_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, 0x0) 23:38:00 executing program 1: clock_getres(0x6, &(0x7f0000000000)) 23:38:00 executing program 5: syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x2) ioctl$I2C_TENBIT(0xffffffffffffffff, 0x704, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x810, 0xffffffffffffffff, 0x10000000) 23:38:00 executing program 2: sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000001214000429bd7000ffdba635cc00651a965400002026c1a639a151666103ec8bf07c734568351217c6858e797a6061c92e7db17a1243e4b95ad0a9e1ea3dcea320ae5199749113b9d260ebafa6416acb5ea4cc0f7bacba95d7f4b07deeae2adcaf09b1600b88f7f933d23f2f366e437683b9b5ab539a3fbbcb65f5dce342d6b776bebfe2d9b3e7997c34c1a5bdba8bbd52e5a1519acb7967ac355ed8beca16027925e2b54a274447322c60e18226fe8cea1ddfe7803f78c135b2beeaa0d9410ebfd35a9cdcfe37181ce54ac93f9fbca55eee5f01d3095d7b2d1aa8"], 0x18}}, 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d00)={'wpan4\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}}, 0x40010) r4 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000005c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0008fefffffffdd3df35160000000c000600000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="08000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=r9, @ANYBLOB], 0x48}}, 0x240000f4) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r5, 0x306, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x150) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r10, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000025bd7000fddbdf252a0000000a0001007770616e3400000005003700000000000a0001007770616e30000000"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x20008800) ioctl$BINDER_WRITE_READ(r4, 0x40046205, 0x0) 23:38:00 executing program 4: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x22801, 0x0) read$rfkill(r0, &(0x7f0000000080), 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000000)={'erspan0\x00', 0x0}) 23:38:00 executing program 3: mq_open(0x0, 0x40, 0x1, &(0x7f0000000040)={0x0, 0x3, 0x8000000000000000, 0xffffffff}) 23:38:00 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, 0x0) 23:38:00 executing program 1: clock_getres(0x0, &(0x7f0000000000)) 23:38:00 executing program 5: syz_extract_tcp_res(&(0x7f0000000000), 0x1000, 0x101) r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 23:38:00 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) recvfrom$packet(r1, &(0x7f0000000000)=""/88, 0x58, 0x0, &(0x7f0000000080)={0x11, 0x15, 0x0, 0x1, 0x4, 0x6, @random="a224fc729c88"}, 0x14) 23:38:00 executing program 3: mq_open(&(0x7f0000000000)='ip_vti0\x00', 0x0, 0x1, &(0x7f0000000040)={0x0, 0x3, 0x8000000000000000, 0xffffffff}) 23:38:00 executing program 0: sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000001214000429bd7000ffdba635cc00651a965400002026c1a639a151666103ec8bf07c734568351217c6858e797a6061c92e7db17a1243e4b95ad0a9e1ea3dcea320ae5199749113b9d260ebafa6416acb5ea4cc0f7bacba95d7f4b07deeae2adcaf09b1600b88f7f933d23f2f366e437683b9b5ab539a3fbbcb65f5dce342d6b776bebfe2d9b3e7997c34c1a5bdba8bbd52e5a1519acb7967ac355ed8beca16027925e2b54a274447322c60e18226fe8cea1ddfe7803f78c135b2beeaa0d9410ebfd35a9cdcfe37181ce54ac93f9fbca55eee5f01d3095d7b2d1aa8"], 0x18}}, 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d00)={'wpan4\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}}, 0x40010) r4 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000005c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0008fefffffffdd3df35160000000c000600000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="08000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=r9, @ANYBLOB], 0x48}}, 0x240000f4) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r5, 0x306, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x150) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r10, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000025bd7000fddbdf252a0000000a0001007770616e3400000005003700000000000a0001007770616e30000000"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x20008800) ioctl$BINDER_WRITE_READ(r4, 0x40046205, 0x0) 23:38:00 executing program 1: clock_getres(0x0, &(0x7f0000000000)) [ 1031.032470][T11695] binder: 11692:11695 ioctl 40046205 0 returned -22 [ 1031.045494][T11681] binder: 11675:11681 ioctl 40046205 0 returned -22 [ 1031.065240][T11698] binder: 11692:11698 ioctl 40046205 0 returned -22 23:38:00 executing program 2: clock_getres(0x6, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:00 executing program 3: mq_open(&(0x7f0000000000)='ip_vti0\x00', 0x0, 0x1, &(0x7f0000000040)={0x0, 0x3, 0x8000000000000000, 0xffffffff}) 23:38:00 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x200) 23:38:00 executing program 1: clock_getres(0x0, &(0x7f0000000000)) 23:38:00 executing program 2: clock_getres(0x6, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) [ 1031.263879][T11703] binder: 11697:11703 ioctl 40046205 0 returned -22 23:38:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, r3, 0x205, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040011}, 0x20000090) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4008004}, 0x4000) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) socket$packet(0x11, 0x3, 0x300) 23:38:00 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, r3, 0x205, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040011}, 0x20000090) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4008004}, 0x4000) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) socket$packet(0x11, 0x3, 0x300) 23:38:00 executing program 3: mq_open(&(0x7f0000000000)='ip_vti0\x00', 0x0, 0x1, &(0x7f0000000040)={0x0, 0x3, 0x8000000000000000, 0xffffffff}) [ 1031.317706][T11718] binder: 11712:11718 ioctl 40046205 0 returned -22 23:38:00 executing program 1: clock_getres(0x6, 0x0) [ 1031.377065][T11718] binder: 11712:11718 ioctl 40046205 0 returned -22 23:38:00 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x8) write$char_usb(r1, &(0x7f0000000040)="301658db00dd1c80309b2ff2ae725f1afac1390b0d867e8285f90ff92a0c5015ec410c988919e96a5ad4fb01eddc7d1a2705869314e21966f9ef25b5fbd17d1d1577d3ae0e0f773bdac69d63f86036a33b589df308efcb3d4681615bcaba423d5c96d27f82e79d94a79be1823dc2ac05b9ef1b4fae91ec380148ee3fa4fc90b8cae7", 0x82) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 23:38:01 executing program 2: clock_getres(0x6, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) [ 1031.449635][T11725] binder: 11723:11725 ioctl 40046205 0 returned -22 [ 1031.465507][T11728] binder: 11724:11728 ioctl 40046205 0 returned -22 23:38:01 executing program 3: mq_open(&(0x7f0000000000)='ip_vti0\x00', 0x40, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x8000000000000000, 0xffffffff}) 23:38:01 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, r3, 0x205, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040011}, 0x20000090) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4008004}, 0x4000) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) socket$packet(0x11, 0x3, 0x300) [ 1031.535332][T11734] binder: 11732:11734 ioctl 40046205 0 returned -22 23:38:01 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, r3, 0x205, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040011}, 0x20000090) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4008004}, 0x4000) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) socket$packet(0x11, 0x3, 0x300) 23:38:01 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 23:38:01 executing program 2: clock_getres(0x6, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) 23:38:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000007, 0x88813, r1, 0x10000000) [ 1031.688346][T11741] binder: 11739:11741 ioctl 40046205 0 returned -22 23:38:01 executing program 3: mq_open(&(0x7f0000000000)='ip_vti0\x00', 0x40, 0x0, 0x0) 23:38:01 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x1e2) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) [ 1031.738285][T11748] binder: 11743:11748 ioctl 40046205 0 returned -22 [ 1031.740789][T11745] binder: 11742:11745 ioctl 40046205 0 returned -22 [ 1031.757985][T11749] binder: 11746:11749 ioctl 40046205 0 returned -22 23:38:01 executing program 2: clock_getres(0x6, &(0x7f0000000000)) 23:38:01 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, r3, 0x205, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040011}, 0x20000090) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4008004}, 0x4000) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) socket$packet(0x11, 0x3, 0x300) [ 1031.809917][T11752] binder: 11743:11752 ioctl 40046205 0 returned -22 [ 1031.825415][T11756] binder: 11754:11756 ioctl 40046205 0 returned -22 23:38:01 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0xc03) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80000044) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000040)={0xe6e, 0x0, 0x3ff, 0xdc}) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x800) 23:38:01 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x1e2) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 23:38:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000007, 0x88813, r1, 0x10000000) 23:38:01 executing program 3: mq_open(&(0x7f0000000000)='ip_vti0\x00', 0x40, 0x0, 0x0) 23:38:01 executing program 2: clock_getres(0x0, &(0x7f0000000000)) 23:38:01 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, r3, 0x205, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040011}, 0x20000090) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4008004}, 0x4000) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) [ 1031.943215][T11761] binder: 11759:11761 ioctl 40046205 0 returned -22 [ 1032.063184][T11764] binder: 11763:11764 ioctl 40046205 0 returned -22 [ 1032.082297][T11764] binder: 11763:11764 ioctl 40046205 0 returned -22 23:38:01 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000000c0), 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000080)={0xe7d, 0x8, [0x7fffffff, 0x9]}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x400400, 0x0) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x20) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x91) 23:38:01 executing program 2: clock_getres(0x0, &(0x7f0000000000)) 23:38:01 executing program 3: mq_open(&(0x7f0000000000)='ip_vti0\x00', 0x40, 0x0, 0x0) [ 1032.125588][T11774] binder: 11767:11774 ioctl 40046205 0 returned -22 [ 1032.135185][T11772] binder: 11766:11772 ioctl 40046205 0 returned -22 [ 1032.146467][T11776] binder: 11768:11776 ioctl 40046205 0 returned -22 23:38:01 executing program 4: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, r2, 0x205, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040011}, 0x20000090) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4008004}, 0x4000) 23:38:01 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = io_uring_setup(0x475, &(0x7f0000000080)={0x0, 0xb85a, 0x2, 0x1, 0x360, 0x0, r1}) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x2000c0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x7510c2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000200)={0x48d463d2, 0x0, &(0x7f00000001c0)=[r3, r0, r4, r0]}, 0x4) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) io_uring_setup(0x10016f3, &(0x7f0000000000)={0x0, 0xaf99, 0x10, 0x2, 0x10000056, 0x0, r1}) 23:38:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000007, 0x88813, r1, 0x10000000) 23:38:01 executing program 2: clock_getres(0x0, &(0x7f0000000000)) [ 1032.278133][T11781] binder: 11777:11781 ioctl 40046205 0 returned -22 23:38:01 executing program 3: mq_open(&(0x7f0000000000)='ip_vti0\x00', 0x40, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x8000000000000000, 0xffffffff}) 23:38:01 executing program 5: mq_open(&(0x7f0000000000)='ip_vti0\x00', 0x40, 0x0, 0x0) [ 1032.336610][T11781] binder: 11777:11781 ioctl 40046205 0 returned -22 [ 1032.363394][T11790] binder: 11786:11790 ioctl 40046205 0 returned -22 23:38:01 executing program 4: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4008004}, 0x4000) [ 1032.381981][T11791] binder: 11785:11791 ioctl 40046205 0 returned -22 23:38:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000007, 0x88813, r1, 0x10000000) 23:38:02 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = io_uring_setup(0x475, &(0x7f0000000080)={0x0, 0xb85a, 0x2, 0x1, 0x360, 0x0, r1}) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x2000c0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x7510c2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000200)={0x48d463d2, 0x0, &(0x7f00000001c0)=[r3, r0, r4, r0]}, 0x4) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) io_uring_setup(0x10016f3, &(0x7f0000000000)={0x0, 0xaf99, 0x10, 0x2, 0x10000056, 0x0, r1}) 23:38:02 executing program 2: clock_getres(0x6, 0x0) 23:38:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x58, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_ID={0x4c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x40}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x90}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080), 0x0, 0x6) ioctl$BINDER_WRITE_READ(r1, 0x40046207, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x4a000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x4, 0x0, 0x1f], 0x3, 0xc00, 0x0, 0xffffffffffffffff}) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0xffffffff) read$rfkill(r2, &(0x7f0000000040), 0x8) 23:38:02 executing program 4: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4008004}, 0x4000) 23:38:02 executing program 3: mq_open(&(0x7f0000000000)='ip_vti0\x00', 0x40, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x8000000000000000, 0xffffffff}) [ 1032.596152][T11806] binder: 11805:11806 ioctl 40046205 0 returned -22 [ 1032.609596][T11807] binder: 11804:11807 ioctl 40046205 0 returned -22 23:38:02 executing program 2: mq_open(&(0x7f0000000000)='ip_vti0\x00', 0x40, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x8000000000000000, 0xffffffff}) 23:38:02 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = io_uring_setup(0x475, &(0x7f0000000080)={0x0, 0xb85a, 0x2, 0x1, 0x360, 0x0, r1}) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x2000c0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x7510c2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000200)={0x48d463d2, 0x0, &(0x7f00000001c0)=[r3, r0, r4, r0]}, 0x4) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) io_uring_setup(0x10016f3, &(0x7f0000000000)={0x0, 0xaf99, 0x10, 0x2, 0x10000056, 0x0, r1}) 23:38:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000007, 0x88813, r1, 0x10000000) 23:38:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x58, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_ID={0x4c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x40}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x90}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080), 0x0, 0x6) ioctl$BINDER_WRITE_READ(r1, 0x40046207, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x4a000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x4, 0x0, 0x1f], 0x3, 0xc00, 0x0, 0xffffffffffffffff}) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0xffffffff) read$rfkill(r2, &(0x7f0000000040), 0x8) 23:38:02 executing program 3: mq_open(&(0x7f0000000000)='ip_vti0\x00', 0x40, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x8000000000000000, 0xffffffff}) 23:38:02 executing program 2: mq_open(&(0x7f0000000000)='ip_vti0\x00', 0x40, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x8000000000000000, 0xffffffff}) 23:38:02 executing program 4: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4008004}, 0x4000) 23:38:02 executing program 3: mq_open(&(0x7f0000000000)='ip_vti0\x00', 0x40, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x0, 0xffffffff}) [ 1032.838694][T11822] binder: 11819:11822 ioctl 40046205 0 returned -22 [ 1032.846738][T11823] binder: 11820:11823 ioctl 40046205 0 returned -22 23:38:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000007, 0x88813, r1, 0x10000000) 23:38:02 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = io_uring_setup(0x475, &(0x7f0000000080)={0x0, 0xb85a, 0x2, 0x1, 0x360, 0x0, r1}) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x2000c0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x7510c2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000200)={0x48d463d2, 0x0, &(0x7f00000001c0)=[r3, r0, r4, r0]}, 0x4) io_uring_setup(0x10016f3, &(0x7f0000000000)={0x0, 0xaf99, 0x10, 0x2, 0x10000056, 0x0, r1}) 23:38:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x58, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_ID={0x4c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x40}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x90}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080), 0x0, 0x6) ioctl$BINDER_WRITE_READ(r1, 0x40046207, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x4a000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x4, 0x0, 0x1f], 0x3, 0xc00, 0x0, 0xffffffffffffffff}) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0xffffffff) read$rfkill(r2, &(0x7f0000000040), 0x8) 23:38:02 executing program 2: mq_open(&(0x7f0000000000)='ip_vti0\x00', 0x40, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x8000000000000000, 0xffffffff}) 23:38:02 executing program 4: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4008004}, 0x4000) [ 1033.003766][T11834] binder: 11833:11834 ioctl 40046205 0 returned -22 23:38:02 executing program 3: mq_open(&(0x7f0000000000)='ip_vti0\x00', 0x40, 0x0, &(0x7f0000000040)={0x0, 0x3}) 23:38:02 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_setup(0x475, &(0x7f0000000080)={0x0, 0xb85a, 0x2, 0x1, 0x360, 0x0, r1}) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x2000c0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x7510c2, 0x0) io_uring_setup(0x10016f3, &(0x7f0000000000)={0x0, 0xaf99, 0x10, 0x2, 0x10000056, 0x0, r1}) 23:38:02 executing program 2: mq_open(0x0, 0x40, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x8000000000000000, 0xffffffff}) [ 1033.084581][T11842] binder: 11836:11842 ioctl 40046205 0 returned -22 23:38:02 executing program 4: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4008004}, 0x4000) 23:38:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x58, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_ID={0x4c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x40}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x90}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080), 0x0, 0x6) ioctl$BINDER_WRITE_READ(r1, 0x40046207, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x4a000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x4, 0x0, 0x1f], 0x3, 0xc00}) read$rfkill(r2, &(0x7f0000000040), 0x8) 23:38:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000007, 0x88813, r1, 0x10000000) 23:38:02 executing program 2: mq_open(0x0, 0x40, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x8000000000000000, 0xffffffff}) 23:38:02 executing program 3: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4008004}, 0x4000) [ 1033.282649][T11855] binder: 11849:11855 ioctl 40046205 0 returned -22 23:38:02 executing program 4: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4008004}, 0x4000) 23:38:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x58, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_ID={0x4c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x40}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x90}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080), 0x0, 0x6) ioctl$BINDER_WRITE_READ(r1, 0x40046207, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x4a000, 0x0) read$rfkill(r2, &(0x7f0000000040), 0x8) [ 1033.329676][T11858] binder: 11856:11858 ioctl 40046205 0 returned -22 23:38:02 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_setup(0x475, &(0x7f0000000080)={0x0, 0xb85a, 0x2, 0x1, 0x360, 0x0, r1}) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x2000c0) io_uring_setup(0x10016f3, &(0x7f0000000000)={0x0, 0xaf99, 0x10, 0x2, 0x10000056, 0x0, r1}) 23:38:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000007, 0x88813, r1, 0x10000000) 23:38:02 executing program 2: mq_open(0x0, 0x40, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x8000000000000000, 0xffffffff}) 23:38:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x58, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_ID={0x4c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x40}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x90}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080), 0x0, 0x6) ioctl$BINDER_WRITE_READ(r1, 0x40046207, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x4a000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x4, 0x0, 0x1f], 0x3, 0xc00}) read$rfkill(r2, &(0x7f0000000040), 0x8) 23:38:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4008004}, 0x4000) 23:38:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x58, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_ID={0x4c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x40}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x90}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080), 0x0, 0x6) ioctl$BINDER_WRITE_READ(r1, 0x40046207, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) [ 1033.539440][T11873] binder: 11868:11873 ioctl 40046205 0 returned -22 [ 1033.552403][T11874] binder: 11870:11874 ioctl 40046205 0 returned -22 23:38:03 executing program 2: mq_open(&(0x7f0000000000)='ip_vti0\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x8000000000000000, 0xffffffff}) 23:38:03 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_setup(0x475, &(0x7f0000000080)={0x0, 0xb85a, 0x2, 0x1, 0x360, 0x0, r1}) io_uring_setup(0x10016f3, &(0x7f0000000000)={0x0, 0xaf99, 0x10, 0x2, 0x10000056, 0x0, r1}) 23:38:03 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000007, 0x88813, 0xffffffffffffffff, 0x10000000) 23:38:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x58, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_ID={0x4c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x40}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x90}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080), 0x0, 0x6) ioctl$BINDER_WRITE_READ(r1, 0x40046207, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x4a000, 0x0) read$rfkill(r2, &(0x7f0000000040), 0x8) 23:38:03 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4008004}, 0x4000) 23:38:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x58, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_ID={0x4c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x40}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x90}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080), 0x0, 0x6) ioctl$BINDER_WRITE_READ(r1, 0x40046207, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) 23:38:03 executing program 2: mq_open(&(0x7f0000000000)='ip_vti0\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x8000000000000000, 0xffffffff}) [ 1033.759408][T11890] binder: 11885:11890 ioctl 40046205 0 returned -22 [ 1033.780444][T11891] binder: 11886:11891 ioctl 40046205 0 returned -22 23:38:03 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000007, 0x88813, 0xffffffffffffffff, 0x10000000) 23:38:03 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4008004}, 0x4000) 23:38:03 executing program 3: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4008004}, 0x4000) 23:38:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x58, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_ID={0x4c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x40}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x90}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080), 0x0, 0x6) ioctl$BINDER_WRITE_READ(r1, 0x40046207, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) 23:38:03 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_setup(0x10016f3, &(0x7f0000000000)={0x0, 0xaf99, 0x10, 0x2, 0x10000056, 0x0, r1}) 23:38:03 executing program 2: mq_open(&(0x7f0000000000)='ip_vti0\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x8000000000000000, 0xffffffff}) 23:38:03 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4008004}, 0x4000) 23:38:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x58, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_ID={0x4c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x40}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x90}, 0x0) syz_open_dev$binderN(&(0x7f0000000080), 0x0, 0x6) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x4a000, 0x0) read$rfkill(r1, &(0x7f0000000040), 0x8) 23:38:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x58, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_ID={0x4c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x40}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x90}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080), 0x0, 0x6) ioctl$BINDER_WRITE_READ(r1, 0x40046207, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) [ 1033.986465][T11906] binder: 11899:11906 ioctl 40046205 0 returned -22 [ 1034.025856][T11909] binder: 11905:11909 ioctl 40046205 0 returned -22 23:38:03 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000007, 0x88813, 0xffffffffffffffff, 0x10000000) 23:38:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, 0x0, 0x4000) 23:38:03 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) io_uring_setup(0x10016f3, &(0x7f0000000000)={0x0, 0xaf99, 0x10, 0x2, 0x10000056}) 23:38:03 executing program 2: mq_open(&(0x7f0000000000)='ip_vti0\x00', 0x40, 0x0, 0x0) 23:38:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x58, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_ID={0x4c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x40}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x90}, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x4a000, 0x0) read$rfkill(r1, &(0x7f0000000040), 0x8) 23:38:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_setup(0x475, &(0x7f0000000080)={0x0, 0xb85a, 0x2, 0x1, 0x360, 0x0, r1}) io_uring_setup(0x10016f3, &(0x7f0000000000)={0x0, 0xaf99, 0x10, 0x2, 0x10000056, 0x0, r1}) [ 1034.229426][T11923] binder: 11918:11923 ioctl 40046205 0 returned -22 [ 1034.266437][T11924] binder: 11917:11924 ioctl 40046205 0 returned -22 23:38:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, 0x0, 0x4000) 23:38:03 executing program 2: mq_open(&(0x7f0000000000)='ip_vti0\x00', 0x40, 0x0, 0x0) 23:38:03 executing program 0: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) io_uring_setup(0x10016f3, &(0x7f0000000000)={0x0, 0xaf99, 0x10, 0x2, 0x10000056}) 23:38:03 executing program 1: syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000007, 0x88813, r0, 0x10000000) 23:38:03 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x4a000, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) [ 1034.392358][T11930] binder: 11928:11930 ioctl 40046205 0 returned -22 23:38:04 executing program 0: io_uring_setup(0x10016f3, &(0x7f0000000000)={0x0, 0xaf99, 0x10, 0x2, 0x10000056}) 23:38:04 executing program 3: mq_open(&(0x7f0000000000)='ip_vti0\x00', 0x40, 0x0, 0x0) 23:38:04 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000007, 0x88813, r0, 0x10000000) 23:38:04 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x4a000, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) 23:38:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, 0x0, 0x4000) 23:38:04 executing program 2: mq_open(&(0x7f0000000000)='ip_vti0\x00', 0x40, 0x0, 0x0) 23:38:04 executing program 0: io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xaf99, 0x10, 0x2, 0x10000056}) 23:38:04 executing program 2: mq_open(&(0x7f0000000000)='ip_vti0\x00', 0x40, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffff}) 23:38:04 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x50d380, 0x0) accept4$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x538a885b2be99062) 23:38:04 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x4a000, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) 23:38:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4008004}, 0x4000) 23:38:04 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000007, 0x88813, r0, 0x10000000) 23:38:04 executing program 0: io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xaf99, 0x10, 0x2, 0x10000056}) 23:38:04 executing program 2: mq_open(&(0x7f0000000000)='ip_vti0\x00', 0x40, 0x0, &(0x7f0000000040)) 23:38:04 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000007, 0x88813, r0, 0x10000000) 23:38:04 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x4a000, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) 23:38:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x5c, 0x0, &(0x7f00000001c0)=[@request_death={0x400c630e, 0x2}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/176, 0xb0, 0x1, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x11, r2, 0x8000000) 23:38:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}, 0x4000) 23:38:04 executing program 0: io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xaf99, 0x10, 0x2, 0x10000056}) 23:38:04 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4008004}, 0x4000) 23:38:04 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000007, 0x88813, r0, 0x10000000) 23:38:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x5c, 0x0, &(0x7f00000001c0)=[@request_death={0x400c630e, 0x2}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/176, 0xb0, 0x1, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x11, r2, 0x8000000) 23:38:04 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x4a000, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) 23:38:04 executing program 0: io_uring_setup(0x10016f3, 0x0) 23:38:04 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x88813, r0, 0x10000000) 23:38:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}, 0x0) 23:38:04 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}, 0x4000) 23:38:04 executing program 0: io_uring_setup(0x10016f3, 0x0) 23:38:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x5c, 0x0, &(0x7f00000001c0)=[@request_death={0x400c630e, 0x2}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/176, 0xb0, 0x1, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x11, r2, 0x8000000) 23:38:04 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) 23:38:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x5c, 0x0, &(0x7f00000001c0)=[@request_death={0x400c630e, 0x2}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/176, 0xb0, 0x1, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x11, r2, 0x8000000) 23:38:04 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x10000000) 23:38:04 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=[@register_looper, @dead_binder_done], 0xfffffdfd, 0x0, 0x0}) 23:38:04 executing program 0: io_uring_setup(0x10016f3, 0x0) 23:38:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x5c, 0x0, &(0x7f00000001c0)=[@request_death={0x400c630e, 0x2}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/176, 0xb0, 0x1, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x11, r2, 0x8000000) 23:38:05 executing program 5: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) 23:38:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x802) r1 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x6) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1000, 0x8, 0x10000, 0x8, 0x9bb, 0x6, 0xff, 0xe027], 0x8, 0x800, 0x0, 0xffffffffffffffff}) r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x80100, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000200)={0xfd6, 0x0, &(0x7f00000001c0)=[r3, r4, r1, r0, r5]}, 0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=[@register_looper, @dead_binder_done], 0xfffffdfd, 0x0, 0x0}) [ 1035.515494][T12015] binder: 12011:12015 ioctl c0306201 20000280 returned -14 23:38:05 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x10000000) 23:38:05 executing program 2: eventfd2(0x0, 0x0) eventfd(0x35e) r0 = eventfd2(0x9, 0x0) r1 = eventfd2(0x9, 0x0) read$eventfd(r1, &(0x7f0000000300), 0x8) read$eventfd(r1, &(0x7f0000000300), 0x8) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r2, 0x8004500b, &(0x7f0000000040)=0x1000) write$eventfd(r0, 0x0, 0x52) 23:38:05 executing program 0: io_uring_setup(0x10016f3, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x2, 0x10000056}) 23:38:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x5c, 0x0, &(0x7f00000001c0)=[@request_death={0x400c630e, 0x2}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/176, 0xb0, 0x1, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x11, 0xffffffffffffffff, 0x8000000) 23:38:05 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x10000000) 23:38:05 executing program 5: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) [ 1035.717444][T12027] binder: 12023:12027 ioctl c0306201 20000280 returned -14 23:38:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x5c, 0x0, &(0x7f00000001c0)=[@request_death={0x400c630e, 0x2}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/176, 0xb0, 0x1, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x11, r2, 0x8000000) 23:38:05 executing program 0: io_uring_setup(0x10016f3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x10000056}) 23:38:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x5c, 0x0, &(0x7f00000001c0)=[@request_death={0x400c630e, 0x2}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/176, 0xb0, 0x1, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x11, 0xffffffffffffffff, 0x8000000) 23:38:05 executing program 5: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) 23:38:05 executing program 0: io_uring_setup(0x10016f3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x10000056}) 23:38:05 executing program 1: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x88813, 0xffffffffffffffff, 0x10000000) 23:38:05 executing program 4: io_uring_setup(0x10016f3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x10000056}) 23:38:06 executing program 2: eventfd2(0x0, 0x0) eventfd(0x35e) r0 = eventfd2(0x9, 0x0) r1 = eventfd2(0x9, 0x0) read$eventfd(r1, &(0x7f0000000300), 0x8) read$eventfd(r1, &(0x7f0000000300), 0x8) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r2, 0x8004500b, &(0x7f0000000040)=0x1000) write$eventfd(r0, 0x0, 0x52) 23:38:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x5c, 0x0, &(0x7f00000001c0)=[@request_death={0x400c630e, 0x2}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/176, 0xb0, 0x1, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x11, 0xffffffffffffffff, 0x8000000) 23:38:06 executing program 1: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x88813, 0xffffffffffffffff, 0x10000000) 23:38:06 executing program 0: io_uring_setup(0x10016f3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x10000056}) 23:38:06 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 23:38:06 executing program 4: io_uring_setup(0x10016f3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x10000056}) 23:38:06 executing program 3: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x8000000) 23:38:06 executing program 0: io_uring_setup(0x10016f3, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x0, 0x10000056}) 23:38:06 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 23:38:06 executing program 1: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x88813, 0xffffffffffffffff, 0x10000000) 23:38:06 executing program 4: io_uring_setup(0x10016f3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x10000056}) 23:38:06 executing program 0: io_uring_setup(0x10016f3, &(0x7f0000000000)={0x0, 0x0, 0x10}) 23:38:06 executing program 2: eventfd2(0x0, 0x0) eventfd(0x35e) r0 = eventfd2(0x9, 0x0) r1 = eventfd2(0x9, 0x0) read$eventfd(r1, &(0x7f0000000300), 0x8) read$eventfd(r1, &(0x7f0000000300), 0x8) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r2, 0x8004500b, &(0x7f0000000040)=0x1000) write$eventfd(r0, 0x0, 0x52) 23:38:06 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 23:38:06 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 23:38:06 executing program 3: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x8000000) 23:38:06 executing program 4: io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x10000056}) 23:38:06 executing program 0: io_uring_setup(0x10016f3, &(0x7f0000000000)={0x0, 0x0, 0x10}) 23:38:07 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 23:38:07 executing program 5: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x8000000) 23:38:07 executing program 4: io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x10000056}) 23:38:07 executing program 3: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x8000000) 23:38:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20300880}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_virt_wifi\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x90}, 0x1, 0x0, 0x0, 0x880}, 0x4000) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, ["", "", ""]}, 0x14}}, 0x4) r3 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0x40046207, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x5, 0x1], 0x2, 0x0, 0x0, 0xffffffffffffffff}) r6 = mq_open(&(0x7f0000000380)='\x00', 0x2, 0x16c, &(0x7f00000003c0)={0x3f, 0x0, 0x8}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000400)=[r3, r4, r3, r5, r3, r6, r7, r8, r3]}, 0x9) 23:38:07 executing program 4: io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x10000056}) 23:38:07 executing program 2: eventfd2(0x0, 0x0) eventfd(0x35e) eventfd2(0x9, 0x0) r0 = eventfd2(0x9, 0x0) read$eventfd(r0, &(0x7f0000000300), 0x8) read$eventfd(r0, &(0x7f0000000300), 0x8) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:07 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000000)=0x7) r1 = eventfd2(0x0, 0x0) write$eventfd(r1, 0x0, 0x700) 23:38:07 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 23:38:07 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x8000000) 23:38:07 executing program 4: io_uring_setup(0x10016f3, 0x0) 23:38:07 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5c2) r1 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046207, 0x0) 23:38:08 executing program 4: io_uring_setup(0x10016f3, 0x0) 23:38:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2d6300f700ff1f000000000000000000"], 0x0, 0x0, 0x0}) 23:38:08 executing program 1: read$rfkill(0xffffffffffffffff, 0x0, 0x0) 23:38:08 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x8000000) 23:38:08 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000000)=0x7) r1 = eventfd2(0x0, 0x0) write$eventfd(r1, 0x0, 0x700) 23:38:08 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x8000000) [ 1038.683808][T12163] binder: 12156:12163 unknown command -150969555 [ 1038.707031][T12163] binder: 12156:12163 ioctl c0306201 20000280 returned -22 23:38:08 executing program 2: eventfd2(0x0, 0x0) eventfd(0x35e) eventfd2(0x9, 0x0) r0 = eventfd2(0x9, 0x0) read$eventfd(r0, &(0x7f0000000300), 0x8) read$eventfd(r0, &(0x7f0000000300), 