7f0000000880)="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", 0x1000}, 0x1, 0x0, 0x0, 0x488c1}, 0x44000) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000800)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x10, 0x3f5, 0x100, 0x70bd2d, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8}, 0x20000010) read$fb(0xffffffffffffffff, &(0x7f00000002c0)=""/186, 0xba) ioctl$NBD_SET_SOCK(r1, 0x125d, 0xffffffffffffffff) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x58, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="85616466000000000000000000000000000000000000002d0700000000000000852a646600000000", @ANYRES32=r3, @ANYBLOB="000000000000000000000000852a62770100"/36], &(0x7f0000000140)={0x0, 0x20, 0x38}}}, @register_looper, @release], 0x41, 0x0, &(0x7f0000000200)="37cbea939c20d9e9046528f1708f60accdcb30218032b96d4d5f09eefd5c89a2d15b96e95f53110f91740d859cdaf89a45d30d534dae50cb38d08db28e3bcb2a85"}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000500)='\x00', 0x0, r1) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000680)={&(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0], 0x3, 0x5, 0x8, 0x3}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000700)={&(0x7f00000006c0)=[0x0, 0x0], 0x2, 0x0, 0x0}) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r9, 0x40206435, 0x0) read$char_usb(r9, &(0x7f0000001a40)=""/241, 0xf1) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000007c0)={0x0, r7, r8, 0x0, 0x0, 0x6, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) waitid$P_PIDFD(0x3, r6, &(0x7f0000000380), 0x1000000, &(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) socketpair(0x15, 0x80000, 0x5, &(0x7f0000001b40)={0xffffffffffffffff}) sendmsg$AUDIT_SET_FEATURE(r11, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x20, 0x3fa, 0x200, 0x70bd25, 0x25dfdbfc, {0x1, 0x0, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2400c8d0}, 0x10) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r10) 14:18:27 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000017a790f425985632318642d93fbfdffb821a4f8481368f172581adf010e8edfe386e31695cd72d6b8c92c64ae690b74b17b704a21405b8f9b69fde5cc87ad53fc071088ca0c45fe0649d2cf6278cfdf8a5b530e6ae59d9634ecea24543294dada19d1c1b", @ANYRES32=r0, @ANYBLOB="00000000acedb7000000002e2f66696c"]) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40000) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0), &(0x7f0000000100), 0x0, 0x7}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) r4 = accept4$packet(r3, 0x0, &(0x7f0000000240), 0x0) getsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000001c0)={0x4, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0106438, &(0x7f0000000200)={0x3ff, r5}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000180)) 14:18:27 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8280) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 14:18:27 executing program 2: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x90, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000083}, 0x40000) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x21a040) ioctl$NBD_SET_SOCK(r1, 0x1261, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 14:18:27 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x58140) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r1) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) pidfd_getfd(r1, r0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x58140) (async) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r1) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) pidfd_getfd(r1, r0, 0x0) (async) 14:18:27 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400000) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000680)={0x0, 0x6, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {0x80000000}, {}], 0x0, 0x0, &(0x7f0000000280), 0x5, 0x0, &(0x7f00000004c0)=[{}, {}, {0x0, 0x80000000}, {}, {}], 0x0, 0x0, &(0x7f0000000580)}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000700)={{r2, 0x0, 0x7, [0xfffffffd, 0x7]}, {0x80000000, 0x0, 0x4, [0x1, 0xe00]}, 