[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 66.316151][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 66.316161][ T26] audit: type=1800 audit(1567759962.842:29): pid=9698 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 66.342435][ T26] audit: type=1800 audit(1567759962.842:30): pid=9698 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.135' (ECDSA) to the list of known hosts. 2019/09/06 08:52:53 fuzzer started 2019/09/06 08:52:54 dialing manager at 10.128.0.26:39381 2019/09/06 08:52:54 syscalls: 2487 2019/09/06 08:52:54 code coverage: enabled 2019/09/06 08:52:54 comparison tracing: enabled 2019/09/06 08:52:54 extra coverage: extra coverage is not supported by the kernel 2019/09/06 08:52:54 setuid sandbox: enabled 2019/09/06 08:52:54 namespace sandbox: enabled 2019/09/06 08:52:54 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/06 08:52:54 fault injection: enabled 2019/09/06 08:52:54 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/06 08:52:54 net packet injection: enabled 2019/09/06 08:52:54 net device setup: enabled 08:54:53 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000001000)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000004e40)=[@dstopts_2292={{0x18}}], 0x18}}], 0x1, 0x0) syzkaller login: [ 197.519710][ T9864] IPVS: ftp: loaded support on port[0] = 21 08:54:54 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, &(0x7f0000000040)}}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2cd80"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYBLOB="e6c55c6601000000010000009b3d72748d52864e01000000002ee70a67757310554a9ca66864eef1c8c72bdc354f15bdd0cec321957080d19ce4d725f38b6c78f0bebc317630"], 0x0, 0x28}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 197.597508][ T9864] chnl_net:caif_netlink_parms(): no params data found [ 197.630124][ T9864] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.637929][ T9864] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.649098][ T9864] device bridge_slave_0 entered promiscuous mode [ 197.663578][ T9864] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.682158][ T9864] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.702162][ T9864] device bridge_slave_1 entered promiscuous mode [ 197.728834][ T9864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.748693][ T9868] IPVS: ftp: loaded support on port[0] = 21 [ 197.756509][ T9864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 08:54:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f00000ed000/0x2000)=nil, 0x2000, 0x3) [ 197.793307][ T9864] team0: Port device team_slave_0 added [ 197.814901][ T9864] team0: Port device team_slave_1 added 08:54:54 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 197.954011][ T9864] device hsr_slave_0 entered promiscuous mode [ 197.982356][ T9864] device hsr_slave_1 entered promiscuous mode [ 198.060938][ T9864] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.068051][ T9864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.075409][ T9864] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.082570][ T9864] bridge0: port 1(bridge_slave_0) entered forwarding state 08:54:54 executing program 4: syz_open_dev$vcsn(0x0, 0x0, 0x0) getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x5b6b) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) [ 198.121821][ T9870] IPVS: ftp: loaded support on port[0] = 21 [ 198.143884][ T9872] IPVS: ftp: loaded support on port[0] = 21 [ 198.205254][ T9868] chnl_net:caif_netlink_parms(): no params data found [ 198.294289][ T9868] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.301366][ T9868] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.309714][ T9868] device bridge_slave_0 entered promiscuous mode [ 198.331205][ T9876] IPVS: ftp: loaded support on port[0] = 21 08:54:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x9084000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r1, 0x100, 0x70bd2c, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x840) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000240)={'veth0_to_team\x00', 0xffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000700)={'team0\x00', 0x200}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, 0xfffffffffffffffe, 0xfffffffffffffda3) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x5, &(0x7f00000002c0)=[{}, {0x3, 0x6, 0x43, 0xfffffffffffffffb}, {0x4, 0x380000000000, 0x9, 0x28d356f4}, {0xfffffffffffffffc, 0x80, 0xc14}, {0x80, 0x6, 0x9, 0x4}]}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x5b8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f0000000100)=0xffffffffffffffff, 0x1ee) tee(r3, r2, 0xffffffbffffffffd, 0x5) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"/813]) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x7ffb, 0xfffffffffffffffc}, 0x14) shutdown(r5, 0x1) [ 198.343687][ T9868] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.350775][ T9868] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.360718][ T9868] device bridge_slave_1 entered promiscuous mode [ 198.376812][ T9864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.418396][ T9868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.464304][ T9868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.477503][ T9864] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.501811][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.510058][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.527949][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.535919][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 198.580516][ T9868] team0: Port device team_slave_0 added [ 198.590217][ T9880] IPVS: ftp: loaded support on port[0] = 21 [ 198.590425][ T9868] team0: Port device team_slave_1 added [ 198.603214][ T9866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.611524][ T9866] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.618582][ T9866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.628020][ T9870] chnl_net:caif_netlink_parms(): no params data found [ 198.636507][ T9872] chnl_net:caif_netlink_parms(): no params data found [ 198.704128][ T9868] device hsr_slave_0 entered promiscuous mode [ 198.752381][ T9868] device hsr_slave_1 entered promiscuous mode [ 198.822530][ T9868] debugfs: Directory 'hsr0' with parent '/' already present! [ 198.839904][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.849913][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.858272][ T9873] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.865310][ T9873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.872900][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.907312][ T9879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.927809][ T9864] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 198.938866][ T9864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.957444][ T9872] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.964554][ T9872] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.971987][ T9872] device bridge_slave_0 entered promiscuous mode [ 198.979541][ T9872] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.986680][ T9872] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.994304][ T9872] device bridge_slave_1 entered promiscuous mode [ 199.004477][ T9870] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.012355][ T9870] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.019799][ T9870] device bridge_slave_0 entered promiscuous mode [ 199.028022][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.036794][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.045083][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.053877][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.062236][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.070332][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.078803][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.087131][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.095659][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.103572][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.125240][ T9872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.134953][ T9870] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.141999][ T9870] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.149899][ T9870] device bridge_slave_1 entered promiscuous mode [ 199.165676][ T9870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.177049][ T9870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.195314][ T9872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.241116][ T9870] team0: Port device team_slave_0 added [ 199.253713][ T9864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.260935][ T9876] chnl_net:caif_netlink_parms(): no params data found [ 199.283823][ T9870] team0: Port device team_slave_1 added [ 199.295495][ T9872] team0: Port device team_slave_0 added [ 199.343077][ T9872] team0: Port device team_slave_1 added [ 199.384446][ T9870] device hsr_slave_0 entered promiscuous mode [ 199.432525][ T9870] device hsr_slave_1 entered promiscuous mode [ 199.472210][ T9870] debugfs: Directory 'hsr0' with parent '/' already present! [ 199.498123][ T9868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.505811][ T9880] chnl_net:caif_netlink_parms(): no params data found [ 199.523954][ T9876] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.531005][ T9876] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.538846][ T9876] device bridge_slave_0 entered promiscuous mode [ 199.546369][ T9876] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.553465][ T9876] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.560931][ T9876] device bridge_slave_1 entered promiscuous mode [ 199.581417][ T9870] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.588627][ T9870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.596003][ T9870] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.603069][ T9870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.647477][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.655764][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.665084][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.672799][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.687690][ T9876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 08:54:56 executing program 0: ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000080)) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f00000004c0)={"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"}) r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, &(0x7f0000000200)=""/87) clock_gettime(0x6, 0x0) utimensat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write(r1, &(0x7f00000000c0), 0xfffffe13) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0x38, 0x0, 0x4) write$P9_RRENAMEAT(r2, &(0x7f00000000c0)={0xfffffffffffffcff, 0x4b, 0x1}, 0x101a2) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000140)) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000180)='system_u:object_r:auditctl_exec_t:s0\x00', 0x25) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x0, r1, 0x0, 0x0, 0x209, 0x207}) write(0xffffffffffffffff, &(0x7f0000000240)="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", 0x17b) lsetxattr$trusted_overlay_upper(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)='trusted.overlay.upper\x00', &(0x7f0000000980)={0x0, 0xfb, 0xb7, 0x1, 0x40, "de4e88d17832ff585b1d53d685213f61", "4af24ae4898a3a41866c24c39da47d25fa396064a61ab569b44d2c4f23708918952a0121f995872c6f8a7bc2597f16be0da1510cfa7bc6e4c6b89418cb210305c51657ac8e26771bc94e80258272d4406571a28f7689ca859a3e92267cf86e847d6222496d23593309e3aa2f4da227b9aeb12c7f277ceaf551ce099ffc40dfa16007427d9aaf63ee6eb1db549e15a7dfd1e230249c25d4d289455d047261dfe88055"}, 0xb7, 0x0) [ 199.701901][ T9880] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.712192][ T9880] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.721092][ T9880] device bridge_slave_0 entered promiscuous mode [ 199.784592][ T9872] device hsr_slave_0 entered promiscuous mode [ 199.804736][ T9872] device hsr_slave_1 entered promiscuous mode [ 199.842211][ T9872] debugfs: Directory 'hsr0' with parent '/' already present! [ 199.858885][ T9876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.869565][ T9868] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.876882][ T9880] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.884797][ T9880] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.892988][ T9880] device bridge_slave_1 entered promiscuous mode [ 199.933930][ T9880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.947857][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.959733][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.968537][ T9873] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.975608][ T9873] bridge0: port 1(bridge_slave_0) entered forwarding state 08:54:56 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) [ 199.985707][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.994607][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.007188][ T9873] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.014276][ T9873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.033112][ T9876] team0: Port device team_slave_0 added [ 200.043731][ T9880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.060281][ T9876] team0: Port device team_slave_1 added [ 200.068233][ T9866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.077025][ T9866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.085678][ T9866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.094226][ T9866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.103182][ T9866] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.111562][ T9866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.120025][ T9866] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.147808][ T9866] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.155596][ T9866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.164070][ T9866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.172205][ T9866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.180331][ T9866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.189967][ T9880] team0: Port device team_slave_0 added 08:54:56 executing program 0: r0 = inotify_init() inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x4000082) write$nbd(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="674466980000000000000000000000006517a42ac4cb7a63d1a97a7e5a31524e892eac4023b714a3202f99f16d06589e03469637a7267592938766000035efd2000000009efdc31a381587a5960ac2022d45136803a9e841e84f03d05ebc7e87c10dfc8b2cf1fd84d6cd3e51a59d141efcce5fb6c010a28122ef7fb64c495acf9fc716592e0d3651c0d2b3820209af730cb3b2571be3d98be7f29c1129e03f80c27a83d91ffa3f2ad47dfcab"], 0x6e) sendfile(r1, r1, &(0x7f0000000200), 0xa198) [ 200.199125][ T9880] team0: Port device team_slave_1 added [ 200.209049][ T9868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 08:54:56 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8a&\x00\x00\x00\x00\x00\x00\x00\x19\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000040), 0xc) [ 200.274673][ T9876] device hsr_slave_0 entered promiscuous mode [ 200.315813][ T9876] device hsr_slave_1 entered promiscuous mode [ 200.324156][ T9873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 200.331564][ T9873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 200.342628][ T9873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 200.350244][ T9873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 200.352302][ T9876] debugfs: Directory 'hsr0' with parent '/' already present! [ 200.360269][ T9873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 200.375653][ T9873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 200.383175][ T9873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 200.390622][ T9873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 200.399648][ T9870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.400603][ T9873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 08:54:56 executing program 0: socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x4000) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x105, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, '\nxcan1\x00'}}}}}, 0x34}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x48301) [ 200.417535][ T9873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 200.425004][ T9873] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 200.435316][ T9873] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 [ 200.488334][ T9870] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.533909][ T9880] device hsr_slave_0 entered promiscuous mode [ 200.572356][ T9880] device hsr_slave_1 entered promiscuous mode [ 200.622165][ T9880] debugfs: Directory 'hsr0' with parent '/' already present! [ 200.637296][ T9872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.646182][ T9879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.653993][ T9879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.671016][ T9915] Enabling of bearer rejected, failed to enable media [ 200.682075][ C0] hrtimer: interrupt took 16788 ns [ 200.696131][ T9868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.708373][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.717338][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.725764][ T9873] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.732840][ T9873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.740626][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.749184][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.757428][ T9873] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.764599][ T9873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.772137][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.780513][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.788996][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.796520][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.823986][ T9870] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 200.848198][ T9870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.862708][ T9872] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.869517][ T9879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.879003][ T9879] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.888744][ T9879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.897256][ T9879] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.905677][ T9879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.913995][ T9879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.922534][ T9879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.930664][ T9879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.938815][ T9879] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.946640][ T9879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 200.964039][ T9918] Enabling of bearer rejected, failed to enable media 08:54:57 executing program 0: r0 = gettid() r1 = getpid() sched_setaffinity(r1, 0xe5b523, &(0x7f0000000080)=0x800005) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x6, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) r3 = dup2(r2, r2) write$P9_RRENAMEAT(r3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x801000000000016) [ 200.982985][ T9870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.016356][ T9880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.048851][ T9876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.058326][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.073316][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 08:54:57 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) socket$l2tp(0x18, 0x1, 0x1) futex(0x0, 0x8c, 0x0, 0x0, &(0x7f00000001c0), 0x2) [ 201.092530][ T9873] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.099613][ T9873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.108858][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.120964][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.130961][ T9873] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.138099][ T9873] bridge0: port 2(bridge_slave_1) entered forwarding state 08:54:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000600)=""/11, 0x232) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x20) ioctl$TCSETXW(r0, 0x5435, 0x0) [ 201.156506][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.166180][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.187651][ T9872] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 201.211201][ T9872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.229263][ T9880] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.240165][ T9939] bond0: (slave bond_slave_1): Releasing backup interface [ 201.303300][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.313219][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.321907][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.330784][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.339390][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.348228][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.356993][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.365542][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.374755][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.383037][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.390747][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.398858][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 201.406715][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.416797][ T9945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.445046][ T9876] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.474217][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.495771][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.503961][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.513046][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.521862][ T9873] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.528935][ T9873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.537481][ T9945] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 201.548589][ T9939] bond0: (slave bond_slave_1): Releasing backup interface 08:54:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='uid_map\x00') writev(r0, &(0x7f0000002300)=[{&(0x7f00000000c0)="cb", 0x1}], 0x1) [ 201.640781][ T9872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.650667][ T9866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.662908][ T9866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.682896][ T9866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.702801][ T9866] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.709916][ T9866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.740351][ T9866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.749581][ T9866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.761721][ T9866] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.768806][ T9866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.776735][ T9866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.785261][ T9866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.793546][ T9866] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.800566][ T9866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.808196][ T9866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.816733][ T9866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.825166][ T9866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.833611][ T9866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.841913][ T9866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.850489][ T9866] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.858927][ T9866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.866735][ T9866] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 201.879475][ T9879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.888611][ T9879] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.908275][ T9880] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 201.919114][ T9880] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.931571][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 201.939586][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.948215][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.956945][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.965219][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.973737][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.981934][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.990291][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 202.001197][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.009723][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.032391][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 202.040903][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.059702][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 202.068405][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 202.084287][ T9880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.095719][ T9876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 202.115423][ T9876] 8021q: adding VLAN 0 to HW filter on device batadv0 08:54:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x2, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f00000000c0), 0x0, r2}) [ 202.279125][ T9990] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 08:54:59 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 08:54:59 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x3e, 0x0) write$nbd(r0, &(0x7f0000000140)={0x6000000, 0x0, 0x0, 0x0, 0x0, "a3ef41749fa527ab78fc57f180bd82099cbab35a2fdbede5fb0011edfb1f8cd557b0bdfcd7f42f5b0ffb83a83e65611b8e66182eff039800ccce5b3c9e6dd2af872a1cb21492f8816f1aa5319e87f29738ad944b2034440a"}, 0x68) 08:54:59 executing program 2: r0 = socket(0x2, 0x80003, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000600)="0400", 0x2, 0x8002, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4600000011000000000000002f00000000000000380000"], 0x1a) 08:54:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munlockall() ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x80}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0xf3cf5f4156743c67) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe2(&(0x7f0000000200), 0x80000) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:54:59 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000000)={0x6, 0xa09532a97768c280, 0x0}) 08:54:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) faccessat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 08:54:59 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 08:54:59 executing program 2: timer_create(0x2, &(0x7f0000000040)={0x0, 0x20, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000000)={{}, {0x0, 0x9}}, 0x0) [ 203.186900][T10007] dlm: Unknown command passed to DLM device : 0 [ 203.186900][T10007] 08:54:59 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000040)={0x10}) 08:54:59 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) [ 203.255372][T10018] dlm: Unknown command passed to DLM device : 0 [ 203.255372][T10018] 08:54:59 executing program 5: 08:54:59 executing program 1: 08:54:59 executing program 4: 08:54:59 executing program 2: 08:54:59 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 08:55:00 executing program 0: 08:55:00 executing program 5: 08:55:00 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 08:55:00 executing program 2: 08:55:00 executing program 1: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000180), 0xfe0c) sendmmsg$unix(r1, &(0x7f0000000080)=[{&(0x7f0000000100)=@abs={0x9d27bee61db5f6ea}, 0x6e, 0x0}], 0x1, 0x20000885) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @mss, @window], 0x2b3) 08:55:00 executing program 4: 08:55:00 executing program 5: 08:55:00 executing program 2: 08:55:00 executing program 4: 08:55:00 executing program 3: syz_init_net_socket$llc(0x1a, 0x1, 0x0) 08:55:00 executing program 1: 08:55:00 executing program 0: 08:55:00 executing program 5: 08:55:00 executing program 4: 08:55:00 executing program 2: 08:55:00 executing program 3: syz_init_net_socket$llc(0x1a, 0x1, 0x0) 08:55:00 executing program 1: 08:55:00 executing program 5: 08:55:00 executing program 4: 08:55:00 executing program 2: 08:55:00 executing program 1: 08:55:00 executing program 3: syz_init_net_socket$llc(0x1a, 0x1, 0x0) 08:55:00 executing program 0: 08:55:00 executing program 5: 08:55:00 executing program 4: 08:55:00 executing program 1: 08:55:00 executing program 0: 08:55:00 executing program 2: 08:55:00 executing program 4: 08:55:00 executing program 1: 08:55:00 executing program 3: setrlimit(0x0, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 08:55:00 executing program 5: 08:55:00 executing program 0: 08:55:00 executing program 2: 08:55:00 executing program 4: 08:55:00 executing program 5: 08:55:00 executing program 1: 08:55:01 executing program 4: 08:55:01 executing program 3: setrlimit(0x0, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 08:55:01 executing program 0: 08:55:01 executing program 5: 08:55:01 executing program 4: 08:55:01 executing program 1: 08:55:01 executing program 2: 08:55:01 executing program 3: setrlimit(0x0, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 08:55:01 executing program 4: 08:55:01 executing program 5: 08:55:01 executing program 1: 08:55:01 executing program 0: 08:55:01 executing program 2: 08:55:01 executing program 5: 08:55:01 executing program 4: 08:55:01 executing program 0: 08:55:01 executing program 3: setrlimit(0x7, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 08:55:01 executing program 2: 08:55:01 executing program 1: 08:55:01 executing program 5: 08:55:01 executing program 0: 08:55:01 executing program 4: 08:55:01 executing program 3: setrlimit(0x7, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 08:55:01 executing program 2: 08:55:01 executing program 1: 08:55:01 executing program 5: 08:55:01 executing program 0: 08:55:01 executing program 4: 08:55:01 executing program 3: setrlimit(0x7, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 08:55:01 executing program 1: 08:55:01 executing program 2: 08:55:01 executing program 0: 08:55:01 executing program 5: 08:55:01 executing program 4: 08:55:01 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x0, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 08:55:01 executing program 1: 08:55:01 executing program 2: 08:55:01 executing program 0: 08:55:01 executing program 5: 08:55:01 executing program 4: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x0, 0x10900) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) kcmp(r1, r2, 0x5, r0, r3) r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$KVM_PPC_GET_PVINFO(r4, 0x4080aea1, &(0x7f0000000140)=""/33) 08:55:02 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'\x00\x00\x00\x00\x00\x00\x14\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'syzR\x00\x00\x00\x00\x00\x00\x00\x80\x00', 0x600}) 08:55:02 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mkdir(&(0x7f0000000100)='./file1\x00', 0xd8) poll(0x0, 0x0, 0xadcb) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='./file1\x00') 08:55:02 executing program 2: r0 = socket(0x400000000000010, 0x802, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="240000001a0099f0003b40000000190e020808160000400000ba0080", 0x1c) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x90c04000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x400c801) flock(0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x280020}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x38c4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x1cb13) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000600)={0x2, 0x70, 0x7, 0xfffffffffffeffff, 0x0, 0x800, 0x0, 0x3, 0x101, 0x1, 0x2a, 0xffff, 0x7, 0xfff, 0x0, 0x3, 0x8, 0x2, 0xf28, 0x4, 0x10001, 0xa0de, 0x19, 0x800, 0xd021, 0x8, 0xfc1f, 0xc53, 0x7, 0x2, 0x2, 0x4, 0x571fe964, 0x8c43, 0x200, 0x291, 0x2a, 0x40, 0x0, 0x3ff, 0x5, @perf_config_ext={0x2, 0xcc}, 0x8810, 0x2, 0x7, 0x9, 0x7fff, 0x7, 0x8}) socket$netlink(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000040)=0x0) ioprio_set$pid(0x3, r4, 0x0) 08:55:02 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x0, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 08:55:02 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) r1 = socket(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x1, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14}}}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r3, 0x8f8b8eb1c17208e5, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x340020c4}, 0x4044c84) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000440)="f9", 0xfffffdac) ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380) 08:55:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xa157, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x200, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x100020, 0x11) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r1, r3, 0x0, 0x800000bf) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="0800a1695e1dcfe87b") r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) 08:55:02 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x0, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 08:55:02 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 08:55:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xa157, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x200, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x100020, 0x11) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r1, r3, 0x0, 0x800000bf) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="0800a1695e1dcfe87b") r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) 08:55:02 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 08:55:02 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='team0\x00', 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 08:55:02 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 08:55:02 executing program 1: r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x2, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={r3}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r3, 0x20, 0x4, 0x5, 0x1005, 0x6}, 0x14) pipe(&(0x7f0000000e00)={0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0) write$vhci(r4, &(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_ethernet(0xfe, &(0x7f0000000140)={@dev={[], 0x13}, @random="245a9c8eca7b", [], {@arp={0x806, @generic={0x196, 0x1c, 0x6, 0x0, 0x8, @dev={[], 0x19}, "86", @local, "f21bceda97fe74322115eb802e8a8f6a"}}}}, 0x0) 08:55:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1718, &(0x7f0000000380)="11dca50d5e0bcfe47bf07074e68a20f9c4f403802320719997c26d6692bceec60c96000000c3c7dab0553c9eaf331b53a0043d28c8663e264a78b07cd1efb8b9efaf8387b0a9a484c6ac87e52da4a2096fddfd85390f7da4286c2848cf57449ebaadb6fadd2f6fb0703693fc7a833aa8da4080af79ef4ea2e1314f929756e43a6048864fea2b68273b5f3b8e9cadf0af2ea13d418b6cb4174800"/177) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mISDNtimer\x00', 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x21, 0x1}, 0x7) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) read(r0, &(0x7f0000000180)=""/106, 0x6a) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000280)={0x5, &(0x7f0000000240)=[{0xb42, 0x100, 0x3, 0x80ae}, {0x80000000, 0x3, 0x81, 0x4}, {0xe1, 0x6, 0x5, 0x6}, {0x8000, 0x7fff, 0x8, 0xff}, {0x8000, 0xa0, 0x1, 0x20}]}, 0x10) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000140)={0x2}) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f00000000c0)=0x14) 08:55:03 executing program 2: r0 = socket(0x1e, 0x5, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000100)=0xff, 0x4) r2 = socket(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) finit_module(r2, &(0x7f0000000040)='@GPL\xb5vboxnet1vboxnet0\x00', 0x1) bind(r1, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) connect$tipc(r0, &(0x7f0000000000)=@name, 