0x8) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:08 executing program 4: io_uring_setup(0x10016f3, 0x0) 23:38:08 executing program 1: read$rfkill(0xffffffffffffffff, 0x0, 0x0) 23:38:08 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x5e1e, &(0x7f0000000000)={0x0, 0xa387, 0x10, 0x1, 0x20b}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x301042) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000001c0)={0x9, 0x0, &(0x7f0000000180)=[r2, r0, r3, 0xffffffffffffffff]}, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:08 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000000)=0x7) r1 = eventfd2(0x0, 0x0) write$eventfd(r1, 0x0, 0x700) 23:38:08 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x8000000) 23:38:09 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x8000000) 23:38:09 executing program 1: read$rfkill(0xffffffffffffffff, 0x0, 0x0) 23:38:09 executing program 4: io_uring_setup(0x10016f3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x10000056}) 23:38:09 executing program 0: eventfd2(0x0, 0x0) eventfd(0x35e) eventfd2(0x9, 0x0) r0 = eventfd2(0x9, 0x0) read$eventfd(r0, &(0x7f0000000300), 0x8) read$eventfd(r0, &(0x7f0000000300), 0x8) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:09 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000000)=0x7) eventfd2(0x0, 0x0) 23:38:09 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 23:38:09 executing program 2: eventfd2(0x0, 0x0) eventfd(0x35e) eventfd2(0x9, 0x0) r0 = eventfd2(0x9, 0x0) read$eventfd(r0, &(0x7f0000000300), 0x8) read$eventfd(r0, &(0x7f0000000300), 0x8) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:09 executing program 4: io_uring_setup(0x10016f3, &(0x7f0000000000)) 23:38:09 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x8000000) 23:38:09 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 23:38:09 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000000)=0x7) 23:38:09 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x8000000) 23:38:10 executing program 4: r0 = syz_open_dev$I2C(&(0x7f0000000240), 0x3, 0x404000) ioctl$I2C_PEC(r0, 0x708, 0x5) r1 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000008c0)={0xc, 0x0, &(0x7f0000000800)=[@exit_looper, @acquire={0x40046305, 0x3}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b630000fe9be61b181e011fb52cfdb097c2d603d990f4b5186c69a0582cb4ef3c75348ed415b28e40f553bde935be37ef29aea02ddae796b4ab48f77e50914bdb7aa43f2aaf7375c4dda7d7724dfd527cbeaf04954404be4b92af9ff4ad39a2dd2e145f2fcbb37eab8c7e22c9083e86971fcf858aa82b612615fd8f3bc54b4f3c47233b4918c9483dd276751704a7a3bef072023834f51caf7274a2a2e8ca24"], 0x62, 0x0, &(0x7f0000000040)="e5e42c3c0817ba1e7e13f15456c489a19e7bfeb0a2fcba9945a02c61915aad43307e041f98489c3e53af2db8ae94e30fb647b17ba93956a3b423f7f82ff40808ddfb670d0d3d983c1e8ba521de6460d9c1e5ab4f0328cc166c8e7a79d6894dae852c"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=[@register_looper, @dead_binder_done], 0x0, 0x0, 0x0}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x2400, 0x0) r4 = eventfd(0x9) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r5, 0xc0505510, &(0x7f0000000500)={0x1000, 0x8, 0x9, 0x984, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]}) write$eventfd(r4, &(0x7f00000002c0)=0x7, 0x8) write$char_usb(r3, &(0x7f00000001c0)="f2b27baa42be073e63da884b7a8965b1ca8cf6c242bd1a2b5247af52d4d323ebadfaa607120b1279cbd208b0519e996d1743690330a95d5393ef2ea0989ccd7736355c56e5", 0x45) syz_open_dev$sndctrl(&(0x7f0000000140), 0x3, 0x442100) 23:38:10 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 23:38:10 executing program 5: ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000000)=0x7) 23:38:10 executing program 0: eventfd2(0x0, 0x0) eventfd(0x35e) eventfd2(0x9, 0x0) r0 = eventfd2(0x9, 0x0) read$eventfd(r0, &(0x7f0000000300), 0x8) read$eventfd(r0, &(0x7f0000000300), 0x8) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:10 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x10, r0, 0x8000000) 23:38:10 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$rfkill(0xffffffffffffffff, 0x0, 0x0) [ 1040.608097][T12236] binder: 12232:12236 ioctl c0306201 200000c0 returned -11 23:38:10 executing program 2: eventfd2(0x0, 0x0) eventfd(0x35e) eventfd2(0x9, 0x0) r0 = eventfd2(0x9, 0x0) read$eventfd(r0, &(0x7f0000000300), 0x8) read$eventfd(r0, &(0x7f0000000300), 0x8) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:10 executing program 5: ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000000)=0x7) 23:38:10 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000000)=0x7) 23:38:10 executing program 3: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x8000000) 23:38:10 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$rfkill(0xffffffffffffffff, 0x0, 0x0) 23:38:10 executing program 5: ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000000)=0x7) 23:38:10 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000000)=0x7) 23:38:10 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$rfkill(0xffffffffffffffff, 0x0, 0x0) 23:38:10 executing program 3: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x8000000) 23:38:11 executing program 0: eventfd2(0x0, 0x0) eventfd(0x35e) eventfd2(0x9, 0x0) r0 = eventfd2(0x9, 0x0) read$eventfd(r0, &(0x7f0000000300), 0x8) read$eventfd(r0, &(0x7f0000000300), 0x8) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:11 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x40440, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000000)=0x7) 23:38:11 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r1, @ANYBLOB="0000000000000000000000008561646600000000050000000000000000000000000001001100000000000000852a68770b1100000200"/68], &(0x7f00000001c0)={0x0, 0x18, 0x38}}}], 0x88, 0x0, &(0x7f0000000280)="2d00f4851d95d220d85ced2cee448f9174cdf1215fdd8dbb0c9894af65641d75106c5be5fb78064e1498545b0d2070d3cde1740f5f410a4598fbb6620bf586237fc1b87a21ee377bf65923b36649a2b8760a01929935ca1425a3359bc622a5f2883d558a1d284c4527dcf1f62209cc8a7c5ecbe952ea08ec18c9c4d6052d3f10c47e34e22d59be6f"}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x80, 0x0, 0x3, 0x2, {{0x29, 0x4, 0x2, 0x3d, 0xa4, 0x68, 0x0, 0x8, 0x4, 0x0, @local, @empty, {[@timestamp_prespec={0x44, 0x34, 0x8b, 0x3, 0x2, [{@multicast1, 0x1}, {@remote, 0x80000001}, {@multicast1, 0x7fffffff}, {@loopback, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1ff}, {@broadcast, 0x2f7a}]}, @ssrr={0x89, 0xf, 0x99, [@loopback, @multicast1, @empty]}, @timestamp_prespec={0x44, 0x2c, 0x15, 0x3, 0x3, [{@empty}, {@private=0xa010100, 0xfffffffb}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x4}, {@multicast2, 0x5}, {@empty}]}, @timestamp={0x44, 0x20, 0x3b, 0x0, 0x9, [0xca1, 0x731, 0x30e, 0x6075, 0xe2, 0x7, 0x250db17d]}]}}}}}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) [ 1041.700515][T12283] binder: 12277:12283 ioctl 40046205 0 returned -22 23:38:11 executing program 2: eventfd2(0x0, 0x0) eventfd(0x35e) eventfd2(0x9, 0x0) r0 = eventfd2(0x9, 0x0) read$eventfd(r0, &(0x7f0000000300), 0x8) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:11 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000000)=0x7) 23:38:11 executing program 3: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x8000000) 23:38:11 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x40440, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000000)=0x7) 23:38:11 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x40440, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000000)=0x7) 23:38:11 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x40440, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000000)=0x7) 23:38:11 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x54}}, 0x4004) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) inotify_rm_watch(0xffffffffffffffff, 0x0) 23:38:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x54}}, 0x4004) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) inotify_rm_watch(0xffffffffffffffff, 0x0) 23:38:11 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000000)=0x7) 23:38:12 executing program 0: eventfd2(0x0, 0x0) eventfd(0x35e) eventfd2(0x9, 0x0) r0 = eventfd2(0x9, 0x0) read$eventfd(r0, &(0x7f0000000300), 0x8) read$eventfd(r0, &(0x7f0000000300), 0x8) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:12 executing program 4: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) 23:38:12 executing program 2: eventfd2(0x0, 0x0) eventfd(0x35e) eventfd2(0x9, 0x0) eventfd2(0x9, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:12 executing program 5: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000000)=0x7) 23:38:12 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000000)=0x7) 23:38:12 executing program 1: eventfd2(0x0, 0x0) eventfd(0x35e) eventfd2(0x9, 0x0) r0 = eventfd2(0x9, 0x0) read$eventfd(r0, &(0x7f0000000300), 0x8) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:12 executing program 4: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) 23:38:12 executing program 5: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000000)=0x7) 23:38:12 executing program 2: eventfd2(0x0, 0x0) eventfd(0x35e) eventfd2(0x9, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:12 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000000)=0x7) 23:38:12 executing program 1: eventfd2(0x0, 0x0) eventfd(0x35e) eventfd2(0x9, 0x0) eventfd2(0x9, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:12 executing program 5: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000000)=0x7) 23:38:13 executing program 0: eventfd2(0x0, 0x0) eventfd(0x35e) eventfd2(0x9, 0x0) r0 = eventfd2(0x9, 0x0) read$eventfd(r0, &(0x7f0000000300), 0x8) read$eventfd(r0, &(0x7f0000000300), 0x8) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:13 executing program 4: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) 23:38:13 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000000)=0x7) 23:38:13 executing program 2: eventfd2(0x0, 0x0) eventfd(0x35e) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:13 executing program 1: eventfd2(0x0, 0x0) eventfd(0x35e) eventfd2(0x9, 0x0) eventfd2(0x9, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:13 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 23:38:13 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 23:38:13 executing program 3: ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000000)=0x7) 23:38:13 executing program 4: openat$adsp1(0xffffffffffffff9c, 0x0, 0x40440, 0x0) 23:38:13 executing program 2: eventfd2(0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:13 executing program 1: eventfd2(0x0, 0x0) eventfd(0x35e) eventfd2(0x9, 0x0) eventfd2(0x9, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:13 executing program 3: ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000000)=0x7) 23:38:14 executing program 0: eventfd2(0x0, 0x0) eventfd(0x35e) eventfd2(0x9, 0x0) r0 = eventfd2(0x9, 0x0) read$eventfd(r0, &(0x7f0000000300), 0x8) read$eventfd(r0, &(0x7f0000000300), 0x8) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:14 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 23:38:14 executing program 4: openat$adsp1(0xffffffffffffff9c, 0x0, 0x40440, 0x0) 23:38:14 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:14 executing program 3: ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000000)=0x7) 23:38:14 executing program 1: eventfd2(0x0, 0x0) eventfd(0x35e) eventfd2(0x9, 0x0) eventfd2(0x9, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:14 executing program 4: openat$adsp1(0xffffffffffffff9c, 0x0, 0x40440, 0x0) 23:38:14 executing program 1: eventfd2(0x0, 0x0) eventfd(0x35e) eventfd2(0x9, 0x0) eventfd2(0x9, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:14 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000000)=0x7) 23:38:14 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000000)) 23:38:14 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:14 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000000)=0x7) 23:38:15 executing program 1: eventfd2(0x0, 0x0) eventfd(0x35e) eventfd2(0x9, 0x0) eventfd2(0x9, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:15 executing program 4: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 23:38:15 executing program 0: eventfd2(0x0, 0x0) eventfd(0x35e) eventfd2(0x9, 0x0) r0 = eventfd2(0x9, 0x0) read$eventfd(r0, &(0x7f0000000300), 0x8) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:15 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:15 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:15 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000000)=0x7) 23:38:15 executing program 1: eventfd2(0x0, 0x0) eventfd(0x35e) eventfd2(0x9, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:15 executing program 3: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000000)=0x7) 23:38:15 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:15 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:15 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:15 executing program 0: eventfd2(0x0, 0x0) eventfd(0x35e) eventfd2(0x9, 0x0) eventfd2(0x9, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:15 executing program 1: eventfd2(0x0, 0x0) eventfd(0x35e) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:15 executing program 3: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000000)=0x7) 23:38:15 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:15 executing program 4: eventfd2(0x0, 0x0) eventfd(0x35e) eventfd2(0x9, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:15 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:15 executing program 0: eventfd2(0x0, 0x0) eventfd(0x35e) eventfd2(0x9, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:15 executing program 3: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000000)=0x7) 23:38:15 executing program 1: eventfd2(0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:15 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:15 executing program 4: eventfd2(0x0, 0x0) eventfd(0x35e) eventfd2(0x9, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:15 executing program 5: ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:15 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:15 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 23:38:15 executing program 0: eventfd2(0x0, 0x0) eventfd(0x35e) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:16 executing program 1: eventfd2(0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:16 executing program 5: ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:16 executing program 2: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:16 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 23:38:16 executing program 0: eventfd2(0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:16 executing program 4: eventfd2(0x0, 0x0) eventfd(0x35e) eventfd2(0x9, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:16 executing program 5: ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:16 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:16 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 23:38:16 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:16 executing program 2: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:16 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:16 executing program 4: eventfd2(0x0, 0x0) eventfd(0x35e) eventfd2(0x9, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:16 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000000)) 23:38:16 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:16 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:16 executing program 4: eventfd2(0x0, 0x0) eventfd(0x35e) eventfd2(0x9, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:16 executing program 2: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:16 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:16 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:16 executing program 3: eventfd2(0x0, 0x0) eventfd(0x35e) eventfd2(0x9, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:16 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:16 executing program 4: eventfd2(0x0, 0x0) eventfd(0x35e) eventfd2(0x9, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:16 executing program 3: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:16 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:17 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 23:38:17 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:17 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:17 executing program 4: eventfd2(0x0, 0x0) eventfd(0x35e) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:17 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:17 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 23:38:17 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:17 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:17 executing program 3: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:17 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:17 executing program 4: eventfd2(0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:17 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:17 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:17 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 23:38:17 executing program 3: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:17 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:17 executing program 5: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:17 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:17 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:17 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)) 23:38:17 executing program 1: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:17 executing program 3: ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:17 executing program 5: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:17 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:17 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:18 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)) 23:38:18 executing program 3: ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:18 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:18 executing program 1: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:18 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:18 executing program 5: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:18 executing program 3: ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:18 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:18 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:18 executing program 0: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:18 executing program 1: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:18 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 23:38:18 executing program 3: r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:18 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:18 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 23:38:18 executing program 3: r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:18 executing program 0: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:18 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:18 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 23:38:18 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:18 executing program 3: r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:18 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 23:38:19 executing program 0: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:19 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 23:38:19 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 23:38:19 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:19 executing program 3: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:19 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 23:38:19 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 23:38:19 executing program 3: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:19 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 23:38:19 executing program 4: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:19 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)) 23:38:19 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)) 23:38:19 executing program 3: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:19 executing program 4: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:19 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 23:38:19 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 23:38:19 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:19 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:19 executing program 3: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:19 executing program 5: eventfd2(0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:19 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 23:38:19 executing program 4: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:20 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:20 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 23:38:20 executing program 3: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:20 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:20 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 23:38:20 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)) 23:38:20 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 23:38:20 executing program 1: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:20 executing program 3: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:20 executing program 5: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:20 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 23:38:20 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 23:38:20 executing program 0: eventfd2(0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:20 executing program 3: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 23:38:20 executing program 1: eventfd2(0x0, 0x0) eventfd(0x35e) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:20 executing program 5: eventfd2(0x0, 0x0) eventfd(0x35e) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:20 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 23:38:20 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 23:38:20 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 23:38:21 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:21 executing program 3: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 23:38:21 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)) 23:38:21 executing program 5: eventfd2(0x0, 0x0) eventfd(0x35e) eventfd2(0x9, 0x0) r0 = eventfd2(0x9, 0x0) read$eventfd(r0, &(0x7f0000000300), 0x8) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:21 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 23:38:21 executing program 0: eventfd2(0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:21 executing program 3: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 23:38:21 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 23:38:21 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 23:38:21 executing program 5: eventfd2(0x0, 0x0) eventfd(0x35e) eventfd2(0x9, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:21 executing program 0: eventfd2(0x0, 0x0) eventfd(0x35e) eventfd2(0x9, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:21 executing program 1: eventfd2(0x0, 0x0) eventfd(0x35e) eventfd2(0x9, 0x0) eventfd2(0x9, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x1000) 23:38:21 executing program 3: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)) 23:38:21 executing program 2: openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x480) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0baf94001063084000af3b0000000000"], 0x0, 0x0, 0x0}) 23:38:21 executing program 4: getitimer(0x2, &(0x7f00000000c0)) r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b630000106308400000000000000000d3df4db9bd29bb599b4659947299b4cfaaa57b8e0edeae62e08bd9eb6f86ff533d076f3e18b6467343e4a8bb9e9c2097f622648ef7327973686769104152d650d50f59feafe08cd17d9f213260c98d1349b56a18bad8ecaba7f2acd6b5564d4ac6f45b4f721a48e4bc8cfd986be8bb2312abd5bcd5fbbc"], 0xfffffdfd, 0x0, 0x0}) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x541080, 0x0) 23:38:21 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=[@register_looper, @dead_binder_done], 0x0, 0x0, 0x0}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xeb2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x1602a98db2e5811e) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x2) 23:38:21 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000040)={0x5, 0x9fa, 0x1}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000000)=[@register_looper, @dead_binder_done], 0x0, 0x0, 0x0}) [ 1052.195997][T12775] binder: 12772:12775 unknown command 9744139 [ 1052.225171][T12777] binder: 12776:12777 ioctl c0306201 20000280 returned -14 [ 1052.233647][T12775] binder: 12772:12775 ioctl c0306201 20000280 returned -22 23:38:21 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r1) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4040002) 23:38:21 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'gretap0\x00', 0x0}) 23:38:21 executing program 2: openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x480) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0baf94001063084000af3b0000000000"], 0x0, 0x0, 0x0}) 23:38:21 executing program 3: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)) 23:38:21 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008895}, 0x20008000) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) 23:38:21 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000008c0)={0xc, 0x0, &(0x7f0000000800)=[@exit_looper, @acquire={0x40046305, 0x3}], 0x1, 0x0, &(0x7f0000000840)="c6"}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1, 0x11, r2, 0x526e6bc1) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 23:38:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'gretap0\x00', 0x0}) 23:38:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x4, 0xffffffff, 0x2}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) [ 1052.443048][T12791] binder: 12786:12791 unknown command 9744139 [ 1052.453126][T12793] binder: 12787:12793 unknown command 4 [ 1052.470225][T12791] binder: 12786:12791 ioctl c0306201 20000280 returned -22 23:38:22 executing program 2: openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x480) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0baf94001063084000af3b0000000000"], 0x0, 0x0, 0x0}) [ 1052.493210][T12793] binder: 12787:12793 ioctl c0306201 20000280 returned -22 23:38:22 executing program 5: clock_gettime(0x1, &(0x7f0000000040)) r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b630400000000080000000000"], 0xfffffdfd, 0x0, 0x0}) [ 1052.562976][T12797] binder: 12794:12797 ioctl 40046205 0 returned -22 23:38:22 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20000) write$eventfd(0xffffffffffffffff, 0x0, 0x700) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) r2 = eventfd2(0x9, 0x800) read$eventfd(r2, &(0x7f0000000300), 0x8) read$eventfd(r2, &(0x7f0000000080), 0x8) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 23:38:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0xfff, 0x0, 0x4, 0x6, 0x101, 0x9, 0xc1}, 0x1c) 23:38:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100000000000}]}, 0x34}, 0x1, 0x0, 0x0, 0x18}, 0x4000) 23:38:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'gretap0\x00', 0x0}) [ 1052.677515][T12804] binder: 12802:12804 unknown command 9744139 [ 1052.690339][T12804] binder: 12802:12804 ioctl c0306201 20000280 returned -22 [ 1052.707865][T12805] binder: 12803:12805 unknown command 287499 23:38:22 executing program 2: openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x480) [ 1052.724798][T12809] binder: 12806:12809 ioctl 40046205 0 returned -22 [ 1052.731926][T12805] binder: 12803:12805 ioctl c0306201 20000280 returned -22 23:38:22 executing program 0: r0 = eventfd2(0x181, 0x801) write$eventfd(r0, 0x0, 0x700) read$eventfd(r0, &(0x7f00000001c0), 0x8) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000080), 0x0, 0x802) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x41, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000140)=[r2, r3, r4, r5, 0xffffffffffffffff]}, 0x5) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) write$eventfd(r6, &(0x7f0000000040)=0xceda, 0x8) 23:38:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)=[@acquire_done={0x40106309, 0x2}], 0xda, 0x0, &(0x7f0000000040)="fab9cdf36b8b05387a3f3009fc8c35f773aaf2382bd77bc8c4fae546994b676af367a489e9128ddd4075b760b3adb3f3ecb919a5477bdb0c0c1fab2ae08f411b2f9aeb27e0225c9f784e7a1d24543a4ab0226a4bd80730ba913a6411272a29ff25054bdc3cb34762e0e3414bccf9869d05aa93109bf5dbc88eea413088749c70a8c1aefe0e8cdc5242550d006343de5aabacd5dfab96c761b2d14effef9658f2d24fa656cc0aaf01448125b1e2fc2ed961b667a4022353a7b761989e7d748528201e885940128bb3e8b7d9f7a4145d0072572dbbf98b21647038"}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xe1) 23:38:22 executing program 5: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xc0, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_macvtap\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:framebuf_device_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:inetd_child_exec_t:s0\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x2b8, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x3c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffe}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x44f}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x14c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x400}, @NL802154_DEVKEY_ATTR_ID={0xc4, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555f}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x101}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x38e41bf2a91e823c}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffff6b8}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x10000}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}]}, @NL802154_ATTR_SEC_DEVKEY={0x110, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x60, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x97}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x401}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5f4b}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x81}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x60}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xce}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x20000010}, 0x810) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="10002bbd7000000000002b00000008000200f49f0fc611c7aa3fad337977b72db7ad052105495b663e01ee51da82415f", @ANYRES32=0x0, @ANYBLOB="0c0005000201aaaaaaaaaaaa0c000500000000000000000008000200", @ANYRES32=0x0, @ANYBLOB="0a0001007770616e3100000008000200", @ANYRES32=0x0, @ANYBLOB="080002007a19dddfdf20142571848512d3b8698e0abfff03289a9906e3226b962e3240636889181ac4dee1bdddfc02890250338238bf1f6095ad740c77c1d300ebbaf09895b97200a9c152a763", @ANYRES32=0x0, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r3 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0x40046207, 0x0) 23:38:22 executing program 3: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xc0, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_macvtap\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:framebuf_device_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:inetd_child_exec_t:s0\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x2b8, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x3c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffe}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x44f}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x14c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x400}, @NL802154_DEVKEY_ATTR_ID={0xc4, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555f}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x101}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x38e41bf2a91e823c}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffff6b8}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x10000}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}]}, @NL802154_ATTR_SEC_DEVKEY={0x110, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x60, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x97}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x401}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5f4b}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x81}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x60}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xce}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x20000010}, 0x810) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="10002bbd7000000000002b00000008000200f49f0fc611c7aa3fad337977b72db7ad052105495b663e01ee51da82415f", @ANYRES32=0x0, @ANYBLOB="0c0005000201aaaaaaaaaaaa0c000500000000000000000008000200", @ANYRES32=0x0, @ANYBLOB="0a0001007770616e3100000008000200", @ANYRES32=0x0, @ANYBLOB="080002007a19dddfdf20142571848512d3b8698e0abfff03289a9906e3226b962e3240636889181ac4dee1bdddfc02890250338238bf1f6095ad740c77c1d300ebbaf09895b97200a9c152a763", @ANYRES32=0x0, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r3 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0x40046207, 0x0) 23:38:22 executing program 1: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'gretap0\x00', 0x0}) 23:38:22 executing program 2: openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x480) 23:38:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x1) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', 0x0}) 23:38:22 executing program 1: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'gretap0\x00', 0x0}) 23:38:22 executing program 2: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x480) [ 1052.948722][T12824] binder: 12818:12824 ioctl 40046205 0 returned -22 23:38:22 executing program 5: openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x480) [ 1053.048890][T12833] binder: 12818:12833 ioctl ab0a e1 returned -22 23:38:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=[@register_looper, @dead_binder_done], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000) 23:38:22 executing program 1: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'gretap0\x00', 0x0}) 23:38:22 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x480) [ 1053.596743][ T3258] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.603208][ T3258] ieee802154 phy1 wpan1: encryption failed: -22 23:38:23 executing program 4: r0 = eventfd2(0x0, 0x0) write$eventfd(r0, 0x0, 0x700) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(r0, &(0x7f0000000000)=0xd258, 0x8) 23:38:23 executing program 5: openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x480) 23:38:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x1) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', 0x0}) 23:38:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=[@register_looper, @dead_binder_done], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000) 23:38:23 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'gretap0\x00', 0x0}) 23:38:23 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x480) 23:38:23 executing program 2: syz_open_dev$ndb(0x0, 0x0, 0x480) 23:38:23 executing program 5: openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x480) 23:38:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=[@register_looper, @dead_binder_done], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000) 23:38:23 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'gretap0\x00', 0x0}) 23:38:23 executing program 2: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) 23:38:23 executing program 5: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x480) 23:38:23 executing program 4: r0 = eventfd2(0x0, 0x0) write$eventfd(r0, 0x0, 0x700) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(r0, &(0x7f0000000000)=0xd258, 0x8) 23:38:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000) 23:38:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x1) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', 0x0}) 23:38:23 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'gretap0\x00', 0x0}) 23:38:23 executing program 5: syz_open_dev$ndb(0x0, 0x0, 0x480) 23:38:23 executing program 2: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) 23:38:23 executing program 3: mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x8000) 23:38:23 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 23:38:23 executing program 4: r0 = eventfd2(0x0, 0x0) write$eventfd(r0, 0x0, 0x700) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(r0, &(0x7f0000000000)=0xd258, 0x8) 23:38:23 executing program 2: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) 23:38:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x1) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', 0x0}) 23:38:23 executing program 5: syz_open_dev$ndb(0x0, 0x0, 0x480) 23:38:23 executing program 3: mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x8000) 23:38:23 executing program 5: syz_open_dev$ndb(0x0, 0x0, 0x480) 23:38:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 23:38:24 executing program 2: r0 = eventfd2(0x0, 0x0) write$eventfd(r0, 0x0, 0x700) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(r0, &(0x7f0000000000)=0xd258, 0x8) 23:38:24 executing program 4: r0 = eventfd2(0x0, 0x0) write$eventfd(r0, 0x0, 0x700) write$eventfd(r0, &(0x7f0000000000)=0xd258, 0x8) 23:38:24 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x1) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', 0x0}) 23:38:24 executing program 5: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) 23:38:24 executing program 3: mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x8000) 23:38:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 23:38:24 executing program 4: r0 = eventfd2(0x0, 0x0) write$eventfd(r0, 0x0, 0x700) write$eventfd(r0, &(0x7f0000000000)=0xd258, 0x8) 23:38:24 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000) 23:38:24 executing program 2: r0 = eventfd2(0x0, 0x0) write$eventfd(r0, 0x0, 0x700) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(r0, &(0x7f0000000000)=0xd258, 0x8) 23:38:24 executing program 5: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) 23:38:24 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1e1903) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r1, 0x40046207, 0x0) 23:38:24 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', 0x0}) 23:38:24 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000) 23:38:24 executing program 4: r0 = eventfd2(0x0, 0x0) write$eventfd(r0, 0x0, 0x700) write$eventfd(r0, &(0x7f0000000000)=0xd258, 0x8) 23:38:24 executing program 2: r0 = eventfd2(0x0, 0x0) write$eventfd(r0, 0x0, 0x700) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(r0, &(0x7f0000000000)=0xd258, 0x8) 23:38:24 