0x10000003, [0xe47, 0x80]}) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, 0x0) (async, rerun: 64) write$char_usb(r3, &(0x7f00000008c0)="cc7e9253cb90ac06dc7ed1d082665d71788214291cd70a1ca200e0bbcccb9e71467f912770d4d32aef68136243e94ce2f3174a82db51870a44dd7369a66048dcb5d270cec9935943045b722f14d3b4dd2b482b2b910b961fa63a3e560580a67efff314d5aa5c04094d9df1144fe8e901a2ead3667b6680a4e86b1e7b48ba84f4e72fba3a6d2d51eb16a2bf55da0c6de2ef3d9c2157de443f0dff4f03da7207dd1942eeace1519f59bce844d7326c48907e5f0c9347d2967c8741efe3", 0xbc) (async, rerun: 64) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000800)={r1, &(0x7f0000000740), &(0x7f0000000780)}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000840)=ANY=[@ANYBLOB='1', @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) (async) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000880)='\'{+\x00', 0x0, r5) 14:18:27 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) sendmsg$can_j1939(r0, &(0x7f00000018c0)={&(0x7f0000000840)={0x1d, 0x0, 0x0, {0x2, 0xf0, 0x4}, 0x2}, 0x18, &(0x7f0000001880)={&(0x7f0000000880)="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", 0x1000}, 0x1, 0x0, 0x0, 0x488c1}, 0x44000) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000800)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x10, 0x3f5, 0x100, 0x70bd2d, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8}, 0x20000010) read$fb(0xffffffffffffffff, &(0x7f00000002c0)=""/186, 0xba) ioctl$NBD_SET_SOCK(r1, 0x125d, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x58, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="85616466000000000000000000000000000000000000002d0700000000000000852a646600000000", @ANYRES32=r3, @ANYBLOB="000000000000000000000000852a62770100"/36], &(0x7f0000000140)={0x0, 0x20, 0x38}}}, @register_looper, @release], 0x41, 0x0, &(0x7f0000000200)="37cbea939c20d9e9046528f1708f60accdcb30218032b96d4d5f09eefd5c89a2d15b96e95f53110f91740d859cdaf89a45d30d534dae50cb38d08db28e3bcb2a85"}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000500)='\x00', 0x0, r1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000680)={&(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0], 0x3, 0x5, 0x8, 0x3}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000680)={&(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0], 0x3, 0x5, 0x8, 0x3}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000700)={&(0x7f00000006c0)=[0x0, 0x0], 0x2, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r9, 0x40206435, 0x0) read$char_usb(r9, &(0x7f0000001a40)=""/241, 0xf1) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000007c0)={0x0, r7, r8, 0x0, 0x0, 0x6, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) (async) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, 0x0) waitid$P_PIDFD(0x3, r6, &(0x7f0000000380), 0x1000000, &(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) socketpair(0x15, 0x80000, 0x5, &(0x7f0000001b40)) (async) socketpair(0x15, 0x80000, 0x5, &(0x7f0000001b40)={0xffffffffffffffff}) sendmsg$AUDIT_SET_FEATURE(r11, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x20, 0x3fa, 0x200, 0x70bd25, 0x25dfdbfc, {0x1, 0x0, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2400c8d0}, 0x10) (async) sendmsg$AUDIT_SET_FEATURE(r11, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x20, 0x3fa, 0x200, 0x70bd25, 0x25dfdbfc, {0x1, 0x0, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2400c8d0}, 0x10) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r10) [ 2077.131523][T17422] ------------[ cut here ]------------ [ 2077.137212][T17422] WARNING: CPU: 1 PID: 17422 at block/bdev.c:794 blkdev_get_by_dev.part.0+0x8ea/0xb50 [ 2077.147195][T17422] Modules linked in: [ 2077.151135][T17422] CPU: 1 PID: 17422 Comm: syz-executor.5 Not tainted 6.4.0-rc6-next-20230616-syzkaller #0 [ 2077.161395][T17422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 2077.171780][T17422] RIP: 0010:blkdev_get_by_dev.part.0+0x8ea/0xb50 [ 2077.178492][T17422] Code: 44 24 08 e8 a8 8b 7c fd 48 85 ed 4c 63 6c 24 08 0f 85 5f fe ff ff e9 ca fe ff ff e8 90 6b e3 fd e9 fe