0x10) 08:55:03 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x0, 0x0) 08:55:03 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe172, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x0) mount$9p_xen(&(0x7f0000000000)='cpusetvmnet1em0(:\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x200021, &(0x7f0000000280)={'trans=xen,', {[{@cachetag={'cachetag'}}, {@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}, {@mmap='mmap'}, {@access_client='access=client'}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}}) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000001c0)={@pptp={0x18, 0x2, {0x0, @local}}, {0x0}, 0x0}, 0xa0) 08:55:03 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f00000000c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000140)=""/191, 0xbf}], 0x2, &(0x7f0000000200)=""/184, 0xb8}, 0x3}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/110, 0x6e}, {&(0x7f0000000480)=""/62, 0x3e}], 0x4, &(0x7f0000000500)=""/168, 0xa8}, 0x6}, {{0x0, 0x0, &(0x7f0000003940)=[{&(0x7f00000005c0)=""/68, 0x44}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/195, 0xc3}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/169, 0xa9}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/8, 0x8}, {&(0x7f0000003840)=""/62, 0x3e}, {&(0x7f0000003880)=""/174, 0xae}], 0x9, &(0x7f0000003a00)=""/247, 0xf7}, 0x4}, {{&(0x7f0000003b00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000003b80)=""/164, 0xa4}, {&(0x7f0000003c40)=""/108, 0x6c}, {&(0x7f0000003cc0)=""/31, 0x1f}, {&(0x7f0000003d00)=""/57, 0x39}, {&(0x7f0000003d40)=""/74, 0x4a}], 0x5, &(0x7f0000003e40)=""/253, 0xfd}, 0x3}], 0x4, 0x2041, &(0x7f0000004040)) bind$bt_sco(r2, &(0x7f0000004080)={0x1f, {0x8000, 0x1000, 0xffff, 0xffffffffffff051d, 0x401, 0x3}}, 0x8) 08:55:03 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x29804, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0xff, 0x1}, 0x20) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup2(r1, r0) mount$overlay(0x400000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x100008, &(0x7f00000016c0)=ANY=[@ANYBLOB="2c6c8e776591003aea5beacc443c6f98fe07cb3000000000f417e16df8b4a310fd544a282be0410979c01fc49f317c6d700e55e971f1148186855d0a084dc2dd843ea1ad44b6221d3378f56ba5b6f8523a1c2e00a078ab55d1f96c8add3baf42ab2c6076ece2782cb12b4f8f5176de0e9764598018a6b46dc9008c6f72afd9e3ca7b426d2caf68f164019760e5111e4516227fef9a08f14c4bec1c2f7494e8eb025ed9b0fafa0b331705047dd32e681bc9ed60113ba5beb30862c7d95f77aad25ebcf13466ded81b7e4e7b175f785665"]) open(&(0x7f0000000500)='./file0\x00', 0x14000, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000017c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x900, 0x290, 0x3e8, 0x6e8, 0x6e8, 0x290, 0x830, 0x830, 0x830, 0x830, 0x830, 0x6, &(0x7f00000015c0), {[{{@ipv6={@remote, @remote, [0xffffffff, 0xffffffff, 0xff000000, 0xff000000], [0xffffffff, 0x0, 0x0, 0xffffffff], 'gretap0\x00', 'nr0\x00', {}, {0xff}, 0x6, 0x1ff, 0x0, 0x10}, 0x0, 0x248, 0x290, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}, @common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'bpq0\x00', {0x1, 0x4, 0x0, 0x3, 0x80, 0xfffffffffffffffe, 0x8a6, 0x0, 0x38}, 0x100000000}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@remote, 0x19, 0x3e, 0x8}}}, {{@uncond, 0x0, 0x118, 0x158, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}, @common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x8, 0x2, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x100, 0x2, "2efa44a6c52faa7ed4e8a612dc68b852dbf79948eba294c90659a9bac0d5"}}}, {{@ipv6={@loopback, @rand_addr="867893c71883cb6406076e76d5618cb0", [0xff, 0xff, 0xff0000ff], [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], 'bond0\x00', 'lo\x00', {0xff}, {0x7f}, 0x3b, 0x8, 0x0, 0x14}, 0x0, 0x180, 0x1c8, 0x0, {}, [@common=@srh1={0x90, 'srh\x00', 0x1, {0x87, 0x0, 0x8, 0x8, 0x5, @local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty, [0x0, 0xff000000, 0xff000000, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffffff], [0x0, 0xff, 0xffffffff]}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, [], 0x25}, @ipv4=@broadcast, 0x37, 0xa, 0x9}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0xe, 0x401, 0x7}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@loopback, 0x4, 0xd, 0x1f}}}, {{@ipv6={@loopback, @local, [0xffffffff, 0xffffff00, 0xff, 0xffffff00], [0x80, 0x0, 0xffffff00], 'vlan0\x00', 'bcsh0\x00', {}, {}, 0xf7, 0x1, 0x9, 0x41}, 0x0, 0x120, 0x148, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x3}}, @common=@ah={0x30, 'ah\x00', 0x0, {0x4d4, 0x4d6, 0x5, 0x40, 0x3}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x960) r5 = accept4(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f00000001c0)) syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x4, 0x5, &(0x7f0000001540)=[{&(0x7f0000000280)="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", 0xfd, 0x1}, {&(0x7f0000000180)="d7f98da50ac0", 0x6, 0x2}, {&(0x7f0000000380)="3d8b0c0244ee2bc8235c0eaa64d56b6ce1b820abdd49a7ac1fc22cdbea8be8c52769b461d90217b9536142f682fc49688e03c9db4a606f76efa95a362c44a70feb87bf322e5944eb2b0c871403e3e00d8cacf53f6655ee4ce8957696977e6cb36e4dc5a0dd3524eace835c46f7c14ccfe6ef73b2e5711c95256756bee75d8ad7a8d611cbcd1001f8718141cd0485b238e5ed80", 0x93, 0x80000001}, {&(0x7f0000000440)="11b7f2acd9d9c0a852d6eba6eb6a0bb2e4f42616aa8be35329a52c9654a3c73b130206aac56596e0abd443295f6063bc3580ef33c1b6bf649a7ec1887c8fe8682202149684c6f2ed536c894f8fab7837e341ebbfe36951824bd0a638268f58892669a8c3dcfaebaf54aa8df9b865a38c8cbe695bd2eb121bd2c4be0a5fe4b4f2d350d05dd563e9255f1fbebfdac7", 0x8e, 0x5}, {&(0x7f0000000540)="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", 0x1000, 0xfffffffffffffffa}], 0x80, 0x0) 08:55:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000000c0)=0x7, 0x4) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x8) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x10098) write$binfmt_script(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB='#'], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000240)={0x6}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 08:55:03 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000640)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) getsockname$llc(r2, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f0000000c00)=""/246) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) getsockname$netlink(r4, &(0x7f00000000c0), &(0x7f0000000100)=0xc) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r3, r1) 08:55:03 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x0, 0x0) 08:55:03 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x0, 0x0) [ 206.669625][T10292] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=f9d7f500) 08:55:03 executing program 3 (fault-call:1 fault-nth:0): setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 08:55:03 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x13f}}, 0x20) r1 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111, 0x8}}, 0x20) socket$isdn_base(0x22, 0x3, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1800000000, 0x4000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000040)=0x86, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x200201, 0x0) timer_create(0x3, &(0x7f0000000280), 0x0) clock_gettime(0x0, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000500)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={0x1, &(0x7f00000002c0)="c42a61a0f8a166daaa22a6e3cdd4648f36c623689244c12cab29eebc1e3773", &(0x7f0000000300)=""/55}, 0x18) readv(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f00000003c0)=0x8, 0x4) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) tkill(0x0, 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x62) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000400)) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000100)={0x0, 0x35, 0x16, 0x3, 0x5, 0x9, 0x2, 0x153, 0xffffffffffffffff}) syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x0, 0x420000) ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000440), 0x1) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000240)={r4}) [ 206.880152][T10309] FAULT_INJECTION: forcing a failure. [ 206.880152][T10309] name failslab, interval 1, probability 0, space 0, times 1 [ 206.917244][T10309] CPU: 0 PID: 10309 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 206.925173][T10309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 206.935227][T10309] Call Trace: [ 206.938527][T10309] dump_stack+0x172/0x1f0 [ 206.942871][T10309] should_fail.cold+0xa/0x15 [ 206.947474][T10309] ? fault_create_debugfs_attr+0x180/0x180 [ 206.953276][T10309] ? page_to_nid.part.0+0x20/0x20 [ 206.958299][T10309] ? ___might_sleep+0x163/0x280 [ 206.963156][T10309] __should_failslab+0x121/0x190 [ 206.968102][T10309] should_failslab+0x9/0x14 [ 206.972606][T10309] kmem_cache_alloc+0x2aa/0x710 [ 206.977447][T10309] ? __kasan_check_write+0x14/0x20 [ 206.984642][T10309] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 206.990188][T10309] getname_flags+0xd6/0x5b0 [ 206.994679][T10309] getname+0x1a/0x20 [ 206.998557][T10309] do_sys_open+0x2c9/0x5d0 [ 207.002959][T10309] ? filp_open+0x80/0x80 [ 207.007196][T10309] ? switch_fpu_return+0x1fa/0x4f0 [ 207.012292][T10309] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 207.018340][T10309] __x64_sys_open+0x7e/0xc0 [ 207.022824][T10309] do_syscall_64+0xfd/0x6a0 [ 207.027307][T10309] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 207.033173][T10309] RIP: 0033:0x413761 [ 207.037060][T10309] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 207.056641][T10309] RSP: 002b:00007feaa39fdc10 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 207.065028][T10309] RAX: ffffffffffffffda RBX: 00007feaa39fdc90 RCX: 0000000000413761 [ 207.072976][T10309] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004be44a [ 207.080922][T10309] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 207.088873][T10309] R10: 0000000000000064 R11: 0000000000000293 R12: 00007feaa39fe6d4 [ 207.096832][T10309] R13: 00000000004c88a1 R14: 00000000004df7c0 R15: 0000000000000003 08:55:03 executing program 4: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in=@loopback, @in=@local}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000000)=0xe8) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) setresuid(r1, r5, r1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) fstat(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = add_key(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000040)={0x500, 0x0, [{}]}) ioctl$KVM_GET_XCRS(r11, 0x8188aea6, &(0x7f0000000040)={0x2, 0x82, [{0x1000, 0x0, 0x100000000}, {0xfcc, 0x0, 0x2}]}) r12 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)="16", 0x1, r8) keyctl$chown(0x4, r12, 0xffffffffffffffff, r7) 08:55:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @local}, &(0x7f0000000040)=0xc) getsockopt$inet6_mreq(r0, 0x29, 0x11, 0x0, &(0x7f0000000a00)) 08:55:03 executing program 3 (fault-call:1 fault-nth:1): setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 08:55:03 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = accept4$rose(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={r5, r6/1000+10000}, 0x10) 08:55:03 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f00000000c0)={{0x3, @netrom, 0x1}, [@null, @default, @default, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) write$FUSE_INIT(r0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000080)={'\x00', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000640)="f7", 0x1, r1) request_key(&(0x7f0000000240)='rxrpc_s\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000340)='cgroup2\x00', r1) r2 = add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$get_security(0x11, r2, &(0x7f0000000140)=""/4096, 0x1000) [ 207.428848][T10329] FAULT_INJECTION: forcing a failure. [ 207.428848][T10329] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 207.442089][T10329] CPU: 0 PID: 10329 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 207.449983][T10329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 207.460050][T10329] Call Trace: [ 207.463352][T10329] dump_stack+0x172/0x1f0 [ 207.467690][T10329] should_fail.cold+0xa/0x15 [ 207.472289][T10329] ? fault_create_debugfs_attr+0x180/0x180 [ 207.478109][T10329] should_fail_alloc_page+0x50/0x60 [ 207.483309][T10329] __alloc_pages_nodemask+0x1a1/0x900 [ 207.488677][T10329] ? __alloc_pages_slowpath+0x2520/0x2520 [ 207.494382][T10329] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 207.494395][T10329] ? __kasan_check_read+0x11/0x20 [ 207.494413][T10329] ? fault_create_debugfs_attr+0x180/0x180 [ 207.494427][T10329] cache_grow_begin+0x90/0xd20 [ 207.494441][T10329] ? getname_flags+0xd6/0x5b0 [ 207.494457][T10329] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 207.494473][T10329] kmem_cache_alloc+0x64e/0x710 [ 207.531338][T10329] ? __kasan_check_write+0x14/0x20 [ 207.536458][T10329] getname_flags+0xd6/0x5b0 [ 207.540964][T10329] getname+0x1a/0x20 [ 207.544860][T10329] do_sys_open+0x2c9/0x5d0 [ 207.549282][T10329] ? filp_open+0x80/0x80 [ 207.553526][T10329] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 207.553542][T10329] __x64_sys_open+0x7e/0xc0 [ 207.553558][T10329] do_syscall_64+0xfd/0x6a0 [ 207.553572][T10329] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 207.553587][T10329] RIP: 0033:0x413761 [ 207.564108][T10329] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 207.564115][T10329] RSP: 002b:00007feaa39fdc10 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 207.564128][T10329] RAX: ffffffffffffffda RBX: 00007feaa39fdc90 RCX: 0000000000413761 [ 207.564136][T10329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004be44a 08:55:04 executing program 0: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x2e6, 0x4) r2 = perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') socket$inet_tcp(0x2, 0x1, 0x0) 08:55:04 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f0000000040), 0x0}, 0x18) r1 = socket(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000340)=0x1c, 0x80800) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) listxattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=""/15, 0xf) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getgid() r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$ndb(&(0x7f00000005c0)='/dev/nbd#\x00', 0x0, 0x10000) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, 0x0) readlink(0x0, 0x0, 0xa) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x7, 0x30}, &(0x7f00000003c0)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000400)={r5, @in={{0x2, 0x4e22, @multicast1}}, [0x7fff, 0x8, 0x0, 0xe0, 0x7, 0x4, 0xffffffffffffffff, 0x7, 0xfffffffffffff0da, 0x4, 0x101, 0xffffffff7fffffff, 0x9, 0x1000, 0xe9a]}, &(0x7f0000000500)=0x100) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSERIAL(r3, 0x541e, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',r0000000000000040004,user_id=\x00'/42, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$key(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[]}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.stat\x00', 0x0, 0x0) 08:55:04 executing program 1: mkdir(&(0x7f0000000100)='./bus\x00', 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') chdir(&(0x7f00000000c0)='./file0\x00') mknod(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 08:55:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3, 0x440200) sendto$isdn(r1, &(0x7f0000000040)={0x6e, 0x80000001, "5411312a90eb8d2ef913c9ddd805ca9a1ceac829a6f4facb0d1e1e46dc2e600e7165e81ed45836749e30b82dc3f24775f55b"}, 0x3a, 0x24040000, &(0x7f0000000080)={0x22, 0xb419, 0x67d, 0x3, 0x1}, 0x6) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xe) ioctl$TCFLSH(r2, 0x80047437, 0x70e000) 08:55:04 executing program 3 (fault-call:1 fault-nth:2): setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) [ 207.564143][T10329] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 207.564150][T10329] R10: 0000000000000064 R11: 0000000000000293 R12: 00007feaa39fe6d4 [ 207.564158][T10329] R13: 00000000004c88a1 R14: 00000000004df7c0 R15: 0000000000000003 08:55:04 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 08:55:04 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="6801000000000000000000000000000000000000001f1726c851b9b9932300000000000000000000000000000000000000000000000000000000000000000000210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000060000000000000000000000000000001900000000000800"], 0xa8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0xf51302f5ee037162, @time={0x0, 0x989680}}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x240200, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000000c0)={0x190, @tick=0x40, 0x10000, {0x5, 0x5}, 0x9, 0x2, 0xeb}) 08:55:04 executing program 5: lsetxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000c40)=""/23, 0x17}], 0x1, 0x0, 0x0, 0x8}}], 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x181, &(0x7f0000000180)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@sha1={0x1, "b44d4be1ed86822a95785cf7aff83c899377f01c"}, 0x15, 0xc16b9dbab2aa62d0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) 08:55:04 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0xffffffffffffffff, 0x1, 0x0) 08:55:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) r3 = dup(r2) r4 = socket(0x1, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x402, 0x140) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={0x0, r5, 0xd, 0x1}, 0x14) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r7, 0x1, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, r7, 0x0, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000000) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000040)) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000000)=0x8dc, 0x578) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) [ 207.999225][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 08:55:04 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0xffffffffffffffff, 0x1, 0x0) 08:55:04 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x57, &(0x7f00000002c0)=[{&(0x7f0000001840), 0x1fff8}], 0x1}, 0x0) 08:55:05 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x68533ab5d39bd14f, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1c, 0xffffffffffffffc8, &(0x7f0000000640)="4d50b441e692763113ef8745ffa3960538bdef6e6245124e25d30806", 0x0, 0x2e, 0xf0ffffffffffff}, 0x28) 08:55:05 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) pipe(&(0x7f0000000e00)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0x9) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x10, 0x0, 0x8) 08:55:05 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a280930206000100000001020b00000a0007003500280014000000090005407f0180000022de1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d400", 0x55}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x6, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000440)="f9", 0xfffffdac) ioctl$VFIO_SET_IOMMU(r2, 0x3b66, 0x5) bind(r1, &(0x7f0000000000)=@rc={0x1f, {0x4, 0x4, 0x1b8d, 0x7ff, 0x0, 0x3}, 0x1c17}, 0x80) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x6, 0x5, 0x100000001, 0xffeb, 0x6}) 08:55:05 executing program 2: nanosleep(&(0x7f0000000000), 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = socket(0x10, 0x800, 0x6) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) recvmsg$kcm(r0, &(0x7f0000001180)={&(0x7f00000009c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000a40)=""/243, 0xf3}, {&(0x7f0000000b40)=""/111, 0x6f}, {&(0x7f0000000bc0)=""/16, 0x10}, {&(0x7f0000000c00)=""/8, 0x8}, {&(0x7f0000000c40)=""/107, 0x6b}, {&(0x7f0000000cc0)=""/227, 0xe3}, {&(0x7f0000000dc0)=""/222, 0xde}, {&(0x7f0000000ec0)=""/157, 0x9d}, {&(0x7f0000000f80)=""/255, 0xff}], 0x9, &(0x7f0000001140), 0xb4}, 0x60012026) connect$caif(r1, 0x0, 0x370) 08:55:05 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0xffffffffffffffff, 0x1, 0x0) 08:55:05 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x2, 0x0) [ 208.603468][T10399] sctp: [Deprecated]: syz-executor.1 (pid 10399) Use of struct sctp_assoc_value in delayed_ack socket option. [ 208.603468][T10399] Use struct sctp_sack_info instead 08:55:05 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x404084) ioctl(r0, 0x800000000000937e, &(0x7f0000000580)="0100000000000000180100000300010040000000000000002f") [ 208.646937][T10396] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 208.687002][T10396] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:55:05 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x3, 0x0) [ 208.717945][T10396] netlink: 33 bytes leftover after parsing attributes in process `syz-executor.0'. 08:55:05 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c460000000000000000000000000300060000000002a13701803800000000000000000008000000200002"], 0x2d) r0 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@isdn, &(0x7f0000000200)=0x80, 0x80000) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000240)) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:55:05 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x5, 0x0) 08:55:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000100)=@generic={0x2, 0x4, 0x80000000000003}) r2 = socket(0x1, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'veth1\x00', 0x400}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="0900000000000000090000000000000001000000810000000500000000000000ff070000000000000800000000000000f8ffffffffffffff00000000000000000000000000000000000100000000000000000000000000000200000000000000080000000000000085bc00000000000000000000000000000000000000000000080900000000000000000000000000000600000000000000ff0100000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000100000000000000000000000000000000000000000000000010000000000000000000000000000002000000000000008000000000000000040000000000000000000000000000000000000000000000001a000000000000000000000000000038301b84904b7fd4fd632695f90e231b80973b4cf9fd7abcd7364e19d58d3f388ff79a4df7d7d00f35e8507b10bc293e7de7dcf4837d07e8139eaa0d2161512f84a89a9d0d2c0b3e9cd9ad588e33c0848f508da1de9e5df9b1934c112c7244da9c515fd4d7508e45a8414fa1a92cef524ac1c624a38b5e0022f8930d64c97e57213a5f7506ea4409775be9969a063a97aee4fe46d2f00bb784749114cb41d3858dfddb098f779a120427e96c6c311903083a18fa542df409a6db5482cac1f68ee62911f1ad9eafe2306e54819e8145f8d1062900bbb96c8caa62e56fce7167151fb39bff480d3127cdd3961eb6d488e18e3396a8a1af3354bd9844616a841122b99c54bca88d47fafa4fc8e2bc7a4c"]) pipe(&(0x7f0000000e00)={0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) splice(r5, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$EVIOCGEFFECTS(r5, 0x80044584, &(0x7f0000000e40)=""/4096) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) splice(r4, 0x0, r9, 0x0, 0x80000001, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000040)) [ 209.582664][ T21] device bridge_slave_1 left promiscuous mode [ 209.588841][ T21] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.662650][ T21] device bridge_slave_0 left promiscuous mode [ 209.668851][ T21] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.392812][ T21] device hsr_slave_0 left promiscuous mode [ 210.462157][ T21] device hsr_slave_1 left promiscuous mode [ 210.546936][ T21] team0 (unregistering): Port device team_slave_1 removed [ 210.557873][ T21] team0 (unregistering): Port device team_slave_0 removed [ 210.567461][ T21] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.605854][ T21] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.672046][ T21] bond0 (unregistering): Released all slaves [ 210.756440][T10432] IPVS: ftp: loaded support on port[0] = 21 [ 210.826821][T10432] chnl_net:caif_netlink_parms(): no params data found [ 210.894612][T10432] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.901730][T10432] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.909638][T10432] device bridge_slave_0 entered promiscuous mode [ 210.919748][T10432] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.926927][T10432] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.937046][T10432] device bridge_slave_1 entered promiscuous mode [ 210.958295][T10432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.968946][T10432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.990929][T10432] team0: Port device team_slave_0 added [ 211.000190][T10432] team0: Port device team_slave_1 added [ 211.064517][T10432] device hsr_slave_0 entered promiscuous mode [ 211.102420][T10432] device hsr_slave_1 entered promiscuous mode [ 211.162213][T10432] debugfs: Directory 'hsr0' with parent '/' already present! [ 211.178114][T10432] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.185205][T10432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.192550][T10432] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.199592][T10432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.234698][T10432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.247205][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.255369][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.263043][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.278479][T10432] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.288675][ T9866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.297101][ T9866] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.304173][ T9866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.314824][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.323193][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.330216][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.347651][T10432] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 211.358289][T10432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.370448][ T9866] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 211.379458][ T9866] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 211.387986][ T9866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.396236][ T9866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 211.404653][ T9866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 211.412349][ T9866] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 211.429770][T10432] 8021q: adding VLAN 0 to HW filter on device batadv0 08:55:08 executing program 4: r0 = open(&(0x7f0000000300)='./file0\x00', 0x86842, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000000800)="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", 0x600) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x10000) write(r1, &(0x7f0000000080)="49b4c0df4e5291d6d4cae31741e951f97d4019a7e61d03ea53fe7bd627ccd761d41dbf1e6f060f188fbc16c01fcbf849ac4fe45c6a80f71942e37555b13224e57022b385497ad463226aeae2db66b62cd4fea279705e611a550fb68cefc8efaf9531127046b55d4156d859a262b2acaaa09af633f2aa1709561397684f411f0b47c4b2516870ff4ea0d3622677ea72c976980d23f33e22940dd85cb55467cfd630f0f983692790ca8303c2b65b36b22bd4555b2a8934969b70de4a391038193e0b15f3e976ded6c853eb61d116d2adb260b67d4924875dbbb0a299b6bc517362054c210c", 0xe4) 08:55:08 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x6, 0x0) 08:55:08 executing program 5: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x3}, 0x80, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x4000, 0x0) r0 = socket(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) r1 = socket(0x10, 0x2, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="0104008867a42f10124abc43002513f85a2572665f692c4e6315f02ce18e3ffa1054b2d7", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={r3}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={r4, 0x4, 0x9}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={r3, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}, @in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, [], 0x29}, 0x9}]}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000e00)={0xffffffffffffffff}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) splice(r5, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r5, 0xc0106401, &(0x7f00000001c0)={0x9d, &(0x7f0000000280)=""/157}) 08:55:08 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c) 08:55:08 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) r2 = gettid() r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r3, &(0x7f0000000900)=ANY=[@ANYBLOB="01"], 0x1) prctl$PR_SET_PTRACER(0x59616d61, r2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xd) write(r4, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TCFLSH(r4, 0x540b, 0x2) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000300)={0x75fd, 0x7, 0x9, 0x65f7, 0x2, "28fdd53483304ea16f7539fd7dd914281c7ee9", 0x6, 0x1}) r5 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xc1ae, 0x400) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r5, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r6, 0x7709, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000001c0)={{0xff, 0x9, 0x4c22, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x101, 0x0, "428e5c01604cecfd964ac3b6d1508f54017bc9e8c8f5fbdc7e297d20d302168b729c090f37fe60e61ee73946d028b30f0fa8dd527be970cb3f210c620f06d24625958b8a02a07d5cb9b8ddd38418752dbb55b8aba94b8d600fec795af666b8e22fb478d48d9fc0ba66da031b8ae4a0f24ab37da2e20334c23c5906f8b1d6fa91"}) sched_setparam(0x0, &(0x7f0000000000)) close(r3) clone(0x2000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0x95c8}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x2c0}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 08:55:08 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmsg(r0, &(0x7f0000014fc8)={&(0x7f0000006ff0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffff01000000}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x40, 0x0, 0x7, "0710060000ef00249745f787caeb5e6228227733cc1c5243cd3bd84b46c8fe3530b39d660e37f7ece0"}], 0x40}, 0x0) 08:55:08 executing program 2: mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/.%v/\x11%put/event#\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000000c0)=@ipx, 0x80, 0x0, 0xfffffff4, 0x0, 0x77}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0) 08:55:08 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x9, 0x0) [ 211.572994][ T26] audit: type=1800 audit(1567760108.102:31): pid=10456 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16640 res=0 08:55:08 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") fcntl$setstatus(r0, 0x4, 0xc00) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) r2 = syz_open_dev$sg(0x0, 0x0, 0x0) write$binfmt_elf32(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000140)) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000000)) r3 = socket$inet(0x10, 0x100000000002, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000180)="24000000070607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r4 = gettid() setsockopt$inet6_int(r1, 0x29, 0x38, 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x22) fcntl$setstatus(r1, 0x4, 0x2000) [ 211.602642][ T26] audit: type=1804 audit(1567760108.122:32): pid=10456 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir259793613/syzkaller.Y1sxkH/1/file0" dev="sda1" ino=16640 res=1 08:55:08 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0xa, 0x0) 08:55:08 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0xb, 0x0) [ 211.727037][T10471] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 211.758392][ T26] audit: type=1800 audit(1567760108.282:33): pid=10456 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16640 res=0 [ 211.783474][T10471] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 08:55:08 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="a4ab12f728db4b2b4d2f2fba4fad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca297e", 0x2d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4f7665336c088b29, 0x10, r1, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) clock_getres(0x0, &(0x7f0000000000)) ptrace$cont(0x7, r0, 0x0, 0x0) 08:55:08 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x10, 0x0) [ 211.823167][ T26] audit: type=1804 audit(1567760108.312:34): pid=10456 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir259793613/syzkaller.Y1sxkH/1/file0" dev="sda1" ino=16640 res=1 08:55:08 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x27, 0x0) [ 211.936866][T10471] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 211.956530][T10471] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 08:55:08 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x205d6a92b46c1c5, 0x0) 08:55:08 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x31, 0x0) 08:55:08 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x5d1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x52, 0x4) r1 = socket(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$int_out(r1, 0x1, &(0x7f0000001680)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_dev$mouse(&(0x7f0000001600)='/dev/input/mouse#\x00', 0x7fffffff, 0x105000) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381) recvmsg(r2, &(0x7f00000015c0)={&(0x7f00000000c0)=@nfc_llcp, 0x80, &(0x7f0000001500)=[{&(0x7f00000001c0)=""/71, 0x47}, {&(0x7f0000000280)=""/127, 0x7f}, {&(0x7f0000000300)=""/213, 0xd5}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000040)=""/35, 0x23}, {&(0x7f0000001400)=""/46, 0x2e}, {&(0x7f0000001440)=""/168, 0xa8}], 0x7, &(0x7f0000001580)=""/4, 0x4}, 0x1) ioctl(r2, 0x1000008912, &(0x7f0000000140)="c0dca5055e0bcfec7bf070") recvmmsg(r0, &(0x7f0000006840), 0x0, 0x44000122, 0x0) syz_open_dev$sg(&(0x7f0000001640)='/dev/sg#\x00', 0x5, 0x40) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$DRM_IOCTL_AGP_RELEASE(r4, 0x6431) r5 = socket(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f00000016c0)={0xe89d, 0x6d, "679d7d7892c18a4c26243f834732b3550618e3ccf6478c55ef50dd0b85877709ee408a2c58828ceeff17e517f4a9da4ae8300a8a8d86be39f2a0a100d5829405e507058bf9128560069912be3931c136925ebd15e460fb27c5e635e2472dc090e2616800e2da92a64e0243845a"}) 08:55:08 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x3dbcba77) accept4$nfc_llcp(r0, &(0x7f0000000080), &(0x7f0000000000)=0x60, 0x80000) r1 = socket(0x2, 0x0, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) syz_init_net_socket$x25(0x9, 0x5, 0x0) fcntl$setstatus(r1, 0x407, 0xdf93b4e305131cca) r2 = socket(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) sendmsg(r2, &(0x7f00000003c0)={&(0x7f0000000100)=@l2={0x1f, 0x4, {0x8, 0x1, 0x8, 0x1, 0x0, 0x9}, 0x878f, 0x3}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="583cf860265e8c3f5311656af95e4b17fcd0cee4167c2d88f64544e01bc74a168519423ed86a7fcb18b4348b683a27d6d08b0c7c553b76179307e2d4289b8b0e4fc472a26372bba16ec3e24f94eb141e96f060aa06bad2174902d53a32e7b69cee3ac28fd976ded11feca39e0493d82cb43359315a7eb7570c9b65", 0x7b}], 0x1, &(0x7f0000000240)=[{0xa0, 0x10e, 0x2, "3078e3b732e6f00146af87d876c14582aa37a3ee3cc50971b62c1238e22850f3f3bf2f766f745191927c8d50763c53d8cff2c15c71af57ba0ae5835357270b07edf9d587aac8ed4434379631695719c215fb4dd09eaef4113705cff8c6a5db09593e1114beacc5ff66f6786bbb766bd55896989362af06a42b669751370506d11cdeb81d633d5795630b5185"}, {0xc0, 0x102, 0x2, "d8f8c82fd7165c18822d14c207a4400825c6c2a5729d6073cc29ef6739a30e3b98aab92f0e02b53380ed2b1d860147d0588817ec7d8220455200ec8bdf7930f42798ebda4987d6f7fbc956f90c58e4f9eba8df7ced9a5de5d1f8c432f9ac83f4c6a1efd94c77b711a2189e2a7f449aa8a6d4aed9301385dae0aa876f376627dfe8fc3f3aa945ae97b3fdd53a574b5476c3e1cd4832aea7c3e97299b102cc1f4f6e3f56afcd061f3018"}], 0x160}, 0x40000) [ 212.419466][T10505] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 08:55:09 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080)=0xbdf, 0x4) r1 = socket$inet6(0xa, 0x80000, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in6=@remote}}, 0xe8) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 08:55:09 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x4, 0x4) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x400000000000000, 0xae00) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000040)={0x5, 0x5, 0x7, 0x5b, &(0x7f00000000c0)=""/91, 0xb5, &(0x7f0000000180)=""/181, 0xff, &(0x7f0000000240)=""/255}) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000064, 0x0) 08:55:09 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x63, 0x0) 