executing program 5: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) 23:38:24 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000) 23:38:24 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1e1903) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r1, 0x40046207, 0x0) 23:38:24 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1e1903) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r1, 0x40046207, 0x0) 23:38:24 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', 0x0}) 23:38:24 executing program 4: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(r0, &(0x7f0000000000)=0xd258, 0x8) 23:38:24 executing program 3: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x8000) 23:38:24 executing program 2: r0 = eventfd2(0x0, 0x0) write$eventfd(r0, 0x0, 0x700) read$eventfd(r0, &(0x7f0000000040), 0x8) 23:38:24 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1e1903) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r1, 0x40046207, 0x0) 23:38:24 executing program 3: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x8000) 23:38:24 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1e1903) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r1, 0x40046207, 0x0) 23:38:24 executing program 0: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', 0x0}) 23:38:24 executing program 4: read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0xd258, 0x8) 23:38:24 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1e1903) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f00000000c0)) 23:38:24 executing program 3: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x8000) 23:38:24 executing program 0: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', 0x0}) 23:38:25 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1e1903) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r1, 0x40046207, 0x0) 23:38:25 executing program 4: read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0xd258, 0x8) 23:38:25 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1e1903) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) 23:38:25 executing program 2: r0 = eventfd2(0x0, 0x0) write$eventfd(r0, 0x0, 0x700) read$eventfd(r0, &(0x7f0000000040), 0x8) 23:38:25 executing program 0: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', 0x0}) 23:38:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 23:38:25 executing program 4: read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0xd258, 0x8) 23:38:25 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1e1903) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f00000000c0)) 23:38:25 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1e1903) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) 23:38:25 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', 0x0}) 23:38:25 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(r0, &(0x7f0000000000)=0xd258, 0x8) 23:38:25 executing program 4: r0 = eventfd2(0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) write$eventfd(r0, &(0x7f0000000000)=0xd258, 0x8) 23:38:25 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1e1903) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) 23:38:25 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1e1903) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) 23:38:25 executing program 4: r0 = eventfd2(0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) write$eventfd(r0, &(0x7f0000000000)=0xd258, 0x8) 23:38:26 executing program 2: r0 = eventfd2(0x0, 0x0) write$eventfd(r0, 0x0, 0x700) read$eventfd(r0, &(0x7f0000000040), 0x8) 23:38:26 executing program 1: ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x0) 23:38:26 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(r0, &(0x7f0000000000)=0xd258, 0x8) 23:38:26 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', 0x0}) 23:38:26 executing program 4: r0 = eventfd2(0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) write$eventfd(r0, &(0x7f0000000000)=0xd258, 0x8) 23:38:26 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1e1903) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) 23:38:26 executing program 1: ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x0) 23:38:26 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', 0x0}) 23:38:26 executing program 4: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, 0x0, 0x0) write$eventfd(r0, &(0x7f0000000000)=0xd258, 0x8) 23:38:26 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1e1903) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) 23:38:26 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(r0, &(0x7f0000000000)=0xd258, 0x8) 23:38:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 23:38:27 executing program 2: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(r0, &(0x7f0000000000)=0xd258, 0x8) 23:38:27 executing program 1: ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x0) 23:38:27 executing program 4: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, 0x0, 0x0) write$eventfd(r0, &(0x7f0000000000)=0xd258, 0x8) 23:38:27 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1e1903) 23:38:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 23:38:27 executing program 3: r0 = eventfd2(0x0, 0x0) write$eventfd(r0, &(0x7f0000000000)=0xd258, 0x8) 23:38:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 23:38:27 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x1e1903) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) 23:38:27 executing program 3: r0 = eventfd2(0x0, 0x0) write$eventfd(r0, &(0x7f0000000000)=0xd258, 0x8) 23:38:27 executing program 4: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, 0x0, 0x0) write$eventfd(r0, &(0x7f0000000000)=0xd258, 0x8) 23:38:27 executing program 5: syz_open_dev$ndb(0x0, 0x0, 0x1e1903) 23:38:27 executing program 2: read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0xd258, 0x8) 23:38:27 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x1e1903) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) 23:38:27 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1e1903) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) 23:38:27 executing program 3: r0 = eventfd2(0x0, 0x0) write$eventfd(r0, &(0x7f0000000000)=0xd258, 0x8) 23:38:27 executing program 5: syz_open_dev$ndb(0x0, 0x0, 0x1e1903) 23:38:27 executing program 4: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0xd258, 0x8) 23:38:27 executing program 2: read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0xd258, 0x8) 23:38:27 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x1e1903) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) 23:38:27 executing program 5: syz_open_dev$ndb(0x0, 0x0, 0x1e1903) 23:38:27 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1e1903) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) 23:38:27 executing program 3: read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0xd258, 0x8) 23:38:28 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 23:38:28 executing program 2: read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0xd258, 0x8) 23:38:28 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) 23:38:28 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1e1903) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) 23:38:28 executing program 3: read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0xd258, 0x8) 23:38:28 executing program 2: r0 = eventfd2(0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) write$eventfd(r0, &(0x7f0000000000)=0xd258, 0x8) 23:38:28 executing program 4: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0xd258, 0x8) 23:38:28 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) 23:38:28 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 23:38:28 executing program 3: read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0xd258, 0x8) 23:38:28 executing program 2: r0 = eventfd2(0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) write$eventfd(r0, &(0x7f0000000000)=0xd258, 0x8) 23:38:28 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1e1903) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) 23:38:28 executing program 2: r0 = eventfd2(0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) write$eventfd(r0, &(0x7f0000000000)=0xd258, 0x8) 23:38:28 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) 23:38:28 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1e1903) 23:38:28 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 23:38:28 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) write$eventfd(r0, &(0x7f0000000000)=0xd258, 0x8) 23:38:29 executing program 2: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, 0x0, 0x0) write$eventfd(r0, &(0x7f0000000000)=0xd258, 0x8) 23:38:29 executing program 4: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0xd258, 0x8) 23:38:29 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1e1903) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x0) 23:38:29 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', 0x0}) 23:38:29 executing program 0: syz_open_dev$ndb(0x0, 0x0, 0x1e1903) 23:38:29 executing program 2: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, 0x0, 0x0) write$eventfd(r0, &(0x7f0000000000)=0xd258, 0x8) 23:38:29 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) write$eventfd(r0, &(0x7f0000000000)=0xd258, 0x8) 23:38:29 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) write$eventfd(r0, &(0x7f0000000000)=0xd258, 0x8) 23:38:29 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1e1903) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) 23:38:29 executing program 0: syz_open_dev$ndb(0x0, 0x0, 0x1e1903) 23:38:29 executing program 2: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, 0x0, 0x0) write$eventfd(r0, &(0x7f0000000000)=0xd258, 0x8) 23:38:29 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1e1903) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x0) 23:38:30 executing program 2: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0xd258, 0x8) 23:38:30 executing program 4: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(r0, 0x0, 0x0) 23:38:30 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1e1903) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x0) 23:38:30 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, 0x0, 0x0) write$eventfd(r0, &(0x7f0000000000)=0xd258, 0x8) 23:38:30 executing program 0: syz_open_dev$ndb(0x0, 0x0, 0x1e1903) 23:38:30 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1e1903) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) 23:38:30 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x140a, 0x400, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000408}, 0x480c4) 23:38:30 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, 0x0, 0x0) write$eventfd(r0, &(0x7f0000000000)=0xd258, 0x8) 23:38:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000008c0)={0x4c, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x4, 0x1, 0x31}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/144, 0x90, 0x2, 0x22}}, &(0x7f0000000680)={0x40, 0x18, 0x38}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/47, 0x0, 0x2, 0x7}, @fda={0x66646185, 0x2, 0x2, 0x1a}, @fda={0x66646185, 0x5, 0x1, 0x19}}, &(0x7f0000000780)}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/stat\x00', 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r4}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) recvfrom$packet(r2, &(0x7f0000000940)=""/48, 0x30, 0x10042, &(0x7f0000000a40)={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @multicast}, 0x14) r5 = syz_open_dev$sndctrl(&(0x7f0000000800), 0xa55, 0x18080) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000900)={0xa2, 0x0, &(0x7f0000000880)=[r5]}, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=[@register_looper, @dead_binder_done], 0x0, 0x0, 0x0}) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:38:30 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 23:38:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000008c0)={0x4c, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x4, 0x1, 0x31}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/144, 0x90, 0x2, 0x22}}, &(0x7f0000000680)={0x40, 0x18, 0x38}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/47, 0x0, 0x2, 0x7}, @fda={0x66646185, 0x2, 0x2, 0x1a}, @fda={0x66646185, 0x5, 0x1, 0x19}}, &(0x7f0000000780)}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/stat\x00', 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r4}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) recvfrom$packet(r2, &(0x7f0000000940)=""/48, 0x30, 0x10042, &(0x7f0000000a40)={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @multicast}, 0x14) r5 = syz_open_dev$sndctrl(&(0x7f0000000800), 0xa55, 0x18080) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000900)={0xa2, 0x0, &(0x7f0000000880)=[r5]}, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=[@register_looper, @dead_binder_done], 0x0, 0x0, 0x0}) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 1061.338254][T13258] binder: 13251:13258 ioctl 40046205 0 returned -22 23:38:30 executing program 2: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0xd258, 0x8) 23:38:30 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000008c0)={0x4c, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x4, 0x1, 0x31}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/144, 0x90, 0x2, 0x22}}, &(0x7f0000000680)={0x40, 0x18, 0x38}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/47, 0x0, 0x2, 0x7}, @fda={0x66646185, 0x2, 0x2, 0x1a}, @fda={0x66646185, 0x5, 0x1, 0x19}}, &(0x7f0000000780)}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/stat\x00', 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r4}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) recvfrom$packet(r2, &(0x7f0000000940)=""/48, 0x30, 0x10042, &(0x7f0000000a40)={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @multicast}, 0x14) r5 = syz_open_dev$sndctrl(&(0x7f0000000800), 0xa55, 0x18080) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000900)={0xa2, 0x0, &(0x7f0000000880)=[r5]}, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=[@register_looper, @dead_binder_done], 0x0, 0x0, 0x0}) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:38:31 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 23:38:31 executing program 4: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(r0, 0x0, 0x0) 23:38:31 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, 0x0, 0x0) write$eventfd(r0, &(0x7f0000000000)=0xd258, 0x8) 23:38:31 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x2) r1 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000008c0)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0705000000000000750f0a0e5ed6cfea6f7d6928d9d72221afb663d1670d42f572acaf0195a5f714fdd72906ea75cbac2daf0400"], 0x1, 0x0, &(0x7f0000000840)="c6"}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 23:38:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000008c0)={0x4c, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x4, 0x1, 0x31}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/144, 0x90, 0x2, 0x22}}, &(0x7f0000000680)={0x40, 0x18, 0x38}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/47, 0x0, 0x2, 0x7}, @fda={0x66646185, 0x2, 0x2, 0x1a}, @fda={0x66646185, 0x5, 0x1, 0x19}}, &(0x7f0000000780)}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/stat\x00', 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r4}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) recvfrom$packet(r2, &(0x7f0000000940)=""/48, 0x30, 0x10042, &(0x7f0000000a40)={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @multicast}, 0x14) r5 = syz_open_dev$sndctrl(&(0x7f0000000800), 0xa55, 0x18080) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000900)={0xa2, 0x0, &(0x7f0000000880)=[r5]}, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=[@register_looper, @dead_binder_done], 0x0, 0x0, 0x0}) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:38:31 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0xd258, 0x8) 23:38:31 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) [ 1062.141317][T13284] binder: 13279:13284 unknown command 1287 [ 1062.169397][T13284] binder: 13279:13284 ioctl c0306201 200008c0 returned -22 23:38:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000008c0)={0x4c, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x4, 0x1, 0x31}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/144, 0x90, 0x2, 0x22}}, &(0x7f0000000680)={0x40, 0x18, 0x38}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/47, 0x0, 0x2, 0x7}, @fda={0x66646185, 0x2, 0x2, 0x1a}, @fda={0x66646185, 0x5, 0x1, 0x19}}, &(0x7f0000000780)}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/stat\x00', 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r4}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) recvfrom$packet(r2, &(0x7f0000000940)=""/48, 0x30, 0x10042, &(0x7f0000000a40)={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @multicast}, 0x14) r5 = syz_open_dev$sndctrl(&(0x7f0000000800), 0xa55, 0x18080) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000900)={0xa2, 0x0, &(0x7f0000000880)=[r5]}, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=[@register_looper, @dead_binder_done], 0x0, 0x0, 0x0}) [ 1062.198971][T13287] binder: 13279:13287 ioctl 40046205 0 returned -22 23:38:31 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=[@register_looper, @dead_binder_done], 0x0, 0x0, 0x0}) r1 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) r2 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000008c0)={0xc, 0x0, &(0x7f0000000800)=[@exit_looper, @acquire={0x40046305, 0x3}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000008c0)={0x54, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x428e89ad9e5acc43, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/34, 0x22, 0x2, 0x20}, @fda={0x66646185, 0x3, 0x0, 0x1b}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000240)={0x0, 0x28, 0x48}}, 0x1000}, @acquire={0x40046305, 0x3}], 0xfc, 0x0, &(0x7f0000000140)="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"}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) 23:38:31 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=[@register_looper, @dead_binder_done], 0x0, 0x0, 0x0}) r1 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) r2 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000008c0)={0xc, 0x0, &(0x7f0000000800)=[@exit_looper, @acquire={0x40046305, 0x3}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000008c0)={0x54, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x428e89ad9e5acc43, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/34, 0x22, 0x2, 0x20}, @fda={0x66646185, 0x3, 0x0, 0x1b}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000240)={0x0, 0x28, 0x48}}, 0x1000}, @acquire={0x40046305, 0x3}], 0xfc, 0x0, &(0x7f0000000140)="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"}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) 23:38:31 executing program 2: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0xd258, 0x8) 23:38:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000008c0)={0x4c, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x4, 0x1, 0x31}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/144, 0x90, 0x2, 0x22}}, &(0x7f0000000680)={0x40, 0x18, 0x38}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/47, 0x0, 0x2, 0x7}, @fda={0x66646185, 0x2, 0x2, 0x1a}, @fda={0x66646185, 0x5, 0x1, 0x19}}, &(0x7f0000000780)}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/stat\x00', 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r4}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) recvfrom$packet(r2, &(0x7f0000000940)=""/48, 0x30, 0x10042, &(0x7f0000000a40)={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @multicast}, 0x14) r5 = syz_open_dev$sndctrl(&(0x7f0000000800), 0xa55, 0x18080) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000900)={0xa2, 0x0, &(0x7f0000000880)=[r5]}, 0x1) 23:38:31 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x401c5820, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:32 executing program 4: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(r0, 0x0, 0x0) 23:38:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x40086602, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:32 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x401c5820, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000008c0)={0x4c, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x4, 0x1, 0x31}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/144, 0x90, 0x2, 0x22}}, &(0x7f0000000680)={0x40, 0x18, 0x38}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/47, 0x0, 0x2, 0x7}, @fda={0x66646185, 0x2, 0x2, 0x1a}, @fda={0x66646185, 0x5, 0x1, 0x19}}, &(0x7f0000000780)}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/stat\x00', 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) recvfrom$packet(r2, &(0x7f0000000940)=""/48, 0x30, 0x10042, &(0x7f0000000a40)={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @multicast}, 0x14) syz_open_dev$sndctrl(&(0x7f0000000800), 0xa55, 0x18080) 23:38:32 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0xd258, 0x8) 23:38:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x40086602, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:32 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x401c5820, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000008c0)={0x4c, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x4, 0x1, 0x31}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/144, 0x90, 0x2, 0x22}}, &(0x7f0000000680)={0x40, 0x18, 0x38}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/47, 0x0, 0x2, 0x7}, @fda={0x66646185, 0x2, 0x2, 0x1a}, @fda={0x66646185, 0x5, 0x1, 0x19}}, &(0x7f0000000780)}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/stat\x00', 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) recvfrom$packet(r2, &(0x7f0000000940)=""/48, 0x30, 0x10042, &(0x7f0000000a40)={0x11, 0x3, 0x0, 0x1, 0x9, 0x6, @multicast}, 0x14) 23:38:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000008c0)={0x4c, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x4, 0x1, 0x31}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/144, 0x90, 0x2, 0x22}}, &(0x7f0000000680)={0x40, 0x18, 0x38}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/47, 0x0, 0x2, 0x7}, @fda={0x66646185, 0x2, 0x2, 0x1a}, @fda={0x66646185, 0x5, 0x1, 0x19}}, &(0x7f0000000780)}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/stat\x00', 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:32 executing program 2: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(r0, 0x0, 0x0) 23:38:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x40086602, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:32 executing program 5: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x401c5820, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:33 executing program 4: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(r0, &(0x7f0000000000), 0x8) 23:38:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000008c0)={0x4c, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x4, 0x1, 0x31}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/144, 0x90, 0x2, 0x22}}, &(0x7f0000000680)={0x40, 0x18, 0x38}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/47, 0x0, 0x2, 0x7}, @fda={0x66646185, 0x2, 0x2, 0x1a}, @fda={0x66646185, 0x5, 0x1, 0x19}}, &(0x7f0000000780)}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/stat\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:33 executing program 0: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x40086602, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:33 executing program 5: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x401c5820, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:33 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0xd258, 0x8) 23:38:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000008c0)={0x4c, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x4, 0x1, 0x31}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/144, 0x90, 0x2, 0x22}}, &(0x7f0000000680)={0x40, 0x18, 0x38}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/47, 0x0, 0x2, 0x7}, @fda={0x66646185, 0x2, 0x2, 0x1a}, @fda={0x66646185, 0x5, 0x1, 0x19}}, &(0x7f0000000780)}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:33 executing program 0: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x40086602, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:33 executing program 5: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x401c5820, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:33 executing program 2: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(r0, 0x0, 0x0) 23:38:33 executing program 0: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x40086602, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:33 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x401c5820, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:34 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x401c5820, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:34 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x40086602, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:34 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000008c0)={0x4c, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x4, 0x1, 0x31}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/144, 0x90, 0x2, 0x22}}, &(0x7f0000000680)={0x40, 0x18, 0x38}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/47, 0x0, 0x2, 0x7}, @fda={0x66646185, 0x2, 0x2, 0x1a}, @fda={0x66646185, 0x5, 0x1, 0x19}}, &(0x7f0000000780)}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:34 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(r0, 0x0, 0x0) 23:38:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:34 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x401c5820, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:34 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x40086602, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:34 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x58, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f630c40010000f3000000000000000007630440030000001063084000000000000000001863084000000000000000000f630c4001000000000000000000000004630440020000000463044000000000ea62044002000000"], 0xbc, 0x0, &(0x7f0000000140)="c80e5e4c0eb36f7480a4d3c34a8c14ae5c4373f6ed1b1873a2aabc1ddc884c24139491012b36e015558d85c8958ef1ce18a698c76d64c4a1ed8faef5829b3a6e7d4c8e5aea7e04dcfb790addcdf0f0bac5e80814a03cddc755ce84bb735345d3882cfaf358d4269f7b31941993cb0595370befb025fa595224144e0bef09ee5994015212edfab9a8fd765e7bbd9325f8a03e526c0f4016ac380dd7f328dba8375241d1897acfc29f4c7aff5b9fb4bbd15a38a90d73e860b9084ce91e"}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x18000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x5c, 0x0, &(0x7f0000000380)=[@register_looper, @dead_binder_done, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/59, 0x43, 0x0, 0x3e}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000340)={0x0, 0xfffffffffffffef8, 0x40}}}, @acquire={0x40046305, 0x3}], 0x0, 0x0, 0x0}) [ 1065.177214][T13416] binder: 13414:13416 unknown command 1074291480 [ 1065.185902][T13416] binder: 13414:13416 ioctl c0306201 20000080 returned -22 23:38:34 executing program 2: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(r0, 0x0, 0x0) 23:38:34 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x40086602, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000008c0)={0x4c, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x4, 0x1, 0x31}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/144, 0x90, 0x2, 0x22}}, &(0x7f0000000680)={0x40, 0x18, 0x38}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/47, 0x0, 0x2, 0x7}, @fda={0x66646185, 0x2, 0x2, 0x1a}, @fda={0x66646185, 0x5, 0x1, 0x19}}, &(0x7f0000000780)}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:34 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x401c5820, 0x0) 23:38:34 executing program 4: r0 = syz_io_uring_setup(0x289, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x36}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000100), &(0x7f0000000180)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000002, 0x110, r0, 0x10000000) r1 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x802) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x9, 0x2004) ioctl$I2C_RETRIES(r2, 0x701, 0x40130) ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) 23:38:34 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x40086602, 0x0) 23:38:34 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x401c5820, 0x0) [ 1065.399932][T13428] binder: 13421:13428 ioctl 40046205 0 returned -22 23:38:35 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(r0, 0x0, 0x0) 23:38:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000008c0)={0x4c, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x4, 0x1, 0x31}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/144, 0x90, 0x2, 0x22}}, &(0x7f0000000680)={0x40, 0x18, 0x38}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/47, 0x0, 0x2, 0x7}, @fda={0x66646185, 0x2, 0x2, 0x1a}, @fda={0x66646185, 0x5, 0x1, 0x19}}, &(0x7f0000000780)}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:35 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89b1, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:35 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x40086602, 0x0) 23:38:35 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x401c5820, 0x0) 23:38:35 executing program 2: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(r0, &(0x7f0000000000), 0x8) 23:38:35 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x401c5820, 0x0) 23:38:35 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89b1, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000008c0)={0x4c, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fd, @fda={0x66646185, 0x4, 0x1, 0x31}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/144, 0x90, 0x2, 0x22}}, &(0x7f0000000680)={0x40, 0x18, 0x38}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/47, 0x0, 0x2, 0x7}, @fda={0x66646185, 0x2, 0x2, 0x1a}, @fda={0x66646185, 0x5, 0x1, 0x19}}, &(0x7f0000000780)}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:35 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x40086602, 0x0) 23:38:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x2c}}, 0x8010) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=[@register_looper, @dead_binder_done], 0x0, 0x0, 0x0}) 23:38:35 executing program 5: clock_getres(0x3, &(0x7f0000000000)) r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], 0x0, 0x0, 0x0}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000140)={0x1}) [ 1066.509024][T13478] binder: 13476:13478 unknown command 0 [ 1066.518921][T13478] binder: 13476:13478 ioctl c0306201 20000280 returned -22 23:38:36 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(r0, 0x0, 0x0) 23:38:36 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89b1, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000008c0)={0x4c, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fd, @fda={0x66646185, 0x4, 0x1, 0x31}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/144, 0x90, 0x2, 0x22}}, &(0x7f0000000680)={0x40, 0x18, 0x38}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/47, 0x0, 0x2, 0x7}, @fda={0x66646185, 0x2, 0x2, 0x1a}, @fda={0x66646185, 0x5, 0x1, 0x19}}, &(0x7f0000000780)}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:36 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r0, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x4}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x40804) r3 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x802) r5 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x100) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer={0x40086303, r5}, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b000000091e30767183b0d8dd62eec0e97900"], 0xfffffdfd, 0x0, 0x0}) 23:38:36 executing program 5: clock_getres(0x3, &(0x7f0000000000)) r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], 0x0, 0x0, 0x0}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000140)={0x1}) [ 1066.974661][T13489] binder: 13485:13489 unknown command 0 [ 1066.995188][T13489] binder: 13485:13489 ioctl c0306201 20000280 returned -22 [ 1067.018748][T13492] binder: 13487:13492 unknown command 11 [ 1067.059132][T13492] binder: 13487:13492 ioctl c0306201 20000280 returned -22 23:38:36 executing program 4: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89b1, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:36 executing program 2: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(r0, &(0x7f0000000000), 0x8) 23:38:36 executing program 5: clock_getres(0x3, &(0x7f0000000000)) r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], 0x0, 0x0, 0x0}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000140)={0x1}) 23:38:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000008c0)={0x4c, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fd, @fda={0x66646185, 0x4, 0x1, 0x31}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/144, 0x90, 0x2, 0x22}}, &(0x7f0000000680)={0x40, 0x18, 0x38}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/47, 0x0, 0x2, 0x7}, @fda={0x66646185, 0x2, 0x2, 0x1a}, @fda={0x66646185, 0x5, 0x1, 0x19}}, &(0x7f0000000780)}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:36 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r0, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x4}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x40804) r3 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x802) r5 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x100) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer={0x40086303, r5}, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b000000091e30767183b0d8dd62eec0e97900"], 0xfffffdfd, 0x0, 0x0}) 23:38:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000008c0)={0x4c, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fd, @fda={0x66646185, 0x4, 0x1, 0x31}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/144, 0x90, 0x2, 0x22}}, &(0x7f0000000680)={0x40, 0x18, 0x38}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/47, 0x0, 0x2, 0x7}, @fda={0x66646185, 0x2, 0x2, 0x1a}, @fda={0x66646185, 0x5, 0x1, 0x19}}, &(0x7f0000000780)}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:36 executing program 4: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89b1, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) [ 1067.333867][T13507] binder: 13502:13507 unknown command 0 [ 1067.358490][T13507] binder: 13502:13507 ioctl c0306201 20000280 returned -22 [ 1067.373269][T13510] binder: 13505:13510 unknown command 11 [ 1067.400628][T13510] binder: 13505:13510 ioctl c0306201 20000280 returned -22 23:38:37 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(r0, &(0x7f0000000000), 0x8) 23:38:37 executing program 5: clock_getres(0x3, &(0x7f0000000000)) r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], 0x0, 0x0, 0x0}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) 23:38:37 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r0, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x4}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x40804) r3 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x802) r5 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x100) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer={0x40086303, r5}, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b000000091e30767183b0d8dd62eec0e97900"], 0xfffffdfd, 0x0, 0x0}) 23:38:37 executing program 4: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89b1, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:37 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x4c, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fd, @fda={0x66646185, 0x4, 0x1, 0x31}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/144, 0x90, 0x2, 0x22}}, &(0x7f0000000680)={0x40, 0x18, 0x38}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/47, 0x0, 0x2, 0x7}, @fda={0x66646185, 0x2, 0x2, 0x1a}, @fda={0x66646185, 0x5, 0x1, 0x19}}, &(0x7f0000000780)}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:37 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89b1, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) [ 1067.936780][T13530] binder: 13526:13530 unknown command 0 [ 1067.968721][T13530] binder: 13526:13530 ioctl c0306201 20000280 returned -22 [ 1067.989114][T13533] binder: 13524:13533 unknown command 11 [ 1067.997214][T13533] binder: 13524:13533 ioctl c0306201 20000280 returned -22 23:38:37 executing program 2: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) write$eventfd(r0, &(0x7f0000000000), 0x8) 23:38:37 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x4c, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fd, @fda={0x66646185, 0x4, 0x1, 0x31}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/144, 0x90, 0x2, 0x22}}, &(0x7f0000000680)={0x40, 0x18, 0x38}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/47, 0x0, 0x2, 0x7}, @fda={0x66646185, 0x2, 0x2, 0x1a}, @fda={0x66646185, 0x5, 0x1, 0x19}}, &(0x7f0000000780)}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:37 executing program 5: clock_getres(0x3, &(0x7f0000000000)) r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], 0x0, 0x0, 0x0}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 23:38:37 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89b1, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:37 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r0, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x4}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x40804) r3 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x802) r5 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x100) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer={0x40086303, r5}, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:37 executing program 5: clock_getres(0x3, &(0x7f0000000000)) r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], 0x0, 0x0, 0x0}) [ 1068.283537][T13548] binder: 13546:13548 unknown command 0 [ 1068.290993][T13548] binder: 13546:13548 ioctl c0306201 20000280 returned -22 [ 1068.415267][T13555] binder: 13554:13555 unknown command 0 [ 1068.428748][T13555] binder: 13554:13555 ioctl c0306201 20000280 returned -22 23:38:38 executing program 5: clock_getres(0x3, &(0x7f0000000000)) syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) 23:38:38 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x4c, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fd, @fda={0x66646185, 0x4, 0x1, 0x31}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/144, 0x90, 0x2, 0x22}}, &(0x7f0000000680)={0x40, 0x18, 0x38}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/47, 0x0, 0x2, 0x7}, @fda={0x66646185, 0x2, 0x2, 0x1a}, @fda={0x66646185, 0x5, 0x1, 