f8 ff ff e8 f6 19 90 fd <0f> 0b 49 c7 c5 fb ff ff ff e9 c2 fe ff ff e8 e3 19 90 fd 48 8b 44 [ 2077.198545][T17422] RSP: 0018:ffffc9000bedfc98 EFLAGS: 00010202 [ 2077.204898][T17422] RAX: 00000000000006f0 RBX: ffff88801e56f300 RCX: ffffc900066e9000 [ 2077.212924][T17422] RDX: 0000000000040000 RSI: ffffffff83f4482a RDI: 0000000000000005 [ 2077.221029][T17422] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 14:18:27 executing program 2: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x90, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000083}, 0x40000) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x21a040) ioctl$NBD_SET_SOCK(r1, 0x1261, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) (async) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x90, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000083}, 0x40000) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x21a040) (async) ioctl$NBD_SET_SOCK(r1, 0x1261, 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) (async) [ 2077.229142][T17422] R10: 0000000000000004 R11: 0000000000000001 R12: ffff88801fbdb000 [ 2077.237221][T17422] R13: 0000000000000005 R14: 0000000000000000 R15: 0000000000000004 [ 2077.245268][T17422] FS: 00007f4429b1c700(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 2077.254304][T17422] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2077.260978][T17422] CR2: 0000001b2e521000 CR3: 0000000016b4c000 CR4: 00000000003506e0 [ 2077.269029][T17422] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2077.277105][T17422] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2077.285399][T17422] Call Trace: [ 2077.288717][T17422] [ 2077.291675][T17422] ? __warn+0xe6/0x390 [ 2077.295964][T17422] ? blkdev_get_by_dev.part.0+0x8ea/0xb50 [ 2077.301750][T17422] ? report_bug+0x2da/0x500 [ 2077.306349][T17422] ? handle_bug+0x3c/0x70 [ 2077.310739][T17422] ? exc_invalid_op+0x18/0x50 [ 2077.315532][T17422] ? asm_exc_invalid_op+0x1a/0x20 [ 2077.320617][T17422] ? blkdev_get_by_dev.part.0+0x8ea/0xb50 [ 2077.326435][T17422] ? blkdev_get_by_dev.part.0+0x8ea/0xb50 14:18:27 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x58140) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r1) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) pidfd_getfd(r1, r0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x58140) (async) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r1) (async) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) (async) pidfd_getfd(r1, r0, 0x0) (async) 14:18:27 executing program 2: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x90, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000083}, 0x40000) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x21a040) ioctl$NBD_SET_SOCK(r1, 0x1261, 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) [ 2077.332222][T17422] ? blkdev_get_by_dev.part.0+0x8ea/0xb50 [ 2077.338075][T17422] ? devcgroup_check_permission+0x1aa/0x4a0 [ 2077.344071][T17422] blkdev_get_by_dev+0x79/0x80 [ 2077.348898][T17422] disk_scan_partitions+0x1e2/0x300 [ 2077.354279][T17422] blkdev_common_ioctl+0x5b8/0x1a40 [ 2077.359536][T17422] ? blkdev_bszset+0x1f0/0x1f0 [ 2077.364401][T17422] ? trace_lock_acquire+0x12d/0x180 [ 2077.369657][T17422] ? lock_acquire+0x32/0xc0 [ 2077.374305][T17422] ? receive_fd+0x110/0x110 [ 2077.378864][T17422] blkdev_ioctl+0x24f/0x760 [ 2077.383501][T17422] ? blkdev_common_ioctl+0x1a40/0x1a40 [ 2077.389256][T17422] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2077.394415][T17422] ? blkdev_common_ioctl+0x1a40/0x1a40 [ 2077.399934][T17422] __x64_sys_ioctl+0x19d/0x210 [ 2077.404814][T17422] do_syscall_64+0x39/0xb0 [ 2077.409285][T17422] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2077.415336][T17422] RIP: 0033:0x7f4428e8c389 [ 2077.419798][T17422] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2077.439532][T17422] RSP: 002b:00007f4429b1c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2077.448035][T17422] RAX: ffffffffffffffda RBX: 00007f4428fabf80 RCX: 00007f4428e8c389 [ 2077.456145][T17422] RDX: ffffffffffffffff RSI: 