08:55:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) bind$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x2710, @host}, 0x10) io_setup(0x3ff, &(0x7f0000000000)=0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket(0x1, 0x1, 0x0) r6 = socket(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000380)='fou\x00') sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r7, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x56e3}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x24004070) bind$unix(r5, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) getsockopt$inet6_dccp_buf(r5, 0x21, 0x9, &(0x7f0000000240)=""/159, &(0x7f0000000300)=0x9f) bind$alg(r4, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r8 = accept4(r4, 0x0, 0x0, 0x0) splice(r3, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_S_MODULATOR(r3, 0x40445637, &(0x7f0000000040)={0x10001, "0146ee3167e7a505316a5cdd2e723aab01b3a7efcf0fb7a848f81f765f5cb66d", 0x4, 0x401, 0x3, 0x1, 0x5}) r9 = socket(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) getsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f0000000180)=""/85, &(0x7f00000000c0)=0x55) io_submit(r2, 0x2, &(0x7f0000001600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 08:55:09 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0xe0, 0x0) 08:55:09 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x300, 0x0) 08:55:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x20) r1 = socket(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) r2 = dup3(0xffffffffffffffff, r1, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xa20240}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r3, 0x100, 0x70bd2b, 0x25dfdbff, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x0, @link='syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x68}}, 0x4000) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000440)="f9", 0xfffffdac) r5 = socket(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) fchmod(r5, 0x80) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x0, 0x2, 0x800, 0x0, 0x8}) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x1d}, 0x6}, {0xa, 0x4e21, 0x4, @local, 0x1}, 0x6, [0x7f, 0x1688f830, 0x9, 0x8, 0x6, 0x4, 0xffffffff, 0x5]}, 0x5c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000001c0)={@dev, 0x3}, 0x20) 08:55:09 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0xef00, 0x0) 08:55:09 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x604000c}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x110, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30, 0x7c495ce14d1cb00c}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffffffffffff}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0xc27ca20a45226b90}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5b7890d3}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x151}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r4, 0x1, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x300, 0x70bd2d, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x3400403c) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000230029080000000000000000030000001800020014000100ffff0aaaed2bf53d6f67000000000001"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) 08:55:09 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0xffe0, 0x0) 08:55:09 executing program 0: io_setup(0x8, &(0x7f0000000280)=0x0) r1 = inotify_init1(0x0) r2 = socket(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) recvfrom$ax25(r2, &(0x7f0000000000)=""/114, 0x72, 0x121, &(0x7f0000000080)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @null]}, 0x48) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 08:55:09 executing program 5: unshare(0x20000000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') setns(r0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000080)={0xc400000000000000, 0x100000, 0x9f9, 0x0, 0x13}) ioctl$VFIO_GET_API_VERSION(r1, 0x3b64) 08:55:09 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0xffffff1f, 0x0) 08:55:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0xc0000) ioctl(r0, 0xffffffff9000aea4, 0x0) 08:55:09 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0xffffffe0, 0x0) 08:55:10 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40000, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000040)={0xcf7, "a4e0ac85a61251f6d8d87b0b2369babe6003037ff20f9bda271f2f0f71c222ba", 0x3, 0x10a8, 0x8, 0x20, 0x1, 0x0, 0x5, 0xffffffff}) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) finit_module(r1, 0x0, 0x0) 08:55:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth0_to_hsr\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_ifreq(r1, 0x8937, &(0x7f0000000340)={'veth0\x00', @ifru_flags=0x1000}) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0xffff, @mcast2}, 0x1c) sendmmsg(r2, &(0x7f0000002d00), 0x80000000000027a, 0x0) r3 = eventfd2(0x0, 0x0) r4 = dup(r3) pipe(&(0x7f0000000e00)={0xffffffffffffffff}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) splice(r5, 0x0, r7, 0x0, 0x2000000080000001, 0x0) ioctl$PPPIOCCONNECT(r5, 0x4004743a, &(0x7f00000001c0)=0x4) r8 = socket$inet6(0xa, 0x400000000001, 0x0) r9 = dup(r8) setsockopt$inet6_tcp_int(r9, 0x6, 0xa, &(0x7f0000000100), 0x195) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x7) r10 = socket(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, 0x0}, &(0x7f0000000240)=0xfffffffffffffded) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000280)=r11) sendmmsg(r7, &(0x7f0000000740)=[{{&(0x7f0000000080)=@ll={0x11, 0x1a, r11, 0x1, 0x20, 0x6, @dev={[], 0x28}}, 0x80, &(0x7f0000000700)=[{0x0}, {&(0x7f00000004c0), 0x1ae}], 0x2}}], 0x1, 0x4000) r12 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x18, 0x100000001, 0xfffffffffffff3d3, 0x3, 0x1, r1, 0x5ba, [], r11, r12, 0x2, 0x5}, 0x3c) setsockopt$inet_mtu(r1, 0x0, 0x7, &(0x7f0000000140), 0x4) 08:55:10 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0xffffffffffffffe0, 0x0) 08:55:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e66077fea69957e0cc57ec5c4572e00"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000440)="f9", 0xfffffdac) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000300)}) 08:55:10 executing program 0: syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0xa303) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x800000009, &(0x7f00000000c0)=0x0) io_submit(r1, 0x26, &(0x7f0000000440)=[&(0x7f0000000000)={0x60ffffffffff, 0x0, 0x0, 0x1, 0x10000, r0, &(0x7f00000001c0)="10000040030000000000000000000000b22025285db74192e7576d9062ec6e2fe8ffff3ff248691861d03a71091d334252afb1af5b8f0274c2ed58338226131291198f3d70dcf797ac42d0eeed042c06b56b89f02f92b12ebe4c45948a362a76def2f4955f100a13131f474b140942110257e173cea102775e1b3873ebf98dac6421f6d449544114b8ce29f4b48d1738b5be127a96f24c9d3c130e1a6c2eb5b3f12eb6a1f5051594545cbb895e65d83c08d2d6cd56694e5a6c00f54aceaf498f57b2a56634a23ae7", 0x40000010}]) r2 = gettid() tkill(r2, 0x24) 08:55:10 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x2) 08:55:10 executing program 5: perf_event_open(&(0x7f0000000680)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000080)=0x3afa34d7a2976fe1) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000040)=0x14, 0x4) 08:55:10 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x3) [ 213.648172][T10591] debugfs: File '10588' in directory 'proc' already present! [ 213.670273][T10591] binder: 10588:10591 unknown command 2131191310 08:55:10 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) close(r0) r1 = socket(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) r2 = socket(0x10, 0x2, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000040)={r4}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000140)={r4, 0xffffff11, "200416f459e2862dd978cd3a2b1d9ea36d2865696a6acc22df910b0ee9e247c458a0f0115c68e35eac5b835e48e83f4b53cbd5ff"}, &(0x7f0000000100)=0x3c) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x10, &(0x7f0000000040), 0x8) 08:55:10 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x4) [ 213.692587][T10591] binder: 10588:10591 ioctl c0306201 20008fd0 returned -22 08:55:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x10, 0x80003, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="24000000200007041dfffd946f6105000a00000a1f000003002808000800100004000300280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x329}, 0x80) 08:55:10 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x5) 08:55:10 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0xff, 0x1}, 0x20) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup2(r1, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r3, 0x4010ae74, &(0x7f0000000000)={0xe3e9, 0x5, 0x4}) 08:55:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x1, r3, 0x1}) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000140)=""/218) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x336, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:55:10 executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000000)='&@[\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a1, &(0x7f0000000140)='&@[\x00') 08:55:10 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x6) 08:55:10 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x7, 0x0, 0xa0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xc4, 0xe15ddf1f14d103ba) r2 = socket(0x10, 0x2, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000040)={r4}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYBLOB="0500080000000000604c08000100000095000000"], &(0x7f0000000080)=0x18) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f9, &(0x7f00000000c0)="49cfb7d9eae1c6acd1a2d87b409260b645c2d5c545eb8ecf36353888b83001f7ee53d9004215a8367c13a4ab4b1069398c57f423ad41a66d199c89c600a939f3ff3dc15518a23e6af8b050fea4c3f7339a8007abed069a5a099ed101ff633b7587b543d8309df321c377bd14780da9c69831f336") 08:55:10 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x20600) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000000)={0x5, 0x6, 0x1, 0x5, 0x3}) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000040), 0x4) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(r0, &(0x7f0000000140)='M', 0x1, 0x0, 0x0, 0x0) 08:55:11 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x388d89f37d60581b) r1 = socket(0x1, 0x1, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0/file0\x00', 0xe, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x3, 0x0, 0x20000000097b, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x50e9, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2880, 0x0, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x30a, 0x0, 0x0, 0x7}, 0x10) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000080)="c28a152b4ebfee0b9b23daebcc423fb1", 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) setsockopt$sock_int(r4, 0x1, 0x1d, &(0x7f00000001c0), 0x4) bind$alg(r3, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) 08:55:11 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x7) 08:55:11 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0xff, 0x0, "4534c139ee574273b92aad59d3d7dbf350d42aeb9421f0dc079948a996ad74753cc05eab6cec0dfd3c9ba6fe14a3089ad1f8836d33c1b98208f359f9d885f5c79843db48b177909011dd027aad9c3218"}, 0xd8) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86) r8 = socket(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) getsockopt$ARPT_SO_GET_INFO(r8, 0x0, 0x60, &(0x7f0000002280)={'filter\x00'}, &(0x7f0000002300)=0x44) ioctl$NBD_DO_IT(r2, 0xab03) r9 = socket(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f0000002340)=0xffffffffffffffff, 0x4) [ 214.541433][T10638] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 08:55:11 executing program 2: msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x101000) r1 = memfd_create(&(0x7f0000000540)='\x00', 0x17) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7f94efc4d258b4e7, 0x20010, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.stE\xae\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x1) fallocate(r3, 0x0, 0x0, 0x2000002) read$eventfd(r3, &(0x7f00000003c0), 0x8) fallocate(r1, 0xe, 0x6, 0xffffffffffff5a11) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r5) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) poll(&(0x7f0000000740)=[{r3, 0x40}, {0xffffffffffffffff, 0x2000}, {r3, 0x80}, {r5, 0x8200}, {}, {r4}, {r0}, {r2}], 0x8, 0x7fff) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$security_selinux(0x0, &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:lvm_control_t:s0\x00', 0x23, 0x0) r7 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000300)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x69089802}, 0xc, &(0x7f0000000680)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c0200003cd4fce5b4a2a3a7fb2105b1223ce9ddd52f26916ba55bdb1c780ab72a73fbdf723edc061a6deda886fa75ac1ab1b7c8d05895433ed6c7372951765c0cfdbc608a5e6a149402000000000000003f14880cd9f38f200000b7c9cec359f2c3b4be11016542375d6c07a78d133a02472661d37172f1b5f3484848f488aafc365f3f52a8df1dfecaac34fd035b5edbe853690cb3f1186bf9d1353a7a924250803c2702b0e9971ed8e1cb2a258e1336e268465a450c8b6ac87ddcd8e1d3ed036c090ad0575c26ff7a30b367f1025d1aa864a168b80057654889478228d93da0092798aa98326622767ef02c58f147acdfa5db99805c7e3b7126f6a93e433d8f8a07e9cf1b6f48a903fc1047795186ad057fe14cb41b6ee2c5c80c07a830f4b58e6d2e59ee9216a5f74b03fcc10e8be1837c72fcbdb177ac6f5535d51f0d0e24037dd317a69b91d0807a6b92f85d54f114bd1dd6fb57", @ANYRES16, @ANYBLOB="00082bbd7000ffdbdf25040000003c000900080001000900000008000200ff03000008000200ff01000008000200ff03000008000200ffff000008000100000100000800010003000000d00004001400010062726f6164636173742d6c696e6b00001400010062726f6164636173742d6c696e6b00000c00010073797a3100000000440007000800030005000000080001001b00000008000100100000000800030036a22aca080001000800000008000100080000000800040009000000080001000f0000000c00010073797a31000000003c000700080001000a0000000800020003000000080002000300000008000400000000000800010007000000080004000070000008000200060000000c00070008000200060000001800050014000200080002000800000008000200060000000800020004"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40) keyctl$KEYCTL_MOVE(0x1e, r7, 0x0, 0x0, 0x0) r8 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x7fff) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0xa, &(0x7f0000000140)=0xeb2, 0x4) bind$inet(r9, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fb, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x9) write$binfmt_elf64(r9, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) socket$inet6(0xa, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sendfile(r6, r8, 0x0, 0x8000fffffffe) msgctl$IPC_SET(0x0, 0x1, 0x0) 08:55:11 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x27) 08:55:11 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x6) r2 = socket(0x1, 0x1, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x1400, 0x0) write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[], 0x0) sendfile(r0, r1, &(0x7f0000000000), 0xffff) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x0, 0x2) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x4d, 0x1}, 0x7) fcntl$addseals(r1, 0x409, 0x8) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$FIBMAP(r3, 0x1, &(0x7f00000001c0)=0x1) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r4, 0x80045300, &(0x7f0000000180)) [ 214.679544][T10650] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 08:55:11 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x2f) [ 214.772583][ T2472] block nbd0: Receive control failed (result -22) [ 214.779135][ T2472] block nbd0: Receive control failed (result -22) [ 214.787746][T10642] block nbd0: shutting down sockets [ 214.915499][T10653] block nbd0: Receive control failed (result -22) [ 214.930598][T10643] block nbd0: shutting down sockets 08:55:11 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="651a1c63f4c126bb87bc5e6e7644cc691a7b5622f76de7307a6fabd464b0ae229d0125a464c405699685832f9bf2ae96a67bae193b5c6aa61928f6ad516a6eba30256bd5c5f4faf6686d73e44bc75b6954b6a68cb33ff6a01f80c11c1f5ff1b7784e713bd8074bba000000000000051dc6f7edbde5a77f45e8cb22890d2ae2fbdad96e0c704b8dbc9ef64768da1b40aa5100a080e4475e2d57f5d078c8d0a6f86c"], 0x1) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 08:55:11 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x48) 08:55:11 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0xff, 0x0, "4534c139ee574273b92aad59d3d7dbf350d42aeb9421f0dc079948a996ad74753cc05eab6cec0dfd3c9ba6fe14a3089ad1f8836d33c1b98208f359f9d885f5c79843db48b177909011dd027aad9c3218"}, 0xd8) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86) r8 = socket(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) getsockopt$ARPT_SO_GET_INFO(r8, 0x0, 0x60, &(0x7f0000002280)={'filter\x00'}, &(0x7f0000002300)=0x44) ioctl$NBD_DO_IT(r2, 0xab03) r9 = socket(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f0000002340)=0xffffffffffffffff, 0x4) 08:55:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) r4 = accept4(r3, 0x0, &(0x7f0000000140), 0x80800) accept$unix(r4, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r5 = socket(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) r6 = socket(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) r7 = socket(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) r8 = socket(0x10, 0x2, 0x0) close(r8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000040)={r10}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f00000000c0)={r10, 0xfffffffffffffffd, 0x7, 0x2, 0xa0ce, 0x5}, 0x14) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f0000000000)=0x5, 0x4) r11 = socket(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setxattr$security_evm(0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:55:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) r2 = socket(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000280), &(0x7f00000005c0)=0x4) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001500)=@newqdisc={0xe8, 0x5e, 0x7, 0x0, 0x0, {0x0, r1}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x50000000}, @TCA_STAB={0x54, 0x8, [{{0x1c, 0x1, {0xffffffff, 0x3f, 0x7fff, 0xfff, 0x0, 0xbf0, 0xfff, 0x2}}, {0x8, 0x2, [0x1ff, 0x5]}}, {{0x1c, 0x1, {0x1000000000000000, 0x1, 0x3, 0x9001, 0x0, 0xd36, 0x2, 0x5}}, {0xb}}]}, @TCA_INGRESS_BLOCK={0x1, 0xd, 0xf03}, @TCA_RATE={0x8, 0x5, {0x672, 0x100000000}}, @qdisc_kind_options=@q_fq_codel={{0x10, 0x1, 'fq_codel\x00'}, {0x24, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x2}, @TCA_FQ_CODEL_LIMIT={0x8}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x1000}]}}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8, 0x2, 0x5}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xf0e}]}, 0xe8}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) r4 = getpid() ptrace$pokeuser(0x6, r4, 0xd919, 0x9) mkdirat$cgroup(r3, &(0x7f0000000000)='syz\xff\xda', 0x1ff) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x223, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$TUNGETFILTER(r6, 0x801054db, &(0x7f0000000640)=""/4096) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) write$FUSE_BMAP(r7, &(0x7f00000001c0)={0x18, 0x0, 0x4, {0x100000001}}, 0x18) r8 = creat(&(0x7f0000000000)='./file0\x00', 0x44) ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000000600)=""/34) write$RDMA_USER_CM_CMD_GET_EVENT(r8, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) r9 = getpgid(0xffffffffffffffff) fcntl$lock(r8, 0x6, &(0x7f0000000080)={0x0, 0x1, 0x8, 0xfffffffffffffffa, r9}) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0xc0002, 0x0) ioctl$KVM_GET_XCRS(r10, 0x8188aea6, &(0x7f00000000c0)={0x5, 0xfffffffffffffff8, [{0x49e49a11, 0x0, 0x1}, {0x8, 0x0, 0x80}, {0x9, 0x0, 0x6}, {0x2, 0x0, 0x5c}, {0x100000001, 0x0, 0x6}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x12, r10, 0x0) clone(0x80000000, 0x0, 0x0, 0x0, 0x0) flock(r5, 0x1) r11 = socket$tipc(0x1e, 0x2, 0x0) pread64(r11, &(0x7f00000004c0)=""/207, 0xcf, 0x0) 08:55:11 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) 08:55:11 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x4c) 08:55:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) io_setup(0x3ff, &(0x7f0000000000)=0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000440)="f9", 0xfffffdac) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000000080)={0x2, &(0x7f0000000040)='_5'}) io_submit(r1, 0x2, &(0x7f0000001600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 215.469988][T10653] block nbd0: Receive control failed (result -22) [ 215.477339][T10653] block nbd0: Receive control failed (result -22) [ 215.570082][T10678] block nbd0: shutting down sockets 08:55:12 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in=@local, @in=@broadcast}}, [@policy_type={0xc}]}, 0x5c}, 0x8}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 08:55:12 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x68) 08:55:12 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0xff, 0x0, "4534c139ee574273b92aad59d3d7dbf350d42aeb9421f0dc079948a996ad74753cc05eab6cec0dfd3c9ba6fe14a3089ad1f8836d33c1b98208f359f9d885f5c79843db48b177909011dd027aad9c3218"}, 0xd8) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86) r8 = socket(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) getsockopt$ARPT_SO_GET_INFO(r8, 0x0, 0x60, &(0x7f0000002280)={'filter\x00'}, &(0x7f0000002300)=0x44) ioctl$NBD_DO_IT(r2, 0xab03) r9 = socket(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f0000002340)=0xffffffffffffffff, 0x4) 08:55:12 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x6c) 08:55:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/kvm\x00', 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x4, 0x0, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000200)={0x0, 0x1, 0x6, @broadcast}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000005c0)) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f00000003c0)={0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'yam\x00\x00\x10\x00', 0x2}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3, 0x8000}, 0x4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) open_tree(r3, &(0x7f0000000100)='./file0\x00', 0xa01) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000c00)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000028c0)=0x6, 0x4) r4 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x500, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff) 08:55:12 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000180)=0x1, 0x4) recvmmsg(r0, &(0x7f00000050c0)=[{{&(0x7f0000002900)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast1}}, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002980)=""/106}, {&(0x7f0000002a00)=""/98}, {&(0x7f0000002a80)=""/50}, {&(0x7f0000002ac0)=""/195}, {&(0x7f0000002bc0)=""/44}], 0x0, &(0x7f0000002c80)=""/18}, 0xffffffffffff5198}, {{&(0x7f0000002cc0)=@nl, 0x0, &(0x7f0000002f40)=[{&(0x7f0000002d40)=""/96}, {&(0x7f00000052c0)=""/35}, {&(0x7f0000002e00)=""/33}, {&(0x7f0000002e40)=""/245}], 0x0, &(0x7f0000002f80)}, 0x63}, {{&(0x7f0000002fc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, &(0x7f00000032c0)=[{&(0x7f0000003040)=""/70}, {&(0x7f00000030c0)=""/15}, {&(0x7f0000003100)=""/254}, {&(0x7f0000003200)=""/115}, {&(0x7f0000003280)=""/53}], 0x0, &(0x7f0000003340)=""/85}, 0xfffffffffffff001}, {{&(0x7f00000033c0)=@x25={0x9, @remote}, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003440)=""/108}]}, 0xa9}, {{&(0x7f0000003500)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x0, &(0x7f0000004640)=[{&(0x7f0000003580)=""/4096}, {&(0x7f0000004580)=""/58}, {&(0x7f00000045c0)=""/70}], 0x0, &(0x7f0000004680)=""/193}, 0x2}, {{&(0x7f0000004780)=@ax25={{0x3, @null}, [@netrom, @rose, @default, @remote, @rose, @rose, @default, @netrom]}, 0x0, &(0x7f0000004940)=[{&(0x7f0000004800)=""/171}, {&(0x7f00000048c0)=""/116}]}, 0x100000000}, {{&(0x7f0000004980)=@generic, 0x0, &(0x7f0000004e40)=[{&(0x7f0000004a00)=""/37}, {&(0x7f0000004a40)=""/111}, {&(0x7f0000004ac0)=""/119}, {&(0x7f0000004b40)=""/164}, {&(0x7f0000004c00)=""/127}, {&(0x7f0000004c80)=""/212}, {&(0x7f0000004d80)=""/173}]}, 0x1000}, {{0x0, 0x0, &(0x7f0000004fc0)=[{&(0x7f0000004ec0)=""/194}], 0x0, &(0x7f0000005000)=""/162}, 0xffffffff}], 0x5, 0x40000140, &(0x7f0000002880)={0x0, 0x989680}) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000028c0)=@gcm_128={{0x3}, "f7b26aadb3c85bd5", "06b83c68b264d921ad49f53b2f75af91", "ae8f770f", "6359e9f82fa5a375"}, 0x28) [ 215.764369][T10695] block nbd0: Receive control failed (result -22) [ 215.764385][ T1518] block nbd0: Receive control failed (result -22) [ 215.796320][T10711] block nbd0: shutting down sockets 08:55:12 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0xff, 0x0, "4534c139ee574273b92aad59d3d7dbf350d42aeb9421f0dc079948a996ad74753cc05eab6cec0dfd3c9ba6fe14a3089ad1f8836d33c1b98208f359f9d885f5c79843db48b177909011dd027aad9c3218"}, 0xd8) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86) r8 = socket(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) getsockopt$ARPT_SO_GET_INFO(r8, 0x0, 0x60, &(0x7f0000002280)={'filter\x00'}, &(0x7f0000002300)=0x44) ioctl$NBD_DO_IT(r2, 0xab03) r9 = socket(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f0000002340)=0xffffffffffffffff, 0x4) [ 215.824398][ T26] audit: type=1804 audit(1567760112.352:35): pid=10696 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir259793613/syzkaller.Y1sxkH/8/file0" dev="sda1" ino=16646 res=1 08:55:12 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x74) [ 215.958465][ T26] audit: type=1804 audit(1567760112.362:36): pid=10719 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir259793613/syzkaller.Y1sxkH/8/file0" dev="sda1" ino=16646 res=1 [ 216.021960][ T1518] block nbd0: Receive control failed (result -22) [ 216.021965][T10695] block nbd0: Receive control failed (result -22) [ 216.037918][T10731] block nbd0: shutting down sockets 08:55:12 executing program 4: syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x8, 0x400) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x488b232, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x15, &(0x7f0000000300)=ANY=[@ANYBLOB="26f39aca00000f00f8184acd9d6d28eb93a00000b30000102729135ebd02223318879ee05c40d9f6c01e4c6f68b337fc1e695b0cc57349f10dad911d38e1834d6defba776f242810f55b2726563f3b1e23bdaee093c208310cb2487d9aecf80bc40b6b2dc88b0cb05609913eaea91a72f058ea0f4f466b9cb05f2ff0ad61df7f0abdfd71d4884fad489c69ee98a66b5ba70c8a195b54be1402ac995bc48f5ab612125e645c83276956"], &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f00000003c0)=""/251, 0x0, 0x0, [0x48], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000440)="f9", 0xfffffdac) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000002c0)={0x28, 0x2, 0x0, {0x6, 0x9, 0x3}}, 0x28) 08:55:12 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0xff, 0x0, "4534c139ee574273b92aad59d3d7dbf350d42aeb9421f0dc079948a996ad74753cc05eab6cec0dfd3c9ba6fe14a3089ad1f8836d33c1b98208f359f9d885f5c79843db48b177909011dd027aad9c3218"}, 0xd8) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86) r8 = socket(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) getsockopt$ARPT_SO_GET_INFO(r8, 0x0, 0x60, &(0x7f0000002280)={'filter\x00'}, &(0x7f0000002300)=0x44) ioctl$NBD_DO_IT(r2, 0xab03) r9 = socket(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) 08:55:12 executing program 5: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0xc64, 0x0, 0x7, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x22}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000000)={0x1, 0x1, [0x9, 0xcf3, 0x9, 0xc00000000000, 0x8, 0x6, 0x0, 0x8]}) [ 216.325127][ T1518] block nbd0: Receive control failed (result -22) [ 216.331713][ T1518] block nbd0: Receive control failed (result -22) [ 216.350611][T10744] block nbd0: shutting down sockets 08:55:12 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1a001000000}, [@ldst={0x5, 0x3}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x22a}, 0x48) 08:55:12 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x7a) 08:55:12 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e) connect$tipc(r1, &(0x7f00000002c0)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x4}}, 0x10) r2 = socket(0x1, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000003c0), &(0x7f0000000400)=0x4) bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) connect$pppoe(r2, &(0x7f0000000280)={0x18, 0x0, {0xffdffffffffffffa, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'ip_vti0\x00\x00\x00\xc10\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25DELUID(r4, 0x89e2, &(0x7f0000000380)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r5}) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000000)={'nat\x00', 0x0, 0x4, 0xc0, [], 0xa, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000180)=""/192}, &(0x7f0000000240)=0x78) 08:55:12 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0xff, 0x0, "4534c139ee574273b92aad59d3d7dbf350d42aeb9421f0dc079948a996ad74753cc05eab6cec0dfd3c9ba6fe14a3089ad1f8836d33c1b98208f359f9d885f5c79843db48b177909011dd027aad9c3218"}, 0xd8) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86) r8 = socket(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) getsockopt$ARPT_SO_GET_INFO(r8, 0x0, 0x60, &(0x7f0000002280)={'filter\x00'}, &(0x7f0000002300)=0x44) ioctl$NBD_DO_IT(r2, 0xab03) r9 = socket(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) 08:55:12 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000002380)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev}, @icmp=@parameter_prob={0x4, 0x4, 0x0, 0x0, 0x0, 0x2, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, 0x0) 08:55:13 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0xc0) 08:55:13 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) [ 216.502227][ T1518] block nbd0: Receive control failed (result -22) [ 216.510023][ T1518] block nbd0: Receive control failed (result -22) [ 216.525261][T10752] block nbd0: shutting down sockets 08:55:13 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) 08:55:13 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0xff, 0x0, "4534c139ee574273b92aad59d3d7dbf350d42aeb9421f0dc079948a996ad74753cc05eab6cec0dfd3c9ba6fe14a3089ad1f8836d33c1b98208f359f9d885f5c79843db48b177909011dd027aad9c3218"}, 0xd8) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86) r8 = socket(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) getsockopt$ARPT_SO_GET_INFO(r8, 0x0, 0x60, &(0x7f0000002280)={'filter\x00'}, &(0x7f0000002300)=0x44) ioctl$NBD_DO_IT(r2, 0xab03) socket(0x1, 0x1, 0x0) [ 216.688837][ T1518] block nbd0: Receive control failed (result -22) [ 216.698119][ T1518] block nbd0: Receive control failed (result -22) [ 216.705492][T10773] block nbd0: shutting down sockets 08:55:13 executing program 4: 08:55:13 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0xe0) 08:55:13 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4}, 0x0) 08:55:13 executing program 2: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) open$dir(&(0x7f00000000c0)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) r2 = getpgid(0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) 08:55:13 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e24, @multicast2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000500), 0xffd2}], 0x1}}], 0x469, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0xa00) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 08:55:13 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0xff, 0x0, "4534c139ee574273b92aad59d3d7dbf350d42aeb9421f0dc079948a996ad74753cc05eab6cec0dfd3c9ba6fe14a3089ad1f8836d33c1b98208f359f9d885f5c79843db48b177909011dd027aad9c3218"}, 0xd8) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86) r8 = socket(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) getsockopt$ARPT_SO_GET_INFO(r8, 0x0, 0x60, &(0x7f0000002280)={'filter\x00'}, &(0x7f0000002300)=0x44) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:13 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x300) 08:55:13 executing program 4: perf_event_open(&(0x7f00000008c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 217.167673][ T1518] block nbd0: Receive control failed (result -22) [ 217.174496][ T1518] block nbd0: Receive control failed (result -22) [ 217.191064][T10792] block nbd0: shutting down sockets 08:55:13 executing program 1: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f00000001c0)="bad004ecb828018ee00f20c06635100000000f22c066b9800000c00f326635010000000f3026262e2e0f381d9cac000f797e3826660f3a0d882ba7fc660f2206f0fe8d0800f20f01f9", 0x49}], 0x1, 0x0, 0x0, 0xfffffffffffffdc5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x600000000000000) 08:55:13 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0xff, 0x0, "4534c139ee574273b92aad59d3d7dbf350d42aeb9421f0dc079948a996ad74753cc05eab6cec0dfd3c9ba6fe14a3089ad1f8836d33c1b98208f359f9d885f5c79843db48b177909011dd027aad9c3218"}, 0xd8) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86) r8 = socket(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:13 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x500) 08:55:13 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000080)) 08:55:13 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) dup2(r0, r1) 08:55:13 executing program 5: getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="674466980000000000000000000000006517a42ac4cb7a63d1a97a7e5a31524e892eac4023b714a3202f99f16d06589e03469637a7267592938766000035efd2000000009efdc31a381587a5960ac2022d45136803a9e841e84f03d05ebc7e87c10dfc8b2cf1fd84d6cd3e51a59d141efcce5fb6c010a28122ef7fb64c495acf9fc716592e0d3651c0d2b3820209af730cb3b2571be3d98be7f29c1129e03f80c27a83d91ffa3f2ad47dfcab"], 0x6e) sendfile(r1, r1, &(0x7f0000000200), 0xa198) 08:55:14 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x600) 08:55:14 executing program 2: [ 217.490792][ T1518] block nbd0: Receive control failed (result -22) [ 217.490812][T10695] block nbd0: Receive control failed (result -22) [ 217.515529][T10824] block nbd0: shutting down sockets 08:55:14 executing program 2: 08:55:14 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0xff, 0x0, "4534c139ee574273b92aad59d3d7dbf350d42aeb9421f0dc079948a996ad74753cc05eab6cec0dfd3c9ba6fe14a3089ad1f8836d33c1b98208f359f9d885f5c79843db48b177909011dd027aad9c3218"}, 0xd8) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86) socket(0x1, 0x1, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:14 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x700) 08:55:14 executing program 4: 08:55:14 executing program 1: 08:55:14 executing program 2: [ 217.760118][T10695] block nbd0: Receive control failed (result -22) [ 217.760123][ T1518] block nbd0: Receive control failed (result -22) [ 217.776209][T10847] block nbd0: shutting down sockets 08:55:14 executing program 4: 08:55:14 executing program 1: 08:55:14 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0xff, 0x0, "4534c139ee574273b92aad59d3d7dbf350d42aeb9421f0dc079948a996ad74753cc05eab6cec0dfd3c9ba6fe14a3089ad1f8836d33c1b98208f359f9d885f5c79843db48b177909011dd027aad9c3218"}, 0xd8) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:14 executing program 5: 08:55:14 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x2000) 08:55:14 executing program 5: 08:55:14 executing program 1: 08:55:14 executing program 2: 08:55:14 executing program 4: [ 217.969530][T10695] block nbd0: Receive control failed (result -22) [ 217.969561][ T1518] block nbd0: Receive control failed (result -22) [ 217.989838][T10863] block nbd0: shutting down sockets 08:55:14 executing program 5: 08:55:14 executing program 2: 08:55:14 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x2700) 08:55:14 executing program 1: 08:55:14 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0xff, 0x0, "4534c139ee574273b92aad59d3d7dbf350d42aeb9421f0dc079948a996ad74753cc05eab6cec0dfd3c9ba6fe14a3089ad1f8836d33c1b98208f359f9d885f5c79843db48b177909011dd027aad9c3218"}, 0xd8) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:14 executing program 4: 08:55:14 executing program 1: 08:55:14 executing program 5: 08:55:14 executing program 2: 08:55:14 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x2f00) [ 218.243637][ T1518] block nbd0: Receive control failed (result -22) [ 218.252729][ T1518] block nbd0: Receive control failed (result -22) [ 218.259857][T10886] block nbd0: shutting down sockets 08:55:14 executing program 4: 08:55:14 executing program 5: 08:55:14 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0xff, 0x0, "4534c139ee574273b92aad59d3d7dbf350d42aeb9421f0dc079948a996ad74753cc05eab6cec0dfd3c9ba6fe14a3089ad1f8836d33c1b98208f359f9d885f5c79843db48b177909011dd027aad9c3218"}, 0xd8) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:14 executing program 2: 08:55:14 executing program 1: 08:55:15 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x3f00) 08:55:15 executing program 4: 08:55:15 executing program 2: [ 218.499852][ T1518] block nbd0: Receive control failed (result -22) [ 218.499857][T10695] block nbd0: Receive control failed (result -22) [ 218.514155][T10904] block nbd0: shutting down sockets 08:55:15 executing program 5: 08:55:15 executing program 4: 08:55:15 executing program 1: 08:55:15 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0xff, 0x0, "4534c139ee574273b92aad59d3d7dbf350d42aeb9421f0dc079948a996ad74753cc05eab6cec0dfd3c9ba6fe14a3089ad1f8836d33c1b98208f359f9d885f5c79843db48b177909011dd027aad9c3218"}, 0xd8) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:15 executing program 2: 08:55:15 executing program 5: 08:55:15 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x4000) 08:55:15 executing program 4: 08:55:15 executing program 1: [ 218.797331][ T1518] block nbd0: Receive control failed (result -22) [ 218.808406][T10922] block nbd0: shutting down sockets 08:55:15 executing program 2: 08:55:15 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x416d) 08:55:15 executing program 5: 08:55:15 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0xff, 0x0, "4534c139ee574273b92aad59d3d7dbf350d42aeb9421f0dc079948a996ad74753cc05eab6cec0dfd3c9ba6fe14a3089ad1f8836d33c1b98208f359f9d885f5c79843db48b177909011dd027aad9c3218"}, 0xd8) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:15 executing program 2: 08:55:15 executing program 1: 08:55:15 executing program 4: 08:55:15 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x4800) 08:55:15 executing program 5: 08:55:15 executing program 2: 08:55:15 executing program 4: [ 219.069605][ T1518] block nbd0: Receive control failed (result -22) 08:55:15 executing program 1: [ 219.135081][T10948] block nbd0: shutting down sockets 08:55:15 executing program 5: 08:55:15 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0xff, 0x0, "4534c139ee574273b92aad59d3d7dbf350d42aeb9421f0dc079948a996ad74753cc05eab6cec0dfd3c9ba6fe14a3089ad1f8836d33c1b98208f359f9d885f5c79843db48b177909011dd027aad9c3218"}, 0xd8) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:15 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x4c00) 08:55:15 executing program 4: 08:55:15 executing program 2: 08:55:15 executing program 1: [ 219.321080][ T1518] block nbd0: Receive control failed (result -22) 08:55:15 executing program 5: 08:55:15 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x6800) [ 219.372209][T10965] block nbd0: shutting down sockets 08:55:15 executing program 4: 08:55:16 executing program 2: 08:55:16 executing program 1: r0 = socket(0x400000000000010, 0x802, 0x0) write(r0, &(0x7f00000002c0)="240000001a0099f0003b40000000190e020808160000400000ba00800800", 0x1e) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x90c04000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x400c801) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x4008080) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x38c4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x1cb13) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000600)={0x2, 0x70, 0x7, 0xfffffffffffeffff, 0x0, 0x800, 0x0, 0x3, 0x101, 0x1, 0x2a, 0xffff, 0x7, 0xfff, 0x0, 0x3, 0x8, 0x0, 0x0, 0x4, 0x10001, 0xa0de, 0x19, 0x800, 0xd021, 0x8, 0xfc1f, 0xc53, 0x7, 0x2, 0x2, 0x4, 0x571fe964, 0x8c43, 0x200, 0x291, 0x2a, 0x40, 0x0, 0x3ff, 0x5, @perf_config_ext={0x2, 0xcc}, 0x8810, 0x2, 0x7, 0x9, 0x7fff, 0x7, 0x8}) writev(0xffffffffffffffff, &(0x7f0000000140), 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)=0x0) ioprio_set$pid(0x3, r3, 0x0) 08:55:16 executing program 5: 08:55:16 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0xff, 0x0, "4534c139ee574273b92aad59d3d7dbf350d42aeb9421f0dc079948a996ad74753cc05eab6cec0dfd3c9ba6fe14a3089ad1f8836d33c1b98208f359f9d885f5c79843db48b177909011dd027aad9c3218"}, 0xd8) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:16 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x6c00) 08:55:16 executing program 2: 08:55:16 executing program 4: [ 219.576659][ T1518] block nbd0: Receive control failed (result -22) 08:55:16 executing program 5: [ 219.638597][T10989] block nbd0: shutting down sockets 08:55:16 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0xff, 0x0, "4534c139ee574273b92aad59d3d7dbf350d42aeb9421f0dc079948a996ad74753cc05eab6cec0dfd3c9ba6fe14a3089ad1f8836d33c1b98208f359f9d885f5c79843db48b177909011dd027aad9c3218"}, 0xd8) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:16 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x6d41) 08:55:16 executing program 2: 08:55:16 executing program 1: 08:55:16 executing program 5: 08:55:16 executing program 2: 08:55:16 executing program 4: [ 219.840006][ T1518] block nbd0: Receive control failed (result -22) [ 219.867478][T11007] block nbd0: shutting down sockets 08:55:16 executing program 1: 08:55:16 executing program 5: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x3102000ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) accept$unix(r0, 0x0, 0x0) 08:55:16 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0xff, 0x0, "4534c139ee574273b92aad59d3d7dbf350d42aeb9421f0dc079948a996ad74753cc05eab6cec0dfd3c9ba6fe14a3089ad1f8836d33c1b98208f359f9d885f5c79843db48b177909011dd027aad9c3218"}, 0xd8) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:16 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x7400) 08:55:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) geteuid() openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x4000, 0x0) quotactl(0x2, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:55:16 executing program 1: socket$packet(0x11, 0x0, 0x300) socket$inet(0x2, 0x0, 0x0) pipe(0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x303, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x800002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 08:55:16 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x0) [ 220.128415][ T1518] block nbd0: Receive control failed (result -22) [ 220.160729][T11031] block nbd0: shutting down sockets 08:55:16 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x7a00) 08:55:16 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:16 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0xc000) 08:55:16 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x0) [ 220.476330][ T1518] block nbd0: Receive control failed (result -22) [ 220.483049][T10695] block nbd0: Receive control failed (result -22) [ 220.496329][T11054] block nbd0: shutting down sockets 08:55:17 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x0) 08:55:17 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0xe0ff) [ 220.550649][T11043] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 220.563281][T11043] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 08:55:17 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0xff, 0x0, "4534c139ee574273b92aad59d3d7dbf350d42aeb9421f0dc079948a996ad74753cc05eab6cec0dfd3c9ba6fe14a3089ad1f8836d33c1b98208f359f9d885f5c79843db48b177909011dd027aad9c3218"}, 0xd8) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:17 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:17 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) [ 220.615276][T11043] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 08:55:17 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0xffe0) [ 220.700068][T11043] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 220.713549][T11082] block nbd0: server does not support multiple connections per device. [ 220.755471][T11081] block nbd0: shutting down sockets [ 220.856761][ T1518] block nbd2: Receive control failed (result -22) [ 220.863405][T10695] block nbd2: Receive control failed (result -22) 08:55:17 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0xff, 0x0, "4534c139ee574273b92aad59d3d7dbf350d42aeb9421f0dc079948a996ad74753cc05eab6cec0dfd3c9ba6fe14a3089ad1f8836d33c1b98208f359f9d885f5c79843db48b177909011dd027aad9c3218"}, 0xd8) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86) r8 = socket(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) getsockopt$ARPT_SO_GET_INFO(r8, 0x0, 0x60, &(0x7f0000002280)={'filter\x00'}, &(0x7f0000002300)=0x44) ioctl$NBD_DO_IT(r2, 0xab03) r9 = socket(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) 08:55:17 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x1000000) 08:55:17 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x0) 08:55:17 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) [ 220.901167][ T1518] block nbd5: Receive control failed (result -22) [ 220.927666][T11095] block nbd5: shutting down sockets [ 220.941613][T11080] block nbd2: shutting down sockets 08:55:17 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:17 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x3, @loopback, 0xf1}, 0xfeeb) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) 08:55:17 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x2000000) 08:55:17 executing program 4: pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x0) [ 221.103279][T11111] block nbd0: server does not support multiple connections per device. [ 221.154520][T11108] block nbd0: shutting down sockets [ 221.157747][ T1518] block nbd2: Receive control failed (result -22) [ 221.171022][ T1518] block nbd2: Receive control failed (result -22) [ 221.180402][T11106] block nbd2: shutting down sockets 08:55:17 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x3000000) 08:55:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000e00)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) write$P9_RLCREATE(r1, &(0x7f0000000040)={0x18, 0xf, 0x1, {{0x8, 0x0, 0x1}, 0x2}}, 0x18) pipe2(&(0x7f0000000000), 0x4000) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, 0x1, 0x7, 0x20000001}, 0x14}}, 0x0) 08:55:17 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:17 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) [ 221.286557][ T1518] block nbd1: Receive control failed (result -22) [ 221.293271][ T1518] block nbd1: Receive control failed (result -22) [ 221.315505][T10695] block nbd2: Receive control failed (result -22) [ 221.323972][T10695] block nbd2: Receive control failed (result -22) [ 221.333393][T11128] block nbd2: shutting down sockets [ 221.381432][T11135] block nbd0: server does not support multiple connections per device. [ 221.414353][T11105] block nbd1: shutting down sockets 08:55:18 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0xff, 0x0, "4534c139ee574273b92aad59d3d7dbf350d42aeb9421f0dc079948a996ad74753cc05eab6cec0dfd3c9ba6fe14a3089ad1f8836d33c1b98208f359f9d885f5c79843db48b177909011dd027aad9c3218"}, 0xd8) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86) r8 = socket(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) getsockopt$ARPT_SO_GET_INFO(r8, 0x0, 0x60, &(0x7f0000002280)={'filter\x00'}, &(0x7f0000002300)=0x44) ioctl$NBD_DO_IT(r2, 0xab03) r9 = socket(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) 08:55:18 executing program 4: pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x0) 08:55:18 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x4000000) 08:55:18 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r4, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) [ 221.450595][T11134] block nbd0: shutting down sockets 08:55:18 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:18 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x5000000) 08:55:18 executing program 4: pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x0) [ 221.576373][T10695] block nbd2: Receive control failed (result -22) [ 221.584988][T10695] block nbd1: Receive control failed (result -22) [ 221.598164][ T1518] block nbd0: Receive control failed (result -22) [ 221.598196][T10695] block nbd0: Receive control failed (result -22) [ 221.609478][T11139] block nbd2: shutting down sockets [ 221.612728][T10695] block nbd1: Receive control failed (result -22) 08:55:18 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x6000000) [ 221.636322][T11146] block nbd1: shutting down sockets [ 221.655165][T11151] block nbd0: shutting down sockets 08:55:18 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0xff, 0x0, "4534c139ee574273b92aad59d3d7dbf350d42aeb9421f0dc079948a996ad74753cc05eab6cec0dfd3c9ba6fe14a3089ad1f8836d33c1b98208f359f9d885f5c79843db48b177909011dd027aad9c3218"}, 0xd8) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86) r8 = socket(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) getsockopt$ARPT_SO_GET_INFO(r8, 0x0, 0x60, &(0x7f0000002280)={'filter\x00'}, &(0x7f0000002300)=0x44) ioctl$NBD_DO_IT(r2, 0xab03) r9 = socket(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) [ 221.765154][T10695] block nbd1: Receive control failed (result -22) [ 221.779713][T10695] block nbd1: Receive control failed (result -22) [ 221.802984][T11161] block nbd1: shutting down sockets 08:55:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/57, 0x39) write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x4000201f, 0x3f000002}) r2 = socket(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) close(r1) syz_open_dev$video4linux(0x0, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000100)) fsetxattr(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="757365720600797a23dc1819af2a33eaeacbfdeb46c500003df5b6dc2bab3e735c4acf234c9c70d011347cca24cfb6a5c7d679fb59de0f2ba27c33da7148b07ad2340381ee89ede87965c6000000000000000700000000d4753a00ff1da583f63bd8a343148f668e38c9105032978ac9e8017b18ae3e2aa4e7d6fc0fea46750df0a63689e7385078f7f3f8becf39963bcc483961042029535451d91dc10df26b3d530944e3dc5e9c2cf1bb0a841b7823e1cf3c24e51aa07468d4d788f7f0761200913dc1f494fad2f7ef517638004668e330ff44c33339f1add25e71ddda8735fd067fa1668329562235491a221b3eae31bc5eb5e00b5c9580f89a4a90575852dfa5966cd7034c9d0cd1ff708d15bfe848b12a37649d011a5de46bda6b6c282e"], 0x0, 0x0, 0x0) 08:55:18 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r4, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:18 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0xff, 0x0, "4534c139ee574273b92aad59d3d7dbf350d42aeb9421f0dc079948a996ad74753cc05eab6cec0dfd3c9ba6fe14a3089ad1f8836d33c1b98208f359f9d885f5c79843db48b177909011dd027aad9c3218"}, 0xd8) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86) r8 = socket(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) getsockopt$ARPT_SO_GET_INFO(r8, 0x0, 0x60, &(0x7f0000002280)={'filter\x00'}, &(0x7f0000002300)=0x44) ioctl$NBD_DO_IT(r2, 0xab03) r9 = socket(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) 08:55:18 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x7000000) 08:55:18 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x0) 08:55:18 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) [ 222.146341][T10695] block nbd2: Receive control failed (result -22) [ 222.177668][T10695] block nbd0: Receive control failed (result -22) [ 222.185203][ T1518] block nbd1: Receive control failed (result -22) 08:55:18 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x20000000) [ 222.185232][T10695] block nbd1: Receive control failed (result -22) [ 222.200692][T10695] block nbd0: Receive control failed (result -22) [ 222.208708][T11171] block nbd0: shutting down sockets [ 222.223462][T11173] block nbd2: shutting down sockets [ 222.229364][T11170] block nbd1: shutting down sockets 08:55:18 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x0) 08:55:18 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0xff, 0x0, "4534c139ee574273b92aad59d3d7dbf350d42aeb9421f0dc079948a996ad74753cc05eab6cec0dfd3c9ba6fe14a3089ad1f8836d33c1b98208f359f9d885f5c79843db48b177909011dd027aad9c3218"}, 0xd8) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86) r8 = socket(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) getsockopt$ARPT_SO_GET_INFO(r8, 0x0, 0x60, &(0x7f0000002280)={'filter\x00'}, &(0x7f0000002300)=0x44) ioctl$NBD_DO_IT(r2, 0xab03) socket(0x1, 0x1, 0x0) 08:55:18 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:18 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r4, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:18 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x27000000) 08:55:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/57, 0x39) write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x4000201f, 0x3f000002}) r2 = socket(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) close(r1) syz_open_dev$video4linux(0x0, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000100)) fsetxattr(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="757365720600797a23dc1819af2a33eaeacbfdeb46c500003df5b6dc2bab3e735c4acf234c9c70d011347cca24cfb6a5c7d679fb59de0f2ba27c33da7148b07ad2340381ee89ede87965c6000000000000000700000000d4753a00ff1da583f63bd8a343148f668e38c9105032978ac9e8017b18ae3e2aa4e7d6fc0fea46750df0a63689e7385078f7f3f8becf39963bcc483961042029535451d91dc10df26b3d530944e3dc5e9c2cf1bb0a841b7823e1cf3c24e51aa07468d4d788f7f0761200913dc1f494fad2f7ef517638004668e330ff44c33339f1add25e71ddda8735fd067fa1668329562235491a221b3eae31bc5eb5e00b5c9580f89a4a90575852dfa5966cd7034c9d0cd1ff708d15bfe848b12a37649d011a5de46bda6b6c282e"], 0x0, 0x0, 0x0) 08:55:18 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x0) 08:55:18 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x2f000000) [ 222.426655][T10695] block nbd2: Receive control failed (result -22) [ 222.436782][T10695] block nbd0: Receive control failed (result -22) [ 222.445526][T11193] block nbd0: shutting down sockets [ 222.467269][T11200] block nbd2: shutting down sockets 08:55:19 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) [ 222.501397][T10695] block nbd1: Receive control failed (result -22) [ 222.511323][T10695] block nbd1: Receive control failed (result -22) [ 222.520822][T11195] block nbd1: shutting down sockets 08:55:19 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:19 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x0) 08:55:19 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x3f000000) 08:55:19 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0xff, 0x0, "4534c139ee574273b92aad59d3d7dbf350d42aeb9421f0dc079948a996ad74753cc05eab6cec0dfd3c9ba6fe14a3089ad1f8836d33c1b98208f359f9d885f5c79843db48b177909011dd027aad9c3218"}, 0xd8) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86) r8 = socket(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) getsockopt$ARPT_SO_GET_INFO(r8, 0x0, 0x60, &(0x7f0000002280)={'filter\x00'}, &(0x7f0000002300)=0x44) ioctl$NBD_DO_IT(r2, 0xab03) [ 222.621011][T10695] block nbd0: Receive control failed (result -22) [ 222.651368][T11213] block nbd0: shutting down sockets [ 222.716485][T10695] block nbd1: Receive control failed (result -22) [ 222.723360][ T1518] block nbd1: Receive control failed (result -22) 08:55:19 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:19 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x40000000) 08:55:19 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x0) [ 222.756936][T10695] block nbd2: Receive control failed (result -22) [ 222.791184][T11221] block nbd1: shutting down sockets [ 222.819185][T10695] block nbd0: Receive control failed (result -22) [ 222.832527][T11226] block nbd2: shutting down sockets 08:55:19 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) [ 222.868362][T11229] block nbd0: shutting down sockets 08:55:19 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x48000000) 08:55:19 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0xff, 0x0, "4534c139ee574273b92aad59d3d7dbf350d42aeb9421f0dc079948a996ad74753cc05eab6cec0dfd3c9ba6fe14a3089ad1f8836d33c1b98208f359f9d885f5c79843db48b177909011dd027aad9c3218"}, 0xd8) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86) r8 = socket(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:19 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x0) 08:55:19 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0xa2a5, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5000000010000307ebff00080000000040240000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) r1 = socket(0x1, 0x1, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001d00)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4}}, &(0x7f0000001e00)=0xe8) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000300)='./file0/file0\x00', 0xf1, 0xa, &(0x7f0000001c00)=[{&(0x7f0000000880)="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", 0x1000, 0x1}, {&(0x7f0000000340)="45bd49b5c433e79831754e9f85e084c758df41f6435b54182b8d8413b384378b3f0517cace383cdf3624bee9fd60fdabbc18755c3da251d5117fb6ef5b059ae4b2f36798500d4b961b5c588f4d6c0a9a7c0bb4ab9a697787b55c462b698a3600a4b39b1305ea90dca3495896098faf76d21c1f835697dac9a982a0c3dc8bd7945eb96a202254b7a91f3e8f4ac37c3b3b73da5a3ae04a8f24a4be5f7b07b8880873add665fe433d1d38b694", 0xab, 0x8}, {&(0x7f0000000400), 0x0, 0x3}, {&(0x7f0000000440)="195b7b2eea18a2237446e094b00fd005bfbdf503945058c4a3f6dbbbefff2462af6fe3482982d7ba066cfd7b8cb5e09297806602c531fa56543a9c4b6fd22024eb87ed2c23282e1e34254773fdd2636d71a9d464c08eff493365aa0d153cb74d64b78cf53e99febd2a4f7468feb793645e2b9483c56318820ef47a50bfc592c5af3a2fb2b49414596b1e3c702ca6f324eb411dbb96dc214c09252e", 0x9b, 0xfffffffffffffbff}, {&(0x7f0000000500)="47a577ec8386dada6560026ea4cdba2329a432b8d7e9b0cf2e3cf226b5f7949e65ed35c1294575341b330492a717841b587d72496dd071e166f49154e4443c80749479cf915b97efc0585936adfba11a8b2c19fd6d5a61637b41ee9570616a1bbeb2cc8907c815f6d3cee7223dd2b5b7168638b36da4", 0x76, 0x4}, {&(0x7f0000001880)="210bcdbcda45624f4ea5740b66299000b2f38088975ec4d4405839cab779efeef0178b", 0x23, 0x5}, {&(0x7f00000018c0)="6f775c4169fc1f2ed5d1bd57c449baf643ebc4581601c28d4e7cfdf61c1ec73d1c6086d4ec15a4edcbfde9336fce859114af673f439e2e7cbc524c05a7ba2bfe0c776cc824c6fbf6f380681dbd9a2f60c19ba9226d0992e5fd4122df96bfea625772d65ab90707c5b93e9f85b9e3c6e12ef391ee86825852f1ae68a94982a622edae6561b00fb357924a2105aa1d66e8c7092cb2bb81031c1eff0b70dae1beddbd788150eae432b0461bf09f2e7a2cc40e7675b5a0611685d71b2fe0b4117345f1401f8b472c79f0199291cfeb0c5e60f0c07c", 0xd3, 0x4}, {&(0x7f00000019c0)="7540a3d390f93a77ded8713ee69d460830b59f9d30983599af25880b086b7b88fb45342ad3849657036d0db262e7d5593407eff86253173912769de42b0a4777f5329ea4dd6b0613f18415", 0x4b, 0x1}, {&(0x7f0000001a40)="dab73d41c33644d05dcd70a2b7ef9f6d4a1247f442ffbfaaa0f4aeb6a8a14044069bd12c9c574f11f31f1e229e9c43040d2c3325091bcc426d5373fc8b554440cdff9e0ec03b1245fd465fb7fccad52d4bc499c158ef1a1a061db50a31779ec4d365e77f74149be0c267eca6a38d24e78d938eba2e18f3d93d9af8404c149508519883a2e2e9d2cf18a9f8ec92dc23b455072a6f79e45a6e1c39ae7c4ee8b79ec142742d3246403ec1185606c752f93182937c23c40ff89f6a35b70abebead7344715f2f0832bcb57a6712db82ff46fa341f598ef2e6d284ac23f6a8a2f9b38f8b37ffd84698de6e1c7ea68825bd0fb70d5927e52035b36f", 0xf8, 0x1}, {&(0x7f0000001b40)="4228ab2aa0f6e4a73717d213b9eca3f03b9e4ec2a46a5336f7c3de5607017cc4e0c584dcfe6d31edafc12ceeb96861a6cc1776122e6e05536f40c9f0db7a63e6fefb5118f87d1f1c8ecfbccf71f2a8740c7eea6025e3ac51b633c84348eb6b995abf607400019b8d4897c26f020fd831c9c3dfdd534898db97d6b6e854c4602753484f2f38dd9c2186be3adb1a1fe2d47f6ba90a5afd9cf1da94d2e798724bbf", 0xa0, 0x200000000000}], 0x1000, &(0x7f0000001e40)={[{@utf8='utf8=1'}, {@shortname_winnt='shortname=winnt'}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@rodir='rodir'}, {@shortname_lower='shortname=lower'}], [{@euid_lt={'euid<', r3}}, {@smackfsdef={'smackfsdef', 0x3d, 'mime_type'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@euid_lt={'euid<', r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'self-wlan1vboxnet0'}}]}) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) syz_mount_image$jfs(&(0x7f0000000400)='jfs\x00', &(0x7f0000001f00)='./file0/file0\x00', 0x4, 0x6, &(0x7f0000002200)=[{&(0x7f0000001f40)="9688fe8b1439bc233ffafb82db0dd92f4beebb01ce52", 0x16}, {&(0x7f0000001f80)="e4cd9de4e037176270f90f3798c25ee7768842a236bc81ae2fd9f793abd1a480e45f697a3eeac1429575ebd32cd32f077dd6f754a47c4efa89f87042ea0f07133b4f11da54e06460412ef3746aa4a0a3b37c97dbcada31e7af5cc712d579", 0x5e, 0x3}, {&(0x7f0000002000)="347543a9e6ebb6251b3ff5153873474c2c914189a917b56b0cab310b003f1d00bd82e94a525720824db010d5810f7057817a0d37b797179a12d3cb480c9aa6d47ddf9d99020482ed197e57757a3acc1e9d0cc72863f1368f019e40c1fe1eefac3cd4a32fc6d7e50beb586180278cc53254c32fff16eb2aa4a6ecbb0f5ed46fc3fa354cf32025ac9db6dba7b8e690d1f034a600e44c83a478f3b61a32c773ee808d0831102f9c0d1d05b49f0691d24edfcbc5f0408c8c74881ae8670659513a748c1918a077aff65bf090bd4a738b632b79c87c48a328", 0xd6, 0x3ff}, {&(0x7f0000002100)="34bbcaa4a688fb33ebdc42e9d851b37d47b91b09a86ac8b0a1c0678c2134c9958255901124e83795fa71d2c62a21eb2934edc3a558efdf02fda195bf9a1b9979dfb81dabaa086d2a8e9468388b0fa774", 0x50, 0x1}, {&(0x7f0000002180), 0x0, 0x9}, {&(0x7f00000021c0)="93a96eb4dc14cdc9a926b5bf9f8bb3d2c48f7d32ff89a21ad208e782939677", 0x1f, 0xfffffffffffffff7}], 0x80, &(0x7f00000022c0)={[{@usrquota='usrquota'}, {@quota='quota'}], [{@fowner_eq={'fowner', 0x3d, r6}}, {@uid_gt={'uid>', r3}}, {@subj_role={'subj_role', 0x3d, 'POLICY_CHECK'}}]}) r7 = socket(0x1, 0x1, 0x0) syz_mount_image$btrfs(&(0x7f0000002180)='btrfs\x00', &(0x7f0000002340)='./file0/file0\x00', 0xfff, 0x1, &(0x7f0000002480)=[{&(0x7f0000002380)="67e48f31aa3a272cf0e5f11548643992f90f2c9fc4390f7bbe6a8eecb3dff29b52f2c259ef63860cb6433ab1a03f4ea28fe0fa2d3d7b93a6e342da1a94354f19210816c0fa8bcf0da23928333bb393df791036b48cebdd3fad17403fa25ab7fac374bd5b43d22b437f21027a7dbc5eb14dda884be34b649bca1c67ee3e62be934504f8c75417f8b983e1cfb1b034a2a3524bf013cc7e6c88061392c9c81749147f5975cae76f963c03df1b153d5d228ba50bfcd75115611361dac7305ab713830eb346adbf62c8b65c743c2c61f66a00", 0xd0, 0x8}], 0x10, &(0x7f00000024c0)={[{@check_int_print_mask={'check_int_print_mask', 0x3d, 0x8000}}, {@device={'device', 0x3d, './file0/file0'}}, {@space_cache_v2='space_cache=v2'}, {@autodefrag='autodefrag'}, {@notreelog='notreelog'}], [{@dont_appraise='dont_appraise'}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) bind$unix(r7, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) sendmsg$nl_crypto(r7, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9040}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=@get={0x100, 0x13, 0x200, 0x70bd25, 0x25dfdbfe, {{'drbg_pr_ctr_aes128\x00'}, [], [], 0x6800, 0x4000}, [{0x8, 0x1, 0x1ff}, {0x8, 0x1, 0x80000000}, {0x8, 0x1, 0x5f40}, {0x8, 0x1, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x800}, 0x20000001) bind$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x1, 0x40) 08:55:19 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x0) 08:55:19 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) [ 223.028181][T10695] block nbd2: Receive control failed (result -22) [ 223.053563][T11243] block nbd2: shutting down sockets [ 223.060023][T10695] block nbd1: Receive control failed (result -22) [ 223.066564][ T1518] block nbd1: Receive control failed (result -22) 08:55:19 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x4c000000) 08:55:19 executing program 5: r0 = socket$inet(0x2, 0x200000000003, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6=@rand_addr="0000000000010100"}, 0x0, @in6=@loopback}}, 0xe8) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c20000000180c206000008004500001c000000007bbce2304e575d18ffffffff12209078ac1e0001"], 0x0) [ 223.100615][T11246] block nbd1: shutting down sockets 08:55:19 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:19 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0xff, 0x0, "4534c139ee574273b92aad59d3d7dbf350d42aeb9421f0dc079948a996ad74753cc05eab6cec0dfd3c9ba6fe14a3089ad1f8836d33c1b98208f359f9d885f5c79843db48b177909011dd027aad9c3218"}, 0xd8) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86) socket(0x1, 0x1, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:19 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x68000000) 08:55:19 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x0) 08:55:19 executing program 5: r0 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000140)=0x80) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000180)={0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x400, 0x6, 0x100000000, 0x5, 0x1}, &(0x7f0000000240)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000280)={r1}, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x814, 0xa99d936729e74f8e) syz_open_dev$admmidi(&(0x7f0000000300)='/dev/admmidi#\x00', 0x3, 0x249c1) syz_read_part_table(0x0, 0xaaaaaaaaaaaac04, &(0x7f0000000080)=[{&(0x7f0000000000)="02000500000a00000000ff07000000000000000000000000000000000000000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="240000002d0007131dfffd946fa2830020200a0003400000000000e50c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf055d90f15a36a15aa543cb844bb8b14bb772509", 0x4c}], 0x1}, 0x0) [ 223.245227][T10695] block nbd0: Receive control failed (result -22) [ 223.252519][ T1518] block nbd0: Receive control failed (result -22) [ 223.304190][T10695] block nbd2: Receive control failed (result -22) [ 223.331606][T11268] block nbd2: shutting down sockets [ 223.337582][T11258] block nbd0: shutting down sockets 08:55:19 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x6c000000) 08:55:19 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:19 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x0) 08:55:19 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) [ 223.375256][T10695] block nbd1: Receive control failed (result -22) [ 223.390592][T10695] block nbd1: Receive control failed (result -22) [ 223.398774][T11277] block nbd1: shutting down sockets 08:55:20 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0xff, 0x0, "4534c139ee574273b92aad59d3d7dbf350d42aeb9421f0dc079948a996ad74753cc05eab6cec0dfd3c9ba6fe14a3089ad1f8836d33c1b98208f359f9d885f5c79843db48b177909011dd027aad9c3218"}, 0xd8) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:20 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x6d410000) [ 223.582739][T11294] block nbd2: server does not support multiple connections per device. 08:55:20 executing program 4: syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x0) 08:55:20 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x74000000) [ 223.637217][T11290] block nbd2: shutting down sockets [ 223.645695][T10695] block nbd0: Receive control failed (result -22) [ 223.657577][T11288] block nbd0: shutting down sockets [ 223.662862][T10695] block nbd1: Receive control failed (result -22) [ 223.669322][T10695] block nbd1: Receive control failed (result -22) [ 223.676847][T11298] block nbd1: shutting down sockets 08:55:20 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0xff, 0x0, "4534c139ee574273b92aad59d3d7dbf350d42aeb9421f0dc079948a996ad74753cc05eab6cec0dfd3c9ba6fe14a3089ad1f8836d33c1b98208f359f9d885f5c79843db48b177909011dd027aad9c3218"}, 0xd8) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:20 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:20 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) [ 223.893690][T10695] block nbd0: Receive control failed (result -22) [ 223.904817][T11309] block nbd0: shutting down sockets [ 223.920456][T10695] block nbd1: Receive control failed (result -22) [ 223.936947][T11318] block nbd2: server does not support multiple connections per device. [ 223.948923][T10695] block nbd1: Receive control failed (result -22) [ 223.956555][T11310] block nbd1: shutting down sockets [ 223.986981][T11312] block nbd2: shutting down sockets [ 224.028557][T11281] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 224.042402][T11281] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 224.065531][T11281] loop5: p1 < > [ 224.146697][T11281] __loop_clr_fd: partition scan of loop5 failed (rc=-16) [ 224.149000][T11324] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 224.166087][ T2511] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.176986][ T2511] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 224.185119][ T2511] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 08:55:20 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x7a000000) 08:55:20 executing program 4: syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x0) 08:55:20 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:20 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0xff, 0x0, "4534c139ee574273b92aad59d3d7dbf350d42aeb9421f0dc079948a996ad74753cc05eab6cec0dfd3c9ba6fe14a3089ad1f8836d33c1b98208f359f9d885f5c79843db48b177909011dd027aad9c3218"}, 0xd8) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:20 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) [ 224.196093][ T2511] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 224.227878][ T2510] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.239151][T10695] block nbd1: Receive control failed (result -22) [ 224.245637][T10695] block nbd1: Receive control failed (result -22) [ 224.249194][T11331] block nbd2: server does not support multiple connections per device. [ 224.252425][ T2510] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 224.269157][ T2510] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.269202][T11328] block nbd1: shutting down sockets [ 224.281085][ T2510] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 224.286802][T11330] block nbd2: shutting down sockets [ 224.294916][ T2510] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.310842][ T2510] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 224.319593][ T2510] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.330583][ T2510] Buffer I/O error on dev loop5p1, logical block 0, async page read 08:55:20 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) [ 224.338941][ T2510] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.349844][ T2510] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 224.350265][ T2510] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.368756][T10695] block nbd0: Receive control failed (result -22) [ 224.375334][ T2510] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 224.383848][ T2510] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 08:55:20 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0xc0000000) 08:55:20 executing program 5: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) r1 = socket(0x1, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) r3 = socket(0x10, 0x2, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r5, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x8001}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x361232d27416bb38) close(r3) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x26) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000040)={r6}, &(0x7f0000000080)=0x8) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x10000, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000000)={r6, 0x3f}, 0xffffffdd) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x276) [ 224.394734][ T2510] Buffer I/O error on dev loop5p1, logical block 0, async page read [ 224.395172][ T2510] Buffer I/O error on dev loop5p1, logical block 0, async page read 08:55:21 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0xff, 0x0, "4534c139ee574273b92aad59d3d7dbf350d42aeb9421f0dc079948a996ad74753cc05eab6cec0dfd3c9ba6fe14a3089ad1f8836d33c1b98208f359f9d885f5c79843db48b177909011dd027aad9c3218"}, 0xd8) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:21 executing program 4: syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x0) [ 224.508493][T11333] block nbd0: shutting down sockets 08:55:21 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0xe0ffffff) 08:55:21 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) r4 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) [ 224.647963][T10695] block nbd1: Receive control failed (result -22) [ 224.658382][T10695] block