0x19}}, &(0x7f0000000780)}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:38 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r0, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x4}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x40804) syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x802) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:38 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89b1, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000008c0)={0x4c, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fd, @fda={0x66646185, 0x4, 0x1, 0x31}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/144, 0x90, 0x2, 0x22}}, &(0x7f0000000680)={0x40, 0x18, 0x38}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/47, 0x0, 0x2, 0x7}, @fda={0x66646185, 0x2, 0x2, 0x1a}, @fda={0x66646185, 0x5, 0x1, 0x19}}, &(0x7f0000000780)}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:38 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x4c, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fd, @fda={0x66646185, 0x4, 0x1, 0x31}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/144, 0x90, 0x2, 0x22}}, &(0x7f0000000680)={0x40, 0x18, 0x38}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/47, 0x0, 0x2, 0x7}, @fda={0x66646185, 0x2, 0x2, 0x1a}, @fda={0x66646185, 0x5, 0x1, 0x19}}, &(0x7f0000000780)}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:38 executing program 3: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r0 = eventfd2(0xffff, 0x0) write$eventfd(r0, &(0x7f0000000000)=0x513, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000400)={&(0x7f0000000240)=[0x80, 0x6], 0x2, 0x1000, 0x0, 0xffffffffffffffff}) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x3ff) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0xc0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) syz_io_uring_setup(0x39a5, &(0x7f0000000440)={0x0, 0xc23f, 0x1, 0x3, 0xc4, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) inotify_init() r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0xc201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xc8, 0x0, &(0x7f0000000300)=[@register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/31, 0x1f, 0x2, 0x28}, @fda={0x66646185, 0x9, 0x1, 0x3d}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x28, 0x48}}, 0x40}, @request_death={0x400c630e, 0x1}, @increfs={0x40046304, 0x2}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x0, 0x1}, @fda={0x66646185, 0xa, 0x2, 0x200000021}, @fd={0x66642a85, 0x0, r4}}, &(0x7f00000002c0)={0x0, 0x18, 0x38}}, 0x40}, @increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0}) 23:38:38 executing program 5: clock_getres(0x3, &(0x7f0000000000)) 23:38:38 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89b1, 0x0) 23:38:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x4c, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fd, @fda={0x66646185, 0x4, 0x1, 0x31}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/144, 0x90, 0x2, 0x22}}, &(0x7f0000000680)={0x40, 0x18, 0x38}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/47, 0x0, 0x2, 0x7}, @fda={0x66646185, 0x2, 0x2, 0x1a}, @fda={0x66646185, 0x5, 0x1, 0x19}}, &(0x7f0000000780)}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:38 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r0, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x4}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x40804) syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:38 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x24062, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=[r1, r2, 0xffffffffffffffff, r3, r4, r5, 0xffffffffffffffff, r6]}, 0x8) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x1}, 0x4) eventfd2(0xce5, 0x1) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x5, 0x3, 0x0, 0x1}, 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\vc\x00\x00+c\b@\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 23:38:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000008c0)={0x4c, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fd, @fda={0x66646185, 0x4, 0x1, 0x31}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/144, 0x90, 0x2, 0x22}}, &(0x7f0000000680)={0x40, 0x18, 0x38}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/47, 0x0, 0x2, 0x7}, @fda={0x66646185, 0x2, 0x2, 0x1a}, @fda={0x66646185, 0x5, 0x1, 0x19}}, &(0x7f0000000780)}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:38 executing program 5: clock_getres(0x0, &(0x7f0000000000)) 23:38:38 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r0, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x4}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x40804) syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:38 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89b1, 0x0) 23:38:38 executing program 3: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r0 = eventfd2(0xffff, 0x0) write$eventfd(r0, &(0x7f0000000000)=0x513, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000400)={&(0x7f0000000240)=[0x80, 0x6], 0x2, 0x1000, 0x0, 0xffffffffffffffff}) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x3ff) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0xc0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) syz_io_uring_setup(0x39a5, &(0x7f0000000440)={0x0, 0xc23f, 0x1, 0x3, 0xc4, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) inotify_init() r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0xc201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xc8, 0x0, &(0x7f0000000300)=[@register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/31, 0x1f, 0x2, 0x28}, @fda={0x66646185, 0x9, 0x1, 0x3d}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x28, 0x48}}, 0x40}, @request_death={0x400c630e, 0x1}, @increfs={0x40046304, 0x2}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x0, 0x1}, @fda={0x66646185, 0xa, 0x2, 0x200000021}, @fd={0x66642a85, 0x0, r4}}, &(0x7f00000002c0)={0x0, 0x18, 0x38}}, 0x40}, @increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0}) 23:38:38 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x24062, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=[r1, r2, 0xffffffffffffffff, r3, r4, r5, 0xffffffffffffffff, r6]}, 0x8) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x1}, 0x4) eventfd2(0xce5, 0x1) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x5, 0x3, 0x0, 0x1}, 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\vc\x00\x00+c\b@\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 23:38:39 executing program 5: clock_getres(0x0, &(0x7f0000000000)) 23:38:39 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89b1, 0x0) 23:38:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000008c0)={0x4c, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fd, @fda={0x66646185, 0x4, 0x1, 0x31}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/144, 0x90, 0x2, 0x22}}, &(0x7f0000000680)={0x40, 0x18, 0x38}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/47, 0x0, 0x2, 0x7}, @fda={0x66646185, 0x2, 0x2, 0x1a}, @fda={0x66646185, 0x5, 0x1, 0x19}}, &(0x7f0000000780)}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:39 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r0, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x4}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x40804) syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:39 executing program 3: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r0 = eventfd2(0xffff, 0x0) write$eventfd(r0, &(0x7f0000000000)=0x513, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000400)={&(0x7f0000000240)=[0x80, 0x6], 0x2, 0x1000, 0x0, 0xffffffffffffffff}) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x3ff) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0xc0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) syz_io_uring_setup(0x39a5, &(0x7f0000000440)={0x0, 0xc23f, 0x1, 0x3, 0xc4, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) inotify_init() r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0xc201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xc8, 0x0, &(0x7f0000000300)=[@register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/31, 0x1f, 0x2, 0x28}, @fda={0x66646185, 0x9, 0x1, 0x3d}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x28, 0x48}}, 0x40}, @request_death={0x400c630e, 0x1}, @increfs={0x40046304, 0x2}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x0, 0x1}, @fda={0x66646185, 0xa, 0x2, 0x200000021}, @fd={0x66642a85, 0x0, r4}}, &(0x7f00000002c0)={0x0, 0x18, 0x38}}, 0x40}, @increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0}) 23:38:39 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x24062, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=[r1, r2, 0xffffffffffffffff, r3, r4, r5, 0xffffffffffffffff, r6]}, 0x8) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x1}, 0x4) eventfd2(0xce5, 0x1) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x5, 0x3, 0x0, 0x1}, 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\vc\x00\x00+c\b@\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 23:38:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000008c0)={0x4c, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fd, @fda={0x66646185, 0x4, 0x1, 0x31}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/144, 0x90, 0x2, 0x22}}, &(0x7f0000000680)={0x40, 0x18, 0x38}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/47, 0x0, 0x2, 0x7}, @fda={0x66646185, 0x2, 0x2, 0x1a}, @fda={0x66646185, 0x5, 0x1, 0x19}}, &(0x7f0000000780)}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:39 executing program 5: clock_getres(0x0, &(0x7f0000000000)) 23:38:39 executing program 4: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x24062, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=[r1, r2, 0xffffffffffffffff, r3, r4, r5, 0xffffffffffffffff, r6]}, 0x8) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x1}, 0x4) eventfd2(0xce5, 0x1) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x5, 0x3, 0x0, 0x1}, 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\vc\x00\x00+c\b@\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 23:38:39 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x24062, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=[r1, r2, 0xffffffffffffffff, r3, r4, r5, 0xffffffffffffffff, r6]}, 0x8) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x1}, 0x4) eventfd2(0xce5, 0x1) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x5, 0x3, 0x0, 0x1}, 0x8) 23:38:39 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r0, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x4}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x40804) r3 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x802) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:39 executing program 3: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r0 = eventfd2(0xffff, 0x0) write$eventfd(r0, &(0x7f0000000000)=0x513, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000400)={&(0x7f0000000240)=[0x80, 0x6], 0x2, 0x1000, 0x0, 0xffffffffffffffff}) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x3ff) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0xc0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) syz_io_uring_setup(0x39a5, &(0x7f0000000440)={0x0, 0xc23f, 0x1, 0x3, 0xc4, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) inotify_init() openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0xc201, 0x0) 23:38:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:39 executing program 5: clock_getres(0x3, 0x0) 23:38:39 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r0, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00'}) r2 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:39 executing program 4: clock_getres(0x0, &(0x7f0000000000)) 23:38:39 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x24062, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=[r1, r2, 0xffffffffffffffff, r3, r4, r5, 0xffffffffffffffff, r6]}, 0x8) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x1}, 0x4) eventfd2(0xce5, 0x1) 23:38:39 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x24062, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=[r1, r2, 0xffffffffffffffff, r3, r4, r5, 0xffffffffffffffff, r6]}, 0x8) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x1}, 0x4) eventfd2(0xce5, 0x1) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x5, 0x3, 0x0, 0x1}, 0x8) [ 1070.087795][T13637] binder: 13634:13637 ioctl c0306201 0 returned -14 23:38:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:39 executing program 3: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r0 = eventfd2(0xffff, 0x0) write$eventfd(r0, &(0x7f0000000000)=0x513, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000400)={&(0x7f0000000240)=[0x80, 0x6], 0x2, 0x1000, 0x0, 0xffffffffffffffff}) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x3ff) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0xc0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) syz_io_uring_setup(0x39a5, &(0x7f0000000440)={0x0, 0xc23f, 0x1, 0x3, 0xc4, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0xc201, 0x0) 23:38:39 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r0, 0x1}, 0x14}}, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:39 executing program 4: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r0, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00'}) r2 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:39 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x24062, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=[r1, r2, 0xffffffffffffffff, r3, r4, r5, 0xffffffffffffffff, r6]}, 0x8) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x1}, 0x4) 23:38:39 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8971, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) [ 1070.304789][T13652] binder: 13648:13652 ioctl c0306201 0 returned -14 23:38:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:39 executing program 3: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r0 = eventfd2(0xffff, 0x0) write$eventfd(r0, &(0x7f0000000000)=0x513, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000400)={&(0x7f0000000240)=[0x80, 0x6], 0x2, 0x1000, 0x0, 0xffffffffffffffff}) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x3ff) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0xc0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_io_uring_setup(0x39a5, &(0x7f0000000440)={0x0, 0xc23f, 0x1, 0x3, 0xc4, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0xc201, 0x0) 23:38:39 executing program 0: syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:40 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x24062, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=[r1, r2, 0xffffffffffffffff, r3, r4, r5, 0xffffffffffffffff, r6]}, 0x8) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x1}, 0x4) 23:38:40 executing program 4: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x24062, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=[r1, r2, 0xffffffffffffffff, r3, r4, r5, 0xffffffffffffffff, r6]}, 0x8) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x1}, 0x4) 23:38:40 executing program 0: syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:40 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8971, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) [ 1070.565554][T13665] binder: 13660:13665 ioctl c0306201 0 returned -14 23:38:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:40 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x24062, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=[r1, r2, 0xffffffffffffffff, r3, r4, r5, 0xffffffffffffffff, r6]}, 0x8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x1}, 0x4) 23:38:40 executing program 3: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r0 = eventfd2(0xffff, 0x0) write$eventfd(r0, &(0x7f0000000000)=0x513, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000400)={&(0x7f0000000240)=[0x80, 0x6], 0x2, 0x1000, 0x0, 0xffffffffffffffff}) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x3ff) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0xc0, 0x0) socket$packet(0x11, 0x2, 0x300) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0xc201, 0x0) 23:38:40 executing program 4: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r0 = eventfd2(0xffff, 0x0) write$eventfd(r0, &(0x7f0000000000)=0x513, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000400)={&(0x7f0000000240)=[0x80, 0x6], 0x2, 0x1000, 0x0, 0xffffffffffffffff}) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x3ff) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0xc0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_io_uring_setup(0x39a5, &(0x7f0000000440)={0x0, 0xc23f, 0x1, 0x3, 0xc4, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0xc201, 0x0) 23:38:40 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:40 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8971, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:40 executing program 3: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r0 = eventfd2(0xffff, 0x0) write$eventfd(r0, &(0x7f0000000000)=0x513, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000400)={&(0x7f0000000240)=[0x80, 0x6], 0x2, 0x1000, 0x0, 0xffffffffffffffff}) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x3ff) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0xc0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0xc201, 0x0) 23:38:40 executing program 4: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r0 = eventfd2(0xffff, 0x0) write$eventfd(r0, &(0x7f0000000000)=0x513, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000400)={&(0x7f0000000240)=[0x80, 0x6], 0x2, 0x1000, 0x0, 0xffffffffffffffff}) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x3ff) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0xc0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_io_uring_setup(0x39a5, &(0x7f0000000440)={0x0, 0xc23f, 0x1, 0x3, 0xc4, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0xc201, 0x0) 23:38:40 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x24062, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=[r1, r2, 0xffffffffffffffff, r3, r4, r5, 0xffffffffffffffff, r6]}, 0x8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x1}, 0x4) 23:38:40 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:40 executing program 5: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8971, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:40 executing program 4: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r0 = eventfd2(0xffff, 0x0) write$eventfd(r0, &(0x7f0000000000)=0x513, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000400)={&(0x7f0000000240)=[0x80, 0x6], 0x2, 0x1000, 0x0, 0xffffffffffffffff}) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x3ff) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0xc0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_io_uring_setup(0x39a5, &(0x7f0000000440)={0x0, 0xc23f, 0x1, 0x3, 0xc4, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0xc201, 0x0) 23:38:40 executing program 3: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r0 = eventfd2(0xffff, 0x0) write$eventfd(r0, &(0x7f0000000000)=0x513, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000400)={&(0x7f0000000240)=[0x80, 0x6], 0x2, 0x1000, 0x0, 0xffffffffffffffff}) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x3ff) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0xc201, 0x0) 23:38:40 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:40 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x24062, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=[r1, r2, 0xffffffffffffffff, r3, r4, r5, 0xffffffffffffffff, r6]}, 0x8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x1}, 0x4) 23:38:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fd, @fda={0x66646185, 0x4, 0x1, 0x31}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/144, 0x90, 0x2, 0x22}}, &(0x7f0000000680)={0x0, 0x18, 0x38}}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:40 executing program 5: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8971, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:40 executing program 4: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r0 = eventfd2(0xffff, 0x0) write$eventfd(r0, &(0x7f0000000000)=0x513, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000400)={&(0x7f0000000240)=[0x80, 0x6], 0x2, 0x1000, 0x0, 0xffffffffffffffff}) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x3ff) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0xc0, 0x0) socket$packet(0x11, 0x2, 0x300) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0xc201, 0x0) 23:38:40 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:40 executing program 3: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r0 = eventfd2(0xffff, 0x0) write$eventfd(r0, &(0x7f0000000000)=0x513, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000400)={&(0x7f0000000240)=[0x80, 0x6], 0x2, 0x1000}) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0xc201, 0x0) 23:38:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000980), 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:40 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x24062, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x1}, 0x4) 23:38:41 executing program 5: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8971, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:41 executing program 4: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r0 = eventfd2(0xffff, 0x0) write$eventfd(r0, &(0x7f0000000000)=0x513, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000400)={&(0x7f0000000240)=[0x80, 0x6], 0x2, 0x1000, 0x0, 0xffffffffffffffff}) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x3ff) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0xc0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0xc201, 0x0) 23:38:41 executing program 3: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r0 = eventfd2(0xffff, 0x0) write$eventfd(r0, &(0x7f0000000000)=0x513, 0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0xc201, 0x0) 23:38:41 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000980), 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:41 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x1}, 0x4) 23:38:41 executing program 4: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r0 = eventfd2(0xffff, 0x0) write$eventfd(r0, &(0x7f0000000000)=0x513, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000400)={&(0x7f0000000240)=[0x80, 0x6], 0x2, 0x1000, 0x0, 0xffffffffffffffff}) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x3ff) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0xc201, 0x0) 23:38:41 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8971, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:41 executing program 3: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) eventfd2(0xffff, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0xc201, 0x0) 23:38:41 executing program 0: syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000980), 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:41 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x1}, 0x4) 23:38:41 executing program 4: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r0 = eventfd2(0xffff, 0x0) write$eventfd(r0, &(0x7f0000000000)=0x513, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000400)={&(0x7f0000000240)=[0x80, 0x6], 0x2, 0x1000}) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0xc201, 0x0) 23:38:41 executing program 0: syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:41 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8971, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:41 executing program 3: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0xc201, 0x0) 23:38:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fd, @fda={0x66646185, 0x4, 0x1, 0x31}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/144, 0x90, 0x2, 0x22}}, &(0x7f0000000680)={0x0, 0x18, 0x38}}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:41 executing program 4: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r0 = eventfd2(0xffff, 0x0) write$eventfd(r0, &(0x7f0000000000)=0x513, 0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0xc201, 0x0) 23:38:41 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8971, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:41 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x1}, 0x4) 23:38:41 executing program 0: syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:41 executing program 3: openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0xc201, 0x0) 23:38:41 executing program 4: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) eventfd2(0xffff, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0xc201, 0x0) 23:38:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fd, @fda={0x66646185, 0x4, 0x1, 0x31}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/144, 0x90, 0x2, 0x22}}, &(0x7f0000000680)={0x0, 0x18, 0x38}}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:41 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x1}, 0x4) 23:38:41 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 23:38:41 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8971, 0x0) 23:38:41 executing program 3: openat$audio(0xffffffffffffff9c, 0x0, 0xc201, 0x0) 23:38:41 executing program 4: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0xc201, 0x0) 23:38:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000680)}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:42 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x1}, 0x4) 23:38:42 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8971, 0x0) [ 1072.497548][T13787] binder: 13781:13787 ioctl c0306201 0 returned -14 23:38:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 23:38:42 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0xc201, 0x0) 23:38:42 executing program 3: openat$audio(0xffffffffffffff9c, 0x0, 0xc201, 0x0) 23:38:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:42 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8971, 0x0) 23:38:42 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x1}, 0x4) [ 1072.748689][T13801] binder: 13796:13801 ioctl c0306201 0 returned -14 23:38:42 executing program 4: openat$audio(0xffffffffffffff9c, 0x0, 0xc201, 0x0) 23:38:42 executing program 3: openat$audio(0xffffffffffffff9c, 0x0, 0xc201, 0x0) 23:38:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 23:38:42 executing program 5: openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0xc201, 0x0) 23:38:42 executing program 3: openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 23:38:42 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x1}, 0x4) 23:38:42 executing program 5: openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0xc201, 0x0) 23:38:42 executing program 4: openat$audio(0xffffffffffffff9c, 0x0, 0xc201, 0x0) 23:38:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) [ 1073.048186][T13818] binder: 13812:13818 ioctl c0306201 0 returned -14 23:38:42 executing program 5: openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0xc201, 0x0) 23:38:42 executing program 3: openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 23:38:42 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x1}, 0x4) 23:38:42 executing program 4: openat$audio(0xffffffffffffff9c, 0x0, 0xc201, 0x0) 23:38:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:42 executing program 3: openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 23:38:42 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 23:38:42 executing program 5: openat$audio(0xffffffffffffff9c, 0x0, 0xc201, 0x0) 23:38:43 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x1}, 0x4) 23:38:43 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000840)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:43 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 23:38:43 executing program 5: openat$audio(0xffffffffffffff9c, 0x0, 0xc201, 0x0) 23:38:43 executing program 3: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) eventfd2(0xffff, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0xc201, 0x0) 23:38:43 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x1}, 0x4) 23:38:43 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000840)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:43 executing program 5: openat$audio(0xffffffffffffff9c, 0x0, 0xc201, 0x0) 23:38:43 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 23:38:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x54, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:43 executing program 2: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x1}, 0x4) 23:38:43 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x24062, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x1}, 0x4) 23:38:43 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000840)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x48, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:43 executing program 4: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r0 = eventfd2(0xffff, 0x0) write$eventfd(r0, &(0x7f0000000000)=0x513, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000400)={&(0x7f0000000240)=[0x80, 0x6], 0x2, 0x1000, 0x0, 0xffffffffffffffff}) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x3ff) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0xc0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0xc201, 0x0) 23:38:43 executing program 5: openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 23:38:43 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x1}, 0x4) 23:38:43 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:43 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:43 executing program 4: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r0 = eventfd2(0xffff, 0x0) write$eventfd(r0, &(0x7f0000000000)=0x513, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000400)={&(0x7f0000000240)=[0x80, 0x6], 0x2, 0x1000, 0x0, 0xffffffffffffffff}) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x3ff) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0xc0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) syz_io_uring_setup(0x39a5, &(0x7f0000000440)={0x0, 0xc23f, 0x1, 0x3, 0xc4, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0xc201, 0x0) 23:38:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x38, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:43 executing program 5: openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 23:38:43 executing program 2: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x1}, 0x4) 23:38:43 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:43 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:43 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:43 executing program 2: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x1}, 0x4) 23:38:43 executing program 5: openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 23:38:43 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:44 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="00000000000000000000006a4d43006600000000080000dd0000000002000000000000002b000000030000000000000001100000000000003900000000000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:44 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="d3e2ee01f9f618f0c85e13b2f034c910bc75dbbcf07302072374c60000009d215e39a1c812df3b6f71562bceb157183935672e1a50050000000000000068b8efb6645e096f150000000000"], 0x0, 0x0, 0x0}) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) 23:38:44 executing program 2: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x1}, 0x4) 23:38:44 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:44 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8970, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:44 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 1074.710316][T13923] binder: 13920:13923 unknown command 32432851 [ 1074.732916][T13923] binder: 13920:13923 ioctl c0306201 20000280 returned -22 23:38:44 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:44 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x894a, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:44 executing program 2: socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x1}, 0x4) 23:38:44 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8970, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:44 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) [ 1074.875999][T13934] binder: 13929:13934 ioctl c0306201 0 returned -14 23:38:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 23:38:44 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x894a, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:44 executing program 2: socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x1}, 0x4) 23:38:44 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:44 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8970, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:44 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x30, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 1075.086483][T13946] binder: 13944:13946 ioctl c0306201 0 returned -14 23:38:44 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x894a, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:44 executing program 2: socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x1}, 0x4) 23:38:44 executing program 5: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8970, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:44 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:44 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2c, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) [ 1075.300058][T13961] binder: 13957:13961 ioctl c0306201 0 returned -14 23:38:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:44 executing program 4: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x894a, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:44 executing program 5: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8970, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:44 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:45 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) 23:38:45 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2c, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:45 executing program 4: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x894a, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:45 executing program 5: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8970, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:45 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:45 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) 23:38:45 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2c, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:45 executing program 4: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x894a, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:45 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:45 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8970, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:45 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:45 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) 23:38:45 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @register_looper, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:45 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x894a, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:46 executing program 3: syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:46 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8970, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:46 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x894a, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:46 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x20, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @register_looper, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:46 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1}, 0x4) 23:38:46 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8970, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:46 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:46 executing program 3: syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:46 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x894a, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:46 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x20, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @register_looper, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:46 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4) 23:38:46 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8970, 0x0) 23:38:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x894a, 0x0) 23:38:46 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4) 23:38:46 executing program 3: syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:47 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x894a, 0x0) 23:38:47 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x20, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @register_looper, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:47 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8970, 0x0) 23:38:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x84, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:47 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4) 23:38:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 23:38:47 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x894a, 0x0) 23:38:47 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8970, 0x0) 23:38:47 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x18, 0x0, &(0x7f0000000080)=[@dead_binder_done, @enter_looper, @register_looper, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '(@!