000000000000125f RDI: 0000000000000003 [ 2077.464221][T17422] RBP: 00007f4428ed7493 R08: 0000000000000000 R09: 0000000000000000 [ 2077.472249][T17422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 14:18:27 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200800) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, 0x0) ioctl$NBD_SET_SOCK(r2, 0x1261, r2) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040), 0x1000008, 0x0) 14:18:27 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x480400) [ 2077.480383][T17422] R13: 00007ffc576c800f R14: 00007f4429b1c300 R15: 0000000000022000 [ 2077.488485][T17422] [ 2077.491771][T17422] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2077.499088][T17422] CPU: 1 PID: 17422 Comm: syz-executor.5 Not tainted 6.4.0-rc6-next-20230616-syzkaller #0 [ 2077.509024][T17422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 2077.519119][T17422] Call Trace: [ 2077.522434][T17422] [ 2077.525399][T17422] dump_stack_lvl+0xd9/0x150 [ 2077.530020][T17422] panic+0x686/0x730 [ 2077.533944][T17422] ? panic_smp_self_stop+0xa0/0xa0 [ 2077.539077][T17422] ? show_trace_log_lvl+0x284/0x390 [ 2077.544346][T17422] ? blkdev_get_by_dev.part.0+0x8ea/0xb50 [ 2077.550093][T17422] check_panic_on_warn+0xb1/0xc0 [ 2077.555056][T17422] __warn+0xf2/0x390 [ 2077.558970][T17422] ? blkdev_get_by_dev.part.0+0x8ea/0xb50 [ 2077.564714][T17422] report_bug+0x2da/0x500 [ 2077.569066][T17422] handle_bug+0x3c/0x70 [ 2077.573249][T17422] exc_invalid_op+0x18/0x50 [ 2077.577778][T17422] asm_exc_invalid_op+0x1a/0x20 [ 2077.582651][T17422] RIP: 0010:blkdev_get_by_dev.part.0+0x8ea/0xb50 [ 2077.589006][T17422] Code: 44 24 08 e8 a8 8b 7c fd 48 85 ed 4c 63 6c 24 08 0f 85 5f fe ff ff e9 ca fe ff ff e8 90 6b e3 fd e9 fe f8 ff ff e8 f6 19 90 fd <0f> 0b 49 c7 c5 fb ff ff ff e9 c2 fe ff ff e8 e3 19 90 fd 48 8b 44 [ 2077.608638][T17422] RSP: 0018:ffffc9000bedfc98 EFLAGS: 00010202 [ 2077.614717][T17422] RAX: 00000000000006f0 RBX: ffff88801e56f300 RCX: ffffc900066e9000 [ 2077.622697][T17422] RDX: 0000000000040000 RSI: ffffffff83f4482a RDI: 0000000000000005 [ 2077.630674][T17422] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 2077.638650][T17422] R10: 0000000000000004 R11: 0000000000000001 R12: ffff88801fbdb000 [ 2077.646626][T17422] R13: 0000000000000005 R14: 0000000000000000 R15: 0000000000000004 [ 2077.654617][T17422] ? blkdev_get_by_dev.part.0+0x8ea/0xb50 [ 2077.660374][T17422] ? blkdev_get_by_dev.part.0+0x8ea/0xb50 [ 2077.666115][T17422] ? devcgroup_check_permission+0x1aa/0x4a0 [ 2077.672030][T17422] blkdev_get_by_dev+0x79/0x80 [ 2077.676827][T17422] disk_scan_partitions+0x1e2/0x300 [ 2077.682042][T17422] blkdev_common_ioctl+0x5b8/0x1a40 [ 2077.687260][T17422] ? blkdev_bszset+0x1f0/0x1f0 [ 2077.692043][T17422] ? trace_lock_acquire+0x12d/0x180 [ 2077.697270][T17422] ? lock_acquire+0x32/0xc0 [ 2077.701791][T17422] ? receive_fd+0x110/0x110 [ 2077.706312][T17422] blkdev_ioctl+0x24f/0x760 [ 2077.710843][T17422] ? blkdev_common_ioctl+0x1a40/0x1a40 [ 2077.716320][T17422] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2077.721287][T17422] ? blkdev_common_ioctl+0x1a40/0x1a40 [ 2077.726762][T17422] __x64_sys_ioctl+0x19d/0x210 [ 2077.731542][T17422] do_syscall_64+0x39/0xb0 [ 2077.735977][T17422] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2077.741889][T17422] RIP: 0033:0x7f4428e8c389 [ 2077.746312][T17422] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2077.765933][T17422] RSP: 002b:00007f4429b1c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2077.774357][T17422] RAX: ffffffffffffffda RBX: 00007f4428fabf80 RCX: 00007f4428e8c389 [ 2077.782343][T17422] RDX: ffffffffffffffff RSI: 000000000000125f RDI: 0000000000000003 [ 2077.790322][T17422] RBP: 00007f4428ed7493 R08: 0000000000000000 R09: 0000000000000000 [ 2077.798301][T17422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2077.806280][T17422] R13: 00007ffc576c800f R14: 00007f4429b1c300 R15: 0000000000022000 [ 2077.814274][T17422] [ 2077.817622][T17422] Kernel Offset: disabled [ 2077.822115][T17422] Rebooting in 86400 seconds..