nbd2: Receive control failed (result -22) [ 224.667389][T10695] block nbd2: Receive control failed (result -22) [ 224.686982][T11349] block nbd1: shutting down sockets 08:55:21 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, 0x0, 0x0, 0x0) [ 224.706319][T11342] block nbd2: shutting down sockets 08:55:21 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0xff, 0x0, "4534c139ee574273b92aad59d3d7dbf350d42aeb9421f0dc079948a996ad74753cc05eab6cec0dfd3c9ba6fe14a3089ad1f8836d33c1b98208f359f9d885f5c79843db48b177909011dd027aad9c3218"}, 0xd8) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:21 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0xf6ffffff) 08:55:21 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) r1 = socket(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000200)=""/16, 0x10}], 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000440)="f9", 0xfffffdac) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f0000000140)={0x0, 0x6, &(0x7f0000000000)=[0xf71f83b, 0x4, 0xc36, 0x800, 0x3ff, 0x8001], &(0x7f0000000040)=[0x8, 0x7], 0x2, 0x9, 0x1000, &(0x7f0000000080)=[0x2, 0x8, 0x770, 0x1, 0x54, 0x3ff, 0x6, 0x3f, 0x100000000], &(0x7f0000000100)=[0x1f00000, 0x101, 0x1, 0x100]}) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f00000001c0)={0x21, &(0x7f0000000180)=""/33}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000300)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 08:55:21 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) [ 224.847479][T10695] block nbd0: Receive control failed (result -22) [ 224.855245][T10695] block nbd0: Receive control failed (result -22) [ 224.876670][T11364] block nbd0: shutting down sockets 08:55:21 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, 0x0, 0x0, 0x0) [ 224.900020][T10695] block nbd1: Receive control failed (result -22) 08:55:21 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0xfcfdffff) 08:55:21 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0xff, 0x0, "4534c139ee574273b92aad59d3d7dbf350d42aeb9421f0dc079948a996ad74753cc05eab6cec0dfd3c9ba6fe14a3089ad1f8836d33c1b98208f359f9d885f5c79843db48b177909011dd027aad9c3218"}, 0xd8) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) [ 224.960434][T11374] block nbd1: shutting down sockets [ 224.970750][T10695] block nbd2: Receive control failed (result -22) [ 224.979620][T10695] block nbd2: Receive control failed (result -22) [ 224.986646][T11377] block nbd2: shutting down sockets 08:55:21 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x1, 0x1, 0x0) r3 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:21 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:21 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0xfeffffff) 08:55:21 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, 0x0, 0x0, 0x0) 08:55:21 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0xfffffdfc) [ 225.171690][T10695] block nbd0: Receive control failed (result -22) [ 225.178361][ T1518] block nbd0: Receive control failed (result -22) [ 225.192184][ T1518] block nbd1: Receive control failed (result -22) [ 225.199203][T11394] block nbd0: shutting down sockets 08:55:21 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0), 0x0, 0x0) [ 225.224786][T11390] block nbd1: shutting down sockets 08:55:21 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) [ 225.252563][T11403] block nbd2: Receive control failed (result -22) [ 225.261681][T11392] block nbd2: shutting down sockets [ 225.379752][T11403] block nbd0: Receive control failed (result -22) [ 225.379758][T10653] block nbd0: Receive control failed (result -22) [ 225.420198][T11413] block nbd0: shutting down sockets 08:55:22 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200000000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r1 = socket(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) setxattr$security_ima(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f0000000180)=@md5={0x1, "d03eb9b4467c927015087cff37920ced"}, 0x11, 0x1) 08:55:22 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0xffffffe0) 08:55:22 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0xff, 0x0, "4534c139ee574273b92aad59d3d7dbf350d42aeb9421f0dc079948a996ad74753cc05eab6cec0dfd3c9ba6fe14a3089ad1f8836d33c1b98208f359f9d885f5c79843db48b177909011dd027aad9c3218"}, 0xd8) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:22 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:22 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0), 0x0, 0x0) 08:55:22 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 08:55:22 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0xfffffff6) 08:55:22 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0), 0x0, 0x0) 08:55:22 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 225.838777][T11403] block nbd1: Receive control failed (result -22) [ 225.851329][T11403] block nbd2: Receive control failed (result -22) [ 225.851803][T11419] block nbd1: shutting down sockets [ 225.877758][T11421] block nbd2: shutting down sockets 08:55:22 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0xff, 0x0, "4534c139ee574273b92aad59d3d7dbf350d42aeb9421f0dc079948a996ad74753cc05eab6cec0dfd3c9ba6fe14a3089ad1f8836d33c1b98208f359f9d885f5c79843db48b177909011dd027aad9c3218"}, 0xd8) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:22 executing program 5: syz_emit_ethernet(0xffffffffffffff73, &(0x7f0000000080)={@local, @dev, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x6c, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x44, 0x10}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2db, 0xc03]}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f00000000c0)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8, 0x2, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) 08:55:22 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0) 08:55:22 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:22 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0xfffffffe) [ 226.035708][T11403] block nbd1: Receive control failed (result -22) [ 226.050703][T11443] block nbd1: shutting down sockets 08:55:22 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 08:55:22 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0) 08:55:22 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x0, 0xff, 0x0, "4534c139ee574273b92aad59d3d7dbf350d42aeb9421f0dc079948a996ad74753cc05eab6cec0dfd3c9ba6fe14a3089ad1f8836d33c1b98208f359f9d885f5c79843db48b177909011dd027aad9c3218"}, 0xd8) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:22 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x1000000000000) [ 226.124960][T11403] block nbd2: Receive control failed (result -22) [ 226.150898][T11448] block nbd2: shutting down sockets 08:55:22 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) getsockname$ax25(r0, 0x0, &(0x7f0000000080)) 08:55:22 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) [ 226.239407][T11403] block nbd1: Receive control failed (result -22) [ 226.263452][T11459] block nbd1: shutting down sockets 08:55:22 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:22 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:22 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x100000000000000) 08:55:22 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0) 08:55:22 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) getsockname$ax25(r0, 0x0, &(0x7f0000000080)) 08:55:23 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x0) 08:55:23 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x200000000000000) [ 226.487819][T11403] block nbd0: Receive control failed (result -22) [ 226.505645][T11478] block nbd0: shutting down sockets [ 226.511225][T11403] block nbd2: Receive control failed (result -22) [ 226.511240][T10653] block nbd2: Receive control failed (result -22) [ 226.530272][T11471] block nbd2: shutting down sockets [ 226.540122][T11491] FAULT_INJECTION: forcing a failure. [ 226.540122][T11491] name failslab, interval 1, probability 0, space 0, times 0 [ 226.540343][T10653] block nbd1: Receive control failed (result -22) [ 226.572307][T10653] block nbd1: Receive control failed (result -22) 08:55:23 executing program 5: sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) r1 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x21, 0x0, 0x0, 0x0, @tick, {0x0, 0x500}, {}, @connect}], 0xffffff76) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000040)) fstatfs(r0, &(0x7f0000005200)=""/4096) [ 226.606013][T11481] block nbd1: shutting down sockets [ 226.607345][T11491] CPU: 1 PID: 11491 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 226.627568][T11491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 226.637624][T11491] Call Trace: [ 226.640924][T11491] dump_stack+0x172/0x1f0 [ 226.645266][T11491] should_fail.cold+0xa/0x15 [ 226.649865][T11491] ? fault_create_debugfs_attr+0x180/0x180 08:55:23 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x300000000000000) [ 226.655659][T11491] ? page_to_nid.part.0+0x20/0x20 [ 226.655674][T11491] ? ___might_sleep+0x163/0x280 [ 226.655689][T11491] __should_failslab+0x121/0x190 [ 226.655708][T11491] should_failslab+0x9/0x14 [ 226.675759][T11491] __kmalloc+0x2e0/0x770 [ 226.680012][T11491] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 226.686256][T11491] ? _kstrtoull+0x14c/0x200 [ 226.690757][T11491] ? _parse_integer+0x190/0x190 [ 226.695610][T11491] ? rw_copy_check_uvector+0x31a/0x390 [ 226.701076][T11491] rw_copy_check_uvector+0x31a/0x390 08:55:23 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) [ 226.706377][T11491] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 226.712108][T11491] ? kstrtouint+0x142/0x1a0 [ 226.716617][T11491] import_iovec+0xbf/0x200 [ 226.721040][T11491] ? dup_iter+0x250/0x250 [ 226.725375][T11491] ? __fget+0x35d/0x560 [ 226.729525][T11491] ? __kasan_check_read+0x11/0x20 [ 226.734554][T11491] vfs_writev+0xcb/0x2f0 [ 226.734568][T11491] ? vfs_iter_write+0xb0/0xb0 [ 226.734589][T11491] ? lock_downgrade+0x920/0x920 [ 226.748343][T11491] ? __fget+0x384/0x560 [ 226.752510][T11491] ? ksys_dup3+0x3e0/0x3e0 [ 226.756933][T11491] ? wait_for_completion+0x440/0x440 [ 226.762224][T11491] ? __fget_light+0x1a9/0x230 [ 226.766918][T11491] do_pwritev+0x1c4/0x280 [ 226.771258][T11491] ? do_writev+0x330/0x330 [ 226.775680][T11491] ? __ia32_sys_read+0xb0/0xb0 [ 226.779888][T11502] block nbd1: server does not support multiple connections per device. [ 226.780449][T11491] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 226.780471][T11491] __x64_sys_pwritev+0x9a/0xf0 [ 226.799518][T11491] do_syscall_64+0xfd/0x6a0 08:55:23 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x400000000000000) [ 226.804032][T11491] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 226.809920][T11491] RIP: 0033:0x459879 [ 226.813812][T11491] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 226.815181][T11499] block nbd1: shutting down sockets [ 226.833422][T11491] RSP: 002b:00007fea2c998c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 226.833434][T11491] RAX: ffffffffffffffda RBX: 00007fea2c998c90 RCX: 0000000000459879 08:55:23 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:23 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:23 executing program 4 (fault-call:1 fault-nth:1): r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x0) 08:55:23 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x500000000000000) [ 226.833441][T11491] RDX: 100000000000002f RSI: 00000000200000c0 RDI: 0000000000000003 [ 226.833447][T11491] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 226.833454][T11491] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fea2c9996d4 [ 226.833460][T11491] R13: 00000000004c6ca2 R14: 00000000004dbf98 R15: 0000000000000004 [ 226.950787][T10653] block nbd0: Receive control failed (result -22) [ 226.974497][T11515] FAULT_INJECTION: forcing a failure. [ 226.974497][T11515] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 227.005107][T11510] block nbd0: shutting down sockets [ 227.036274][T11515] CPU: 0 PID: 11515 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 227.044206][T11515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 227.054265][T11515] Call Trace: [ 227.057562][T11515] dump_stack+0x172/0x1f0 [ 227.061908][T11515] should_fail.cold+0xa/0x15 [ 227.066597][T11515] ? fault_create_debugfs_attr+0x180/0x180 [ 227.072672][T11515] ? ___might_sleep+0x163/0x280 [ 227.077539][T11515] should_fail_alloc_page+0x50/0x60 [ 227.082740][T11515] __alloc_pages_nodemask+0x1a1/0x900 [ 227.088204][T11515] ? __alloc_pages_slowpath+0x2520/0x2520 [ 227.094311][T11515] ? __kasan_check_read+0x11/0x20 [ 227.100037][T11515] ? aa_path_link+0x460/0x460 [ 227.104724][T11515] ? fault_create_debugfs_attr+0x180/0x180 [ 227.110540][T11515] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 227.117305][T11515] alloc_pages_current+0x107/0x210 [ 227.122418][T11515] __get_free_pages+0xc/0x40 [ 227.127009][T11515] vcs_write+0xbd/0xcf0 [ 227.131162][T11515] ? common_file_perm+0x238/0x720 [ 227.136177][T11515] ? _copy_from_user+0x12c/0x1a0 [ 227.141113][T11515] ? vcs_size+0x240/0x240 [ 227.145438][T11515] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 227.151671][T11515] ? security_file_permission+0x8f/0x380 [ 227.157302][T11515] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 227.163627][T11515] ? rw_verify_area+0x126/0x360 [ 227.168476][T11515] do_iter_write+0x4a0/0x610 [ 227.173069][T11515] ? dup_iter+0x250/0x250 [ 227.177396][T11515] vfs_writev+0x1b3/0x2f0 [ 227.181716][T11515] ? vfs_iter_write+0xb0/0xb0 [ 227.186827][T11515] ? lock_downgrade+0x920/0x920 [ 227.191681][T11515] ? ksys_dup3+0x3e0/0x3e0 [ 227.191699][T11515] ? wait_for_completion+0x440/0x440 [ 227.201375][T11515] ? __fget_light+0x1a9/0x230 [ 227.206050][T11515] do_pwritev+0x1c4/0x280 [ 227.206066][T11515] ? do_writev+0x330/0x330 [ 227.214772][T11515] ? __ia32_sys_read+0xb0/0xb0 [ 227.219539][T11515] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 227.225620][T11515] __x64_sys_pwritev+0x9a/0xf0 [ 227.230383][T11515] do_syscall_64+0xfd/0x6a0 [ 227.234882][T11515] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 227.240810][T11515] RIP: 0033:0x459879 [ 227.244707][T11515] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 227.265108][T11515] RSP: 002b:00007fea2c998c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 227.273523][T11515] RAX: ffffffffffffffda RBX: 00007fea2c998c90 RCX: 0000000000459879 [ 227.281487][T11515] RDX: 100000000000002f RSI: 00000000200000c0 RDI: 0000000000000003 [ 227.289455][T11515] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 227.297421][T11515] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fea2c9996d4 08:55:23 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:23 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:23 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x600000000000000) [ 227.305390][T11515] R13: 00000000004c6ca2 R14: 00000000004dbf98 R15: 0000000000000004 [ 227.335240][T10653] block nbd2: Receive control failed (result -22) [ 227.344778][T11513] block nbd2: shutting down sockets 08:55:23 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x700000000000000) [ 227.350867][T10653] block nbd0: Receive control failed (result -22) [ 227.351856][T11527] block nbd1: server does not support multiple connections per device. [ 227.369500][T11523] block nbd0: shutting down sockets [ 227.394777][T11524] block nbd1: shutting down sockets 08:55:26 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:26 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:26 executing program 4 (fault-call:1 fault-nth:2): r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x0) 08:55:26 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:26 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x2000000000000000) 08:55:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x81, 0x400) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0xffff, @mcast2}, 0x1c) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000005a00), &(0x7f0000005a40)=0xb) sendmmsg(r1, &(0x7f0000002d00), 0x80000000000027a, 0x0) r3 = eventfd2(0x0, 0x0) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) flistxattr(r4, &(0x7f0000005a80)=""/64, 0x40) r5 = dup(r3) r6 = socket$inet6(0xa, 0x400000000001, 0x0) r7 = dup(r6) setsockopt$inet6_tcp_int(r7, 0x6, 0xa, &(0x7f0000000100), 0x195) recvmmsg(r6, &(0x7f0000005840)=[{{&(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/70, 0x46}, {&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000340)=""/9, 0x9}, {&(0x7f0000000380)=""/237, 0xed}, {&(0x7f0000000480)=""/123, 0x7b}, {&(0x7f0000000500)=""/246, 0xf6}], 0x7, &(0x7f0000000680)=""/12, 0xc}, 0x9}, {{&(0x7f0000001780)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000001800)=""/148, 0x94}, {&(0x7f00000018c0)=""/76, 0x4c}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/231, 0xe7}, {&(0x7f0000002a40)=""/246, 0xf6}, {&(0x7f00000006c0)=""/21, 0x15}, {&(0x7f0000002b40)=""/60, 0x3c}, {&(0x7f0000002b80)=""/4096, 0x1000}], 0x8, &(0x7f0000003c00)=""/100, 0x64}, 0x7}, {{&(0x7f0000003c80)=@generic, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003d00)=""/11, 0xb}, {&(0x7f0000003d40)=""/136, 0x88}, {&(0x7f0000003e00)=""/123, 0x7b}, {&(0x7f0000003e80)=""/64, 0x40}, {&(0x7f0000003ec0)=""/84, 0x54}], 0x5, &(0x7f0000003fc0)=""/103, 0x67}, 0x7}, {{&(0x7f0000004040)=@ethernet, 0x80, &(0x7f0000004180)=[{&(0x7f00000040c0)=""/44, 0x2c}, {&(0x7f0000004100)=""/69, 0x45}], 0x2}, 0x7}, {{&(0x7f00000041c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f00000044c0)=[{&(0x7f0000004240)=""/30, 0x1e}, {&(0x7f0000004280)=""/246, 0xf6}, {&(0x7f0000004380)=""/35, 0x23}, {&(0x7f00000043c0)=""/132, 0x84}, {&(0x7f0000004480)=""/15, 0xf}], 0x5}, 0x7fffffff}, {{&(0x7f0000004540)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000057c0)=[{&(0x7f00000045c0)=""/84, 0x54}, {&(0x7f0000004640)=""/82, 0x52}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/242, 0xf2}], 0x4, &(0x7f0000005800)=""/29, 0x1d}, 0x8001}], 0x6, 0x100, &(0x7f00000059c0)) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x7) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0}, &(0x7f0000000240)=0x14) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000000280)=r8) sendmmsg(r1, &(0x7f0000000740)=[{{&(0x7f0000000080)=@ll={0x11, 0x1a, r8, 0x1, 0x20, 0x6, @dev={[], 0x28}}, 0x80, &(0x7f0000000700)=[{0x0}, {&(0x7f00000004c0)}], 0x2}}], 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f00000000c0)={@multicast1, @broadcast, r8}, 0xc) r9 = socket$inet(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) connect$inet(r9, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r9, &(0x7f0000000240)="dd7f9931dd1d35648a2d290f8be82a58a5d1ebb52a2fc3008033f463acb76cf39b80da93cfa3146415531bcdc18b070caf63fd55f0786bc16b0084ec298d395cf049c1a4e0", 0x45, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 08:55:27 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x2700000000000000) [ 230.458844][T10653] block nbd2: Receive control failed (result -22) [ 230.464035][T11547] block nbd1: server does not support multiple connections per device. 08:55:27 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x0) [ 230.500035][T11537] block nbd2: shutting down sockets [ 230.509041][T11540] block nbd1: shutting down sockets [ 230.537152][T10653] block nbd0: Receive control failed (result -22) [ 230.537169][T11403] block nbd0: Receive control failed (result -22) 08:55:27 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) [ 230.555677][T11538] block nbd0: shutting down sockets 08:55:27 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x2f00000000000000) 08:55:27 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:27 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 230.684716][T11403] block nbd2: Receive control failed (result -22) [ 230.711343][T11562] block nbd2: shutting down sockets 08:55:27 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x2f}], 0x100000000000002f, 0x0) [ 230.729569][T11403] block nbd1: Receive control failed (result -22) [ 230.729584][T10653] block nbd1: Receive control failed (result -22) [ 230.749710][T11561] block nbd1: shutting down sockets 08:55:27 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x3f00000000000000) 08:55:27 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) r4 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:27 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x3, &(0x7f0000000300)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f000026bfec), &(0x7f0000002000), 0x0) r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@isdn, &(0x7f00000000c0)=0x80) getsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = socket(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) r2 = socket(0x10, 0x2, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000004c0)=ANY=[@ANYBLOB="2cc000d9b55eaf90c52cc5c83c440f5c46d41e3ee176db3ba1d04bfaf144e2402adb9e8735430ba4ce00bf4551290cda04932e226c932ba8342c3e1fada25c3739a6603c4eb260456f954658e300bbbdfad9628b7e6aa71600004343d7ba8c1c134d8564566c790c88c01a50f7913e2ca990772cbcdafe7d4d4a3471c504ffcb0bfad8a03b270b4adcc19f5f0af19ec2375abd2bb99ccce16dc66efa09b4537dbeb5b69a2b98e6f2d786a4f8aab108019345d69cfcc03d63109722ee2c3e3f89ac7c24db95bf7ef1a017fe1e6ec3aad56e9920ef3912295b9743272277ac28242617cc", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)) r5 = dup(r1) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f00000001c0), &(0x7f0000000480)=0xc) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000400), &(0x7f0000000440)=0x14) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000040)={r4}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x7fffffff, 0x3f, 0x2, 0x7, 0xfffffffffffffffb, 0x0, 0x7ff, 0xa9, r4}, &(0x7f0000000240)=0x20) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000280)={r6, 0x1}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 08:55:27 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x20000185}], 0x100000000000002f, 0x0) [ 230.889087][T10653] block nbd0: Receive control failed (result -22) [ 230.889102][T11403] block nbd0: Receive control failed (result -22) [ 230.912806][T11574] block nbd0: shutting down sockets 08:55:27 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x4000000000000000) 08:55:27 executing program 0: r0 = socket(0x0, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 230.955894][T11403] block nbd2: Receive control failed (result -22) [ 230.955921][T10653] block nbd2: Receive control failed (result -22) [ 230.970984][T11576] block nbd2: shutting down sockets [ 230.993700][T10653] block nbd1: Receive control failed (result -22) 08:55:27 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x1, 0x1, 0x0) r3 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) [ 231.022220][T10653] block nbd1: Receive control failed (result -22) [ 231.042651][T11583] block nbd1: shutting down sockets 08:55:27 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x65ff, 0x8001) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x20, 0xc, 0x6, 0x1, 0x0, 0x0, {}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @uid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4084}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x1, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xe9610c61e1ef0612}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x100, 0x70bd28, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4008022) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000000)={0x400, 0x8, 0x1, 0x3}, 0x10) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000240)=""/214, &(0x7f0000000340)=0xd6) 08:55:27 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x4800000000000000) 08:55:27 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x7ffff000}], 0x100000000000002f, 0x0) [ 231.155413][T10653] block nbd0: Receive control failed (result -22) [ 231.170741][T10653] block nbd2: Receive control failed (result -22) [ 231.189855][T10653] block nbd2: Receive control failed (result -22) [ 231.209304][T11600] block nbd2: shutting down sockets [ 231.212428][T11586] block nbd0: shutting down sockets 08:55:27 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:27 executing program 0: r0 = socket(0x0, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 231.266296][T11608] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 08:55:27 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x1000000000000002, 0x0) [ 231.332672][T10653] block nbd2: Receive control failed (result -22) [ 231.338088][T11613] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 231.339484][T10653] block nbd2: Receive control failed (result -22) [ 231.357082][T11403] block nbd1: Receive control failed (result -22) [ 231.366969][T11603] block nbd1: shutting down sockets [ 231.373042][T11614] block nbd2: shutting down sockets 08:55:27 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x4c00000000000000) [ 231.385356][T10653] block nbd0: Receive control failed (result -22) [ 231.402906][T11616] block nbd0: shutting down sockets 08:55:28 executing program 0: r0 = socket(0x0, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:28 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:28 executing program 5: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8]}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r0 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$usbmon(0xffffffffffffff9c, &(0x7f0000000140)='/dev/usbmon0\x00', 0x20000, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0x40189206, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1}) r2 = syz_genetlink_get_family_id$tipc2(0x0) socket$inet(0x2, 0x2, 0x401) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$midi(0x0, 0x0, 0x400000) ioctl$TCGETS(r3, 0x5401, &(0x7f0000000000)) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$void(r4, 0xc0045878) r5 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) r6 = socket(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xc9, 0x0, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) r8 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$RTC_PIE_ON(r8, 0x7005) ioctl(r7, 0x1000008912, &(0x7f0000000180)="11dca50d5e0bcfe47bf070") setsockopt$inet6_tcp_buf(r5, 0x6, 0x21, &(0x7f0000000040)="65a0e24bcd9f18bd404b70e4faf643b187a2d11d6911b5cd73327c815c0241784647b6a82e6fd67da28da858cf58dacc7091ee11854f7e95e0a034d5febeb8c4a7e1ff2baa9f08c5c0eac61562b0dee23e30ee795b", 0x55) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x4e0840, 0x0) ioctl$EVIOCGID(r9, 0x80084502, &(0x7f0000000280)=""/17) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20030}, 0xc, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB="3b1d3e77", @ANYRES16=r2, @ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x2001418}, 0x80) 08:55:28 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 08:55:28 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x1000000000000003, 0x0) 08:55:28 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x6800000000000000) [ 231.576420][T10653] block nbd1: Receive control failed (result -22) [ 231.597474][T10653] block nbd0: Receive control failed (result -22) [ 231.613686][T11636] block nbd1: shutting down sockets 08:55:28 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 231.700399][T11632] block nbd0: shutting down sockets 08:55:28 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x1000000000000004, 0x0) 08:55:28 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x6c00000000000000) 08:55:28 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:28 executing program 0: r0 = socket(0x1, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:28 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 08:55:28 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x6d41000000000000) [ 231.856558][T10653] block nbd1: Receive control failed (result -22) [ 231.865390][T10653] block nbd0: Receive control failed (result -22) [ 231.893267][T11661] block nbd0: shutting down sockets 08:55:28 executing program 0: r0 = socket(0x1, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 231.963179][T11656] block nbd1: shutting down sockets [ 231.996150][T10653] block nbd0: Receive control failed (result -22) [ 232.009349][T11672] block nbd0: shutting down sockets 08:55:29 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x1000000000000005, 0x0) 08:55:29 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:29 executing program 0: r0 = socket(0x1, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:29 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x7400000000000000) 08:55:29 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) r4 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:29 executing program 5: syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='s\x06\xc3\x03F\x13\xe9\xfb]\x99\xac\xb8\xdd\xd3\x01\xfd9\x9b\x19\xc9E\xbc\xa0\xc5\xf6\xb9nl\xec\xa8\vAt\xe3\x86m(\a\xad\xfe\xab3\x8d\xc5\xd7\x957`7\x86H\xd5\x94\xd1@\xd5k\xdc\xe8`\x0fn\xf2T\x89\x85X\xa5\x80\xb9Y') mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x900, 0x24) r2 = socket(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ppoll(&(0x7f0000000080)=[{r0, 0x43}, {r2, 0x2000}, {r1, 0x10040}, {r0, 0x8c52}, {0xffffffffffffffff, 0x8}, {r3, 0x3020}], 0x6, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000240)={0x9}, 0x8) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 08:55:29 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x7a00000000000000) [ 232.654313][T10653] block nbd0: Receive control failed (result -22) [ 232.686981][T11684] block nbd0: shutting down sockets 08:55:29 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x1000000000000006, 0x0) 08:55:29 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:29 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0xc000000000000000) [ 232.747859][T11694] 9pnet: Insufficient options for proto=fd [ 232.754690][T10653] block nbd2: Receive control failed (result -22) [ 232.761774][T10653] block nbd1: Receive control failed (result -22) [ 232.769260][T11683] block nbd2: shutting down sockets [ 232.775081][T10653] block nbd1: Receive control failed (result -22) 08:55:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x1f) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:55:29 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x1000000000000007, 0x0) [ 232.809037][T11698] 9pnet: Insufficient options for proto=fd [ 232.834509][T11687] block nbd1: shutting down sockets 08:55:29 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:29 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:29 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:29 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x1000000000000008, 0x0) 08:55:29 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0xe0ffffffffffffff) 08:55:29 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 232.995607][T10653] block nbd2: Receive control failed (result -22) [ 233.008688][T11710] block nbd2: shutting down sockets 08:55:29 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r1, 0xab03) [ 233.075773][T10653] block nbd1: Receive control failed (result -22) [ 233.110125][T11713] block nbd1: shutting down sockets 08:55:29 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:29 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x0, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:29 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) [ 233.175132][T10653] block nbd5: Receive control failed (result -22) [ 233.218647][T11726] block nbd5: shutting down sockets 08:55:29 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x1000000000000009, 0x0) 08:55:29 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x800000008000000, @empty, 0x9}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000080)=0x800, 0x4) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl(r3, 0x7, &(0x7f0000000140)="25ae193995ddd805a93e8e2ab703681be0b4f3123ea62a653af9a172553545d0738bec66df726fdfec85cc385a200f24db17bcc0e33642943c8b754df4f0166a6903a58e9b86fa49b612e5896b3a71a02505ee27f7d001caae687f7dc3b891") write(r2, &(0x7f0000000440)="f9", 0xfffffdac) read$rfkill(r2, &(0x7f0000000040), 0x8) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 08:55:29 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0xf6ffffff00000000) [ 233.263721][T10653] block nbd2: Receive control failed (result -22) [ 233.273940][T10653] block nbd1: Receive control failed (result -22) [ 233.286909][T11738] block nbd2: shutting down sockets 08:55:29 executing program 2: openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 233.320220][T10653] block nbd0: Receive control failed (result -22) [ 233.330769][T11741] block nbd1: shutting down sockets [ 233.353793][T11740] block nbd0: shutting down sockets 08:55:29 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000023c0)=0xffffffffffffffff, 0x4) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:29 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000000a, 0x0) 08:55:30 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x0, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:30 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0xfcfdffff00000000) 08:55:30 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000000b, 0x0) 08:55:30 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0xfeffffff00000000) [ 233.566038][T10653] block nbd1: Receive control failed (result -22) [ 233.575786][T10653] block nbd2: Receive control failed (result -22) [ 233.575806][T11403] block nbd2: Receive control failed (result -22) [ 233.593357][T11756] block nbd2: shutting down sockets [ 233.612193][T11403] block nbd0: Receive control failed (result -22) [ 233.619355][T11767] block nbd0: shutting down sockets 08:55:30 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x0, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 233.664837][T11759] block nbd1: shutting down sockets 08:55:30 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:30 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0xffffffff00000000) [ 233.759004][T11403] block nbd2: Receive control failed (result -22) [ 233.766835][T11403] block nbd2: Receive control failed (result -22) [ 233.784051][T11781] block nbd2: shutting down sockets [ 233.791209][T11403] block nbd0: Receive control failed (result -22) [ 233.799915][T11778] block nbd0: shutting down sockets 08:55:30 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) r4 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:30 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000000c, 0x0) 08:55:30 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0xffffffffffffffe0) 08:55:30 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:30 executing program 2: r0 = socket(0x0, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:30 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) r0 = eventfd(0xffff) fsetxattr(r0, &(0x7f0000000000)=@random={'system.', '\x00'}, &(0x7f0000000040)='trusted]+lo^procproc\x00', 0x15, 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket(0x1, 0x6, 0x100000000000) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) getpeername(r1, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000100)=0x80) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000140), &(0x7f0000000180)=0x4) 08:55:30 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000000d, 0x0) [ 234.278938][T11403] block nbd0: Receive control failed (result -22) [ 234.304886][T11797] block nbd0: shutting down sockets [ 234.340570][T10653] block nbd1: Receive control failed (result -22) [ 234.340575][T11403] block nbd1: Receive control failed (result -22) [ 234.354420][T10653] block nbd2: Receive control failed (result -22) [ 234.365114][T11798] block nbd2: shutting down sockets [ 234.371356][T11793] block nbd1: shutting down sockets 08:55:30 executing program 5: r0 = socket(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) r1 = socket(0x10, 0x2, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={r3}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000100)={r3, @in6={{0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}}}, 0x84) r4 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}) 