-\xfa-)1\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x1400489c}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@increfs={0x40046304, 0xfffffffc}, @dead_binder_done], 0x0, 0x0, 0x0}) 23:38:47 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000080)=[@enter_looper, @register_looper, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:47 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x80086601, 0x0) 23:38:47 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x58, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x2}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x14}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/100, 0x64, 0x1, 0x4}}, &(0x7f0000000140)={0x0, 0x18, 0x38}}}], 0xc0, 0x0, &(0x7f00000002c0)="1e3012acecbc941b036a0503004348d4d5cb772f514b595bc67259576498b6b178e70b8eb4585e3292ea5ba239a1e0f2ce69aab5979bda5da9dcc0c0f452ff95f32ff2ba4f206f42fa61f9b04dbecdca7d524209d1ac78a7d53640029c3a5a7f5fc24218cd7a1c34ec9e16b3c8320ea0023fb38b0627c268b0d881ff5703b263e71071d55fc3bdf53ac0f781783e81c6d543ac41b70dd2565f20c517e6d00987e8e8ce64413e4fd477c4d76df32c83872c9a645dc8b16b77730f2b9137d79257"}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x200], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x5c, 0x0, &(0x7f00000004c0)=[@increfs={0x40046304, 0x3}, @increfs_done={0x40106308, 0x1}, @increfs_done={0x40106308, 0x3}, @exit_looper, @dead_binder_done, @acquire={0x40046305, 0x2}, @clear_death={0x400c630f, 0x8000}, @enter_looper], 0x88, 0x0, &(0x7f0000000540)="639d4fde43d29ad75bdeaccc1b99f366f77cf7a38d13972a5d52bd50122c5a19dff1850d0f331abbdd5c128ba3448c80c738cb6f1c8b7a9e6fee626d4b792cbfbbbdf4942cd9cfef44d86816300a30ee2f66871e2ec27b38070e4ddca3a1ad567c4d0813a71344d76261907135f33765c9703fb7e2d420a574a967dcf98a5981a80424e828bb96c5"}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000380)={0x3, &(0x7f0000000240)=[{0x763e, 0xa, 0x7, 0x80}, {0x80, 0x81, 0x20, 0x9}, {0x20, 0x1, 0xfe, 0x1ff}]}, 0x10) r2 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$apparmor_exec(r2, &(0x7f0000000400)={'stack ', '\x00'}, 0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=[@register_looper, @dead_binder_done], 0x0, 0x0, 0x0}) 23:38:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 1078.396617][T14086] binder: 14081:14086 ioctl c0306201 0 returned -14 23:38:48 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x78, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:48 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x58, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x2}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x14}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/100, 0x64, 0x1, 0x4}}, &(0x7f0000000140)={0x0, 0x18, 0x38}}}], 0xc0, 0x0, &(0x7f00000002c0)="1e3012acecbc941b036a0503004348d4d5cb772f514b595bc67259576498b6b178e70b8eb4585e3292ea5ba239a1e0f2ce69aab5979bda5da9dcc0c0f452ff95f32ff2ba4f206f42fa61f9b04dbecdca7d524209d1ac78a7d53640029c3a5a7f5fc24218cd7a1c34ec9e16b3c8320ea0023fb38b0627c268b0d881ff5703b263e71071d55fc3bdf53ac0f781783e81c6d543ac41b70dd2565f20c517e6d00987e8e8ce64413e4fd477c4d76df32c83872c9a645dc8b16b77730f2b9137d79257"}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x200], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x5c, 0x0, &(0x7f00000004c0)=[@increfs={0x40046304, 0x3}, @increfs_done={0x40106308, 0x1}, @increfs_done={0x40106308, 0x3}, @exit_looper, @dead_binder_done, @acquire={0x40046305, 0x2}, @clear_death={0x400c630f, 0x8000}, @enter_looper], 0x88, 0x0, &(0x7f0000000540)="639d4fde43d29ad75bdeaccc1b99f366f77cf7a38d13972a5d52bd50122c5a19dff1850d0f331abbdd5c128ba3448c80c738cb6f1c8b7a9e6fee626d4b792cbfbbbdf4942cd9cfef44d86816300a30ee2f66871e2ec27b38070e4ddca3a1ad567c4d0813a71344d76261907135f33765c9703fb7e2d420a574a967dcf98a5981a80424e828bb96c5"}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000380)={0x3, &(0x7f0000000240)=[{0x763e, 0xa, 0x7, 0x80}, {0x80, 0x81, 0x20, 0x9}, {0x20, 0x1, 0xfe, 0x1ff}]}, 0x10) r2 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$apparmor_exec(r2, &(0x7f0000000400)={'stack ', '\x00'}, 0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=[@register_looper, @dead_binder_done], 0x0, 0x0, 0x0}) 23:38:48 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x84, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) [ 1078.549494][T14098] binder: 14091:14098 ioctl 80086601 0 returned -22 [ 1078.587072][T14101] binder: 14095:14101 ioctl c0306201 0 returned -14 23:38:48 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000080)=[@enter_looper, @register_looper, @enter_looper], 0x0, 0x0, 0x0}) 23:38:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 23:38:48 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x68, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8947, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:48 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x84, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:48 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x58, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x2}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x14}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/100, 0x64, 0x1, 0x4}}, &(0x7f0000000140)={0x0, 0x18, 0x38}}}], 0xc0, 0x0, &(0x7f00000002c0)="1e3012acecbc941b036a0503004348d4d5cb772f514b595bc67259576498b6b178e70b8eb4585e3292ea5ba239a1e0f2ce69aab5979bda5da9dcc0c0f452ff95f32ff2ba4f206f42fa61f9b04dbecdca7d524209d1ac78a7d53640029c3a5a7f5fc24218cd7a1c34ec9e16b3c8320ea0023fb38b0627c268b0d881ff5703b263e71071d55fc3bdf53ac0f781783e81c6d543ac41b70dd2565f20c517e6d00987e8e8ce64413e4fd477c4d76df32c83872c9a645dc8b16b77730f2b9137d79257"}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x200], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x5c, 0x0, &(0x7f00000004c0)=[@increfs={0x40046304, 0x3}, @increfs_done={0x40106308, 0x1}, @increfs_done={0x40106308, 0x3}, @exit_looper, @dead_binder_done, @acquire={0x40046305, 0x2}, @clear_death={0x400c630f, 0x8000}, @enter_looper], 0x88, 0x0, &(0x7f0000000540)="639d4fde43d29ad75bdeaccc1b99f366f77cf7a38d13972a5d52bd50122c5a19dff1850d0f331abbdd5c128ba3448c80c738cb6f1c8b7a9e6fee626d4b792cbfbbbdf4942cd9cfef44d86816300a30ee2f66871e2ec27b38070e4ddca3a1ad567c4d0813a71344d76261907135f33765c9703fb7e2d420a574a967dcf98a5981a80424e828bb96c5"}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000380)={0x3, &(0x7f0000000240)=[{0x763e, 0xa, 0x7, 0x80}, {0x80, 0x81, 0x20, 0x9}, {0x20, 0x1, 0xfe, 0x1ff}]}, 0x10) r2 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$apparmor_exec(r2, &(0x7f0000000400)={'stack ', '\x00'}, 0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=[@register_looper, @dead_binder_done], 0x0, 0x0, 0x0}) [ 1078.792269][T14115] binder: 14112:14115 ioctl c0306201 0 returned -14 23:38:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8946, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:48 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x60, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8947, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:48 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x84, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:48 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x58, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x2}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x14}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/100, 0x64, 0x1, 0x4}}, &(0x7f0000000140)={0x0, 0x18, 0x38}}}], 0xc0, 0x0, &(0x7f00000002c0)="1e3012acecbc941b036a0503004348d4d5cb772f514b595bc67259576498b6b178e70b8eb4585e3292ea5ba239a1e0f2ce69aab5979bda5da9dcc0c0f452ff95f32ff2ba4f206f42fa61f9b04dbecdca7d524209d1ac78a7d53640029c3a5a7f5fc24218cd7a1c34ec9e16b3c8320ea0023fb38b0627c268b0d881ff5703b263e71071d55fc3bdf53ac0f781783e81c6d543ac41b70dd2565f20c517e6d00987e8e8ce64413e4fd477c4d76df32c83872c9a645dc8b16b77730f2b9137d79257"}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x200], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x5c, 0x0, &(0x7f00000004c0)=[@increfs={0x40046304, 0x3}, @increfs_done={0x40106308, 0x1}, @increfs_done={0x40106308, 0x3}, @exit_looper, @dead_binder_done, @acquire={0x40046305, 0x2}, @clear_death={0x400c630f, 0x8000}, @enter_looper], 0x88, 0x0, &(0x7f0000000540)="639d4fde43d29ad75bdeaccc1b99f366f77cf7a38d13972a5d52bd50122c5a19dff1850d0f331abbdd5c128ba3448c80c738cb6f1c8b7a9e6fee626d4b792cbfbbbdf4942cd9cfef44d86816300a30ee2f66871e2ec27b38070e4ddca3a1ad567c4d0813a71344d76261907135f33765c9703fb7e2d420a574a967dcf98a5981a80424e828bb96c5"}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000380)={0x3, &(0x7f0000000240)=[{0x763e, 0xa, 0x7, 0x80}, {0x80, 0x81, 0x20, 0x9}, {0x20, 0x1, 0xfe, 0x1ff}]}, 0x10) r2 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$apparmor_exec(r2, &(0x7f0000000400)={'stack ', '\x00'}, 0x7) 23:38:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8946, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:48 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x14, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8947, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:48 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x84, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:48 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x58, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x2}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x14}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/100, 0x64, 0x1, 0x4}}, &(0x7f0000000140)={0x0, 0x18, 0x38}}}], 0xc0, 0x0, &(0x7f00000002c0)="1e3012acecbc941b036a0503004348d4d5cb772f514b595bc67259576498b6b178e70b8eb4585e3292ea5ba239a1e0f2ce69aab5979bda5da9dcc0c0f452ff95f32ff2ba4f206f42fa61f9b04dbecdca7d524209d1ac78a7d53640029c3a5a7f5fc24218cd7a1c34ec9e16b3c8320ea0023fb38b0627c268b0d881ff5703b263e71071d55fc3bdf53ac0f781783e81c6d543ac41b70dd2565f20c517e6d00987e8e8ce64413e4fd477c4d76df32c83872c9a645dc8b16b77730f2b9137d79257"}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x200], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x5c, 0x0, &(0x7f00000004c0)=[@increfs={0x40046304, 0x3}, @increfs_done={0x40106308, 0x1}, @increfs_done={0x40106308, 0x3}, @exit_looper, @dead_binder_done, @acquire={0x40046305, 0x2}, @clear_death={0x400c630f, 0x8000}, @enter_looper], 0x88, 0x0, &(0x7f0000000540)="639d4fde43d29ad75bdeaccc1b99f366f77cf7a38d13972a5d52bd50122c5a19dff1850d0f331abbdd5c128ba3448c80c738cb6f1c8b7a9e6fee626d4b792cbfbbbdf4942cd9cfef44d86816300a30ee2f66871e2ec27b38070e4ddca3a1ad567c4d0813a71344d76261907135f33765c9703fb7e2d420a574a967dcf98a5981a80424e828bb96c5"}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000380)={0x3, &(0x7f0000000240)=[{0x763e, 0xa, 0x7, 0x80}, {0x80, 0x81, 0x20, 0x9}, {0x20, 0x1, 0xfe, 0x1ff}]}, 0x10) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000400)={'stack ', '\x00'}, 0x7) 23:38:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8946, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x54, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:48 executing program 2: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8947, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:48 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x58, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x2}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x14}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/100, 0x64, 0x1, 0x4}}, &(0x7f0000000140)={0x0, 0x18, 0x38}}}], 0xc0, 0x0, &(0x7f00000002c0)="1e3012acecbc941b036a0503004348d4d5cb772f514b595bc67259576498b6b178e70b8eb4585e3292ea5ba239a1e0f2ce69aab5979bda5da9dcc0c0f452ff95f32ff2ba4f206f42fa61f9b04dbecdca7d524209d1ac78a7d53640029c3a5a7f5fc24218cd7a1c34ec9e16b3c8320ea0023fb38b0627c268b0d881ff5703b263e71071d55fc3bdf53ac0f781783e81c6d543ac41b70dd2565f20c517e6d00987e8e8ce64413e4fd477c4d76df32c83872c9a645dc8b16b77730f2b9137d79257"}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x200], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x5c, 0x0, &(0x7f00000004c0)=[@increfs={0x40046304, 0x3}, @increfs_done={0x40106308, 0x1}, @increfs_done={0x40106308, 0x3}, @exit_looper, @dead_binder_done, @acquire={0x40046305, 0x2}, @clear_death={0x400c630f, 0x8000}, @enter_looper], 0x88, 0x0, &(0x7f0000000540)="639d4fde43d29ad75bdeaccc1b99f366f77cf7a38d13972a5d52bd50122c5a19dff1850d0f331abbdd5c128ba3448c80c738cb6f1c8b7a9e6fee626d4b792cbfbbbdf4942cd9cfef44d86816300a30ee2f66871e2ec27b38070e4ddca3a1ad567c4d0813a71344d76261907135f33765c9703fb7e2d420a574a967dcf98a5981a80424e828bb96c5"}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000380)={0x3, &(0x7f0000000240)=[{0x763e, 0xa, 0x7, 0x80}, {0x80, 0x81, 0x20, 0x9}, {0x20, 0x1, 0xfe, 0x1ff}]}, 0x10) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000400)={'stack ', '\x00'}, 0x7) 23:38:49 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x84, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:49 executing program 0: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8946, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x48, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper, @request_death={0x400c630e, 0x3}], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:49 executing program 2: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8947, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:49 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x84, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:49 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x14, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:49 executing program 0: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8946, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x38, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:49 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x58, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x2}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x14}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/100, 0x64, 0x1, 0x4}}, &(0x7f0000000140)={0x0, 0x18, 0x38}}}], 0xc0, 0x0, &(0x7f00000002c0)="1e3012acecbc941b036a0503004348d4d5cb772f514b595bc67259576498b6b178e70b8eb4585e3292ea5ba239a1e0f2ce69aab5979bda5da9dcc0c0f452ff95f32ff2ba4f206f42fa61f9b04dbecdca7d524209d1ac78a7d53640029c3a5a7f5fc24218cd7a1c34ec9e16b3c8320ea0023fb38b0627c268b0d881ff5703b263e71071d55fc3bdf53ac0f781783e81c6d543ac41b70dd2565f20c517e6d00987e8e8ce64413e4fd477c4d76df32c83872c9a645dc8b16b77730f2b9137d79257"}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x200], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x5c, 0x0, &(0x7f00000004c0)=[@increfs={0x40046304, 0x3}, @increfs_done={0x40106308, 0x1}, @increfs_done={0x40106308, 0x3}, @exit_looper, @dead_binder_done, @acquire={0x40046305, 0x2}, @clear_death={0x400c630f, 0x8000}, @enter_looper], 0x88, 0x0, &(0x7f0000000540)="639d4fde43d29ad75bdeaccc1b99f366f77cf7a38d13972a5d52bd50122c5a19dff1850d0f331abbdd5c128ba3448c80c738cb6f1c8b7a9e6fee626d4b792cbfbbbdf4942cd9cfef44d86816300a30ee2f66871e2ec27b38070e4ddca3a1ad567c4d0813a71344d76261907135f33765c9703fb7e2d420a574a967dcf98a5981a80424e828bb96c5"}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000380)={0x3, &(0x7f0000000240)=[{0x763e, 0xa, 0x7, 0x80}, {0x80, 0x81, 0x20, 0x9}, {0x20, 0x1, 0xfe, 0x1ff}]}, 0x10) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000400)={'stack ', '\x00'}, 0x7) 23:38:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:49 executing program 0: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8946, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:49 executing program 2: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8947, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:49 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x58, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x2}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x14}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/100, 0x64, 0x1, 0x4}}, &(0x7f0000000140)={0x0, 0x18, 0x38}}}], 0xc0, 0x0, &(0x7f00000002c0)="1e3012acecbc941b036a0503004348d4d5cb772f514b595bc67259576498b6b178e70b8eb4585e3292ea5ba239a1e0f2ce69aab5979bda5da9dcc0c0f452ff95f32ff2ba4f206f42fa61f9b04dbecdca7d524209d1ac78a7d53640029c3a5a7f5fc24218cd7a1c34ec9e16b3c8320ea0023fb38b0627c268b0d881ff5703b263e71071d55fc3bdf53ac0f781783e81c6d543ac41b70dd2565f20c517e6d00987e8e8ce64413e4fd477c4d76df32c83872c9a645dc8b16b77730f2b9137d79257"}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x200], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x5c, 0x0, &(0x7f00000004c0)=[@increfs={0x40046304, 0x3}, @increfs_done={0x40106308, 0x1}, @increfs_done={0x40106308, 0x3}, @exit_looper, @dead_binder_done, @acquire={0x40046305, 0x2}, @clear_death={0x400c630f, 0x8000}, @enter_looper], 0x88, 0x0, &(0x7f0000000540)="639d4fde43d29ad75bdeaccc1b99f366f77cf7a38d13972a5d52bd50122c5a19dff1850d0f331abbdd5c128ba3448c80c738cb6f1c8b7a9e6fee626d4b792cbfbbbdf4942cd9cfef44d86816300a30ee2f66871e2ec27b38070e4ddca3a1ad567c4d0813a71344d76261907135f33765c9703fb7e2d420a574a967dcf98a5981a80424e828bb96c5"}) r2 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$apparmor_exec(r2, &(0x7f0000000400)={'stack ', '\x00'}, 0x7) 23:38:49 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x84, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:49 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8947, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:49 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8946, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:49 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x84, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x14, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:50 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x58, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x2}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x14}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/100, 0x64, 0x1, 0x4}}, &(0x7f0000000140)={0x0, 0x18, 0x38}}}], 0xc0, 0x0, &(0x7f00000002c0)="1e3012acecbc941b036a0503004348d4d5cb772f514b595bc67259576498b6b178e70b8eb4585e3292ea5ba239a1e0f2ce69aab5979bda5da9dcc0c0f452ff95f32ff2ba4f206f42fa61f9b04dbecdca7d524209d1ac78a7d53640029c3a5a7f5fc24218cd7a1c34ec9e16b3c8320ea0023fb38b0627c268b0d881ff5703b263e71071d55fc3bdf53ac0f781783e81c6d543ac41b70dd2565f20c517e6d00987e8e8ce64413e4fd477c4d76df32c83872c9a645dc8b16b77730f2b9137d79257"}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x200], 0x1, 0x80000}) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000400)={'stack ', '\x00'}, 0x7) 23:38:50 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8947, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:50 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8946, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:50 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x84, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @acquire={0x40046305, 0x1}], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:50 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x58, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x2}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x14}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/100, 0x64, 0x1, 0x4}}, &(0x7f0000000140)={0x0, 0x18, 0x38}}}], 0xc0, 0x0, &(0x7f00000002c0)="1e3012acecbc941b036a0503004348d4d5cb772f514b595bc67259576498b6b178e70b8eb4585e3292ea5ba239a1e0f2ce69aab5979bda5da9dcc0c0f452ff95f32ff2ba4f206f42fa61f9b04dbecdca7d524209d1ac78a7d53640029c3a5a7f5fc24218cd7a1c34ec9e16b3c8320ea0023fb38b0627c268b0d881ff5703b263e71071d55fc3bdf53ac0f781783e81c6d543ac41b70dd2565f20c517e6d00987e8e8ce64413e4fd477c4d76df32c83872c9a645dc8b16b77730f2b9137d79257"}) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000400)={'stack ', '\x00'}, 0x7) 23:38:50 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8946, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:50 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x84, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:50 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8947, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x30, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @register_looper, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:51 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x60, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000000c0)}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:51 executing program 4: syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000400)={'stack ', '\x00'}, 0x7) 23:38:51 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8946, 0x0) 23:38:51 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x84, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8947, 0x0) 23:38:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2c, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2c, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:51 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8946, 0x0) 23:38:51 executing program 4: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000400)={'stack ', '\x00'}, 0x7) 23:38:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8947, 0x0) 23:38:51 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x60, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:51 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x84, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2c, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @free_buffer, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:51 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8946, 0x0) 23:38:51 executing program 4: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000400)={'stack ', '\x00'}, 0x7) 23:38:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8947, 0x0) 23:38:51 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x50, 0x0, &(0x7f00000002c0)=[@exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:51 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x84, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @enter_looper, @register_looper, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:51 executing program 4: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000400)={'stack ', '\x00'}, 0x7) 23:38:52 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8946, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:52 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x58, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x2}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x1, 0x14}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/100, 0x64, 0x1, 0x4}}, &(0x7f0000000140)={0x0, 0x18, 0x38}}}], 0xc0, 0x0, &(0x7f00000002c0)="1e3012acecbc941b036a0503004348d4d5cb772f514b595bc67259576498b6b178e70b8eb4585e3292ea5ba239a1e0f2ce69aab5979bda5da9dcc0c0f452ff95f32ff2ba4f206f42fa61f9b04dbecdca7d524209d1ac78a7d53640029c3a5a7f5fc24218cd7a1c34ec9e16b3c8320ea0023fb38b0627c268b0d881ff5703b263e71071d55fc3bdf53ac0f781783e81c6d543ac41b70dd2565f20c517e6d00987e8e8ce64413e4fd477c4d76df32c83872c9a645dc8b16b77730f2b9137d79257"}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x200], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x5c, 0x0, &(0x7f00000004c0)=[@increfs={0x40046304, 0x3}, @increfs_done={0x40106308, 0x1}, @increfs_done={0x40106308, 0x3}, @exit_looper, @dead_binder_done, @acquire={0x40046305, 0x2}, @clear_death={0x400c630f, 0x8000}, @enter_looper], 0x88, 0x0, &(0x7f0000000540)="639d4fde43d29ad75bdeaccc1b99f366f77cf7a38d13972a5d52bd50122c5a19dff1850d0f331abbdd5c128ba3448c80c738cb6f1c8b7a9e6fee626d4b792cbfbbbdf4942cd9cfef44d86816300a30ee2f66871e2ec27b38070e4ddca3a1ad567c4d0813a71344d76261907135f33765c9703fb7e2d420a574a967dcf98a5981a80424e828bb96c5"}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000380)={0x3, &(0x7f0000000240)=[{0x763e, 0xa, 0x7, 0x80}, {0x80, 0x81, 0x20, 0x9}, {0x20, 0x1, 0xfe, 0x1ff}]}, 0x10) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000400)={'stack ', '\x00'}, 0x7) 23:38:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:52 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x84, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x20, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @register_looper, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8943, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:52 executing program 4: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000400)={'stack ', '\x00'}, 0x7) 23:38:52 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x84, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:52 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=[@register_looper, @dead_binder_done], 0xfffffdfd, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x100000000) 23:38:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23:38:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x20, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @register_looper, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:52 executing program 4: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000400)={'stack ', '\x00'}, 0x7) 23:38:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8942, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:52 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x84, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8943, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) [ 1082.775152][T14315] binder: 14310:14315 ioctl c0306201 20000280 returned -14 23:38:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x20, 0x0, &(0x7f0000000080)=[@dead_binder_done, @free_buffer, @register_looper, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:52 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=[@register_looper, @dead_binder_done], 0xfffffdfd, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x100000000) 23:38:52 executing program 4: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000400)={'stack ', '\x00'}, 0x7) 23:38:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8943, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8942, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) [ 1082.948633][T14327] binder: 14324:14327 ioctl c0306201 0 returned -14 23:38:52 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x84, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x18, 0x0, &(0x7f0000000080)=[@dead_binder_done, @enter_looper, @register_looper, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) [ 1083.002583][T14330] binder: 14328:14330 ioctl c0306201 20000280 returned -14 23:38:52 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x3248121f609c8db) prctl$PR_GET_KEEPCAPS(0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b630000106308400000fcffffff0000"], 0x0, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 23:38:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8942, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:52 executing program 0: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8943, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:52 executing program 4: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000400)={'stack ', '\x00'}, 0x7) 23:38:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000080)=[@enter_looper, @register_looper, @enter_looper], 0x9d, 0x0, &(0x7f0000000100)="a7036db041624cb147b48e2ddec8bc1f4d9c94099e365cfc95855a2d63b4ac772cbfb214271032a0879b885da2bc980893bdc5330ebebc91361d12df47c58f1aa39cd5d7c053d37ce8654c2ab6e467a19bc808d9158dfba29f931cbd1a7abb2857c94fddefa6d189556ea0f87fd98f4b6e73954121272e090e03a2c9e967218d1a6b66133e5713948c94186b3d46b2aa286a9e5edda4878865902a2206"}) 23:38:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8937, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) [ 1083.162328][T14343] binder: 14339:14343 ioctl c0306201 0 returned -14 23:38:52 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x84, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:52 executing program 1: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8942, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:52 executing program 4: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x0) 23:38:52 executing program 0: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8943, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000080)=[@enter_looper, @register_looper, @enter_looper], 0x0, 0x0, 0x0}) 23:38:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8937, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:52 executing program 1: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8942, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) [ 1083.370467][T14361] binder: 14355:14361 ioctl c0306201 0 returned -14 23:38:53 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x84, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:53 executing program 0: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8943, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:53 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8932, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8931, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8937, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:53 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8943, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:53 executing program 1: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8942, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8931, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:53 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x84, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:53 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8932, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:53 executing program 2: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8937, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:53 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8943, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:53 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8942, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:53 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x84, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8931, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:53 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8932, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:53 executing program 2: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8937, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:53 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8943, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:53 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8942, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:53 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000980), 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x84, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:53 executing program 4: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8932, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:53 executing program 3: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8931, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:53 executing program 2: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8937, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:53 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8943, 0x0) 23:38:53 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8942, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:53 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000980), 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x84, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:53 executing program 3: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8931, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:53 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8937, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:53 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8943, 0x0) 23:38:53 executing program 4: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8932, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8942, 0x0) 23:38:53 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000980), 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x84, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:53 executing program 3: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8931, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:53 executing program 4: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8932, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8942, 0x0) 23:38:53 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8943, 0x0) 23:38:53 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8937, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:53 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x84, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:53 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8931, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8942, 0x0) 23:38:54 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8932, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:54 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8937, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:54 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x84, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8930, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:54 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x84, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:54 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8931, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:54 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8932, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:54 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8929, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8937, 0x0) 23:38:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8930, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:54 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8931, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:54 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x84, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:54 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8932, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:54 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8929, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8930, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8937, 0x0) 23:38:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8931, 0x0) 23:38:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8932, 0x0) 23:38:54 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000840)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x84, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:54 executing program 1: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8930, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:54 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8929, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8937, 0x0) 23:38:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8931, 0x0) 23:38:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8932, 0x0) 23:38:54 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000840)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x84, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:54 executing program 1: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8930, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8931, 0x0) 23:38:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8927, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:54 executing program 0: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8929, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8932, 0x0) 23:38:54 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000840)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x84, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:54 executing program 1: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8930, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:54 executing program 0: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8929, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8927, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8924, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:55 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8923, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:55 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x84, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8927, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:55 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8930, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:55 executing program 0: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8929, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:55 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8923, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8924, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:55 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8929, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:55 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x84, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:55 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8923, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:55 executing program 2: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8927, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:55 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8930, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:55 executing program 4: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8923, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8924, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:55 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8929, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:55 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8930, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:55 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x84, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}, @dead_binder_done], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:55 executing program 2: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8927, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:55 executing program 4: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8923, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:55 executing program 2: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8927, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:55 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 23:38:55 executing program 3: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8924, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:55 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8929, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:55 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8930, 0x0) 23:38:55 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8927, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:55 executing program 4: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8923, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:55 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8929, 0x0) [ 1086.114275][T14577] binder: 14571:14577 ioctl c0306201 0 returned -14 23:38:55 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 23:38:55 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8930, 0x0) 23:38:55 executing program 3: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8924, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:55 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8927, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:55 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8929, 0x0) 23:38:55 executing program 