08:55:30 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000000e, 0x0) 08:55:30 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:30 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x1, 0x1, 0x0) r3 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:30 executing program 2: r0 = socket(0x0, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:31 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x6, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_read_part_table(0xc000000000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000000000)="d678707e4ea0c81ffa49ae091a3fc7d429c4f0cad71e1d5de8c542ed555b57b5d0e05af61e0168467dfea62dc0a4e9f2b03cb7ca6e1f6abd5d023524d8399a1a55b2087e66db5a8a937c69e88c1ec8531603eb5ad2ac297aa2c0d9bb54eb337d8c373bc8067f6c8080fb94629645faca260becd39c7717437bbbd351387c53837ffdff0078b27fa04ca919e61b7eb0324ba675c8dcc40c446d7a4c727602313c9475c176ac50b33831ad86961c395f8c91473c29bb4b8af0b228b1eb32a4daf78e341fded4a3e0d13655dcf4648fb37d59e37b42e9bcde84cebac04080e76379453b0513e44b2cf5", 0xe8, 0x9}, {&(0x7f0000000100)="7278d4535a7ed4601d6193c2768c5fc00b126d885a19d2840ee1f6539b759561fa53f7b3434df0665a042a49e486d735ab92be5a066e49e1ab339dcb0b6271f2e961c58838968a097af060cc0e5394f5ff6760ceac3defd85448b687cef8a62bc8", 0x61, 0x9}, {&(0x7f0000000180)="569b0c5537cbc7ffdacc968e71bdf434f22d7dae88e02ef1e52847eee95c30fc1054079ba3dbdbc21329c832f6adb452fc8a96bb637d25c8e80cf7f8fd3e094cc33e0a6ed57aac1c73d032076f11d7a218ea1a53d338e6b1f19d2bed2c081f", 0x5f, 0x3f}]) 08:55:31 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x4) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0xa0, 0x0, 0x2c}, {0x4, 0x48b242b9, 0x0, 0xd5, 0x0, 0x6}, {}, 0x8, 0x6e6bbb, 0x0, 0x1}, {{@in=@loopback}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x1f}}, 0xe8) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000180)) clone(0x20886100, 0x0, 0x0, 0x0, &(0x7f00000002c0)="d353ff072d68b2e4dc05000000b3d94c22") openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 234.521649][T10653] block nbd1: Receive control failed (result -22) [ 234.521656][T11403] block nbd1: Receive control failed (result -22) [ 234.524506][T11403] block nbd0: Receive control failed (result -22) [ 234.554984][T11820] block nbd1: shutting down sockets [ 234.564720][T11403] block nbd2: Receive control failed (result -22) 08:55:31 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000000f, 0x0) [ 234.596664][T11821] block nbd2: shutting down sockets [ 234.610098][T11817] block nbd0: shutting down sockets 08:55:31 executing program 2: r0 = socket(0x0, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:31 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:31 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 08:55:31 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x1000000000000010, 0x0) 08:55:31 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x3, 0x6) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, &(0x7f0000000040)=0x100060, 0xa808) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=""/145, 0x26, 0x91, 0x1}, 0x20) [ 234.767154][T11403] block nbd1: Receive control failed (result -22) [ 234.767169][T10653] block nbd1: Receive control failed (result -22) [ 234.781360][T11843] block nbd1: shutting down sockets [ 234.805986][T10653] block nbd2: Receive control failed (result -22) 08:55:31 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 234.830180][T10653] block nbd0: Receive control failed (result -22) [ 234.838897][T11846] block nbd2: shutting down sockets [ 234.900471][T11851] block nbd0: shutting down sockets 08:55:31 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 08:55:31 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x1000000000000011, 0x0) 08:55:31 executing program 2: r0 = socket(0x1, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:31 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:31 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 235.063115][T10653] block nbd2: Receive control failed (result -22) [ 235.079479][T11867] block nbd2: shutting down sockets [ 235.098146][T10653] block nbd0: Receive control failed (result -22) 08:55:31 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x0, 0x0) 08:55:31 executing program 2: r0 = socket(0x1, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:31 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x1000000000000012, 0x0) [ 235.155348][T11874] block nbd0: shutting down sockets 08:55:31 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x15b) sendto$inet(r0, 0x0, 0x0, 0x20004440, 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000000)=0xf22) 08:55:31 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:31 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x1000000000000013, 0x0) 08:55:31 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = socket(0x1, 0x1, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 08:55:31 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000440)="f9", 0xfffffdac) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x4) [ 235.255837][T10653] block nbd2: Receive control failed (result -22) [ 235.347898][T11887] block nbd2: shutting down sockets 08:55:31 executing program 2: r0 = socket(0x1, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:31 executing program 5: r0 = socket$kcm(0x2b, 0x200000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_KEEPCAPS(0x8, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000440)="f9", 0xfffffdac) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000000)={{0xd551, 0x5}, {0x8000000000000, 0x80000000}, 0x2, 0x5, 0x7fff}) 08:55:31 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r1, 0xab03) [ 235.375072][T10653] block nbd0: Receive control failed (result -22) [ 235.384832][T11895] block nbd0: shutting down sockets 08:55:31 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:32 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x1000000000000014, 0x0) 08:55:32 executing program 3: setrlimit(0x0, &(0x7f00000004c0)={0x4, 0x100000000000006}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) [ 235.509021][T10653] block nbd2: Receive control failed (result -22) [ 235.528395][T11907] block nbd2: shutting down sockets 08:55:32 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:32 executing program 3: setrlimit(0x3, &(0x7f0000000000)={0x0, 0x1f}) setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x2, 0x0) [ 235.598817][T10653] block nbd0: Receive control failed (result -22) [ 235.609052][T10653] block nbd1: Receive control failed (result -22) 08:55:32 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x1000000000000015, 0x0) [ 235.641072][T11919] block nbd0: shutting down sockets [ 235.658832][T11914] block nbd1: shutting down sockets 08:55:32 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:32 executing program 3: prctl$PR_SET_FPEMU(0xa, 0x0) setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x200000, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 08:55:32 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:32 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x1000000000000016, 0x0) [ 235.767827][T10653] block nbd0: Receive control failed (result -22) [ 235.796101][T11937] block nbd0: shutting down sockets [ 235.895371][T10653] block nbd1: Receive control failed (result -22) [ 235.906467][T11945] block nbd1: shutting down sockets 08:55:32 executing program 5: r0 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x400000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) write$cgroup_pid(r0, &(0x7f0000000280)=r1, 0x12) r2 = open(&(0x7f0000000200)='./file0\x00', 0x80040, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) nanosleep(&(0x7f0000000340)={r3, r4+10000000}, 0x0) fcntl$setlease(r0, 0x400, 0x6) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r2) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000440)="f9", 0xfffffdac) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r6, 0x2) syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x1cd041) r7 = socket$isdn(0x22, 0x3, 0x3b) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x800, 0x0) epoll_pwait(r8, &(0x7f0000000140)=[{}], 0x1, 0xea2, &(0x7f0000000180)={0x3ce}, 0x8) getsockopt$IP_VS_SO_GET_DAEMON(r7, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) 08:55:32 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:32 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:32 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:32 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000440)="f9", 0xfffffdac) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa) 08:55:32 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x1000000000000017, 0x0) 08:55:32 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x1000000000000018, 0x0) 08:55:32 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:32 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x800) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x304, 0x7, 0x1f, 0x20e, 0x3f}, 0x10) setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L-', 0x2}, 0x28, 0x0) [ 236.366027][T10653] block nbd0: Receive control failed (result -22) [ 236.375291][T10653] block nbd1: Receive control failed (result -22) [ 236.393038][T11953] block nbd1: shutting down sockets [ 236.409195][T11957] block nbd0: shutting down sockets 08:55:33 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:33 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f0000002380)='/eev/dsp\x00', 0x200, 0x0) r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:33 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x0, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 236.522682][ T26] audit: type=1804 audit(1567760133.052:37): pid=11978 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir274441638/syzkaller.5CU8Ct/81/file0" dev="sda1" ino=16813 res=1 [ 236.569053][T10653] block nbd0: Receive control failed (result -22) [ 236.582710][T11980] block nbd0: shutting down sockets [ 236.685402][T10653] block nbd1: Receive control failed (result -22) [ 236.685418][T11403] block nbd1: Receive control failed (result -22) [ 236.705872][T11990] block nbd1: shutting down sockets 08:55:33 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x1000000000000019, 0x0) 08:55:33 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3, 0x119201) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x6, 0x0, 0xe53f9cda0d8a8ba7, {0x80, 0x9, 0x0, 0x4}}) 08:55:33 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:33 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x0, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:33 executing program 1: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:33 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x10000, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000080)='./file0\x00', r2}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000000)=""/111) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0xffffff87}], 0x100000c7, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='status\x00') preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 237.233278][T11999] block nbd0: server does not support multiple connections per device. [ 237.248303][T11403] block nbd1: Receive control failed (result -22) [ 237.248309][T10653] block nbd1: Receive control failed (result -22) 08:55:33 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = semget$private(0x0, 0x21b53a67515c8f79, 0x200) semctl$GETPID(r0, 0x2, 0xb, &(0x7f0000000000)=""/48) [ 237.279124][T11998] block nbd0: shutting down sockets [ 237.293105][T11403] block nbd2: Receive control failed (result -22) 08:55:33 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000001a, 0x0) [ 237.327755][T12000] block nbd2: shutting down sockets [ 237.339550][T12002] block nbd1: shutting down sockets 08:55:33 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:33 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x0, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:33 executing program 1: r0 = socket(0x0, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:33 executing program 3: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000440)="f9", 0xfffffdac) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000040)={{0xffffffff, 0x9}, 'port1\x00', 0x20, 0x40002, 0x8, 0x4249, 0x16e6c00000000, 0x1, 0x3, 0x0, 0x1, 0x7}) setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000000)={0x5, 0xb1, 0x1}) 08:55:34 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000001b, 0x0) 08:55:34 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:34 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 237.521020][T12031] block nbd0: server does not support multiple connections per device. [ 237.547585][T12027] block nbd0: shutting down sockets 08:55:34 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000001c, 0x0) [ 237.604389][T11403] block nbd2: Receive control failed (result -22) [ 237.615076][T11403] block nbd1: Receive control failed (result -22) [ 237.626954][T12026] block nbd1: shutting down sockets 08:55:34 executing program 1: r0 = socket(0x0, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 237.659792][T12040] block nbd2: shutting down sockets [ 237.694082][T12047] block nbd0: server does not support multiple connections per device. [ 237.714504][T12045] block nbd0: shutting down sockets [ 237.747339][T11403] block nbd1: Receive control failed (result -22) [ 237.761407][T12048] block nbd1: shutting down sockets 08:55:34 executing program 5: r0 = socket(0x0, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:34 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000001d, 0x0) 08:55:34 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:34 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:34 executing program 1: r0 = socket(0x0, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 238.114024][T12060] block nbd0: server does not support multiple connections per device. [ 238.130299][T11403] block nbd2: Receive control failed (result -22) [ 238.137613][T12056] block nbd2: shutting down sockets [ 238.159113][T12059] block nbd0: shutting down sockets 08:55:34 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000001e, 0x0) [ 238.168580][T11403] block nbd1: Receive control failed (result -22) [ 238.190299][T12061] block nbd1: shutting down sockets [ 238.215416][T11403] block nbd5: Receive control failed (result -22) [ 238.225395][T12066] block nbd5: shutting down sockets 08:55:34 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x101100, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x48105000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x9, 0x7, 0x9}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x820}, 0x2c) 08:55:34 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:34 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:34 executing program 1: r0 = socket(0x1, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:34 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x1000000000000021, 0x0) 08:55:34 executing program 5: syz_emit_ethernet(0xfe8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60d8652bfde32c00fe8000000000000040000000000000aafe8000000000000000000000000000aa2c000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="dc80acbbcf0ad5d28edea2128161fdec45f223ea4701f30e89408fdb298243116443df7c9e9c5c3608922d73d70a75a207a3d330be8415316fbbf2fdbccb2ea2a77db403a8019adcf99852a65af9b37b0af869878b8b1d45f9e926c54d64565343a7bb1a006c1c8faa8e9df34cdb70a037e964923f1e4a341971f0c35fae7b073d5013d28bc50000000000000000000000200000abb5f2ce4846ae3f67142ec304089f0e08c18a652a226a2def7c837c2e316ed25d2969bcc559f4bb249e8ee2f84a6b22070598875377d32d32640ab997ecbbb4"], 0x0) r0 = socket(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) r1 = socket(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) recvfrom$unix(r1, &(0x7f0000000140)=""/163, 0xa3, 0x10020, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x7, 0x2, 0x0, 0x4, 0x8d09, 0x10001}, &(0x7f0000000040)=0x20) r2 = socket(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) getsockname$tipc(r2, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0x10) [ 238.379858][T11403] block nbd2: Receive control failed (result -22) [ 238.382876][T10653] block nbd1: Receive control failed (result -22) [ 238.401902][T12081] block nbd1: shutting down sockets [ 238.407710][T12079] block nbd2: shutting down sockets [ 238.421806][T12088] block nbd0: server does not support multiple connections per device. 08:55:35 executing program 1: r0 = socket(0x1, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 238.461318][T12083] block nbd0: shutting down sockets 08:55:35 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:35 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000180)=""/177, 0xb1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 08:55:35 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffb, 0x80000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0), 0x4) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0xdab9014c7611f115, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 08:55:35 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x1000000000000022, 0x0) 08:55:35 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 238.617895][T10653] block nbd2: Receive control failed (result -22) [ 238.625446][T12099] block nbd2: shutting down sockets [ 238.641372][T10653] block nbd1: Receive control failed (result -22) [ 238.658155][T12112] block nbd0: server does not support multiple connections per device. 08:55:35 executing program 3: setrlimit(0x5, &(0x7f0000000000)={0x3, 0x40}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 08:55:35 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:35 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x1000000000000023, 0x0) [ 238.693767][T12106] block nbd1: shutting down sockets [ 238.702767][T12105] block nbd0: shutting down sockets 08:55:35 executing program 1: r0 = socket(0x1, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:35 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_mr_vif\x00') r1 = socket(0x10, 0x2, 0x0) close(r1) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$sndseq(r0, &(0x7f0000000140)=[{0x3, 0x4, 0x20000000000, 0x182f, @time={r2, r3+30000000}, {0xffff, 0x5}, {0x5, 0x9}, @quote={{0x1f, 0x7fff}, 0x5, &(0x7f0000000100)={0x5, 0x3, 0x2, 0x4, @tick=0x5, {0x3, 0x6}, {0x93cd, 0x8}, @time=@time}}}], 0x30) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={r5}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000000)={r5, 0x2}, 0x8) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000000580), 0x3c1) [ 238.839305][T10653] block nbd1: Receive control failed (result -22) [ 238.856917][T10653] block nbd2: Receive control failed (result -22) [ 238.875272][T12122] block nbd1: shutting down sockets 08:55:35 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x8, 0x5}) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fsetxattr$security_smack_transmute(r0, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x2) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 08:55:35 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x1000000000000024, 0x0) [ 238.886198][T12118] block nbd2: shutting down sockets [ 238.902370][T10653] block nbd0: Receive control failed (result -22) [ 238.919942][T12130] block nbd0: shutting down sockets 08:55:35 executing program 1: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:35 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:35 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000021c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000140)=""/4096, 0x1a, 0x1000, 0xfffffffffffffffe}, 0x20) r0 = socket(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0xffffffffffffff14}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r1}, 0x8) 08:55:35 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:35 executing program 1: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 239.068965][T10653] block nbd2: Receive control failed (result -22) [ 239.122688][T12143] block nbd2: shutting down sockets 08:55:35 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:35 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x1000000000000025, 0x0) 08:55:35 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x105000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2010}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000db67f28198c0787bc5edea51237031cf72609a1bf119cb1493ab3436722ab737069e3db3707a9c8ad613df06b9ec966ef66643387ec5ad17a42515ee8f030115aaba533c1cfcf4a39df2fea8420d2e90c71417abb2997ebaae95ed605080ac6b7165d3b557b91dab988f424886c9c11e5bb738aa958ab4b7ab8fca048e5cd3d24b9b748175b4315405729ee7e7c78eb1e52d331583901a7cd3d54932bb74", @ANYRES16=r1, @ANYBLOB="000225bd7000fddbdf250f0000000800050000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x5) r2 = socket(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) getsockopt$packet_int(r2, 0x107, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x2, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0xc0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) [ 239.184012][T10653] block nbd0: Receive control failed (result -22) [ 239.198716][T12150] block nbd0: shutting down sockets 08:55:35 executing program 5: pipe(&(0x7f0000000e00)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000080)={{0x3, 0x2}, 'port0\x00', 0x0, 0x2c44, 0x1, 0x9, 0x4, 0x0, 0xff, 0x0, 0x1, 0x400}) r3 = socket$netlink(0x10, 0x3, 0xc) writev(r3, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r3, &(0x7f0000fb5ff0)=[{&(0x7f0000000040)="1f00000001031900efff07000000068100023b0509000100010100ff3fff58", 0x1f}], 0x1) 08:55:35 executing program 1: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 239.240180][T10653] block nbd2: Receive control failed (result -22) [ 239.249417][T12158] block nbd2: shutting down sockets 08:55:35 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:35 executing program 3: mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000000, 0x11812, 0xffffffffffffffff, 0x7243a14e70d519d0) setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xbc4ef6b38ce95b18, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000100)={{0x5, 0x6, 0x41, 0x9, 'syz1\x00', 0xff}, 0x6, 0x20, 0xfff, r2, 0x2, 0xfffffffffffffffb, 'syz1\x00', &(0x7f00000000c0)=[']\x00', 'vboxnet1&/wlan0\x00'], 0x12, [], [0x5, 0x4, 0x8, 0x5]}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000000)=0x1) 08:55:35 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:35 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x1000000000000026, 0x0) 08:55:35 executing program 1: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x0, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 239.454611][T10653] block nbd2: Receive control failed (result -22) [ 239.462502][T10653] block nbd0: Receive control failed (result -22) [ 239.484427][T12176] block nbd0: shutting down sockets [ 239.489597][T12177] block nbd2: shutting down sockets 08:55:36 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x6, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000040)="d3a0cd40363a6872a60512ebe20aadc046266015ebe777fb90856bd1c49321ca2183da86b671d9a83499b71328ee72e0a6ad60af114b17547b67f321834dbd2d3b62d1d5f5dfc5a1284400258d194fec69001a4102fbf21a3bc4242bc1a740194db0b88e8d7ebfd3cbf500559e37c1c4e838191b7ae19e9cabd33417a8aff657a1f4d903ea") 08:55:36 executing program 0: socket(0x1, 0x1, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x1ffffffff) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 08:55:36 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:36 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x1000000000000027, 0x0) 08:55:36 executing program 1: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x0, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 239.670701][T10653] block nbd0: Receive control failed (result -22) [ 239.679866][T12196] block nbd0: shutting down sockets [ 239.701017][T10653] block nbd2: Receive control failed (result -22) [ 239.708260][T12201] block nbd2: shutting down sockets [ 239.809660][T10653] block nbd1: Receive control failed (result -22) [ 239.823049][T12206] block nbd1: shutting down sockets 08:55:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0xa2762718ec785d0, 0x0, 0x0, 0x342) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x899ee2f5152eae16}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r5, 0x6, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e21}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x20040050) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)={0xc, 0x0, "1b975b08"}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000440)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000000480)=""/51, &(0x7f00000004c0)=0x33) prctl$PR_GET_CHILD_SUBREAPER(0x25) 08:55:36 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 08:55:36 executing program 0: socket(0x1, 0x1, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x1ffffffff) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 08:55:36 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x1000000000000028, 0x0) 08:55:36 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:36 executing program 1: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x0, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:36 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x1000000000000029, 0x0) [ 240.248058][T12222] block nbd2: server does not support multiple connections per device. [ 240.265777][T10653] block nbd0: Receive control failed (result -22) [ 240.273227][T12217] block nbd0: shutting down sockets [ 240.290980][T10653] block nbd1: Receive control failed (result -22) 08:55:36 executing program 0: socket(0x1, 0x1, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x1ffffffff) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 08:55:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000440)="f9", 0xfffffdac) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000100)=""/62) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1c004000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x5, 0x101, @l2={'eth', 0x3a, 'bpq0\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0xc84c) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) write(r3, &(0x7f0000000440)="f9", 0xfffffdac) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r3, 0xc040564b, &(0x7f0000000140)={0x10000, 0x0, 0x2008, 0x0, 0x5, {0xc8c, 0x5}}) setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000180)=@rose={'rose', 0x0}, 0x10) [ 240.322994][T12216] block nbd1: shutting down sockets [ 240.332720][T12215] block nbd2: shutting down sockets 08:55:36 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:36 executing program 1: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:37 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002a, 0x0) [ 240.480316][T10653] block nbd0: Receive control failed (result -22) [ 240.488186][T12237] block nbd0: shutting down sockets 08:55:37 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x2, 0x8, 0x100000000000071, 0x3, 0x0, 0x0, 0x0, [], 0x0, r0}, 0x40e) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0), &(0x7f0000000140), 0x1a0}, 0x20) [ 240.530548][T12242] block nbd2: server does not support multiple connections per device. 08:55:37 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 08:55:37 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002b, 0x0) [ 240.577464][T10653] block nbd1: Receive control failed (result -22) [ 240.584478][T12243] block nbd1: shutting down sockets [ 240.603999][T12241] block nbd2: shutting down sockets 08:55:37 executing program 1: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:37 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:37 executing program 5: r0 = socket(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14, 0x800) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getuid() sendmsg$nl_xfrm(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=@acquire={0x158, 0x17, 0x400, 0x70bd29, 0x25dfdbfc, {{@in=@multicast2, 0x4d5, 0x33}, @in=@loopback, {@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x4e20, 0x3, 0x4e23, 0x9, 0x2, 0x80, 0x0, 0x33, r1, r2}, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x28}, 0x4e24, 0xfffffffffffffff9, 0x4e21, 0x0, 0x2, 0x5c347663336af92f, 0x20, 0x0, 0x0, r3}, {0xfffffff7, 0x800, 0x1, 0x5, 0x8ae1, 0x2000000000000, 0x4, 0x1}, {0x8000, 0x6, 0x100000001, 0x5}, 0x1, 0x6e6bb9, 0x3, 0x1, 0x2, 0x2}, 0x8, 0x8503, 0x0, 0x70bd25}, [@address_filter={0x28, 0x1a, {@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xfffffffffffffffd, 0x1f}}, @proto={0x8, 0x19, 0x24}]}, 0x158}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380100001600210000000000000000000100000000000000000000000000002f017f0110000000000005000000000000000000000000000000fe2f1798fbb8be", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}}, 0x0) r5 = socket(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) getsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f00000003c0), 0x2) [ 240.679658][T12255] block nbd0: shutting down sockets [ 240.736344][T10653] block nbd1: Receive control failed (result -22) [ 240.769960][T12257] block nbd1: shutting down sockets 08:55:37 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002c, 0x0) [ 240.781929][T12267] block nbd2: server does not support multiple connections per device. 08:55:37 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 240.811657][T12268] netlink: 'syz-executor.5': attribute type 31 has an invalid length. [ 240.814442][T12265] block nbd2: shutting down sockets [ 240.825039][T12268] netlink: 'syz-executor.5': attribute type 31 has an invalid length. [ 240.957375][T12277] block nbd0: shutting down sockets 08:55:37 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0xff}, 0x8, 0x80000) ioctl(0xffffffffffffffff, 0x8eb, &(0x7f0000000040)="399df171f0171afe6d7d334d9f31275f3155e464619bff487fb906000000000000541915b8100798ae6989401af3ea02be25c8b7b80d48b9cf834b040dd62d6e42dea41c22e59d8554b4d8c99a1560659e689b018e52236669460b8380b48609d1515f7f2e08aa943e28702d59f59a78db3ace2ab45f71d0f4cb096177359a329f63594202ad9b294a1ac046a35138c9b94fee31e7da1deec4f3c17090dcc46c86bd9f86ff6ef5dbc5e3409ebad50e00"/198) syz_init_net_socket$llc(0x1a, 0x1, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000440)="f9", 0xfffffdac) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000140)=0x2) 08:55:37 executing program 1: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:37 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:37 executing program 5: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000040)=0x1) write(r2, &(0x7f00000000c0)="2400000058001f00ff07f4f9002304000a04f51108000100020100020800038005000000", 0x24) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000000)=0x4) 08:55:37 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002d, 0x0) 08:55:37 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 241.303789][T10653] block nbd1: Receive control failed (result -22) [ 241.317715][T12282] block nbd1: shutting down sockets [ 241.325043][T12284] block nbd2: server does not support multiple connections per device. [ 241.345847][T12290] block nbd0: shutting down sockets 08:55:37 executing program 1: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:37 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002e, 0x0) [ 241.361623][T12283] block nbd2: shutting down sockets 08:55:37 executing program 3: setrlimit(0x3, &(0x7f00000004c0)={0x4, 0x5}) sysfs$1(0x1, &(0x7f0000000000)=',+*-\x00') syz_init_net_socket$llc(0x1a, 0x1, 0x0) 08:55:37 executing program 0 (fault-call:7 fault-nth:0): r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:38 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 241.488206][T10653] block nbd1: Receive control failed (result -22) [ 241.501443][T12300] block nbd1: shutting down sockets 08:55:38 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x2) [ 241.541360][T12308] FAULT_INJECTION: forcing a failure. [ 241.541360][T12308] name failslab, interval 1, probability 0, space 0, times 0 [ 241.579891][T12308] CPU: 1 PID: 12308 Comm: syz-executor.0 Not tainted 5.3.0-rc7+ #0 [ 241.591720][T12308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.591726][T12308] Call Trace: [ 241.591744][T12308] dump_stack+0x172/0x1f0 [ 241.591767][T12308] should_fail.cold+0xa/0x15 [ 241.613999][T12308] ? fault_create_debugfs_attr+0x180/0x180 [ 241.619814][T12308] ? ___might_sleep+0x163/0x280 [ 241.624680][T12308] __should_failslab+0x121/0x190 [ 241.629630][T12308] should_failslab+0x9/0x14 [ 241.634140][T12308] __kmalloc+0x2e0/0x770 [ 241.638388][T12308] ? mark_held_locks+0xf0/0xf0 [ 241.643155][T12308] ? _parse_integer+0x190/0x190 [ 241.648013][T12308] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 241.653737][T12308] tomoyo_realpath_from_path+0xcd/0x7b0 [ 241.659285][T12308] ? tomoyo_path_number_perm+0x193/0x520 [ 241.664930][T12308] tomoyo_path_number_perm+0x1dd/0x520 [ 241.670396][T12308] ? tomoyo_path_number_perm+0x193/0x520 [ 241.676033][T12308] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 241.681842][T12308] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 241.688092][T12308] ? __kasan_check_read+0x11/0x20 [ 241.693128][T12308] ? __fget+0x384/0x560 [ 241.697287][T12308] ? ksys_dup3+0x3e0/0x3e0 [ 241.701707][T12308] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 241.707953][T12308] ? fput_many+0x12c/0x1a0 [ 241.712374][T12308] tomoyo_file_ioctl+0x23/0x30 [ 241.717144][T12308] security_file_ioctl+0x77/0xc0 [ 241.722095][T12308] ksys_ioctl+0x57/0xd0 [ 241.726263][T12308] __x64_sys_ioctl+0x73/0xb0 [ 241.730866][T12308] do_syscall_64+0xfd/0x6a0 [ 241.735379][T12308] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 241.741269][T12308] RIP: 0033:0x459879 [ 241.745165][T12308] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 241.764777][T12308] RSP: 002b:00007f327f651c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 241.773194][T12308] RAX: ffffffffffffffda RBX: 00007f327f651c90 RCX: 0000000000459879 [ 241.781170][T12308] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 08:55:38 executing program 1: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 241.789141][T12308] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 241.797116][T12308] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f327f6526d4 [ 241.805091][T12308] R13: 00000000004c3190 R14: 00000000004d68f8 R15: 0000000000000007 [ 241.825400][T12308] ERROR: Out of memory at tomoyo_realpath_from_path. 08:55:38 executing program 3: setrlimit(0x5, &(0x7f00000004c0)={0x4, 0xffffffffffffff00}) [ 241.844405][T12313] block nbd2: server does not support multiple connections per device. [ 241.898152][T10653] block nbd1: Receive control failed (result -22) [ 241.917747][T12311] block nbd2: shutting down sockets 08:55:38 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x3) [ 241.938835][T12317] block nbd1: shutting down sockets 08:55:38 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:38 executing program 1: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 241.969270][T10653] block nbd0: Receive control failed (result -22) [ 241.978113][T10653] block nbd0: Receive control failed (result -22) [ 241.990849][T12306] block nbd0: shutting down sockets 08:55:38 executing program 0 (fault-call:7 fault-nth:1): r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:38 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = socket(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000000)={{0x5, 0x2, 0x281, 0x858, 0x10000, 0x1}, 0x4}) pipe(&(0x7f0000000e00)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000000c0)={{0x2, 0x1, 0x9, 0x14a009e146074e38, 0x7}, 0x100000001, 0x77a, 'id1\x00', 'timer1\x00', 0x0, 0x9, 0x4e7f, 0x1, 0x81}) r4 = socket(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f00000001c0)={0x8a5d, 0x6, 0x5, 0x7}, 0x10) [ 242.069714][T12328] block nbd2: server does not support multiple connections per device. [ 242.124428][T12326] block nbd2: shutting down sockets [ 242.129727][T10653] block nbd1: Receive control failed (result -22) 08:55:38 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x4) [ 