3: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8924, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:55 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8923, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:55 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8930, 0x0) [ 1086.309223][T14591] binder: 14586:14591 ioctl c0306201 0 returned -14 23:38:55 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8929, 0x0) 23:38:55 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 23:38:56 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8923, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:56 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8927, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8922, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:56 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8924, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:56 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8921, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) [ 1086.568297][T14610] binder: 14606:14610 ioctl c0306201 0 returned -14 23:38:56 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8923, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8927, 0x0) 23:38:56 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8922, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:56 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8924, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:56 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8921, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:56 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8923, 0x0) 23:38:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8927, 0x0) 23:38:56 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8924, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8922, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:56 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8921, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:56 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8923, 0x0) 23:38:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8927, 0x0) 23:38:56 executing program 1: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8922, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:57 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8924, 0x0) 23:38:57 executing program 0: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8921, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:57 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8923, 0x0) 23:38:57 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 23:38:57 executing program 1: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8922, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8924, 0x0) 23:38:57 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x891e, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:57 executing program 1: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8922, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x891d, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) [ 1087.712145][T14665] binder: 14659:14665 ioctl c0306201 0 returned -14 23:38:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8924, 0x0) 23:38:57 executing program 0: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8921, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:58 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:58 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x891e, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:58 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8922, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:58 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8914, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:58 executing program 0: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8921, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x891d, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x891d, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:58 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8921, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:58 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8922, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:58 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8921, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:58 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8922, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:58 executing program 2: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x891d, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:59 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x78, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:59 executing program 2: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x891d, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:59 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8921, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8922, 0x0) 23:38:59 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x891e, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:59 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8914, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:59 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8921, 0x0) 23:38:59 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8914, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:59 executing program 2: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x891d, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:59 executing program 4: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x891e, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8922, 0x0) 23:38:59 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x68, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:59 executing program 4: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x891e, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:59 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8921, 0x0) 23:38:59 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x60, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8922, 0x0) 23:38:59 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x891d, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:59 executing program 3: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8914, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:59 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8921, 0x0) 23:38:59 executing program 4: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x891e, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:59 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x891d, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:59 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x14, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:38:59 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x891e, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x6364, 0x0) 23:38:59 executing program 3: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8914, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:59 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x891d, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:59 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x891e, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:59 executing program 0: r0 = eventfd2(0x0, 0x0) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x0) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) write$eventfd(r0, 0x0, 0x700) [ 1090.303967][T14785] binder: 14781:14785 ioctl 6364 0 returned -22 23:38:59 executing program 3: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8914, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:38:59 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x891d, 0x0) 23:39:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) [ 1090.568784][T14794] block nbd0: shutting down sockets 23:39:00 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x14, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:39:00 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x891e, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:39:00 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8914, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:39:00 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x891d, 0x0) 23:39:00 executing program 0: r0 = eventfd2(0x0, 0x0) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x0) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) write$eventfd(r0, 0x0, 0x700) 23:39:00 executing program 1: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8913, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:39:00 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x891d, 0x0) 23:39:00 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x891e, 0x0) 23:39:00 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8914, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:39:00 executing program 1: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8913, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:39:00 executing program 0: r0 = eventfd2(0x0, 0x0) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x0) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) write$eventfd(r0, 0x0, 0x700) [ 1091.187087][T14816] block nbd0: shutting down sockets 23:39:00 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x891e, 0x0) [ 1091.457445][T14833] block nbd0: shutting down sockets 23:39:01 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x14, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:39:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x891d, 0x0) 23:39:01 executing program 1: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8913, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:39:01 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8914, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:39:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x891e, 0x0) 23:39:01 executing program 0: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) 23:39:01 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x0) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) write$eventfd(r0, 0x0, 0x700) 23:39:01 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8913, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:39:01 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8914, 0x0) 23:39:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:39:01 executing program 0: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) [ 1092.136723][T14847] block nbd0: shutting down sockets 23:39:01 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8913, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) [ 1092.367388][T14858] block nbd4: shutting down sockets 23:39:02 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x60, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000000c0)}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:39:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:39:02 executing program 0: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) 23:39:02 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8914, 0x0) 23:39:02 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x0) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) write$eventfd(r0, 0x0, 0x700) 23:39:02 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8913, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:39:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:39:02 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8914, 0x0) 23:39:02 executing program 0: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) 23:39:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8913, 0x0) 23:39:02 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x60, 0x0, &(0x7f00000002c0)=[@exit_looper, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) [ 1093.107182][T14885] block nbd4: shutting down sockets 23:39:02 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x0) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) write$eventfd(r0, 0x0, 0x700) 23:39:02 executing program 2: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x5452, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:39:02 executing program 3: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) 23:39:02 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x50, 0x0, &(0x7f00000002c0)=[@exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:39:02 executing program 0: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) 23:39:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8913, 0x0) 23:39:02 executing program 2: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x5452, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) [ 1093.408404][T14902] block nbd4: shutting down sockets 23:39:03 executing program 4: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) 23:39:03 executing program 0: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) 23:39:03 executing program 3: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) 23:39:03 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8913, 0x0) 23:39:03 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:39:03 executing program 2: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x5452, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:39:03 executing program 4: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) [ 1093.666855][T14920] block nbd4: shutting down sockets 23:39:03 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x50, 0x0, &(0x7f00000002c0)=[@exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xc4, 0x0, &(0x7f00000003c0)="05ba6c6e7f54188b1cd65b38fb0dedb71ef027d643d314ffd5d7a0602e10a53c83dbb4c0af24408a7606a1e7b4b8a2901fe214f666bcab80c7333532d4e191077c4d15ba46ed058fb236a73f7036f5e42f9d3961fe6ef1f0a32359ec4b3850f29207630d39e8ed51e4ddf2fe1f65fffbe7fec07e117fcd466a85ec50a38a71be06f37f5030514f8306cc79aa5556d55e96a965296f082861b4d6aed1a2491e148298e10117f7b3f70250dedfdd70ac71d21c733117288b2c258ee6800cd37022566008a9"}) 23:39:03 executing program 0: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) 23:39:03 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8914, 0x0) 23:39:03 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23:39:03 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x5452, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:39:03 executing program 4: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) 23:39:03 executing program 1: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) 23:39:03 executing program 0: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) 23:39:03 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8914, 0x0) 23:39:03 executing program 5: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) 23:39:03 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x5452, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:39:03 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8914, 0x0) 23:39:03 executing program 1: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) 23:39:03 executing program 4: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) 23:39:03 executing program 0: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) [ 1094.206697][T14948] block nbd0: shutting down sockets [ 1094.256966][T14957] block nbd5: shutting down sockets 23:39:03 executing program 5: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) 23:39:03 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x5452, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:39:03 executing program 3: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8914, 0x0) 23:39:03 executing program 1: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) 23:39:03 executing program 4: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) 23:39:04 executing program 3: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8914, 0x0) 23:39:04 executing program 4: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) [ 1094.486799][T14969] block nbd0: shutting down sockets 23:39:04 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, 0x0) 23:39:04 executing program 0: eventfd2(0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:04 executing program 5: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) [ 1094.566118][T14971] block nbd5: shutting down sockets 23:39:04 executing program 1: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) 23:39:04 executing program 3: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8914, 0x0) 23:39:04 executing program 1: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) 23:39:04 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, 0x0) 23:39:04 executing program 4: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) [ 1094.784656][T14987] block nbd5: shutting down sockets 23:39:04 executing program 5: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) 23:39:04 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8914, 0x0) 23:39:04 executing program 0: eventfd2(0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1094.889751][T14990] block nbd0: shutting down sockets 23:39:04 executing program 4: eventfd2(0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) 23:39:04 executing program 1: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) 23:39:04 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, 0x0) 23:39:04 executing program 5: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) 23:39:04 executing program 4: eventfd2(0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) 23:39:04 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8914, 0x0) 23:39:04 executing program 1: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) 23:39:04 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1095.136221][T15008] block nbd0: shutting down sockets 23:39:04 executing program 2: eventfd2(0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:04 executing program 5: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) 23:39:04 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8914, 0x0) 23:39:04 executing program 4: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) 23:39:04 executing program 1: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) [ 1095.387278][T15022] block nbd0: shutting down sockets 23:39:05 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1095.427940][T15025] block nbd2: shutting down sockets 23:39:05 executing program 5: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) 23:39:05 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:05 executing program 2: eventfd2(0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:05 executing program 4: syz_open_dev$ndb(0x0, 0x0, 0x4000) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) 23:39:05 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:05 executing program 1: eventfd2(0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:05 executing program 5: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) 23:39:05 executing program 3: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) 23:39:05 executing program 4: syz_open_dev$ndb(0x0, 0x0, 0x4000) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) [ 1095.696873][T15038] block nbd3: shutting down sockets [ 1095.728071][T15043] block nbd2: shutting down sockets 23:39:05 executing program 2: eventfd2(0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:05 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:05 executing program 1: eventfd2(0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:05 executing program 5: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) 23:39:05 executing program 4: syz_open_dev$ndb(0x0, 0x0, 0x4000) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) 23:39:05 executing program 3: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) 23:39:05 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1096.027227][T15058] block nbd2: shutting down sockets 23:39:05 executing program 2: eventfd2(0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:05 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:05 executing program 5: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) 23:39:05 executing program 4: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) 23:39:05 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1096.208973][T15069] block nbd3: shutting down sockets [ 1096.216092][T15071] block nbd0: shutting down sockets 23:39:05 executing program 3: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) 23:39:05 executing program 2: eventfd2(0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:05 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0xc002) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:05 executing program 4: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0xc002) 23:39:05 executing program 5: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) [ 1096.386702][T15078] block nbd5: shutting down sockets 23:39:06 executing program 2: eventfd2(0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:06 executing program 3: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) [ 1096.467103][T15084] block nbd3: shutting down sockets [ 1096.496988][T15083] block nbd0: shutting down sockets 23:39:06 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:06 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0xc002) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:06 executing program 4: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0xc002) [ 1096.607630][T15093] block nbd5: shutting down sockets 23:39:06 executing program 5: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) 23:39:06 executing program 4: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0xc002) 23:39:06 executing program 2: eventfd2(0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) 23:39:06 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0xc002) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:06 executing program 3: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) [ 1096.777085][T15096] block nbd3: shutting down sockets 23:39:06 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:06 executing program 4: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) 23:39:06 executing program 5: eventfd2(0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1096.846257][T15105] block nbd5: shutting down sockets 23:39:06 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:06 executing program 2: eventfd2(0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) 23:39:06 executing program 3: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) 23:39:06 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:06 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:06 executing program 5: eventfd2(0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1097.087082][T15117] block nbd5: shutting down sockets 23:39:06 executing program 3: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) 23:39:06 executing program 2: eventfd2(0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) 23:39:06 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) 23:39:06 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) 23:39:06 executing program 3: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) 23:39:06 executing program 5: eventfd2(0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1097.316162][T15131] block nbd5: shutting down sockets [ 1097.347750][T15130] block nbd4: shutting down sockets 23:39:06 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:07 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) 23:39:07 executing program 2: eventfd2(0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:07 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) 23:39:07 executing program 3: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) 23:39:07 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) [ 1097.586755][T15148] block nbd5: shutting down sockets [ 1097.587904][T15149] block nbd4: shutting down sockets [ 1097.606758][T15153] block nbd2: shutting down sockets 23:39:07 executing program 5: eventfd2(0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:07 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:07 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:07 executing program 3: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) 23:39:07 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) 23:39:07 executing program 1: eventfd2(0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:07 executing program 3: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) [ 1097.836269][T15163] block nbd5: shutting down sockets [ 1097.836301][T15165] block nbd2: shutting down sockets [ 1097.848201][T15164] block nbd4: shutting down sockets 23:39:07 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:07 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:07 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:07 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1097.961110][T15172] block nbd1: shutting down sockets 23:39:07 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1098.006391][T15176] block nbd3: shutting down sockets 23:39:07 executing program 1: eventfd2(0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:07 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:07 executing program 3: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) [ 1098.096484][T15179] block nbd5: shutting down sockets 23:39:07 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:07 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:07 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:07 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:07 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:07 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1098.276626][T15190] block nbd3: shutting down sockets [ 1098.297094][T15193] block nbd1: shutting down sockets 23:39:07 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:07 executing program 1: eventfd2(0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:07 executing program 3: eventfd2(0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:07 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) 23:39:08 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:08 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1098.466494][T15205] block nbd2: shutting down sockets 23:39:08 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:08 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) 23:39:08 executing program 3: eventfd2(0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1098.553219][T15210] block nbd3: shutting down sockets [ 1098.560267][T15208] block nbd1: shutting down sockets 23:39:08 executing program 1: eventfd2(0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:08 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:08 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1098.677596][T15219] block nbd0: shutting down sockets 23:39:08 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) 23:39:08 executing program 0: eventfd2(0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:08 executing program 1: eventfd2(0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:08 executing program 3: eventfd2(0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1098.783583][T15224] block nbd3: shutting down sockets 23:39:08 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:08 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1098.886312][T15231] block nbd5: shutting down sockets [ 1098.902909][T15233] block nbd0: shutting down sockets 23:39:08 executing program 1: eventfd2(0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:08 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:08 executing program 0: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) 23:39:08 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) 23:39:08 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1099.036121][T15242] block nbd3: shutting down sockets 23:39:08 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:08 executing program 0: eventfd2(0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) [ 1099.106168][T15247] block nbd5: shutting down sockets 23:39:08 executing program 1: eventfd2(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) 23:39:08 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:08 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) 23:39:08 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1099.248422][T15255] block nbd3: shutting down sockets 23:39:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b635400106308400002005a541338a50e298bf93c000000002a9abbc6ea113e1035a635a89dab9379ca56a0028d7cf022b48c95f68ca320d7e94e300038872544cc82c31dc302cdade95325fdee0b0be72447dee144fcf43007b3d8fcf248e17180200281309a61239302e2bf75eedcb4779e01f60b40c9298b04bc663f13fa2c6f7739b0a6c1f77b1ce655ff000000000000002000"/162], 0x0, 0x0, 0x0}) syz_io_uring_setup(0x1e35, &(0x7f00000000c0)={0x0, 0x2326, 0x2, 0x1, 0x1bd}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x50000) 23:39:08 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:08 executing program 1: eventfd2(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) 23:39:08 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:08 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) 23:39:09 executing program 1: eventfd2(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) 23:39:09 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:09 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1099.411406][T15273] binder: 15268:15273 unknown command 5530379 [ 1099.430571][T15273] binder: 15268:15273 ioctl c0306201 20000280 returned -22 23:39:09 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b635400106308400002005a541338a50e298bf93c000000002a9abbc6ea113e1035a635a89dab9379ca56a0028d7cf022b48c95f68ca320d7e94e300038872544cc82c31dc302cdade95325fdee0b0be72447dee144fcf43007b3d8fcf248e17180200281309a61239302e2bf75eedcb4779e01f60b40c9298b04bc663f13fa2c6f7739b0a6c1f77b1ce655ff000000000000002000"/162], 0x0, 0x0, 0x0}) syz_io_uring_setup(0x1e35, &(0x7f00000000c0)={0x0, 0x2326, 0x2, 0x1, 0x1bd}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x50000) 23:39:09 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:09 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:09 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:09 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:09 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1099.617202][T15290] binder: 15287:15290 unknown command 5530379 [ 1099.646623][T15290] binder: 15287:15290 ioctl c0306201 20000280 returned -22 23:39:09 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x541b, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:39:09 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) 23:39:09 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:09 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1099.746505][T15296] block nbd1: shutting down sockets 23:39:09 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:09 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:09 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) 23:39:09 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x541b, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:39:09 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:09 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:09 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) [ 1099.956292][T15309] block nbd3: shutting down sockets 23:39:09 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:09 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) 23:39:09 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0xc002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:09 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:09 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x541b, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:39:09 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) 23:39:09 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1100.216127][T15324] block nbd3: shutting down sockets 23:39:09 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:09 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:09 executing program 2 (fault-call:2 fault-nth:0): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:09 executing program 0: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) [ 1100.307455][T15333] block nbd2: shutting down sockets 23:39:09 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) 23:39:09 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:09 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1100.477080][T15350] FAULT_INJECTION: forcing a failure. [ 1100.477080][T15350] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.497329][T15342] block nbd1: shutting down sockets [ 1100.518485][T15350] CPU: 0 PID: 15350 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0 [ 1100.527432][T15350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1100.537570][T15350] Call Trace: [ 1100.540846][T15350] dump_stack+0x141/0x1d7 [ 1100.545273][T15350] should_fail.cold+0x5/0xa [ 1100.549782][T15350] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1100.555505][T15350] should_failslab+0x5/0x10 [ 1100.560006][T15350] __kmalloc+0x72/0x330 [ 1100.564205][T15350] tomoyo_realpath_from_path+0xc3/0x620 [ 1100.569754][T15350] ? tomoyo_profile+0x42/0x50 [ 1100.574438][T15350] tomoyo_path_number_perm+0x1d5/0x590 [ 1100.579888][T15350] ? tomoyo_path_number_perm+0x18d/0x590 [ 1100.585519][T15350] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1100.591347][T15350] ? lock_downgrade+0x6e0/0x6e0 [ 1100.596218][T15350] ? __fget_files+0x288/0x3d0 [ 1100.600898][T15350] security_file_ioctl+0x50/0xb0 [ 1100.605842][T15350] __x64_sys_ioctl+0xb3/0x200 [ 1100.610521][T15350] do_syscall_64+0x3a/0xb0 [ 1100.614943][T15350] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1100.620831][T15350] RIP: 0033:0x4665d9 23:39:10 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:10 executing program 0: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:39:10 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:10 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1100.624721][T15350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1100.644325][T15350] RSP: 002b:00007fe0e6f2d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1100.652743][T15350] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1100.660711][T15350] RDX: 0000000000000004 RSI: 000000000000ab00 RDI: 0000000000000003 [ 1100.668681][T15350] RBP: 00007fe0e6f2d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1100.676653][T15350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1100.684623][T15350] R13: 00007ffc05d6ce5f R14: 00007fe0e6f2d300 R15: 0000000000022000 23:39:10 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:10 executing program 0: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:39:10 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) [ 1100.797493][T15350] ERROR: Out of memory at tomoyo_realpath_from_path. 23:39:10 executing program 2 (fault-call:2 fault-nth:1): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:10 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:10 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:10 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:39:10 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:10 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) [ 1100.864576][T15346] block nbd2: shutting down sockets 23:39:10 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:10 executing program 5 (fault-call:2 fault-nth:0): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:10 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) [ 1101.071260][T15384] FAULT_INJECTION: forcing a failure. [ 1101.071260][T15384] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.124184][T15384] CPU: 0 PID: 15384 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0 [ 1101.133155][T15384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1101.143205][T15384] Call Trace: [ 1101.146480][T15384] dump_stack+0x141/0x1d7 [ 1101.150821][T15384] should_fail.cold+0x5/0xa [ 1101.155336][T15384] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1101.160712][T15384] should_failslab+0x5/0x10 [ 1101.165211][T15384] __kmalloc+0x72/0x330 [ 1101.169376][T15384] tomoyo_encode2.part.0+0xe9/0x3a0 23:39:10 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) 23:39:10 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) [ 1101.174583][T15384] tomoyo_encode+0x28/0x50 [ 1101.179001][T15384] tomoyo_realpath_from_path+0x186/0x620 [ 1101.184640][T15384] tomoyo_path_number_perm+0x1d5/0x590 [ 1101.190099][T15384] ? tomoyo_path_number_perm+0x18d/0x590 [ 1101.195740][T15384] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1101.201579][T15384] ? lock_downgrade+0x6e0/0x6e0 [ 1101.206452][T15384] ? __fget_files+0x288/0x3d0 [ 1101.211142][T15384] security_file_ioctl+0x50/0xb0 [ 1101.216091][T15384] __x64_sys_ioctl+0xb3/0x200 [ 1101.220778][T15384] do_syscall_64+0x3a/0xb0 [ 1101.225198][T15384] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1101.231094][T15384] RIP: 0033:0x4665d9 [ 1101.234989][T15384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1101.254602][T15384] RSP: 002b:00007fe0e6f2d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1101.263016][T15384] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 23:39:10 executing program 4 (fault-call:2 fault-nth:0): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1101.270986][T15384] RDX: 0000000000000004 RSI: 000000000000ab00 RDI: 0000000000000003 [ 1101.276904][T15396] FAULT_INJECTION: forcing a failure. [ 1101.276904][T15396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1101.278953][T15384] RBP: 00007fe0e6f2d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1101.278971][T15384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1101.278985][T15384] R13: 00007ffc05d6ce5f R14: 00007fe0e6f2d300 R15: 0000000000022000 [ 1101.348736][T15396] CPU: 1 PID: 15396 Comm: syz-executor.5 Not tainted 5.13.0-rc2-syzkaller #0 [ 1101.357704][T15396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1101.367756][T15396] Call Trace: [ 1101.371031][T15396] dump_stack+0x141/0x1d7 [ 1101.375366][T15396] should_fail.cold+0x5/0xa [ 1101.379882][T15396] _copy_to_user+0x2c/0x150 [ 1101.384399][T15396] simple_read_from_buffer+0xcc/0x160 [ 1101.389781][T15396] proc_fail_nth_read+0x187/0x220 [ 1101.394714][T15400] FAULT_INJECTION: forcing a failure. [ 1101.394714][T15400] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.394809][T15396] ? proc_exe_link+0x1d0/0x1d0 [ 1101.412101][T15396] ? security_file_permission+0x248/0x560 [ 1101.418357][T15396] ? proc_exe_link+0x1d0/0x1d0 [ 1101.423122][T15396] vfs_read+0x1b5/0x570 [ 1101.427450][T15396] ksys_read+0x12d/0x250 [ 1101.431690][T15396] ? vfs_write+0xa30/0xa30 [ 1101.436103][T15396] ? syscall_enter_from_user_mode+0x27/0x70 [ 1101.442091][T15396] do_syscall_64+0x3a/0xb0 [ 1101.446509][T15396] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1101.452404][T15396] RIP: 0033:0x41935c [ 1101.456295][T15396] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1101.476633][T15396] RSP: 002b:00007f3a4087d170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1101.485143][T15396] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000041935c [ 1101.493109][T15396] RDX: 000000000000000f RSI: 00007f3a4087d1e0 RDI: 0000000000000005 [ 1101.501078][T15396] RBP: 00007f3a4087d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1101.509048][T15396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1101.517014][T15396] R13: 00007ffe3ecd062f R14: 00007f3a4087d300 R15: 0000000000022000 [ 1101.525000][T15400] CPU: 0 PID: 15400 Comm: syz-executor.4 Not tainted 5.13.0-rc2-syzkaller #0 [ 1101.533876][T15400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1101.543936][T15400] Call Trace: [ 1101.547213][T15400] dump_stack+0x141/0x1d7 [ 1101.551553][T15400] should_fail.cold+0x5/0xa [ 1101.556066][T15400] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1101.561788][T15400] should_failslab+0x5/0x10 [ 1101.566289][T15400] __kmalloc+0x72/0x330 [ 1101.567484][T15384] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1101.570452][T15400] tomoyo_realpath_from_path+0xc3/0x620 [ 1101.570481][T15400] ? tomoyo_profile+0x42/0x50 [ 1101.587307][T15400] tomoyo_path_number_perm+0x1d5/0x590 [ 1101.592768][T15400] ? tomoyo_path_number_perm+0x18d/0x590 [ 1101.598406][T15400] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1101.604238][T15400] ? lock_downgrade+0x6e0/0x6e0 [ 1101.609108][T15400] ? __fget_files+0x288/0x3d0 [ 1101.613795][T15400] security_file_ioctl+0x50/0xb0 [ 1101.618746][T15400] __x64_sys_ioctl+0xb3/0x200 [ 1101.623426][T15400] do_syscall_64+0x3a/0xb0 [ 1101.627842][T15400] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1101.633736][T15400] RIP: 0033:0x4665d9 [ 1101.637626][T15400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1101.657235][T15400] RSP: 002b:00007f06f525e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1101.665655][T15400] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1101.673626][T15400] RDX: 0000000000000004 RSI: 000000000000ab00 RDI: 0000000000000003 [ 1101.681594][T15400] RBP: 00007f06f525e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1101.689567][T15400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 23:39:11 executing program 2 (fault-call:2 fault-nth:2): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:11 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) 23:39:11 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) 23:39:11 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:11 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1101.697540][T15400] R13: 00007fff0eed407f R14: 00007f06f525e300 R15: 0000000000022000 [ 1101.720240][T15379] block nbd2: shutting down sockets [ 1101.764543][T15400] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1101.807380][T15399] block nbd4: shutting down sockets 23:39:11 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) [ 1101.833321][T15404] block nbd5: shutting down sockets 23:39:11 executing program 4 (fault-call:2 fault-nth:1): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:11 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x2, r1) 23:39:11 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x541b, 0x0) 23:39:11 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1101.925778][T15413] FAULT_INJECTION: forcing a failure. [ 1101.925778][T15413] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.958813][T15413] CPU: 0 PID: 15413 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0 [ 1101.967785][T15413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1101.977837][T15413] Call Trace: [ 1101.981111][T15413] dump_stack+0x141/0x1d7 [ 1101.985460][T15413] should_fail.cold+0x5/0xa [ 1101.989978][T15413] ? nbd_add_socket+0x255/0x850 [ 1101.994835][T15413] should_failslab+0x5/0x10 [ 1101.999195][T15421] FAULT_INJECTION: forcing a failure. [ 1101.999195][T15421] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.999336][T15413] kmem_cache_alloc_trace+0x55/0x2c0 [ 1102.017173][T15413] nbd_add_socket+0x255/0x850 23:39:11 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1102.021862][T15413] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1102.028109][T15413] ? apparmor_capable+0x1d8/0x460 [ 1102.033150][T15413] ? trace_event_raw_event_nbd_transport_event+0x230/0x230 [ 1102.040355][T15413] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1102.046603][T15413] ? security_capable+0x8f/0xc0 [ 1102.051459][T15413] nbd_ioctl+0x388/0xa50 [ 1102.055704][T15413] ? vfs_fileattr_set+0xb60/0xb60 [ 1102.060727][T15413] ? blk_ioctl_discard+0x2e0/0x2e0 [ 1102.065839][T15413] ? nbd_release+0x1a0/0x1a0 [ 1102.070428][T15413] ? lock_downgrade+0x6e0/0x6e0 [ 1102.075286][T15413] ? nbd_release+0x1a0/0x1a0 [ 1102.079871][T15413] blkdev_ioctl+0x2a1/0x6d0 [ 1102.084370][T15413] ? blkdev_common_ioctl+0x1840/0x1840 [ 1102.089826][T15413] ? __fget_files+0x288/0x3d0 [ 1102.094507][T15413] block_ioctl+0xf9/0x140 [ 1102.098840][T15413] ? blkdev_read_iter+0x1c0/0x1c0 [ 1102.103866][T15413] __x64_sys_ioctl+0x193/0x200 [ 1102.108627][T15413] do_syscall_64+0x3a/0xb0 [ 1102.113041][T15413] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1102.118935][T15413] RIP: 0033:0x4665d9 23:39:11 executing program 3 (fault-call:2 fault-nth:0): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1102.122823][T15413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1102.142426][T15413] RSP: 002b:00007fe0e6f2d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1102.150835][T15413] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1102.158803][T15413] RDX: 0000000000000004 RSI: 000000000000ab00 RDI: 0000000000000003 [ 1102.166763][T15413] RBP: 00007fe0e6f2d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1102.174728][T15413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1102.182698][T15413] R13: 00007ffc05d6ce5f R14: 00007fe0e6f2d300 R15: 0000000000022000 [ 1102.190681][T15421] CPU: 1 PID: 15421 Comm: syz-executor.4 Not tainted 5.13.0-rc2-syzkaller #0 [ 1102.199442][T15421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1102.209485][T15421] Call Trace: [ 1102.212748][T15421] dump_stack+0x141/0x1d7 [ 1102.217068][T15421] should_fail.cold+0x5/0xa [ 1102.221562][T15421] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1102.226922][T15421] should_failslab+0x5/0x10 [ 1102.231413][T15421] __kmalloc+0x72/0x330 [ 1102.235561][T15421] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1102.240749][T15421] tomoyo_encode+0x28/0x50 [ 1102.245152][T15421] tomoyo_realpath_from_path+0x186/0x620 [ 1102.250777][T15421] tomoyo_path_number_perm+0x1d5/0x590 [ 1102.256223][T15421] ? tomoyo_path_number_perm+0x18d/0x590 [ 1102.261847][T15421] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1102.267665][T15421] ? lock_downgrade+0x6e0/0x6e0 [ 1102.272518][T15421] ? __fget_files+0x288/0x3d0 [ 1102.277186][T15421] security_file_ioctl+0x50/0xb0 [ 1102.282115][T15421] __x64_sys_ioctl+0xb3/0x200 [ 1102.286779][T15421] do_syscall_64+0x3a/0xb0 [ 1102.291186][T15421] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1102.297064][T15421] RIP: 0033:0x4665d9 [ 1102.300940][T15421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1102.320536][T15421] RSP: 002b:00007f06f525e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1102.328938][T15421] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1102.336892][T15421] RDX: 0000000000000004 RSI: 000000000000ab00 RDI: 0000000000000003 [ 1102.344844][T15421] RBP: 00007f06f525e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1102.352802][T15421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1102.360758][T15421] R13: 00007fff0eed407f R14: 00007f06f525e300 R15: 0000000000022000 [ 1102.418178][T15429] FAULT_INJECTION: forcing a failure. [ 1102.418178][T15429] name failslab, interval 1, probability 0, space 0, times 0 [ 1102.458242][T15429] CPU: 0 PID: 15429 Comm: syz-executor.3 Not tainted 5.13.0-rc2-syzkaller #0 [ 1102.467105][T15429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1102.477166][T15429] Call Trace: [ 1102.480440][T15429] dump_stack+0x141/0x1d7 [ 1102.484775][T15429] should_fail.cold+0x5/0xa [ 1102.489289][T15429] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1102.495009][T15429] should_failslab+0x5/0x10 [ 1102.499508][T15429] __kmalloc+0x72/0x330 [ 1102.503674][T15429] tomoyo_realpath_from_path+0xc3/0x620 [ 1102.509223][T15429] ? tomoyo_profile+0x42/0x50 [ 1102.513906][T15429] tomoyo_path_number_perm+0x1d5/0x590 [ 1102.519365][T15429] ? tomoyo_path_number_perm+0x18d/0x590 [ 1102.525000][T15429] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1102.530836][T15429] ? lock_downgrade+0x6e0/0x6e0 [ 1102.535704][T15429] ? __fget_files+0x288/0x3d0 [ 1102.540388][T15429] security_file_ioctl+0x50/0xb0 [ 1102.545333][T15429] __x64_sys_ioctl+0xb3/0x200 [ 1102.550012][T15429] do_syscall_64+0x3a/0xb0 [ 1102.554432][T15429] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1102.560326][T15429] RIP: 0033:0x4665d9 [ 1102.564216][T15429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1102.583822][T15429] RSP: 002b:00007f17331e1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1102.592237][T15429] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1102.600202][T15429] RDX: 0000000000000004 RSI: 000000000000ab00 RDI: 0000000000000003 [ 1102.608168][T15429] RBP: 00007f17331e11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1102.616145][T15429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1102.624112][T15429] R13: 00007fff76b409af R14: 00007f17331e1300 R15: 0000000000022000 23:39:12 executing program 2 (fault-call:2 fault-nth:3): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:12 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:12 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x541b, 0x0) 23:39:12 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x10, r1) [ 1102.680219][T15429] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1102.691082][T15421] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1102.727517][T15417] block nbd4: shutting down sockets [ 1102.734900][T15426] block nbd3: shutting down sockets 23:39:12 executing program 4 (fault-call:2 fault-nth:2): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:12 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x541b, 0x0) 23:39:12 executing program 3 (fault-call:2 fault-nth:1): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:12 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x301, r1) 23:39:12 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1102.916177][T15442] FAULT_INJECTION: forcing a failure. [ 1102.916177][T15442] name failslab, interval 1, probability 0, space 0, times 0 [ 1102.951558][T15451] FAULT_INJECTION: forcing a failure. [ 1102.951558][T15451] name failslab, interval 1, probability 0, space 0, times 0 [ 1102.966739][T15442] CPU: 0 PID: 15442 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0 [ 1102.975507][T15442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1102.985563][T15442] Call Trace: [ 1102.988838][T15442] dump_stack+0x141/0x1d7 [ 1102.993175][T15442] should_fail.cold+0x5/0xa [ 1102.997690][T15442] should_failslab+0x5/0x10 [ 1103.002195][T15442] __kmalloc_track_caller+0x79/0x320 [ 1103.005782][T15446] FAULT_INJECTION: forcing a failure. 23:39:12 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1103.005782][T15446] name failslab, interval 1, probability 0, space 0, times 0 [ 1103.007479][T15442] ? nbd_add_socket+0x2d4/0x850 [ 1103.007514][T15442] krealloc+0x87/0xf0 [ 1103.007542][T15442] nbd_add_socket+0x2d4/0x850 [ 1103.033534][T15442] ? trace_event_raw_event_nbd_transport_event+0x230/0x230 [ 1103.040739][T15442] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1103.046983][T15442] ? security_capable+0x8f/0xc0 [ 1103.051838][T15442] nbd_ioctl+0x388/0xa50 [ 1103.056087][T15442] ? vfs_fileattr_set+0xb60/0xb60 [ 1103.061122][T15442] ? blk_ioctl_discard+0x2e0/0x2e0 [ 1103.066240][T15442] ? nbd_release+0x1a0/0x1a0 [ 1103.070833][T15442] ? lock_downgrade+0x6e0/0x6e0 [ 1103.075688][T15442] ? nbd_release+0x1a0/0x1a0 [ 1103.080282][T15442] blkdev_ioctl+0x2a1/0x6d0 [ 1103.084789][T15442] ? blkdev_common_ioctl+0x1840/0x1840 [ 1103.090254][T15442] ? __fget_files+0x288/0x3d0 [ 1103.094936][T15442] block_ioctl+0xf9/0x140 [ 1103.099263][T15442] ? blkdev_read_iter+0x1c0/0x1c0 [ 1103.104287][T15442] __x64_sys_ioctl+0x193/0x200 [ 1103.109057][T15442] do_syscall_64+0x3a/0xb0 [ 1103.113477][T15442] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1103.119371][T15442] RIP: 0033:0x4665d9 [ 1103.123261][T15442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1103.142861][T15442] RSP: 002b:00007fe0e6f2d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1103.151275][T15442] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1103.159245][T15442] RDX: 0000000000000004 RSI: 000000000000ab00 RDI: 0000000000000003 23:39:12 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x10, r1) [ 1103.167213][T15442] RBP: 00007fe0e6f2d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1103.175179][T15442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1103.183148][T15442] R13: 00007ffc05d6ce5f R14: 00007fe0e6f2d300 R15: 0000000000022000 [ 1103.205381][T15446] CPU: 1 PID: 15446 Comm: syz-executor.4 Not tainted 5.13.0-rc2-syzkaller #0 [ 1103.214169][T15446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1103.224219][T15446] Call Trace: [ 1103.227496][T15446] dump_stack+0x141/0x1d7 [ 1103.231826][T15446] should_fail.cold+0x5/0xa [ 1103.236341][T15446] ? nbd_add_socket+0x255/0x850 [ 1103.241195][T15446] should_failslab+0x5/0x10 [ 1103.245698][T15446] kmem_cache_alloc_trace+0x55/0x2c0 [ 1103.250992][T15446] nbd_add_socket+0x255/0x850 [ 1103.255671][T15446] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1103.261911][T15446] ? apparmor_capable+0x1d8/0x460 [ 1103.266927][T15446] ? trace_event_raw_event_nbd_transport_event+0x230/0x230 [ 1103.274121][T15446] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1103.280359][T15446] ? security_capable+0x8f/0xc0 [ 1103.285209][T15446] nbd_ioctl+0x388/0xa50 [ 1103.289451][T15446] ? vfs_fileattr_set+0xb60/0xb60 [ 1103.294465][T15446] ? blk_ioctl_discard+0x2e0/0x2e0 [ 1103.299572][T15446] ? nbd_release+0x1a0/0x1a0 [ 1103.304196][T15446] ? lock_downgrade+0x6e0/0x6e0 [ 1103.309048][T15446] ? nbd_release+0x1a0/0x1a0 [ 1103.313632][T15446] blkdev_ioctl+0x2a1/0x6d0 [ 1103.318130][T15446] ? blkdev_common_ioctl+0x1840/0x1840 [ 1103.323581][T15446] ? __fget_files+0x288/0x3d0 [ 1103.328253][T15446] block_ioctl+0xf9/0x140 [ 1103.332579][T15446] ? blkdev_read_iter+0x1c0/0x1c0 [ 1103.337597][T15446] __x64_sys_ioctl+0x193/0x200 [ 1103.342486][T15446] do_syscall_64+0x3a/0xb0 [ 1103.346899][T15446] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1103.352787][T15446] RIP: 0033:0x4665d9 23:39:12 executing program 2 (fault-call:2 fault-nth:4): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:12 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x125d, r1) 23:39:12 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x301, r1) [ 1103.356670][T15446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1103.376271][T15446] RSP: 002b:00007f06f525e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1103.384675][T15446] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1103.392642][T15446] RDX: 0000000000000004 RSI: 000000000000ab00 RDI: 0000000000000003 [ 1103.400604][T15446] RBP: 00007f06f525e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1103.408568][T15446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1103.416530][T15446] R13: 00007fff0eed407f R14: 00007f06f525e300 R15: 0000000000022000 [ 1103.424502][T15451] CPU: 0 PID: 15451 Comm: syz-executor.3 Not tainted 5.13.0-rc2-syzkaller #0 [ 1103.433265][T15451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1103.443313][T15451] Call Trace: [ 1103.446584][T15451] dump_stack+0x141/0x1d7 [ 1103.450916][T15451] should_fail.cold+0x5/0xa [ 1103.455431][T15451] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1103.460808][T15451] should_failslab+0x5/0x10 [ 1103.465309][T15451] __kmalloc+0x72/0x330 [ 1103.469475][T15451] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1103.474680][T15451] tomoyo_encode+0x28/0x50 [ 1103.479095][T15451] tomoyo_realpath_from_path+0x186/0x620 [ 1103.484740][T15451] tomoyo_path_number_perm+0x1d5/0x590 [ 1103.490195][T15451] ? tomoyo_path_number_perm+0x18d/0x590 [ 1103.495831][T15451] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1103.501665][T15451] ? lock_downgrade+0x6e0/0x6e0 [ 1103.506530][T15451] ? __fget_files+0x288/0x3d0 [ 1103.511211][T15451] security_file_ioctl+0x50/0xb0 [ 1103.516161][T15451] __x64_sys_ioctl+0xb3/0x200 [ 1103.520841][T15451] do_syscall_64+0x3a/0xb0 [ 1103.525260][T15451] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1103.531153][T15451] RIP: 0033:0x4665d9 [ 1103.535040][T15451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1103.554640][T15451] RSP: 002b:00007f17331e1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1103.563048][T15451] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1103.571013][T15451] RDX: 0000000000000004 RSI: 000000000000ab00 RDI: 0000000000000003 [ 1103.578978][T15451] RBP: 00007f17331e11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1103.586946][T15451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1103.594914][T15451] R13: 00007fff76b409af R14: 00007f17331e1300 R15: 0000000000022000 23:39:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x301, r1) 23:39:13 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x10, r1) [ 1103.726154][T15465] FAULT_INJECTION: forcing a failure. [ 1103.726154][T15465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1103.778833][T15465] CPU: 1 PID: 15465 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0 [ 1103.787710][T15465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1103.797764][T15465] Call Trace: [ 1103.801040][T15465] dump_stack+0x141/0x1d7 [ 1103.805371][T15465] should_fail.cold+0x5/0xa [ 1103.809878][T15465] _copy_to_user+0x2c/0x150 [ 1103.814391][T15465] simple_read_from_buffer+0xcc/0x160 [ 1103.818129][T15451] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1103.819766][T15465] proc_fail_nth_read+0x187/0x220 [ 1103.819798][T15465] ? proc_exe_link+0x1d0/0x1d0 [ 1103.836187][T15465] ? security_file_permission+0x248/0x560 [ 1103.841914][T15465] ? proc_exe_link+0x1d0/0x1d0 [ 1103.846680][T15465] vfs_read+0x1b5/0x570 [ 1103.850841][T15465] ksys_read+0x12d/0x250 [ 1103.855086][T15465] ? vfs_write+0xa30/0xa30 [ 1103.859501][T15465] ? syscall_enter_from_user_mode+0x27/0x70 [ 1103.865399][T15465] do_syscall_64+0x3a/0xb0 [ 1103.869815][T15465] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1103.875707][T15465] RIP: 0033:0x41935c [ 1103.879599][T15465] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1103.899212][T15465] RSP: 002b:00007fe0e6f2d170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1103.907624][T15465] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000041935c [ 1103.915771][T15465] RDX: 000000000000000f RSI: 00007fe0e6f2d1e0 RDI: 0000000000000006 23:39:13 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:13 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x125e, r1) 23:39:13 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x10, r1) 23:39:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x301, r1) 23:39:13 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1103.923741][T15465] RBP: 00007fe0e6f2d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1103.931795][T15465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1103.940216][T15465] R13: 00007ffc05d6ce5f R14: 00007fe0e6f2d300 R15: 0000000000022000 23:39:13 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x10, 0xffffffffffffffff) 23:39:13 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x125f, r1) [ 1104.107818][T15478] block nbd3: shutting down sockets [ 1104.137988][T15481] block nbd4: shutting down sockets 23:39:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 23:39:13 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x2, r1) 23:39:13 executing program 1: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x10, 0xffffffffffffffff) [ 1104.201176][T15461] block nbd2: shutting down sockets 23:39:13 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x2, r1) 23:39:13 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1260, r1) 23:39:13 executing program 0: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x301, 0xffffffffffffffff) 23:39:13 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x10, r1) 23:39:13 executing program 1: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x10, 0xffffffffffffffff) 23:39:13 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x10, r1) [ 1104.391235][T15494] block nbd2: shutting down sockets 23:39:14 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1261, r1) 23:39:14 executing program 0: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x301, 0xffffffffffffffff) 23:39:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x2, r1) 23:39:14 executing program 1: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x10, 0xffffffffffffffff) 23:39:14 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x301, r1) 23:39:14 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x301, r1) 23:39:14 executing program 0: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x301, 0xffffffffffffffff) 23:39:14 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1262, r1) 23:39:14 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x10, 0xffffffffffffffff) 23:39:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x10, r1) 23:39:14 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 23:39:14 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x125d, r1) 23:39:14 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1263, r1) 23:39:14 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x703, r1) 23:39:14 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x10, 0xffffffffffffffff) 23:39:14 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 23:39:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x301, r1) 23:39:14 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x125e, r1) 23:39:14 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x10, 0xffffffffffffffff) 23:39:14 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1264, r1) 23:39:14 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x125d, r1) 23:39:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x125d, r1) 23:39:14 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 23:39:14 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x10, 0xffffffffffffffff) 23:39:14 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x125f, r1) 23:39:14 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1265, r1) 23:39:14 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x10, 0xffffffffffffffff) 23:39:14 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x125e, r1) 23:39:14 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x301, 0xffffffffffffffff) 23:39:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x125e, r1) 23:39:14 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1260, r1) 23:39:14 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x10, 0xffffffffffffffff) 23:39:14 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1267, r1) 23:39:15 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x301, 0xffffffffffffffff) 23:39:15 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x125f, r1) 23:39:15 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1261, r1) 23:39:15 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x703, r1) 23:39:15 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x125f, r1) 23:39:15 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1268, r1) 23:39:15 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x301, 0xffffffffffffffff) 23:39:15 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1260, r1) 23:39:15 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1267, r1) 23:39:15 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1262, r1) 23:39:15 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1260, r1) 23:39:15 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1269, r1) 23:39:15 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1268, r1) 23:39:15 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1267, r1) 23:39:15 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1261, r1) 23:39:15 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1263, r1) 23:39:15 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1261, r1) 23:39:15 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1274, r1) 23:39:15 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1267, r1) 23:39:15 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1268, r1) 23:39:15 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1262, r1) 23:39:15 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1264, r1) 23:39:15 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1262, r1) 23:39:15 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1268, r1) 23:39:15 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1267, 0xffffffffffffffff) 23:39:15 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1276, r1) 23:39:15 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1263, r1) 23:39:15 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1267, 0xffffffffffffffff) 23:39:16 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1263, r1) 23:39:16 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1265, r1) 23:39:16 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1277, r1) 23:39:16 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1268, 0xffffffffffffffff) 23:39:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1264, r1) 23:39:16 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1267, 0xffffffffffffffff) 23:39:16 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1278, r1) 23:39:16 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1264, r1) 23:39:16 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1267, r1) 23:39:16 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x1267, r0) 23:39:16 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1268, 0xffffffffffffffff) 23:39:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1265, r1) 23:39:16 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1268, r1) 23:39:16 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1265, r1) 23:39:16 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1279, r1) 23:39:16 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x1267, r0) 23:39:16 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1268, 0xffffffffffffffff) 23:39:16 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1269, r1) 23:39:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1267, r1) 23:39:16 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x1267, r0) 23:39:16 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x127a, r1) 23:39:16 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1267, r1) 23:39:16 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1274, r1) 23:39:16 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x1268, r0) 23:39:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1268, r1) 23:39:16 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1267, r1) 23:39:16 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x127b, r1) 23:39:16 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1268, r1) 23:39:16 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1276, r1) 23:39:16 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x1268, r0) 23:39:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1269, r1) 23:39:16 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1267, r1) 23:39:17 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1269, r1) 23:39:17 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x127c, r1) 23:39:17 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x1268, r0) 23:39:17 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1277, r1) 23:39:17 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1267, r1) 23:39:17 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1274, r1) 23:39:17 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1268, r1) 23:39:17 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x127d, r1) 23:39:17 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1276, r1) 23:39:17 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1274, r1) 23:39:17 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1268, r1) 23:39:17 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1278, r1) 23:39:17 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1267, 0xffffffffffffffff) 23:39:17 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1277, r1) 23:39:17 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x127e, r1) 23:39:17 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1276, r1) 23:39:17 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1268, r1) 23:39:17 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1279, r1) 23:39:17 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1267, 0xffffffffffffffff) 23:39:17 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1278, r1) 23:39:17 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1277, r1) 23:39:17 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1268, 0xffffffffffffffff) 23:39:17 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1267, 0xffffffffffffffff) 23:39:17 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x127f, r1) 23:39:17 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x127a, r1) 23:39:17 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1279, r1) 23:39:17 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1268, 0xffffffffffffffff) 23:39:17 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x4c01, r1) 23:39:17 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1278, r1) 23:39:17 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x1267, r0) 23:39:18 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x127b, r1) 23:39:18 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1268, 0xffffffffffffffff) 23:39:18 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x541b, r1) 23:39:18 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x1279, r1) 23:39:18 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x127a, r1) 23:39:18 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x1267, r0) 23:39:18 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x127c, r1) 23:39:18 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x1268, r0) 23:39:18 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x127b, r1) 23:39:18 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x127a, r1) 23:39:18 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x1267, r0) 23:39:18 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x5421, r1) 23:39:18 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x127d, r1) 23:39:18 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x1268, r0) 23:39:18 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x127c, r1) 23:39:18 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0x1267, 0xffffffffffffffff) 23:39:18 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x5450, r1) 23:39:18 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x127b, r1) 23:39:18 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x127e, r1) 23:39:18 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x127d, r1) 23:39:18 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x1268, r0) 23:39:18 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0x1267, 0xffffffffffffffff) 23:39:18 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x127f, r1) 23:39:18 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x127c, r1) 23:39:18 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x5451, r1) 23:39:18 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0x1267, 0xffffffffffffffff) 23:39:18 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0x1268, 0xffffffffffffffff) 23:39:18 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x127e, r1) 23:39:19 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x127d, r1) 23:39:19 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x4c01, r1) 23:39:19 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x5452, r1) 23:39:19 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x541b, r1) 23:39:19 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0x1268, 0xffffffffffffffff) 23:39:19 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x127f, r1) 23:39:19 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x127e, r1) 23:39:19 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x541b, r1) 23:39:19 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x5460, r1) 23:39:19 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0x1268, 0xffffffffffffffff) 23:39:19 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x541b, r1) 23:39:19 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x4c01, r1) 23:39:19 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x127f, r1) 23:39:19 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x5421, r1) 23:39:19 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x6364, r1) 23:39:19 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x541b, r1) 23:39:19 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x127f, r1) 23:39:19 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x4c01, r1) 23:39:19 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x541b, r1) 23:39:19 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x5450, r1) 23:39:19 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x541b, 0xffffffffffffffff) 23:39:19 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x8913, r1) 23:39:19 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x127f, r1) 23:39:19 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x541b, r1) 23:39:19 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x5421, r1) 23:39:19 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x5451, r1) 23:39:19 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x8914, r1) 23:39:19 executing program 1: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x541b, 0xffffffffffffffff) 23:39:19 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x127f, r1) 23:39:20 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x5452, r1) 23:39:20 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x5421, r1) 23:39:20 executing program 1: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x541b, 0xffffffffffffffff) 23:39:20 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x5450, r1) 23:39:20 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x127f, 0xffffffffffffffff) 23:39:20 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x8933, r1) 23:39:20 executing program 1: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x541b, 0xffffffffffffffff) 23:39:20 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x5450, r1) 23:39:20 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x5460, r1) 23:39:20 executing program 0: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x127f, 0xffffffffffffffff) 23:39:20 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x5451, r1) 23:39:20 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab01, r1) 23:39:20 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x541b, 0xffffffffffffffff) 23:39:20 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x5451, r1) 23:39:20 executing program 0: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x127f, 0xffffffffffffffff) 23:39:20 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x6364, r1) 23:39:20 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x541b, 0xffffffffffffffff) 23:39:20 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x5452, r1) 23:39:20 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab02, r1) 23:39:20 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x5452, r1) 23:39:20 executing program 0: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x127f, 0xffffffffffffffff) 23:39:20 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x541b, 0xffffffffffffffff) 23:39:20 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x8913, r1) 23:39:20 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab03, r1) 23:39:20 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x127f, 0xffffffffffffffff) 23:39:20 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x5460, r1) 23:39:20 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x5460, r1) 23:39:20 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x541b, 0xffffffffffffffff) 23:39:20 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x8914, r1) 23:39:21 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab04, r1) 23:39:21 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x127f, 0xffffffffffffffff) 23:39:21 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x54a2, r1) 23:39:21 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x541b, 0xffffffffffffffff) 23:39:21 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x54a2, r1) 23:39:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x8933, r1) 23:39:21 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab05, r1) 23:39:21 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x127f, 0xffffffffffffffff) 23:39:21 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x6364, r1) 23:39:21 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x541b, 0xffffffffffffffff) 23:39:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab01, r1) 23:39:21 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x6364, r1) 23:39:21 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x127f, 0xffffffffffffffff) 23:39:21 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab06, r1) 23:39:21 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab03, r1) 23:39:21 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x8913, r1) 23:39:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab02, r1) 23:39:21 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x8913, r1) 23:39:21 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x127f, 0xffffffffffffffff) 23:39:21 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab07, r1) 23:39:21 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab03, r1) 23:39:21 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x8914, r1) 23:39:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab03, r1) 23:39:21 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x127f, 0xffffffffffffffff) 23:39:21 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x8914, r1) 23:39:21 