242.170766][T12331] block nbd1: shutting down sockets 08:55:38 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:38 executing program 1: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 242.258233][T10653] block nbd2: Receive control failed (result -22) [ 242.280219][T12345] block nbd2: shutting down sockets 08:55:38 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x19) 08:55:38 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 242.424962][T10653] block nbd1: Receive control failed (result -22) [ 242.427490][T10653] block nbd2: Receive control failed (result -22) 08:55:39 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x50) [ 242.466510][T12357] block nbd2: shutting down sockets [ 242.475974][T12351] block nbd1: shutting down sockets 08:55:39 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:39 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x300) 08:55:39 executing program 1: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:39 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 242.645931][T10653] block nbd0: Receive control failed (result -22) [ 242.645947][T11403] block nbd0: Receive control failed (result -22) [ 242.673383][T11403] block nbd2: Receive control failed (result -22) [ 242.680236][T12364] block nbd0: shutting down sockets [ 242.691228][T11403] block nbd1: Receive control failed (result -22) 08:55:39 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0xfa4) [ 242.728307][T12370] block nbd2: shutting down sockets [ 242.734879][T12368] block nbd1: shutting down sockets 08:55:39 executing program 2: socket(0x1, 0x1, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x1ffffffff) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 08:55:39 executing program 1: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:39 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x2) [ 242.889035][T11403] block nbd1: Receive control failed (result -22) [ 242.915669][T12380] block nbd1: shutting down sockets [ 242.921281][T11403] block nbd2: Receive control failed (result -22) 08:55:39 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x1900) [ 242.941418][T12383] block nbd2: shutting down sockets [ 242.955762][T12386] block nbd0: shutting down sockets 08:55:39 executing program 1: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 242.993002][T12389] block nbd0: Device being setup by another task [ 243.021989][T12393] block nbd1: server does not support multiple connections per device. [ 243.036918][T12386] block nbd0: shutting down sockets 08:55:39 executing program 2: socket(0x1, 0x1, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x1ffffffff) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 08:55:39 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x4000) [ 243.080624][T12392] block nbd1: shutting down sockets 08:55:39 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x10) [ 243.128958][T11403] block nbd2: Receive control failed (result -22) [ 243.172612][T12396] block nbd2: shutting down sockets [ 243.205396][T12401] block nbd0: shutting down sockets 08:55:39 executing program 2: socket(0x1, 0x1, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x1ffffffff) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 08:55:39 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x5000) 08:55:39 executing program 1: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 243.246119][T12401] block nbd0: shutting down sockets 08:55:39 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x301) [ 243.298877][T11403] block nbd2: Receive control failed (result -22) [ 243.306082][T12409] block nbd1: server does not support multiple connections per device. [ 243.338787][T12406] block nbd2: shutting down sockets [ 243.344490][T12408] block nbd1: shutting down sockets 08:55:39 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0xa40f) [ 243.384272][T12414] block nbd0: shutting down sockets 08:55:39 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 08:55:40 executing program 1: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 243.480294][T12414] block nbd0: shutting down sockets 08:55:40 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x125d) [ 243.515626][T12420] block nbd2: shutting down sockets 08:55:40 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x1000000) [ 243.546940][T12422] block nbd1: server does not support multiple connections per device. [ 243.576028][T12421] block nbd1: shutting down sockets [ 243.615715][T12426] block nbd0: shutting down sockets 08:55:40 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 08:55:40 executing program 1: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 243.669728][T12426] block nbd0: shutting down sockets 08:55:40 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x2000000) 08:55:40 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x125e) 08:55:40 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 243.727203][T12434] block nbd2: shutting down sockets [ 243.727767][T12436] block nbd1: server does not support multiple connections per device. [ 243.760219][T12433] block nbd1: shutting down sockets [ 243.831148][T12439] block nbd0: shutting down sockets 08:55:40 executing program 1: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 243.868355][T12439] block nbd0: shutting down sockets 08:55:40 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) r0 = socket(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) r1 = socket(0x10, 0x2, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={r3}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={r3, 0x4, 0x1, [0x9]}, &(0x7f0000000040)=0xa) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 08:55:40 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x3000000) 08:55:40 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x125f) [ 243.929530][T12450] block nbd1: server does not support multiple connections per device. [ 243.933264][T12446] block nbd2: shutting down sockets [ 243.968716][T12445] block nbd1: shutting down sockets [ 244.018995][T12456] block nbd0: shutting down sockets 08:55:40 executing program 1: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 244.060312][T12456] block nbd0: shutting down sockets 08:55:40 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x4000000) 08:55:40 executing program 2 (fault-call:7 fault-nth:0): r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:40 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1260) [ 244.149791][T12462] block nbd1: server does not support multiple connections per device. [ 244.150654][T12465] FAULT_INJECTION: forcing a failure. [ 244.150654][T12465] name failslab, interval 1, probability 0, space 0, times 0 [ 244.178564][T12460] block nbd1: shutting down sockets 08:55:40 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) getuid() r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) setreuid(r3, r5) syz_init_net_socket$llc(0x1a, 0x1, 0x0) [ 244.224737][T12468] block nbd0: shutting down sockets [ 244.260100][T12465] CPU: 0 PID: 12465 Comm: syz-executor.2 Not tainted 5.3.0-rc7+ #0 [ 244.268021][T12465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.278073][T12465] Call Trace: [ 244.281382][T12465] dump_stack+0x172/0x1f0 [ 244.285714][T12465] should_fail.cold+0xa/0x15 [ 244.290317][T12465] ? fault_create_debugfs_attr+0x180/0x180 [ 244.296134][T12465] ? ___might_sleep+0x163/0x280 [ 244.296152][T12465] __should_failslab+0x121/0x190 [ 244.296167][T12465] should_failslab+0x9/0x14 [ 244.296183][T12465] __kmalloc+0x2e0/0x770 [ 244.302639][T12468] block nbd0: shutting down sockets [ 244.305931][T12465] ? mark_held_locks+0xf0/0xf0 [ 244.305950][T12465] ? _parse_integer+0x190/0x190 [ 244.314661][T12465] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 244.314674][T12465] tomoyo_realpath_from_path+0xcd/0x7b0 [ 244.314689][T12465] ? tomoyo_path_number_perm+0x193/0x520 [ 244.314705][T12465] tomoyo_path_number_perm+0x1dd/0x520 [ 244.314717][T12465] ? tomoyo_path_number_perm+0x193/0x520 [ 244.314736][T12465] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 244.363446][T12465] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 244.369704][T12465] ? __kasan_check_read+0x11/0x20 [ 244.374766][T12465] ? __fget+0x384/0x560 [ 244.378940][T12465] ? ksys_dup3+0x3e0/0x3e0 [ 244.378961][T12465] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 244.389790][T12465] ? fput_many+0x12c/0x1a0 [ 244.389810][T12465] tomoyo_file_ioctl+0x23/0x30 [ 244.398961][T12465] security_file_ioctl+0x77/0xc0 [ 244.403900][T12465] ksys_ioctl+0x57/0xd0 [ 244.408057][T12465] __x64_sys_ioctl+0x73/0xb0 [ 244.412660][T12465] do_syscall_64+0xfd/0x6a0 [ 244.417173][T12465] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 244.423050][T12465] RIP: 0033:0x459879 [ 244.423063][T12465] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 244.423069][T12465] RSP: 002b:00007f00952ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 08:55:40 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x19000000) 08:55:40 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x40000000) 08:55:41 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1261) 08:55:41 executing program 1: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:41 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) r0 = socket(0x1, 0x1, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qit_adf\xa42Nc\x00', 0x6cea80, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) r2 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x5b9a, 0x4000) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000140)) connect$netlink(r0, &(0x7f0000000000)=@unspec, 0xc) syz_init_net_socket$llc(0x1a, 0x1, 0x0) [ 244.423081][T12465] RAX: ffffffffffffffda RBX: 00007f00952ccc90 RCX: 0000000000459879 [ 244.423087][T12465] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 244.423094][T12465] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 244.423106][T12465] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f00952cd6d4 [ 244.486873][T12465] R13: 00000000004c3190 R14: 00000000004d68f8 R15: 0000000000000007 [ 244.489625][T12465] ERROR: Out of memory at tomoyo_realpath_from_path. [ 244.549313][T12481] block nbd0: shutting down sockets 08:55:41 executing program 1: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:41 executing program 3: setrlimit(0x7, &(0x7f00000004c0)={0x4, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101000, 0x0) connect$netlink(r0, &(0x7f0000000480)=@proc={0x10, 0x0, 0x25dfdbfc, 0x40000}, 0xc) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @default, @netrom={'nr', 0x0}, 0x3, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) r1 = socket(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) vmsplice(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)="f2e56f919e37fe091e2124fd40fa42abb995c09c4a38d535f59863a704e6539d07ac77ec083a9f1f6d0a7116d4570d8b33187a45366f9925017415ebe694406e2fbcdc96abff51d2519072d546594f088870688cfb7a8c609aad7fc2ff9a8b8535507c57a65ea1ac570c375164867fc930cff170d309152bfd796694c2a06f3c70eab50a2cd338829a591a5097f9da7401aff2dfe1a6751acb753f774b755632b1e35ce03684f51a72ef07a4bb5e23900e2a1396ee30d2d0640831f28dc562b53c047becd28e3f6cd9330bb0c5a1a872e7d6731f59341e4592d1a0c0", 0xdc}, {&(0x7f00000001c0)="b229a4a0bb90ff0e4690f0a7e16fd63ff6d1187fc1514c6cf24246531c6535377d121e8653367c6f6ee0ea0700ab7b2209e89aa01266ec6f09ce555f1fb6efa7ed2bf78450592d64e15d609c34d9cf1d4905cbe7ed724d614dfc696bb888727ad894d4ff", 0x64}, {&(0x7f0000000240)="08a01271941da077dd1471dfffaaef66b72b9ff6483bb471c271fc5b612b29d11cd99fafede994b88b42e32ba02f69bfff834802b6", 0x35}, {&(0x7f0000000280)="37a9be5861a8e502d485cc959c9e7f30877fb011976222ec36119f0c516e825918aa4e57e58e24d8b427483d8b20001d681b14d2a91eb59fdda719d18bdde1a177bd38e8c25580df05cd337a390893a8e56f2172ede787ab8a6c2bb16d7db9fc77b06b7c3cbca61be95fa5d412ea7fbfaa913029578db8d5cbfb978167a9bf0d205af7271f8ae2ce8e2aa190c42531d40da0d4ae6bb2de08926fa8c6d88b7c52bd7ce57993118bed534554e7253c041d7d898dcb5b1bff8a9e0f0ded3760fcd1896e2c2281d003ae9894a5753d5090", 0xcf}, {&(0x7f0000000380)="14e7f5e437e47d7f017ab0d712f154d0f9e0719ee1ed6fd54cc3f38836f61c7b07bdf7ab64ff0612720256f1d0e85593ee5a18a96a08de6c8db9188b9dcd5a6ac1389d98187f27d5fae2808333bf9eb73b8da8426274be87a111e198c7d161a01bb7e3e109b1394ed4c8ff8abb8ba29e6b902a507d564b35b45123f063616aa78d2959965f950a0346990efca902e45659d77c1abbbf2e24c5450105769471785f5e5c1d631b36b5d4e54c5d5fd5f15b758c098d11aeef3eeb9e262208e39e2f840abd0ebbb59ff332d28251ea938a4aa54f9b3e40", 0xd5}, {&(0x7f0000000500)="a3b4779e2d25c4a4535899ed46aa32e617f4a78a5968cfa72e2d86ec1b0dd02f00b4cea6363cc75b86abe3d21c70a0dbdaf892a285c8d218f39b3b2b60a6535e69097b5b5235fa3d6b9af3d78a51f73e2aabe3aa78dde448728c0d51d8c8e064720e3630c0ed325b5fd6488a", 0x6c}, {&(0x7f0000000580)="dbd6f871a1fd18a5ef3ec13c25cd211f39478eff21fa11d310973b3797a81a9f5e7ee94d960a8a435efb7ce30db2258ad8fec1b1944347ce85c90cc0930f7cd993376a97e3bf9b0a2900efd23e98331bd798e3388d2c", 0x56}], 0x7, 0x2) 08:55:41 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x50000000) [ 244.571494][T11403] block nbd1: Receive control failed (result -22) [ 244.579984][T12480] block nbd1: shutting down sockets [ 244.594330][T12481] block nbd0: shutting down sockets 08:55:41 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1262) [ 244.665921][T11403] block nbd2: Receive control failed (result -22) [ 244.672798][T11403] block nbd2: Receive control failed (result -22) [ 244.681355][T12464] block nbd2: shutting down sockets [ 244.746781][T12497] block nbd0: shutting down sockets [ 244.754792][T11403] block nbd1: Receive control failed (result -22) 08:55:41 executing program 2 (fault-call:7 fault-nth:1): r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 244.793128][T12501] block nbd1: shutting down sockets 08:55:41 executing program 1: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 244.833945][T12497] block nbd0: shutting down sockets [ 244.843208][T12506] FAULT_INJECTION: forcing a failure. [ 244.843208][T12506] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 244.856424][T12506] CPU: 0 PID: 12506 Comm: syz-executor.2 Not tainted 5.3.0-rc7+ #0 [ 244.864317][T12506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.874372][T12506] Call Trace: [ 244.877671][T12506] dump_stack+0x172/0x1f0 [ 244.882014][T12506] should_fail.cold+0xa/0x15 [ 244.886621][T12506] ? fault_create_debugfs_attr+0x180/0x180 [ 244.892432][T12506] ? lock_downgrade+0x920/0x920 [ 244.892453][T12506] should_fail_alloc_page+0x50/0x60 [ 244.892465][T12506] __alloc_pages_nodemask+0x1a1/0x900 [ 244.892483][T12506] ? __alloc_pages_slowpath+0x2520/0x2520 [ 244.902515][T12506] ? kernel_text_address+0x73/0xf0 [ 244.902531][T12506] ? unwind_get_return_address+0x61/0xa0 [ 244.902542][T12506] ? profile_setup.cold+0xbb/0xbb [ 244.902557][T12506] ? fault_create_debugfs_attr+0x180/0x180 [ 244.902574][T12506] cache_grow_begin+0x90/0xd20 [ 244.902592][T12506] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 244.902610][T12506] __kmalloc+0x6b2/0x770 [ 244.935159][T11403] block nbd1: Receive control failed (result -22) [ 244.935430][T12506] ? mark_held_locks+0xf0/0xf0 [ 244.946392][T12506] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 244.946406][T12506] tomoyo_realpath_from_path+0xcd/0x7b0 [ 244.946421][T12506] ? tomoyo_path_number_perm+0x193/0x520 [ 244.946438][T12506] tomoyo_path_number_perm+0x1dd/0x520 08:55:41 executing program 1: socket(0x1, 0x1, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x1ffffffff) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) [ 244.946451][T12506] ? tomoyo_path_number_perm+0x193/0x520 [ 244.946467][T12506] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 244.946481][T12506] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 244.946501][T12506] ? __kasan_check_read+0x11/0x20 [ 244.957141][T12506] ? __fget+0x384/0x560 [ 244.957165][T12506] ? ksys_dup3+0x3e0/0x3e0 [ 244.971720][T12507] block nbd1: shutting down sockets [ 244.973162][T12506] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 244.973183][T12506] ? fput_many+0x12c/0x1a0 [ 244.973200][T12506] tomoyo_file_ioctl+0x23/0x30 [ 244.973213][T12506] security_file_ioctl+0x77/0xc0 [ 244.973234][T12506] ksys_ioctl+0x57/0xd0 [ 245.045383][T12506] __x64_sys_ioctl+0x73/0xb0 [ 245.050055][T12506] do_syscall_64+0xfd/0x6a0 [ 245.054574][T12506] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 245.060481][T12506] RIP: 0033:0x459879 [ 245.064385][T12506] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 08:55:41 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x7fffeffb) [ 245.084007][T12506] RSP: 002b:00007f00952ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.092436][T12506] RAX: ffffffffffffffda RBX: 00007f00952ccc90 RCX: 0000000000459879 [ 245.100439][T12506] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 245.108427][T12506] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 245.116408][T12506] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f00952cd6d4 [ 245.124383][T12506] R13: 00000000004c3190 R14: 00000000004d68f8 R15: 0000000000000007 08:55:41 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1263) [ 245.140859][T11403] block nbd1: Receive control failed (result -22) [ 245.175649][T12510] block nbd1: shutting down sockets [ 245.221268][T12513] block nbd0: shutting down sockets 08:55:41 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0xa40f0000) [ 245.262650][T12513] block nbd0: shutting down sockets 08:55:41 executing program 1: socket(0x1, 0x1, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x1ffffffff) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 08:55:41 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1264) 08:55:41 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0xfbefff7f) [ 245.360754][T11403] block nbd1: Receive control failed (result -22) [ 245.385402][T12523] block nbd1: shutting down sockets [ 245.411430][T12526] block nbd0: shutting down sockets [ 245.422770][T11403] block nbd2: Receive control failed (result -22) [ 245.431525][T11403] block nbd2: Receive control failed (result -22) [ 245.441091][T12505] block nbd2: shutting down sockets 08:55:42 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x7ffffffff000) [ 245.477554][T12526] block nbd0: shutting down sockets 08:55:42 executing program 2 (fault-call:7 fault-nth:2): r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:42 executing program 1: socket(0x1, 0x1, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x1ffffffff) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 08:55:42 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0xf0ffffff7f0000) 08:55:42 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1265) [ 245.594969][T11403] block nbd1: Receive control failed (result -22) [ 245.634917][T12536] block nbd1: shutting down sockets 08:55:42 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x100000000000000) [ 245.670020][T12543] block nbd0: shutting down sockets 08:55:42 executing program 1: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 08:55:42 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x200000000000000) [ 245.727009][T12547] block nbd0: Device being setup by another task [ 245.742361][T12543] block nbd0: shutting down sockets [ 245.765946][T12549] block nbd1: shutting down sockets 08:55:42 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1267) 08:55:42 executing program 1: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 08:55:42 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x300000000000000) 08:55:42 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 245.949545][T12559] block nbd0: shutting down sockets [ 245.960217][T12562] block nbd1: shutting down sockets [ 245.979321][T12559] block nbd0: shutting down sockets 08:55:42 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x400000000000000) [ 246.036655][T11403] block nbd2: Receive control failed (result -22) [ 246.064106][T11403] block nbd2: Receive control failed (result -22) 08:55:42 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1268) [ 246.090787][T12567] block nbd2: shutting down sockets 08:55:42 executing program 1: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 08:55:42 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x1900000000000000) 08:55:42 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x2) [ 246.190215][T12576] block nbd1: shutting down sockets [ 246.200023][T12574] block nbd0: shutting down sockets 08:55:42 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x4000000000000000) [ 246.284617][T12584] block nbd2: shutting down sockets [ 246.315709][T12584] block nbd2: shutting down sockets 08:55:42 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1269) 08:55:42 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x10) 08:55:42 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x5000000000000000) [ 246.435144][T12591] block nbd0: shutting down sockets [ 246.444054][T12593] block nbd2: shutting down sockets 08:55:43 executing program 1 (fault-call:7 fault-nth:0): r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 246.478267][T12591] block nbd0: shutting down sockets [ 246.484932][T12593] block nbd2: shutting down sockets 08:55:43 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0xa40f000000000000) 08:55:43 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1274) [ 246.531379][T12601] FAULT_INJECTION: forcing a failure. [ 246.531379][T12601] name failslab, interval 1, probability 0, space 0, times 0 [ 246.574063][T12601] CPU: 1 PID: 12601 Comm: syz-executor.1 Not tainted 5.3.0-rc7+ #0 [ 246.581990][T12601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.592077][T12601] Call Trace: [ 246.595381][T12601] dump_stack+0x172/0x1f0 [ 246.599732][T12601] should_fail.cold+0xa/0x15 [ 246.604348][T12601] ? fault_create_debugfs_attr+0x180/0x180 [ 246.604365][T12601] ? ___might_sleep+0x163/0x280 [ 246.604383][T12601] __should_failslab+0x121/0x190 [ 246.604399][T12601] should_failslab+0x9/0x14 [ 246.604416][T12601] __kmalloc+0x2e0/0x770 [ 246.604431][T12601] ? mark_held_locks+0xf0/0xf0 [ 246.604445][T12601] ? _parse_integer+0x190/0x190 [ 246.604461][T12601] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 246.604475][T12601] tomoyo_realpath_from_path+0xcd/0x7b0 [ 246.604488][T12601] ? tomoyo_path_number_perm+0x193/0x520 [ 246.604506][T12601] tomoyo_path_number_perm+0x1dd/0x520 [ 246.604519][T12601] ? tomoyo_path_number_perm+0x193/0x520 [ 246.604534][T12601] ? tomoyo_execute_permission+0x4a0/0x4a0 08:55:43 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x301) [ 246.604548][T12601] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 246.604564][T12601] ? __kasan_check_read+0x11/0x20 [ 246.604584][T12601] ? __fget+0x384/0x560 [ 246.604598][T12601] ? ksys_dup3+0x3e0/0x3e0 [ 246.604611][T12601] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 246.604623][T12601] ? fput_many+0x12c/0x1a0 [ 246.604637][T12601] tomoyo_file_ioctl+0x23/0x30 [ 246.604651][T12601] security_file_ioctl+0x77/0xc0 [ 246.604664][T12601] ksys_ioctl+0x57/0xd0 [ 246.604677][T12601] __x64_sys_ioctl+0x73/0xb0 [ 246.604691][T12601] do_syscall_64+0xfd/0x6a0 [ 246.604707][T12601] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 246.604716][T12601] RIP: 0033:0x459879 [ 246.604729][T12601] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 246.604735][T12601] RSP: 002b:00007f02d1dfdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.604749][T12601] RAX: ffffffffffffffda RBX: 00007f02d1dfdc90 RCX: 0000000000459879 [ 246.604756][T12601] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 246.604763][T12601] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 246.604770][T12601] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f02d1dfe6d4 [ 246.604777][T12601] R13: 00000000004c3190 R14: 00000000004d68f8 R15: 0000000000000007 [ 246.630050][T12605] block nbd0: shutting down sockets [ 246.715063][T12601] ERROR: Out of memory at tomoyo_realpath_from_path. [ 246.725501][T12607] block nbd2: shutting down sockets 08:55:43 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0xfbefff7f00000000) 08:55:43 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1276) [ 246.768329][T12605] block nbd0: shutting down sockets [ 246.839531][T12607] block nbd2: shutting down sockets 08:55:43 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x125d) [ 246.895316][T11403] block nbd1: Receive control failed (result -22) [ 246.895321][T10653] block nbd1: Receive control failed (result -22) [ 246.932242][T12615] block nbd0: shutting down sockets [ 246.950547][T12617] block nbd2: shutting down sockets [ 246.974266][T12600] block nbd1: shutting down sockets 08:55:43 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0xffffffff00000000) 08:55:43 executing program 1 (fault-call:7 fault-nth:1): r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 246.996811][T12619] block nbd0: Device being setup by another task [ 247.016430][T12617] block nbd2: shutting down sockets [ 247.022369][T12615] block nbd0: shutting down sockets 08:55:43 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x125e) 08:55:43 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1277) [ 247.123853][T12625] FAULT_INJECTION: forcing a failure. [ 247.123853][T12625] name failslab, interval 1, probability 0, space 0, times 0 [ 247.154262][T12625] CPU: 1 PID: 12625 Comm: syz-executor.1 Not tainted 5.3.0-rc7+ #0 [ 247.162187][T12625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.172244][T12625] Call Trace: [ 247.175716][T12625] dump_stack+0x172/0x1f0 [ 247.180063][T12625] should_fail.cold+0xa/0x15 [ 247.184668][T12625] ? fault_create_debugfs_attr+0x180/0x180 [ 247.190483][T12625] ? ___might_sleep+0x163/0x280 [ 247.195343][T12625] __should_failslab+0x121/0x190 [ 247.200287][T12625] should_failslab+0x9/0x14 [ 247.204822][T12625] __kmalloc+0x2e0/0x770 [ 247.209064][T12625] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 247.215307][T12625] ? d_absolute_path+0x11b/0x170 [ 247.220246][T12625] ? __d_path+0x140/0x140 [ 247.224576][T12625] ? tomoyo_encode2.part.0+0xf5/0x400 [ 247.229948][T12625] tomoyo_encode2.part.0+0xf5/0x400 [ 247.235147][T12625] tomoyo_encode+0x2b/0x50 [ 247.239561][T12625] tomoyo_realpath_from_path+0x1d3/0x7b0 [ 247.245198][T12625] tomoyo_path_number_perm+0x1dd/0x520 [ 247.250668][T12625] ? tomoyo_path_number_perm+0x193/0x520 [ 247.256306][T12625] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 247.262130][T12625] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 247.268378][T12625] ? __kasan_check_read+0x11/0x20 [ 247.273410][T12625] ? __fget+0x384/0x560 [ 247.277570][T12625] ? ksys_dup3+0x3e0/0x3e0 [ 247.281991][T12625] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 247.288236][T12625] ? fput_many+0x12c/0x1a0 [ 247.292663][T12625] tomoyo_file_ioctl+0x23/0x30 [ 247.297431][T12625] security_file_ioctl+0x77/0xc0 [ 247.302372][T12625] ksys_ioctl+0x57/0xd0 [ 247.306529][T12625] __x64_sys_ioctl+0x73/0xb0 [ 247.311120][T12625] do_syscall_64+0xfd/0x6a0 [ 247.315624][T12625] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 247.321518][T12625] RIP: 0033:0x459879 [ 247.325411][T12625] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 247.345018][T12625] RSP: 002b:00007f02d1dfdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.353438][T12625] RAX: ffffffffffffffda RBX: 00007f02d1dfdc90 RCX: 0000000000459879 [ 247.361414][T12625] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 08:55:43 executing program 4: syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) r0 = socket(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x0) [ 247.369409][T12625] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 247.377383][T12625] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f02d1dfe6d4 [ 247.385355][T12625] R13: 00000000004c3190 R14: 00000000004d68f8 R15: 0000000000000007 [ 247.427734][T12627] block nbd0: shutting down sockets 08:55:44 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1278) [ 247.459434][T12631] block nbd2: shutting down sockets [ 247.464852][T12627] block nbd0: shutting down sockets [ 247.496096][T12631] block nbd2: shutting down sockets 08:55:44 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) [ 247.515667][T12625] ERROR: Out of memory at tomoyo_realpath_from_path. [ 247.542429][T11403] block nbd1: Receive control failed (result -22) [ 247.542443][T10653] block nbd1: Receive control failed (result -22) [ 247.558470][T12622] block nbd1: shutting down sockets 08:55:44 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x125f) 08:55:44 executing program 1 (fault-call:7 fault-nth:2): r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 247.624627][T12638] block nbd0: shutting down sockets 08:55:44 executing program 4: pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x0) [ 247.664621][T12644] block nbd0: Device being setup by another task [ 247.690832][T12638] block nbd0: shutting down sockets [ 247.715246][T12645] block nbd2: shutting down sockets [ 247.748536][T12650] FAULT_INJECTION: forcing a failure. [ 247.748536][T12650] name failslab, interval 1, probability 0, space 0, times 0 [ 247.786388][T12645] block nbd2: shutting down sockets [ 247.798304][T12650] CPU: 1 PID: 12650 Comm: syz-executor.1 Not tainted 5.3.0-rc7+ #0 [ 247.806218][T12650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.816278][T12650] Call Trace: [ 247.819577][T12650] dump_stack+0x172/0x1f0 [ 247.823924][T12650] should_fail.cold+0xa/0x15 [ 247.828526][T12650] ? fault_create_debugfs_attr+0x180/0x180 [ 247.834348][T12650] ? ___might_sleep+0x163/0x280 [ 247.839212][T12650] __should_failslab+0x121/0x190 [ 247.844189][T12650] should_failslab+0x9/0x14 [ 247.848701][T12650] __kmalloc+0x2e0/0x770 [ 247.852950][T12650] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 247.859199][T12650] ? d_absolute_path+0x11b/0x170 [ 247.864141][T12650] ? __d_path+0x140/0x140 [ 247.868475][T12650] ? tomoyo_encode2.part.0+0xf5/0x400 [ 247.873848][T12650] tomoyo_encode2.part.0+0xf5/0x400 [ 247.879056][T12650] tomoyo_encode+0x2b/0x50 [ 247.883477][T12650] tomoyo_realpath_from_path+0x1d3/0x7b0 [ 247.889123][T12650] tomoyo_path_number_perm+0x1dd/0x520 [ 247.894595][T12650] ? tomoyo_path_number_perm+0x193/0x520 [ 247.900246][T12650] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 247.906056][T12650] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 247.912307][T12650] ? __kasan_check_read+0x11/0x20 [ 247.917346][T12650] ? __fget+0x384/0x560 [ 247.921506][T12650] ? ksys_dup3+0x3e0/0x3e0 [ 247.925928][T12650] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 247.932174][T12650] ? fput_many+0x12c/0x1a0 [ 247.936595][T12650] tomoyo_file_ioctl+0x23/0x30 [ 247.941360][T12650] security_file_ioctl+0x77/0xc0 [ 247.946297][T12650] ksys_ioctl+0x57/0xd0 [ 247.950460][T12650] __x64_sys_ioctl+0x73/0xb0 [ 247.955054][T12650] do_syscall_64+0xfd/0x6a0 [ 247.959564][T12650] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 247.965450][T12650] RIP: 0033:0x459879 [ 247.969343][T12650] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 247.988953][T12650] RSP: 002b:00007f02d1dfdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.997367][T12650] RAX: ffffffffffffffda RBX: 00007f02d1dfdc90 RCX: 0000000000459879 [ 248.005350][T12650] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 248.013332][T12650] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 248.021744][T12650] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f02d1dfe6d4 [ 248.029722][T12650] R13: 00000000004c3190 R14: 00000000004d68f8 R15: 0000000000000007 08:55:44 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1260) 08:55:44 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1279) [ 248.048698][T12650] ERROR: Out of memory at tomoyo_realpath_from_path. [ 248.055730][T10653] block nbd1: Receive control failed (result -22) [ 248.055750][T11403] block nbd1: Receive control failed (result -22) [ 248.087283][T12647] block nbd1: shutting down sockets [ 248.100630][T12655] block nbd0: shutting down sockets [ 248.109472][T12657] block nbd2: shutting down sockets 08:55:44 executing program 1 (fault-call:7 fault-nth:3): r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 248.153945][T12657] block nbd2: shutting down sockets [ 248.174015][T12655] block nbd0: shutting down sockets [ 248.233120][T12662] FAULT_INJECTION: forcing a failure. [ 248.233120][T12662] name failslab, interval 1, probability 0, space 0, times 0 [ 248.252223][T12662] CPU: 0 PID: 12662 Comm: syz-executor.1 Not tainted 5.3.0-rc7+ #0 [ 248.260150][T12662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.270212][T12662] Call Trace: [ 248.270234][T12662] dump_stack+0x172/0x1f0 [ 248.270252][T12662] should_fail.cold+0xa/0x15 [ 248.270268][T12662] ? fault_create_debugfs_attr+0x180/0x180 [ 248.270280][T12662] ? page_to_nid.part.0+0x20/0x20 [ 248.270296][T12662] ? ___might_sleep+0x163/0x280 [ 248.270313][T12662] __should_failslab+0x121/0x190 [ 248.270332][T12662] should_failslab+0x9/0x14 [ 248.282512][T12662] kmem_cache_alloc+0x2aa/0x710 [ 248.312374][T12662] ? is_bpf_text_address+0xac/0x170 [ 248.317588][T12662] ? mark_held_locks+0xf0/0xf0 [ 248.322358][T12662] __kernfs_new_node+0xf0/0x6c0 [ 248.327215][T12662] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 248.332675][T12662] ? lock_acquire+0x190/0x410 [ 248.337360][T12662] ? blk_mq_update_nr_hw_queues+0x8d/0xd20 [ 248.343176][T12662] ? blk_mq_update_nr_hw_queues+0x9b0/0xd20 [ 248.349509][T12662] ? __kasan_check_read+0x11/0x20 [ 248.354542][T12662] ? disk_part_iter_next+0x41a/0x6c0 [ 248.359829][T12662] ? __kasan_check_read+0x11/0x20 [ 248.364961][T12662] kernfs_new_node+0x96/0x120 [ 248.369639][T12662] __kernfs_create_file+0x51/0x33b [ 248.375274][T12662] sysfs_add_file_mode_ns+0x222/0x560 [ 248.380651][T12662] sysfs_create_file_ns+0x141/0x1d0 [ 248.385854][T12662] ? sysfs_add_file_mode_ns+0x560/0x560 [ 248.391406][T12662] ? blk_mq_init_queue+0xb0/0xb0 [ 248.396362][T12662] device_create_file+0xf6/0x1e0 [ 248.401305][T12662] nbd_start_device+0x31d/0xac0 [ 248.406164][T12662] nbd_ioctl+0x5d5/0xc40 [ 248.410414][T12662] ? nbd_release+0x150/0x150 [ 248.415122][T12662] ? lock_downgrade+0x920/0x920 [ 248.420235][T12662] ? trace_hardirqs_on+0x67/0x240 [ 248.425270][T12662] ? nbd_release+0x150/0x150 08:55:44 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1261) 08:55:44 executing program 4: pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000440)="f9", 0xfffffdac) write$P9_RLCREATE(r0, &(0x7f0000000000)={0x18, 0xf, 0x1, {{0x8, 0x3, 0x2}, 0x80000000}}, 0x18) pipe(&(0x7f0000000e00)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/dlm-monitor\x00', 0x40000, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r4 = accept4(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000040)) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000100)={0x8001, 0x4, 0x7, 0x6, 0x3, 0x0, 0x3}, 0xc) r5 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f00000002c0)=0xe8) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r9, 0x0) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket(0x1, 0x1, 0x0) bind$unix(r12, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) getsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000000540)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000640)=0xe8) r14 = socket(0x1, 0x1, 0x0) bind$unix(r14, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) getsockopt$inet_IP_XFRM_POLICY(r14, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000780)=0xe8) lstat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) r17 = socket(0x1, 0x1, 0x0) bind$unix(r17, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) getsockopt$inet6_IPV6_IPSEC_POLICY(r17, 0x29, 0x22, &(0x7f0000000d00)={{{@in6=@ipv4={[], [], @remote}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000880)=0xfffffffffffffd33) lstat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = getgid() r22 = socket(0x1, 0x1, 0x0) bind$unix(r22, &(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e) fstat(r22, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000001000100000000000200072f", @ANYRES32=r6, @ANYBLOB="02000000", @ANYRES32=r7, @ANYBLOB="02000000", @ANYRES32=r9, @ANYBLOB="02000700", @ANYRES32=r10, @ANYBLOB="02000500", @ANYRES32=r11, @ANYBLOB="0200f88a", @ANYRES32=r13, @ANYBLOB="02000000", @ANYRES32=r15, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r16, @ANYBLOB="02000100", @ANYRES32=r18, @ANYBLOB="3b87ceb447b6d505a30c019e4d21", @ANYRES32=r19, @ANYBLOB="08000500", @ANYRES32=r20, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000200", @ANYRES32=r21, @ANYBLOB="08000300", @ANYRES32=r23, @ANYBLOB="10000c00000000002000040000000000"], 0x94, 0x1) [ 248.429876][T12662] blkdev_ioctl+0xedb/0x1c1a [ 248.434816][T12662] ? blkpg_ioctl+0xa90/0xa90 [ 248.439414][T12662] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 248.445226][T12662] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 248.451474][T12662] ? __kasan_check_read+0x11/0x20 [ 248.456500][T12662] block_ioctl+0xee/0x130 [ 248.460834][T12662] ? blkdev_fallocate+0x410/0x410 [ 248.465861][T12662] do_vfs_ioctl+0xdb6/0x13e0 [ 248.470457][T12662] ? ioctl_preallocate+0x210/0x210 [ 248.475568][T12662] ? __fget+0x384/0x560 [ 248.479733][T12662] ? ksys_dup3+0x3e0/0x3e0 [ 248.484164][T12662] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 248.490421][T12662] ? fput_many+0x12c/0x1a0 [ 248.494837][T12662] ? tomoyo_file_ioctl+0x23/0x30 [ 248.499776][T12662] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 248.506025][T12662] ? security_file_ioctl+0x8d/0xc0 [ 248.507068][T12664] block nbd2: shutting down sockets [ 248.511136][T12662] ksys_ioctl+0xab/0xd0 [ 248.511150][T12662] __x64_sys_ioctl+0x73/0xb0 [ 248.511168][T12662] do_syscall_64+0xfd/0x6a0 08:55:45 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x127a) [ 248.529558][T12662] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 248.535444][T12662] RIP: 0033:0x459879 [ 248.539334][T12662] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 248.543018][T12664] block nbd2: shutting down sockets [ 248.558947][T12662] RSP: 002b:00007f02d1dfdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.558961][T12662] RAX: ffffffffffffffda RBX: 00007f02d1dfdc90 RCX: 0000000000459879 [ 248.558968][T12662] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 248.558974][T12662] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 248.558980][T12662] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f02d1dfe6d4 [ 248.558986][T12662] R13: 00000000004c3190 R14: 00000000004d68f8 R15: 0000000000000007 [ 248.636457][T12662] block nbd1: device_create_file failed! [ 248.651797][T12668] block nbd0: shutting down sockets [ 248.653679][T12661] block nbd1: shutting down sockets [ 248.675809][T12668] block nbd0: shutting down sockets 08:55:45 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x127b) 08:55:45 executing program 1 (fault-call:7 fault-nth:4): r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:45 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1262) [ 248.801120][T12682] FAULT_INJECTION: forcing a failure. [ 248.801120][T12682] name failslab, interval 1, probability 0, space 0, times 0 [ 248.810463][T12679] block nbd2: shutting down sockets [ 248.820982][T12678] block nbd0: shutting down sockets [ 248.848205][T12678] block nbd0: shutting down sockets [ 248.850949][T12679] block nbd2: shutting down sockets [ 248.868185][T12682] CPU: 0 PID: 12682 Comm: syz-executor.1 Not tainted 5.3.0-rc7+ #0 [ 248.876109][T12682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.886599][T12682] Call Trace: [ 248.890517][T12682] dump_stack+0x172/0x1f0 [ 248.894863][T12682] should_fail.cold+0xa/0x15 [ 248.899458][T12682] ? save_stack+0x23/0x90 [ 248.903799][T12682] ? fault_create_debugfs_attr+0x180/0x180 [ 248.903816][T12682] ? page_to_nid.part.0+0x20/0x20 [ 248.903831][T12682] ? ___might_sleep+0x163/0x280 [ 248.903847][T12682] __should_failslab+0x121/0x190 [ 248.903861][T12682] should_failslab+0x9/0x14 [ 248.903871][T12682] kmem_cache_alloc+0x2aa/0x710 [ 248.903892][T12682] ? radix_tree_iter_tag_clear+0x61/0x90 [ 248.916524][T12682] __d_alloc+0x2e/0x8c0 08:55:45 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1263) [ 248.945363][T12682] d_alloc+0x4d/0x280 [ 248.949355][T12682] ? lock_acquire+0x190/0x410 [ 248.954040][T12682] d_alloc_parallel+0xf4/0x1c30 [ 248.958894][T12682] ? kernfs_activate+0x192/0x1f0 [ 248.963834][T12682] ? __kasan_check_read+0x11/0x20 [ 248.968862][T12682] ? __mutex_lock+0x45d/0x13c0 [ 248.973637][T12682] ? __d_lookup_rcu+0x6c0/0x6c0 [ 248.978497][T12682] ? __kasan_check_write+0x14/0x20 [ 248.983627][T12682] ? lockdep_init_map+0x1be/0x6d0 [ 248.988665][T12682] ? lockdep_init_map+0x1be/0x6d0 [ 248.993696][T12682] __lookup_slow+0x1ab/0x500 [ 248.998292][T12682] ? vfs_unlink+0x620/0x620 [ 249.002801][T12682] ? lookup_dcache+0x23/0x140 [ 249.007481][T12682] ? d_lookup+0x19e/0x260 [ 249.011813][T12682] lookup_one_len+0x16d/0x1a0 [ 249.016491][T12682] ? lookup_one_len_unlocked+0x100/0x100 [ 249.022126][T12682] ? do_raw_spin_unlock+0x57/0x270 [ 249.027236][T12682] ? mntput+0x74/0xa0 [ 249.031223][T12682] start_creating+0xc5/0x1d0 [ 249.035827][T12682] debugfs_create_dir+0x26/0x380 [ 249.040766][T12682] nbd_start_device+0x3b5/0xac0 [ 249.045618][T12682] nbd_ioctl+0x5d5/0xc40 [ 249.049867][T12682] ? nbd_release+0x150/0x150 [ 249.054491][T12682] ? lock_downgrade+0x920/0x920 [ 249.059339][T12682] ? trace_hardirqs_on+0x67/0x240 [ 249.064354][T12682] ? nbd_release+0x150/0x150 [ 249.064371][T12682] blkdev_ioctl+0xedb/0x1c1a [ 249.064384][T12682] ? blkpg_ioctl+0xa90/0xa90 [ 249.064400][T12682] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 249.064418][T12682] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 249.090205][T12682] ? __kasan_check_read+0x11/0x20 [ 249.095244][T12682] block_ioctl+0xee/0x130 08:55:45 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x127c) [ 249.099580][T12682] ? blkdev_fallocate+0x410/0x410 [ 249.104614][T12682] do_vfs_ioctl+0xdb6/0x13e0 [ 249.109210][T12682] ? ioctl_preallocate+0x210/0x210 [ 249.114330][T12682] ? __fget+0x384/0x560 [ 249.118493][T12682] ? ksys_dup3+0x3e0/0x3e0 [ 249.122912][T12682] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 249.129155][T12682] ? fput_many+0x12c/0x1a0 [ 249.133581][T12682] ? tomoyo_file_ioctl+0x23/0x30 [ 249.138628][T12682] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 249.144868][T12682] ? security_file_ioctl+0x8d/0xc0 [ 249.149995][T12682] ksys_ioctl+0xab/0xd0 [ 249.154185][T12682] __x64_sys_ioctl+0x73/0xb0 [ 249.158779][T12682] do_syscall_64+0xfd/0x6a0 [ 249.163288][T12682] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 249.169622][T12682] RIP: 0033:0x459879 [ 249.174474][T12682] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 249.194084][T12682] RSP: 002b:00007f02d1dfdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.202768][T12682] RAX: ffffffffffffffda RBX: 00007f02d1dfdc90 RCX: 0000000000459879 [ 249.210754][T12682] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 249.218728][T12682] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 249.226705][T12682] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f02d1dfe6d4 [ 249.234679][T12682] R13: 00000000004c3190 R14: 00000000004d68f8 R15: 0000000000000007 [ 249.253294][T12684] block nbd2: shutting down sockets [ 249.273901][T12684] block nbd2: shutting down sockets [ 249.280985][T12686] block nbd0: shutting down sockets [ 249.307026][T11403] block nbd1: Receive control failed (result -22) [ 249.309247][T10653] block nbd1: Receive control failed (result -22) 08:55:45 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1264) 08:55:45 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x127d) [ 249.335564][T12677] block nbd1: shutting down sockets 08:55:45 executing program 1 (fault-call:7 fault-nth:5): r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 249.391829][T12692] block nbd2: shutting down sockets 08:55:46 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) set_tid_address(&(0x7f0000000000)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x620080, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000100)="64516d44c2a50f78ab7b6cd05a908e32fbc2c76a1b80514833f0468d3716f6d998d1da164659e933c4b4e8e2df7c49f91c81e52201", 0x35}, {&(0x7f0000000140)="af7f03e0727d6f9cbcad0b90e7391d3f73694b719836bd727146a567097f19bdd11e39d36564f0071b201ebf9c9762dfe5ba577c7cb966479e1b08d92bcbb64cd9c91d48a3ba8e9eb4cab5ffea6723a43f523948087aa1535f631c228f38280066cf3136aef52a887388cb2932728c1d71d31043779dec736f51d22616fe3007a4706a751b9393add79f06e6944a5c37e3194c0e1ac6ffe6ee08cb38213ee26cfa5c8737c3449db3f12cdaf8a11afdcff510ed2a04c63e9f426b359e0c7214d90772885cd0c398fcaf094ce526cc303a2584b8c85044dfc1f54fc5184a71b5f44c0137b52949ddb1ff8561333ed8fd4a63c9129e3155fb50", 0x22c}], 0x2, 0x0) [ 249.452031][T12692] block nbd2: shutting down sockets [ 249.463268][T12697] FAULT_INJECTION: forcing a failure. [ 249.463268][T12697] name failslab, interval 1, probability 0, space 0, times 0 [ 249.477631][T12698] block nbd0: shutting down sockets [ 249.518048][T12698] block nbd0: shutting down sockets [ 249.526760][T12697] CPU: 0 PID: 12697 Comm: syz-executor.1 Not tainted 5.3.0-rc7+ #0 [ 249.534774][T12697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.545879][T12697] Call Trace: [ 249.549187][T12697] dump_stack+0x172/0x1f0 [ 249.553533][T12697] should_fail.cold+0xa/0x15 [ 249.558182][T12697] ? fault_create_debugfs_attr+0x180/0x180 [ 249.564000][T12697] ? page_to_nid.part.0+0x20/0x20 [ 249.569206][T12697] ? ___might_sleep+0x163/0x280 [ 249.574067][T12697] __should_failslab+0x121/0x190 [ 249.579014][T12697] should_failslab+0x9/0x14 [ 249.584329][T12697] kmem_cache_alloc+0x2aa/0x710 [ 249.589190][T12697] ? lookup_one_len+0x10e/0x1a0 [ 249.594308][T12697] ? lookup_one_len_unlocked+0x100/0x100 [ 249.599954][T12697] alloc_inode+0x16f/0x1e0 [ 249.604377][T12697] new_inode_pseudo+0x19/0xf0 [ 249.609056][T12697] new_inode+0x1f/0x40 [ 249.613128][T12697] debugfs_get_inode+0x1a/0x130 [ 249.617986][T12697] debugfs_create_dir+0x7a/0x380 [ 249.623041][T12697] nbd_start_device+0x3b5/0xac0 [ 249.627900][T12697] nbd_ioctl+0x5d5/0xc40 [ 249.632153][T12697] ? nbd_release+0x150/0x150 [ 249.636753][T12697] ? lock_downgrade+0x920/0x920 [ 249.641620][T12697] ? trace_hardirqs_on+0x67/0x240 [ 249.646649][T12697] ? nbd_release+0x150/0x150 [ 249.651249][T12697] blkdev_ioctl+0xedb/0x1c1a [ 249.655853][T12697] ? blkpg_ioctl+0xa90/0xa90 [ 249.660453][T12697] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 249.666266][T12697] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 249.672511][T12697] ? __kasan_check_read+0x11/0x20 [ 249.677539][T12697] block_ioctl+0xee/0x130 [ 249.681884][T12697] ? blkdev_fallocate+0x410/0x410 [ 249.686929][T12697] do_vfs_ioctl+0xdb6/0x13e0 [ 249.691534][T12697] ? ioctl_preallocate+0x210/0x210 [ 249.696648][T12697] ? __fget+0x384/0x560 [ 249.700809][T12697] ? ksys_dup3+0x3e0/0x3e0 [ 249.705227][T12697] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 249.711477][T12697] ? fput_many+0x12c/0x1a0 [ 249.715905][T12697] ? tomoyo_file_ioctl+0x23/0x30 [ 249.720942][T12697] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 249.727186][T12697] ? security_file_ioctl+0x8d/0xc0 [ 249.732309][T12697] ksys_ioctl+0xab/0xd0 [ 249.736561][T12697] __x64_sys_ioctl+0x73/0xb0 [ 249.741166][T12697] do_syscall_64+0xfd/0x6a0 [ 249.745680][T12697] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 249.751576][T12697] RIP: 0033:0x459879 [ 249.755476][T12697] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 249.776040][T12697] RSP: 002b:00007f02d1dfdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.784497][T12697] RAX: ffffffffffffffda RBX: 00007f02d1dfdc90 RCX: 0000000000459879 [ 249.792488][T12697] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 249.800473][T12697] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 249.808468][T12697] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f02d1dfe6d4 08:55:46 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6ff80d31, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0x3) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) 08:55:46 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1265) [ 249.817226][T12697] R13: 00000000004c3190 R14: 00000000004d68f8 R15: 0000000000000007 08:55:46 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x127e) 08:55:46 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200100, 0x0) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000100)) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)="1b6ca9655327772490ecf884929e549843af5c8c88b40eb29156301dc4180570e8c1ddf100b5698bb04a89e6325c", 0x2e}], 0x1, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x2b, @loopback, 0x4e21, 0x2, 'fo\x00', 0x0, 0x3, 0x9}, 0x2c) [ 249.881659][T12697] debugfs: out of free dentries, can not create directory 'nbd1' [ 249.900426][T10653] block nbd1: Receive control failed (result -22) [ 249.907574][T10653] block nbd1: Receive control failed (result -22) [ 249.920626][T12695] block nbd1: shutting down sockets 08:55:46 executing program 1 (fault-call:7 fault-nth:6): r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 249.961950][T12712] block nbd0: shutting down sockets [ 249.962668][T12710] block nbd2: shutting down sockets [ 249.988588][T12712] block nbd0: shutting down sockets 08:55:46 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x127f) [ 250.045040][T12718] block nbd2: Device being setup by another task 08:55:46 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/\xe0\xac\xc2_lO\xf9\xff#\x00', 0x5, 0x401438140) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) syz_open_dev$mouse(0x0, 0x9dae, 0x80080) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x2) ioctl$int_in(r2, 0x800000c0045002, &(0x7f0000000040)) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000040), 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000300)={0xfffffffffffffe50}, 0xfde1) pwritev(r0, &(0x7f00000000c0), 0x100000e6, 0x0) 08:55:46 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1267) [ 250.086868][T12721] FAULT_INJECTION: forcing a failure. [ 250.086868][T12721] name failslab, interval 1, probability 0, space 0, times 0 [ 250.102230][T12718] block nbd2: shutting down sockets [ 250.121047][T12723] block nbd0: shutting down sockets [ 250.172202][T12721] CPU: 1 PID: 12721 Comm: syz-executor.1 Not tainted 5.3.0-rc7+ #0 [ 250.177693][T12723] block nbd0: shutting down sockets [ 250.180142][T12721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.195386][T12721] Call Trace: [ 250.198691][T12721] dump_stack+0x172/0x1f0 [ 250.203030][T12721] should_fail.cold+0xa/0x15 [ 250.207612][T12721] ? fault_create_debugfs_attr+0x180/0x180 [ 250.213850][T12721] ? page_to_nid.part.0+0x20/0x20 [ 250.218879][T12721] ? ___might_sleep+0x163/0x280 [ 250.223733][T12721] __should_failslab+0x121/0x190 [ 250.228665][T12721] should_failslab+0x9/0x14 [ 250.233162][T12721] kmem_cache_alloc+0x2aa/0x710 [ 250.237997][T12721] ? is_bpf_text_address+0xd3/0x170 [ 250.243181][T12721] __d_alloc+0x2e/0x8c0 [ 250.247323][T12721] d_alloc+0x4d/0x280 [ 250.251383][T12721] d_alloc_parallel+0xf4/0x1c30 [ 250.256221][T12721] ? stack_trace_save+0xac/0xe0 [ 250.261074][T12721] ? __kasan_check_read+0x11/0x20 [ 250.266089][T12721] ? __d_lookup_rcu+0x6c0/0x6c0 [ 250.270923][T12721] ? save_stack+0x5c/0x90 [ 250.275237][T12721] ? save_stack+0x23/0x90 [ 250.279548][T12721] ? kasan_slab_alloc+0xf/0x20 [ 250.284295][T12721] ? lockdep_init_map+0x1be/0x6d0 [ 250.289326][T12721] ? lockdep_init_map+0x1be/0x6d0 [ 250.296772][T12721] __lookup_slow+0x1ab/0x500 [ 250.301354][T12721] ? vfs_unlink+0x620/0x620 [ 250.305849][T12721] ? lookup_dcache+0x23/0x140 [ 250.310791][T12721] ? d_lookup+0x19e/0x260 [ 250.315107][T12721] lookup_one_len+0x16d/0x1a0 [ 250.319766][T12721] ? lookup_one_len_unlocked+0x100/0x100 [ 250.325381][T12721] ? do_raw_spin_unlock+0x57/0x270 [ 250.330475][T12721] ? mntput+0x74/0xa0 [ 250.334444][T12721] start_creating+0xc5/0x1d0 [ 250.339452][T12721] __debugfs_create_file+0x65/0x3c0 [ 250.344635][T12721] debugfs_create_file+0x5a/0x70 [ 250.349566][T12721] nbd_start_device+0x40d/0xac0 [ 250.354402][T12721] nbd_ioctl+0x5d5/0xc40 [ 250.358630][T12721] ? nbd_release+0x150/0x150 [ 250.363206][T12721] ? lock_downgrade+0x920/0x920 [ 250.368061][T12721] ? trace_hardirqs_on+0x67/0x240 [ 250.373070][T12721] ? nbd_release+0x150/0x150 [ 250.377659][T12721] blkdev_ioctl+0xedb/0x1c1a [ 250.382243][T12721] ? blkpg_ioctl+0xa90/0xa90 [ 250.386817][T12721] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 250.392617][T12721] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 250.399034][T12721] ? __kasan_check_read+0x11/0x20 [ 250.404053][T12721] block_ioctl+0xee/0x130 [ 250.408368][T12721] ? blkdev_fallocate+0x410/0x410 [ 250.413547][T12721] do_vfs_ioctl+0xdb6/0x13e0 [ 250.418118][T12721] ? ioctl_preallocate+0x210/0x210 [ 250.423211][T12721] ? __fget+0x384/0x560 [ 250.427354][T12721] ? ksys_dup3+0x3e0/0x3e0 [ 250.431759][T12721] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 250.437981][T12721] ? fput_many+0x12c/0x1a0 [ 250.442384][T12721] ? tomoyo_file_ioctl+0x23/0x30 [ 250.447306][T12721] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 250.453527][T12721] ? security_file_ioctl+0x8d/0xc0 [ 250.458621][T12721] ksys_ioctl+0xab/0xd0 [ 250.462846][T12721] __x64_sys_ioctl+0x73/0xb0 [ 250.467435][T12721] do_syscall_64+0xfd/0x6a0 [ 250.471938][T12721] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 250.477898][T12721] RIP: 0033:0x459879 [ 250.481775][T12721] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 250.501374][T12721] RSP: 002b:00007f02d1dfdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.509777][T12721] RAX: ffffffffffffffda RBX: 00007f02d1dfdc90 RCX: 0000000000459879 [ 250.517742][T12721] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 250.525708][T12721] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 250.533681][T12721] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f02d1dfe6d4 [ 250.541648][T12721] R13: 00000000004c3190 R14: 00000000004d68f8 R15: 0000000000000007 08:55:47 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f0000000000), 0x0, 0x0) [ 250.591884][T12730] block nbd2: shutting down sockets 08:55:47 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x3b66) [ 250.627442][T10653] block nbd1: Receive control failed (result -22) [ 250.634112][T10653] block nbd1: Receive control failed (result -22) [ 250.661163][T12730] block nbd2: shutting down sockets 08:55:47 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1268) [ 250.697200][T12720] block nbd1: shutting down sockets [ 250.718902][T12735] block nbd0: shutting down sockets [ 250.772685][T12735] block nbd0: shutting down sockets 08:55:47 executing program 1 (fault-call:7 fault-nth:7): r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) 08:55:47 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x4c00) 08:55:47 executing program 4: ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000000)) r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x0) [ 250.842964][T12740] block nbd2: shutting down sockets [ 250.891015][T12747] FAULT_INJECTION: forcing a failure. [ 250.891015][T12747] name failslab, interval 1, probability 0, space 0, times 0 [ 250.920583][T12740] block nbd2: shutting down sockets [ 250.922807][T12748] block nbd0: shutting down sockets [ 250.937769][T12747] CPU: 0 PID: 12747 Comm: syz-executor.1 Not tainted 5.3.0-rc7+ #0 [ 250.945683][T12747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.955919][T12747] Call Trace: [ 250.959215][T12747] dump_stack+0x172/0x1f0 [ 250.963583][T12747] should_fail.cold+0xa/0x15 [ 250.968188][T12747] ? fault_create_debugfs_attr+0x180/0x180 [ 250.974004][T12747] ? page_to_nid.part.0+0x20/0x20 [ 250.979731][T12747] ? ___might_sleep+0x163/0x280 [ 250.984621][T12747] __should_failslab+0x121/0x190 [ 250.989567][T12747] should_failslab+0x9/0x14 [ 250.994078][T12747] kmem_cache_alloc+0x2aa/0x710 [ 250.998937][T12747] ? lookup_one_len+0x10e/0x1a0 [ 251.003800][T12747] ? lookup_one_len_unlocked+0x100/0x100 [ 251.009443][T12747] alloc_inode+0x16f/0x1e0 [ 251.013869][T12747] new_inode_pseudo+0x19/0xf0 [ 251.018552][T12747] new_inode+0x1f/0x40 [ 251.022626][T12747] debugfs_get_inode+0x1a/0x130 [ 251.027480][T12747] __debugfs_create_file+0xb7/0x3c0 [ 251.032688][T12747] debugfs_create_file+0x5a/0x70 [ 251.037638][T12747] nbd_start_device+0x40d/0xac0 [ 251.042496][T12747] nbd_ioctl+0x5d5/0xc40 [ 251.046749][T12747] ? nbd_release+0x150/0x150 [ 251.051434][T12747] ? lock_downgrade+0x920/0x920 [ 251.056286][T12747] ? trace_hardirqs_on+0x67/0x240 [ 251.061320][T12747] ? nbd_release+0x150/0x150 [ 251.065923][T12747] blkdev_ioctl+0xedb/0x1c1a [ 251.070522][T12747] ? blkpg_ioctl+0xa90/0xa90 [ 251.075378][T12747] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 251.081188][T12747] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 251.087438][T12747] ? __kasan_check_read+0x11/0x20 [ 251.092480][T12747] block_ioctl+0xee/0x130 [ 251.096813][T12747] ? blkdev_fallocate+0x410/0x410 [ 251.102026][T12747] do_vfs_ioctl+0xdb6/0x13e0 [ 251.106620][T12747] ? ioctl_preallocate+0x210/0x210 [ 251.111731][T12747] ? __fget+0x384/0x560 [ 251.115888][T12747] ? ksys_dup3+0x3e0/0x3e0 [ 251.120476][T12747] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 251.126713][T12747] ? fput_many+0x12c/0x1a0 [ 251.131129][T12747] ? tomoyo_file_ioctl+0x23/0x30 [ 251.136066][T12747] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 251.142304][T12747] ? security_file_ioctl+0x8d/0xc0 [ 251.147416][T12747] ksys_ioctl+0xab/0xd0 [ 251.151572][T12747] __x64_sys_ioctl+0x73/0xb0 [ 251.156173][T12747] do_syscall_64+0xfd/0x6a0 [ 251.160672][T12747] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 251.166553][T12747] RIP: 0033:0x459879 [ 251.170444][T12747] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 251.190047][T12747] RSP: 002b:00007f02d1dfdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.198464][T12747] RAX: ffffffffffffffda RBX: 00007f02d1dfdc90 RCX: 0000000000459879 [ 251.206437][T12747] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 251.214414][T12747] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 251.222388][T12747] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f02d1dfe6d4 [ 251.230370][T12747] R13: 00000000004c3190 R14: 00000000004d68f8 R15: 0000000000000007 08:55:47 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000680)={0x7, &(0x7f0000000000)=""/87, &(0x7f00000005c0)=[{0x3, 0xdc, 0x1, &(0x7f0000000100)=""/220}, {0x1, 0x25, 0x4c8, &(0x7f0000000200)=""/37}, {0x1, 0xda, 0xc691, &(0x7f0000000240)=""/218}, {0x9, 0xec, 0x7, &(0x7f0000000340)=""/236}, {0xd2, 0x4e, 0x0, &(0x7f0000000440)=""/78}, {0x79ddbbce, 0x65, 0x2, &(0x7f00000004c0)=""/101}, {0x4, 0x44, 0x3, &(0x7f0000000540)=""/68}]}) 08:55:47 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1269) 08:55:47 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x4c01) [ 251.297191][T12747] debugfs: out of free dentries, can not create file 'tasks' [ 251.304841][T10653] block nbd1: Receive control failed (result -22) [ 251.311383][T10653] block nbd1: Receive control failed (result -22) [ 251.336907][T12762] block nbd2: shutting down sockets [ 251.364149][T12746] block nbd1: shutting down sockets [ 251.380884][T12766] block nbd0: shutting down sockets [ 251.388083][T12762] block nbd2: shutting down sockets 08:55:47 executing program 1 (fault-call:7 fault-nth:8): r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 251.419602][T12766] block nbd0: shutting down sockets 08:55:48 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1274) 08:55:48 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x5380) [ 251.528378][T12774] block nbd2: shutting down sockets [ 251.547290][T12774] block nbd2: shutting down sockets [ 251.572728][T12776] block nbd0: shutting down sockets 08:55:48 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1276) [ 251.617735][T12776] block nbd0: shutting down sockets [ 251.660411][T12781] block nbd2: shutting down sockets 08:55:48 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x540b) [ 251.697164][T12781] block nbd2: shutting down sockets [ 251.713468][T12779] FAULT_INJECTION: forcing a failure. [ 251.713468][T12779] name failslab, interval 1, probability 0, space 0, times 0 08:55:48 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1277) [ 251.753145][T12784] block nbd0: shutting down sockets 08:55:48 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x5421) [ 251.798281][T12784] block nbd0: shutting down sockets [ 251.808575][T12787] block nbd2: shutting down sockets [ 251.834372][T12787] block nbd2: shutting down sockets [ 251.884207][T12790] block nbd0: shutting down sockets [ 251.912206][T12779] CPU: 0 PID: 12779 Comm: syz-executor.1 Not tainted 5.3.0-rc7+ #0 [ 251.920126][T12779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.930179][T12779] Call Trace: [ 251.933476][T12779] dump_stack+0x172/0x1f0 [ 251.935861][T12790] block nbd0: shutting down sockets [ 251.937810][T12779] should_fail.cold+0xa/0x15 [ 251.937833][T12779] ? fault_create_debugfs_attr+0x180/0x180 [ 251.953364][T12779] ? page_to_nid.part.0+0x20/0x20 [ 251.958391][T12779] ? ___might_sleep+0x163/0x280 [ 251.963245][T12779] __should_failslab+0x121/0x190 [ 251.968968][T12779] should_failslab+0x9/0x14 [ 251.973470][T12779] kmem_cache_alloc+0x2aa/0x710 [ 251.978329][T12779] ? mark_held_locks+0xf0/0xf0 [ 251.983095][T12779] __kernfs_new_node+0xf0/0x6c0 [ 251.987944][T12779] ? lock_acquire+0x190/0x410 [ 251.992625][T12779] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 251.998080][T12779] ? kernfs_activate+0x192/0x1f0 [ 252.003014][T12779] ? __mutex_lock+0x45d/0x13c0 [ 252.007780][T12779] ? lock_downgrade+0x920/0x920 [ 252.012629][T12779] ? kernfs_activate+0x34/0x1f0 [ 252.017488][T12779] ? __mutex_lock+0x45d/0x13c0 [ 252.022254][T12779] ? __kasan_check_read+0x11/0x20 [ 252.027283][T12779] ? mutex_lock_io_nested+0x1260/0x1260 [ 252.032854][T12779] kernfs_new_node+0x96/0x120 [ 252.037539][T12779] __kernfs_create_file+0x51/0x33b [ 252.044391][T12779] sysfs_add_file_mode_ns+0x222/0x560 [ 252.049771][T12779] internal_create_group+0x359/0xc30 [ 252.055063][T12779] ? remove_files.isra.0+0x190/0x190 [ 252.060350][T12779] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 252.066594][T12779] ? sysfs_create_dir_ns+0x186/0x290 [ 252.071883][T12779] ? sysfs_create_mount_point+0xa0/0xa0 [ 252.077432][T12779] internal_create_groups.part.0+0x90/0x140 [ 252.083338][T12779] sysfs_create_groups+0x2a/0x50 [ 252.088282][T12779] kobject_add_internal.cold+0x31f/0x662 [ 252.093923][T12779] kobject_add+0x150/0x1c0 [ 252.098341][T12779] ? kset_create_and_add+0x1a0/0x1a0 [ 252.103629][T12779] ? __sanitizer_cov_trace_cmp4+0x16/0x20 08:55:48 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x5423) 08:55:48 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1278) [ 252.109356][T12779] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 252.115599][T12779] ? find_next_and_bit+0x19a/0x200 [ 252.120717][T12779] blk_mq_register_hctx+0x12a/0x300 [ 252.125919][T12779] blk_mq_sysfs_register+0x144/0x1b8 [ 252.131209][T12779] blk_mq_update_nr_hw_queues+0x6cb/0xd20 [ 252.136934][T12779] ? blk_mq_init_queue+0xb0/0xb0 [ 252.141875][T12779] ? refcount_dec_and_test_checked+0x1b/0x20 [ 252.147872][T12779] ? apparmor_capable+0x2ed/0x630 [ 252.151900][T12792] block nbd0: shutting down sockets [ 252.152901][T12779] ? cap_capable+0x205/0x270 [ 252.152918][T12779] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 252.152934][T12779] nbd_start_device+0x14c/0xac0 [ 252.152951][T12779] nbd_ioctl+0x5d5/0xc40 [ 252.152966][T12779] ? nbd_release+0x150/0x150 [ 252.152982][T12779] ? lock_downgrade+0x920/0x920 [ 252.152993][T12779] ? trace_hardirqs_on+0x67/0x240 [ 252.153009][T12779] ? nbd_release+0x150/0x150 [ 252.197241][T12779] blkdev_ioctl+0xedb/0x1c1a [ 252.198008][T12795] block nbd0: Device being setup by another task [ 252.201837][T12779] ? blkpg_ioctl+0xa90/0xa90 [ 252.201859][T12779] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 252.218570][T12779] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 252.224843][T12779] ? __kasan_check_read+0x11/0x20 [ 252.226670][T12792] block nbd0: shutting down sockets [ 252.229870][T12779] block_ioctl+0xee/0x130 [ 252.229886][T12779] ? blkdev_fallocate+0x410/0x410 [ 252.244941][T12779] do_vfs_ioctl+0xdb6/0x13e0 [ 252.249543][T12779] ? ioctl_preallocate+0x210/0x210 [ 252.254661][T12779] ? __fget+0x384/0x560 [ 252.258844][T12779] ? ksys_dup3+0x3e0/0x3e0 [ 252.263293][T12779] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 252.269554][T12779] ? fput_many+0x12c/0x1a0 [ 252.274002][T12779] ? tomoyo_file_ioctl+0x23/0x30 [ 252.278994][T12779] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 252.283383][T12793] block nbd2: shutting down sockets [ 252.285245][T12779] ? security_file_ioctl+0x8d/0xc0 [ 252.295644][T12779] ksys_ioctl+0xab/0xd0 [ 252.299865][T12779] __x64_sys_ioctl+0x73/0xb0 [ 252.304575][T12779] do_syscall_64+0xfd/0x6a0 [ 252.309090][T12779] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 252.314990][T12779] RIP: 0033:0x459879 [ 252.318975][T12779] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 252.338594][T12779] RSP: 002b:00007f02d1ddcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.347032][T12779] RAX: ffffffffffffffda RBX: 00007f02d1ddcc90 RCX: 0000000000459879 [ 252.355026][T12779] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 252.355126][T12793] block nbd2: shutting down sockets [ 252.363021][T12779] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 252.363029][T12779] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f02d1ddd6d4 [ 252.363035][T12779] R13: 00000000004c3190 R14: 00000000004d68f8 R15: 0000000000000006 [ 252.432377][T12779] kobject_add_internal failed for 0 (error: -12 parent: mq) [ 252.456194][T10653] block nbd1: Receive control failed (result -22) 08:55:49 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x20804, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000100)={0x1d, r2}, 0x10) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x0) [ 252.480263][T12779] block nbd1: shutting down sockets 08:55:49 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x5435) 08:55:49 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1279) 08:55:49 executing program 1: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 252.555389][T12802] block nbd0: shutting down sockets [ 252.571892][T12805] block nbd2: shutting down sockets [ 252.619179][T12802] block nbd0: shutting down sockets [ 252.630429][T12805] block nbd2: shutting down sockets 08:55:49 executing program 2: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x127a) 08:55:49 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x401000001) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000440)="f9", 0xfffffdac) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x6) fstatfs(0xffffffffffffffff, &(0x7f0000000000)=""/19) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x5}], 0x100000000000002f, 0x0) 08:55:49 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x5450) [ 252.743058][T12812] ------------[ cut here ]------------ [ 252.748754][T12812] kernfs: can not remove 'nr_tags', no directory [ 252.758896][T12814] block nbd2: shutting down sockets [ 252.775805][T12817] block nbd0: shutting down sockets [ 252.779645][T12812] WARNING: CPU: 0 PID: 12812 at fs/kernfs/dir.c:1503 kernfs_remove_by_name_ns+0x9f/0xb0 [ 252.790737][T12812] Kernel panic - not syncing: panic_on_warn set ... [ 252.797326][T12812] CPU: 0 PID: 12812 Comm: syz-executor.1 Not tainted 5.3.0-rc7+ #0 [ 252.805221][T12812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.815269][T12812] Call Trace: [ 252.818570][T12812] dump_stack+0x172/0x1f0 [ 252.822906][T12812] ? kernfs_remove_self+0x3c0/0x3e0 [ 252.826000][T12817] block nbd0: shutting down sockets [ 252.828112][T12812] panic+0x2dc/0x755 [ 252.828129][T12812] ? add_taint.cold+0x16/0x16 [ 252.838242][T12814] block nbd2: shutting down sockets [ 252.841846][T12812] ? __kasan_check_write+0x14/0x20 [ 252.841866][T12812] ? __warn.cold+0x5/0x4c [ 252.856463][T12812] ? __warn+0xe7/0x1e0 [ 252.856478][T12812] ? kernfs_remove_by_name_ns+0x9f/0xb0 [ 252.856490][T12812] __warn.cold+0x20/0x4c [ 252.856503][T12812] ? kernfs_remove_by_name_ns+0x9f/0xb0 [ 252.856518][T12812] report_bug+0x263/0x2b0 [ 252.856533][T12812] do_error_trap+0x11b/0x200 [ 252.856547][T12812] do_invalid_op+0x37/0x50 [ 252.856557][T12812] ? kernfs_remove_by_name_ns+0x9f/0xb0 [ 252.856570][T12812] invalid_op+0x23/0x30 [ 252.856582][T12812] RIP: 0010:kernfs_remove_by_name_ns+0x9f/0xb0 [ 252.856595][T12812] Code: 97 ff 48 c7 c7 20 0d ea 88 41 bc fe ff ff ff e8 87 e9 61 05 eb d7 e8 a0 2c 97 ff 4c 89 ee 48 c7 c7 a0 78 99 87 e8 09 b5 68 ff <0f> 0b 41 bc fe ff ff ff eb b9 0f 1f 80 00 00 00 00 55 48 89 e5 41 [ 252.856601][T12812] RSP: 0018:ffff888055347798 EFLAGS: 00010286 [ 252.856611][T12812] RAX: 0000000000000000 RBX: ffffffff89134b48 RCX: 0000000000000000 [ 252.856618][T12812] RDX: 0000000000000003 RSI: ffffffff815c26f6 RDI: ffffed100aa68ee5 [ 252.856626][T12812] RBP: ffff8880553477b0 R08: 0000000000200000 R09: 0000000000007ec0 [ 252.856632][T12812] R10: 00000000000fd808 R11: 000000000001fafc R12: 0000000000000000 [ 252.856640][T12812] R13: ffffffff87c4bec0 R14: 0000000000000000 R15: ffffffff87c4be00 [ 252.856656][T12812] ? vprintk_func+0x86/0x189 [ 252.856670][T12812] ? kernfs_remove_by_name_ns+0x9f/0xb0 [ 252.856688][T12812] remove_files.isra.0+0x7b/0x190 [ 252.856701][T12812] sysfs_remove_group+0xb6/0x1b0 [ 252.856713][T12812] ? kernfs_put+0x380/0x590 [ 252.856726][T12812] sysfs_remove_groups+0x61/0xb0 [ 252.856739][T12812] kobject_del+0x9c/0x170 [ 252.856755][T12812] blk_mq_unregister_hctx.part.0+0x126/0x170 [ 252.856770][T12812] blk_mq_sysfs_unregister+0x16b/0x200 [ 252.856786][T12812] blk_mq_update_nr_hw_queues+0x4f9/0xd20 [ 252.856799][T12812] ? __kasan_slab_free+0x31/0x150 [ 252.856813][T12812] ? blk_mq_init_queue+0xb0/0xb0 [ 252.856826][T12812] ? refcount_dec_and_test_checked+0x1b/0x20 [ 252.856839][T12812] ? apparmor_capable+0x2ed/0x630 [ 252.856851][T12812] ? cap_capable+0x205/0x270 [ 252.856866][T12812] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 252.856882][T12812] nbd_start_device+0x14c/0xac0 [ 252.856899][T12812] nbd_ioctl+0x5d5/0xc40 [ 252.856914][T12812] ? nbd_release+0x150/0x150 [ 252.856929][T12812] ? lock_downgrade+0x920/0x920 [ 252.856942][T12812] ? trace_hardirqs_on+0x67/0x240 [ 252.856954][T12812] ? nbd_release+0x150/0x150 [ 252.856968][T12812] blkdev_ioctl+0xedb/0x1c1a [ 252.856981][T12812] ? blkpg_ioctl+0xa90/0xa90 [ 252.856997][T12812] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 252.857007][T12812] ? __kasan_check_read+0x11/0x20 [ 252.857023][T12812] ? __kasan_check_read+0x11/0x20 [ 252.857039][T12812] block_ioctl+0xee/0x130 [ 252.857050][T12812] ? blkdev_fallocate+0x410/0x410 [ 252.857063][T12812] do_vfs_ioctl+0xdb6/0x13e0 [ 252.857076][T12812] ? ioctl_preallocate+0x210/0x210 [ 252.857088][T12812] ? __fget+0x384/0x560 [ 252.857102][T12812] ? ksys_dup3+0x3e0/0x3e0 [ 252.857114][T12812] ? nsecs_to_jiffies+0x30/0x30 [ 252.857128][T12812] ? tomoyo_file_ioctl+0x23/0x30 [ 252.857141][T12812] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 252.857154][T12812] ? security_file_ioctl+0x8d/0xc0 [ 252.857166][T12812] ksys_ioctl+0xab/0xd0 [ 252.857180][T12812] __x64_sys_ioctl+0x73/0xb0 [ 252.857195][T12812] do_syscall_64+0xfd/0x6a0 [ 252.857209][T12812] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 252.857218][T12812] RIP: 0033:0x459879 [ 252.857229][T12812] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 252.857235][T12812] RSP: 002b:00007f02d1dfdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.857246][T12812] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000459879 [ 252.857253][T12812] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 252.857260][T12812] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 252.857266][T12812] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f02d1dfe6d4 [ 252.857274][T12812] R13: 00000000004c3190 R14: 00000000004d68f8 R15: 00000000ffffffff [ 252.858488][T12812] Kernel Offset: disabled [ 253.260121][T12812] Rebooting in 86400 seconds..