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab03, r1) 23:39:21 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab08, r1) 23:39:21 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x8933, r1) 23:39:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab04, r1) 23:39:22 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x8913, r1) 23:39:22 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x8933, r1) [ 1112.506577][T16172] block nbd5: NBD_DISCONNECT 23:39:22 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab03, 0xffffffffffffffff) [ 1112.554977][T16178] block nbd5: NBD_DISCONNECT 23:39:22 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab09, r1) 23:39:22 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab05, r1) 23:39:22 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab01, r1) 23:39:22 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x127e, r1) 23:39:22 executing program 1: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab03, 0xffffffffffffffff) 23:39:22 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab01, r1) 23:39:22 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab0a, r1) 23:39:22 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x127e, r1) 23:39:22 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab02, r1) 23:39:22 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab06, r1) 23:39:22 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xff00, r1) 23:39:22 executing program 1: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab03, 0xffffffffffffffff) 23:39:22 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab02, r1) 23:39:22 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab07, r1) 23:39:22 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x127e, r1) 23:39:22 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab03, r1) 23:39:22 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x400448c9, r1) 23:39:22 executing program 1: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab03, 0xffffffffffffffff) 23:39:22 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab03, r1) 23:39:22 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x127e, 0xffffffffffffffff) 23:39:22 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab08, r1) 23:39:22 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab04, r1) 23:39:22 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x400448dd, r1) 23:39:22 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab03, 0xffffffffffffffff) 23:39:22 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab04, r1) 23:39:23 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x127e, 0xffffffffffffffff) 23:39:23 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab05, r1) [ 1113.494587][T16256] block nbd3: NBD_DISCONNECT [ 1113.532409][T16263] block nbd3: NBD_DISCONNECT 23:39:23 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab03, 0xffffffffffffffff) 23:39:23 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab09, r1) 23:39:23 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x400454ca, r1) 23:39:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab05, r1) 23:39:23 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x127e, 0xffffffffffffffff) 23:39:23 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab06, r1) 23:39:23 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab03, 0xffffffffffffffff) 23:39:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab06, r1) 23:39:23 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab0a, r1) 23:39:23 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x40049409, r1) 23:39:23 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x127e, r0) 23:39:23 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab03, 0xffffffffffffffff) 23:39:23 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab07, r1) 23:39:23 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xff00, r1) 23:39:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab07, r1) 23:39:23 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x127e, r0) 23:39:23 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x40081271, r1) 23:39:23 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab03, 0xffffffffffffffff) 23:39:23 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab08, r1) 23:39:23 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x127e, r0) 23:39:23 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x400448c9, r1) 23:39:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab08, r1) 23:39:23 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x40086602, r1) 23:39:23 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab03, 0xffffffffffffffff) [ 1114.399388][T16328] block nbd2: NBD_DISCONNECT [ 1114.426021][T16331] block nbd2: NBD_DISCONNECT 23:39:24 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x127e, r1) 23:39:24 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab09, r1) 23:39:24 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x400448dd, r1) [ 1114.545170][T16338] block nbd4: NBD_DISCONNECT 23:39:24 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x40101283, r1) 23:39:24 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x40081271, r1) [ 1114.587202][T16344] block nbd4: NBD_DISCONNECT 23:39:24 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab09, r1) 23:39:24 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x127e, r1) 23:39:24 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab0a, r1) 23:39:24 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x400454ca, r1) 23:39:24 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x40081271, r1) 23:39:24 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x40101286, r1) 23:39:24 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x127e, r1) 23:39:24 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab0a, r1) 23:39:24 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x40049409, r1) 23:39:24 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xff00, r1) 23:39:24 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x40081271, r1) 23:39:24 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x127e, 0xffffffffffffffff) 23:39:24 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x40101288, r1) [ 1115.046385][ T3258] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.053274][ T3258] ieee802154 phy1 wpan1: encryption failed: -22 23:39:24 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x40081271, r1) 23:39:24 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xff00, r1) 23:39:24 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x40081271, 0xffffffffffffffff) 23:39:24 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x400448c9, r1) 23:39:24 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x127e, 0xffffffffffffffff) 23:39:24 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x401070c9, r1) 23:39:24 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x400448dd, r1) 23:39:24 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x40086602, r1) 23:39:25 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x127e, 0xffffffffffffffff) 23:39:25 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x400448c9, r1) 23:39:25 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x40081271, 0xffffffffffffffff) 23:39:25 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x400454ca, r1) 23:39:25 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x401070ca, r1) 23:39:25 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x40101283, r1) 23:39:25 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x40081271, 0xffffffffffffffff) 23:39:25 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x127e, r0) 23:39:25 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x400448dd, r1) 23:39:25 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x40101286, r1) 23:39:25 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x40049409, r1) 23:39:25 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x401070cd, r1) 23:39:25 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x127e, r0) 23:39:25 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x40081271, r0) 23:39:25 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x40101288, r1) 23:39:25 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x400454ca, r1) 23:39:25 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x40081271, r1) 23:39:25 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x127e, r0) 23:39:25 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x40081271, r0) 23:39:25 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x401070c9, r1) 23:39:25 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x40186366, r1) 23:39:25 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x40049409, r1) 23:39:25 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x40086602, r1) 23:39:25 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0x127e, 0xffffffffffffffff) 23:39:25 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x40081271, r0) 23:39:25 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x40101283, r1) 23:39:25 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x401070ca, r1) 23:39:25 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x40081271, r1) 23:39:25 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x401870c8, r1) 23:39:26 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0x127e, 0xffffffffffffffff) 23:39:26 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x40081271, r1) 23:39:26 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x40101286, r1) 23:39:26 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x401070cd, r1) 23:39:26 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x40086602, r1) 23:39:26 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x401870cb, r1) 23:39:26 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0x127e, 0xffffffffffffffff) 23:39:26 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x40081271, r1) 23:39:26 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x40186366, r1) 23:39:26 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x40101288, r1) 23:39:26 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x40101283, r1) 23:39:26 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x401870cc, r1) 23:39:26 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x40081271, r1) 23:39:26 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x401870cb, r1) 23:39:26 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x401070c9, r1) 23:39:26 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x401870c8, r1) 23:39:26 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x40081271, 0xffffffffffffffff) 23:39:26 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x401870cb, r1) 23:39:26 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x401c5820, r1) 23:39:26 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x40101286, r1) 23:39:26 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x401870cb, r1) 23:39:26 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x401070ca, r1) 23:39:26 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x40101288, r1) 23:39:26 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x401870cb, r1) 23:39:26 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x4020940d, r1) 23:39:26 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x40081271, 0xffffffffffffffff) 23:39:27 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x401870cc, r1) 23:39:27 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x401070cd, r1) 23:39:27 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x401870cb, 0xffffffffffffffff) 23:39:27 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x401070c9, r1) 23:39:27 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80041284, r1) 23:39:27 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x40081271, 0xffffffffffffffff) 23:39:27 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x401c5820, r1) 23:39:27 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x40186366, r1) 23:39:27 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80041285, r1) 23:39:27 executing program 0: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x401870cb, 0xffffffffffffffff) 23:39:27 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x4020940d, r1) 23:39:27 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x401070ca, r1) 23:39:27 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x40081271, r0) 23:39:27 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x401870c8, r1) 23:39:27 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80041284, r1) 23:39:27 executing program 0: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x401870cb, 0xffffffffffffffff) 23:39:27 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80081270, r1) 23:39:27 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x401070cd, r1) 23:39:27 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x40081271, r0) 23:39:27 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x401870cb, r1) 23:39:27 executing program 0: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x401870cb, 0xffffffffffffffff) 23:39:27 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80041285, r1) 23:39:27 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80081272, r1) 23:39:27 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x40186366, r1) 23:39:27 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x40081271, r0) 23:39:28 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x401870cb, 0xffffffffffffffff) 23:39:28 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x401870cc, r1) 23:39:28 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80081270, r1) 23:39:28 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80086301, r1) 23:39:28 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x401870c8, r1) 23:39:28 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x401870cb, 0xffffffffffffffff) 23:39:28 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0x40081271, 0xffffffffffffffff) 23:39:28 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80081272, r1) 23:39:28 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80086601, r1) 23:39:28 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x401c5820, r1) 23:39:28 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x401870cb, 0xffffffffffffffff) 23:39:28 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x401870cb, r1) 23:39:28 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0x40081271, 0xffffffffffffffff) 23:39:28 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80086301, r1) 23:39:28 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x801c581f, r1) 23:39:28 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0x40081271, 0xffffffffffffffff) 23:39:28 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x401870cb, 0xffffffffffffffff) 23:39:28 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x4020940d, r1) 23:39:28 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x401870cc, r1) 23:39:28 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80081272, r1) 23:39:28 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xc0045878, r1) 23:39:28 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80086601, r1) 23:39:28 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80041284, r1) 23:39:28 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x401870cb, 0xffffffffffffffff) 23:39:28 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80081272, r1) 23:39:28 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x401c5820, r1) 23:39:28 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xc0045878, r1) 23:39:28 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x401870cb, 0xffffffffffffffff) 23:39:29 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80041285, r1) 23:39:29 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x801c581f, r1) 23:39:29 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80081272, r1) 23:39:29 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x4020940d, r1) 23:39:29 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xc0101282, r1) 23:39:29 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80081270, r1) 23:39:29 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x401c5820, r1) 23:39:29 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xc0045878, r1) 23:39:29 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x80081272, 0xffffffffffffffff) 23:39:29 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80041284, r1) 23:39:29 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80081270, r1) 23:39:29 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xc0189436, r1) 23:39:29 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80081272, r1) 23:39:29 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x80081272, 0xffffffffffffffff) 23:39:29 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xc0045878, r1) 23:39:29 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80081270, r1) 23:39:29 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80041285, r1) 23:39:29 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xc020660b, r1) 23:39:29 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80086301, r1) 23:39:29 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x80081272, 0xffffffffffffffff) 23:39:29 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xc0101282, r1) 23:39:29 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80081270, r1) 23:39:29 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x8004500b, r1) 23:39:29 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xc0306201, r1) 23:39:29 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80086601, r1) 23:39:29 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xc0189436, r1) 23:39:30 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x80081270, 0xffffffffffffffff) 23:39:30 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xc0481273, r1) 23:39:30 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x80081272, r0) 23:39:30 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80081270, r1) 23:39:30 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x801c581f, r1) 23:39:30 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x80081270, 0xffffffffffffffff) 23:39:30 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x80081272, r0) 23:39:30 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xc020660b, r1) 23:39:30 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x81) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r3 = accept4$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @broadcast}, 0x10) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[r0, r2]}, 0x2) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x6, 0xfffffffd, 0xffffff58, 0x4, 0xfffffffd, 0x2, 0x7fff, 0x80000001], 0x8, 0x80800, 0x0, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r4) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) sendmsg$NL802154_CMD_GET_INTERFACE(r6, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x0) accept4$packet(r4, 0x0, &(0x7f0000000240), 0x81000) 23:39:30 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80081272, r1) 23:39:30 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80585414, r1) 23:39:30 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x80081270, 0xffffffffffffffff) 23:39:30 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x80081272, r0) 23:39:30 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xc0306201, r1) 23:39:30 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xc0045878, r1) 23:39:30 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80086301, r1) [ 1121.117299][T16809] block nbd5: shutting down sockets 23:39:30 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x80081270, r0) 23:39:30 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80081272, r1) 23:39:30 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xc0481273, r1) [ 1121.219155][T16809] block nbd5: shutting down sockets 23:39:30 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xc0045878, r1) 23:39:30 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000000)={0x1, 0xc, [0x401, 0x200040, 0x1]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:30 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80086601, r1) 23:39:30 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80081272, r1) 23:39:30 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x80081270, r0) 23:39:31 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xc0101282, r1) 23:39:31 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:31 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x801c581f, r1) [ 1121.556887][T16850] block nbd5: shutting down sockets 23:39:31 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x80081270, r0) [ 1121.616695][T16860] block nbd5: shutting down sockets 23:39:31 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80081272, r1) 23:39:31 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) 23:39:31 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xc0189436, r1) 23:39:31 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80585414, r1) [ 1121.766913][T16865] block nbd3: shutting down sockets [ 1121.826520][T16865] block nbd3: shutting down sockets 23:39:31 executing program 3: socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) getsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080), 0x4) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) 23:39:31 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80081270, r1) 23:39:31 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x1c3881) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x5) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:31 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x80081272, 0xffffffffffffffff) 23:39:31 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xc020660b, r1) 23:39:31 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xc0045878, r1) 23:39:31 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80081270, r1) [ 1122.097576][T16887] block nbd3: shutting down sockets [ 1122.115930][T16889] block nbd5: shutting down sockets 23:39:31 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x80081272, 0xffffffffffffffff) 23:39:31 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x280c1) ioctl$NBD_CLEAR_QUE(r1, 0xab05) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000140)=[0x40005, 0x401, 0x200004, 0xfffffffd, 0x81, 0x7fff, 0xff, 0x7ff, 0x6, 0x5, 0x8], 0xb, 0x0, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x401) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) [ 1122.165939][T16889] block nbd5: shutting down sockets [ 1122.172572][T16887] block nbd3: shutting down sockets 23:39:31 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xc0045878, r1) 23:39:31 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xc0481273, r1) 23:39:31 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r5) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r6, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x800) 23:39:31 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x80081270, r1) 23:39:31 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xc0101282, r1) 23:39:31 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x80081272, 0xffffffffffffffff) 23:39:32 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x80081270, 0xffffffffffffffff) [ 1122.466056][T16904] block nbd5: shutting down sockets 23:39:32 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="020029bd7000fddbdf251a00000008000300", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="2800238006000300a2aa00000c00040000030000080000000800060000000000060001007f0000000c000600030000000000000008000300d0fed466788ac69da594cf92459d30633b0af07077065338066a89c6a673ad140119fc0a39346271df025337d181f9b2a2fdb954321917720e61f3c8433c6ff0d75348fbf9a7564ba6f1bd6b71dee98f3cae3a270822492398ed8f30ab6afb8c2425aca19ac19b90e752e4e1943aebb454b999d37f919dc97f5dec29c430d75502dd742103fff5f04485ca118fe39ad2c1b6a6a60ad37c6527e7b7749af3c1498de5fe9ac46f10c94079aeacccf45dfc36a3173f8f8c3d55e1e12df8c6d3528280fac51d312b09", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r6, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x8040}, 0x8804) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r7) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:32 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xc0189436, r1) [ 1122.517800][T16904] block nbd5: shutting down sockets [ 1122.545532][T16923] nbd: must specify at least one socket 23:39:32 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="30050400", @ANYRES16=0x0, @ANYBLOB="00032dbd7000ffdbdf251b0000000c0006000000000000000000100023800c0004000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20040095) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7fffffff}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7cd0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$I2C_SLAVE(0xffffffffffffffff, 0x703, 0x1ce) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) [ 1122.586594][T16909] block nbd3: shutting down sockets 23:39:32 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x80081272, r0) [ 1122.649324][T16923] nbd: must specify at least one socket [ 1122.655187][T16909] block nbd3: shutting down sockets 23:39:32 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="24100000", @ANYRES16=0x0, @ANYBLOB="10002dbd7000fddbdf250100000008000800e000000108000600ac1e0101"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x15) 23:39:32 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x80081270, 0xffffffffffffffff) 23:39:32 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xc020660b, r1) 23:39:32 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x80081272, r0) [ 1122.856909][T16927] block nbd2: shutting down sockets [ 1122.877554][T16934] block nbd5: shutting down sockets [ 1122.956247][T16944] block nbd5: shutting down sockets [ 1122.958598][T16950] block nbd3: shutting down sockets [ 1122.976356][T16927] block nbd2: shutting down sockets 23:39:32 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x80081270, 0xffffffffffffffff) 23:39:32 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x4702, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) 23:39:32 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xc0405519, r1) 23:39:32 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x80081272, r0) 23:39:32 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1123.026348][T16950] block nbd3: shutting down sockets 23:39:32 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40810) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r3) 23:39:32 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xc0481273, r1) 23:39:32 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x80081270, r0) 23:39:32 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) 23:39:32 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0x80081272, 0xffffffffffffffff) 23:39:32 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x12c1, 0x0, 0xb849}}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000004140a7b26bd7000fbdbdf2508000176cda1e764fc1fbca349ab7ff800000000000800010001000000080001007a868d4e42f51155c1a12b490800010002000000080001dc0100005c08000100"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000804) [ 1123.296450][T16969] block nbd2: shutting down sockets [ 1123.345889][T16969] block nbd2: shutting down sockets 23:39:32 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1123.392644][T16973] block nbd3: shutting down sockets 23:39:33 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0x80081272, 0xffffffffffffffff) 23:39:33 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x80081270, r0) [ 1123.457201][T16981] block nbd5: shutting down sockets [ 1123.477792][T16987] block nbd4: shutting down sockets [ 1123.528523][T16973] block nbd3: shutting down sockets [ 1123.534002][T16987] block nbd4: shutting down sockets [ 1123.539759][T16993] block nbd2: shutting down sockets [ 1123.569889][T16981] block nbd5: shutting down sockets 23:39:33 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:33 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DISCONNECT(r0, 0xab08) [ 1123.596952][T16995] block nbd2: shutting down sockets 23:39:33 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000040)={0x1, 0x5, 0x4, &(0x7f0000000000)={0x3, "3b578627375d543265dd4cc33d5f98b53137e4058bc56cf557afd32a3ecbf185a2"}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:33 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x100) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) 23:39:33 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x80081270, r0) 23:39:33 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0x80081272, 0xffffffffffffffff) [ 1123.787349][T17004] block nbd4: shutting down sockets [ 1123.806013][T17005] block nbd5: shutting down sockets [ 1123.812089][T17006] block nbd3: NBD_DISCONNECT [ 1123.818330][T17003] block nbd3: Disconnected due to user request. [ 1123.831736][T17003] block nbd3: shutting down sockets 23:39:33 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0x80081270, 0xffffffffffffffff) [ 1123.846032][T17009] block nbd5: shutting down sockets [ 1123.855834][T17007] block nbd4: shutting down sockets [ 1123.875917][T17008] block nbd2: shutting down sockets 23:39:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x18102) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) 23:39:33 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x101001) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x10000) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x40000c0) 23:39:33 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) [ 1123.895944][T17016] block nbd3: NBD_DISCONNECT [ 1123.903021][T17003] block nbd3: Disconnected due to user request. [ 1123.909869][T17003] block nbd3: shutting down sockets [ 1123.925857][T17008] block nbd2: shutting down sockets 23:39:33 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:33 executing program 3: socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:33 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0x80081270, 0xffffffffffffffff) [ 1124.140323][T17020] block nbd1: shutting down sockets 23:39:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x30b180, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x38, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '}'}]}, 0x38}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x30, r5, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x4014) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x8000000) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r1, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x2}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc010}, 0x40) r6 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x44, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1a}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000400)={&(0x7f00000003c0)=[0xffffe73f, 0x0, 0xd2, 0x0, 0x8], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) setsockopt$packet_buf(r8, 0x107, 0x16, &(0x7f0000000440)="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", 0x1000) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6400eb00", @ANYRES16=r9, @ANYBLOB="000227bd7000ffdbdf2506000000080002000500000008000800ac1e000106000b000900000008000700ac14143406000b0023000000080004000300000014000500ff020000000000000000000000000001"], 0x58}, 0x1, 0x0, 0x0, 0x40054}, 0x20044014) [ 1124.221551][T14900] block nbd5: shutting down sockets [ 1124.236946][T17022] block nbd2: shutting down sockets 23:39:33 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) [ 1124.286955][T17027] block nbd3: shutting down sockets [ 1124.326015][T17034] block nbd2: shutting down sockets 23:39:33 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r2) [ 1124.336328][T17037] block nbd3: shutting down sockets 23:39:33 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x23aa01) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x4000a) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 23:39:33 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="24c90000", @ANYRES16=r1, @ANYBLOB="000429bd7000fedbdf25020000000c000500240000000000000008000100000000000c0005000300000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x1) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) 23:39:34 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0x80081270, 0xffffffffffffffff) 23:39:34 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x100000, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x139182, 0x0) r2 = eventfd2(0x76c, 0x401) ioctl$I2C_FUNCS(r1, 0x705, &(0x7f0000000180)=0xffffffff) write$eventfd(r2, &(0x7f0000000140)=0x9, 0x8) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x1}, 0x4) [ 1124.519401][T17042] block nbd1: shutting down sockets [ 1124.555395][T17041] block nbd5: shutting down sockets 23:39:34 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) 23:39:34 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) 23:39:34 executing program 0: socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1124.665885][T17047] block nbd5: shutting down sockets [ 1124.702347][T17045] block nbd4: shutting down sockets 23:39:34 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req={0xde7, 0x8000, 0xfffffffb, 0xffff80c8}, 0x10) [ 1124.777284][T17045] block nbd4: shutting down sockets 23:39:34 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x8000, 0x8000, 0x6, 0xffff5120, 0x8], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) mq_timedsend(r4, &(0x7f0000000300)="32a83ac7e4ec402d5c5e972f39ae385c9759dc6de4e3c7509d769d8021daf4e29e94e98a7d5c34d236b4ed6c330d47330f2f5d72fcf75270a38a33c68a5f0c16f0b692612f2cb4627655abd0ce180249a391dc0e4eda47df402d52f5af63db82452f63eb0dfeedf7ab6d5ed7a22966989d22d537a5ad93e72fd1d1591ecb31459659d56e2b1cbf154e57d560997ad4c1bef6e7bd76f08d", 0x97, 0xffffffffffffffff, &(0x7f00000003c0)={r5, r6+10000000}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa4, r1, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffffb}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1d}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0xa4}, 0x1, 0x0, 0x0, 0x48800}, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) 23:39:34 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000040)=0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) [ 1124.888808][T17062] block nbd1: shutting down sockets 23:39:34 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) 23:39:34 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x2, 0x6, 0x1, 0x1, 0x4}) r3 = accept4$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14, 0x80000) getpeername$packet(r3, &(0x7f0000000180), &(0x7f00000001c0)=0x14) [ 1124.992106][T17065] block nbd0: shutting down sockets [ 1124.993594][T17070] block nbd5: shutting down sockets [ 1125.016203][T17067] block nbd2: shutting down sockets 23:39:34 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r2) [ 1125.066006][T17076] block nbd2: shutting down sockets 23:39:34 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x140d, 0x300, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4010) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) 23:39:34 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) mq_getsetattr(r1, &(0x7f0000000040)={0x160, 0x7f, 0x20, 0x5}, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x111900, 0x0) ioctl$I2C_PEC(r2, 0x708, 0x2) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) [ 1125.131125][T17070] block nbd5: shutting down sockets [ 1125.186632][T17079] block nbd1: shutting down sockets 23:39:34 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1125.207191][T17080] block nbd3: shutting down sockets [ 1125.278998][T17085] block nbd3: shutting down sockets [ 1125.303739][T17087] block nbd0: shutting down sockets 23:39:34 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x1) 23:39:34 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) 23:39:34 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x8102) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cgroups\x00', 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x2) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) write$apparmor_exec(r2, &(0x7f0000000000)={'stack ', '/dev/nbd#\x00'}, 0x10) 23:39:34 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req={0xde7, 0x8000, 0xfffffffb, 0xffff80c8}, 0x10) [ 1125.396598][T17091] block nbd2: shutting down sockets 23:39:35 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) [ 1125.455832][T17101] block nbd2: shutting down sockets 23:39:35 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x208002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) [ 1125.567820][T17104] block nbd3: shutting down sockets [ 1125.599910][T17106] block nbd0: shutting down sockets [ 1125.634394][T17104] block nbd3: shutting down sockets 23:39:35 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:35 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req={0xde7, 0x8000, 0xfffffffb, 0xffff80c8}, 0x10) [ 1125.656330][T17107] block nbd4: shutting down sockets 23:39:35 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x94181) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x8000) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x80000000, 0xf4, 0x7ff, 0x81], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x140d, 0xe28, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000240)=[0xffffffffffffffff]}, 0x1) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x9) 23:39:35 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x2c8800, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/timers\x00', 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000200), 0x9) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/consoles\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r4, 0xc008551b, &(0x7f0000000340)=ANY=[@ANYBLOB="01001b001000000007000000020000000800000007000000fff410c5c496a9342723a09d45106389c250f17a7c19c036458aa91c54058dd8adb2a246889202c2ede2862841a45e668d3633cb2a222f57aea9833edc537e9b834d771789286655487ec20fbe22eec3ed6b4298fb8541104c1831e6d1a1d811da0981f918058195977dc8e2da84cc038fa4dcb91e6661a1788f13bf817e579a1bbce037b62325f10099eee2fb19"]) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, &(0x7f0000000040)) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_INFO(r5, 0x80e85411, &(0x7f0000000400)=""/231) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000140)={0x1, 0x80, 0x4, 0x0, 0xf}) 23:39:35 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) [ 1125.736773][T17107] block nbd4: shutting down sockets 23:39:35 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1125.860802][T17123] block nbd0: shutting down sockets [ 1125.886354][T17124] block nbd3: shutting down sockets 23:39:35 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) 23:39:35 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req={0xde7, 0x8000, 0xfffffffb, 0xffff80c8}, 0x10) [ 1125.944925][T17124] block nbd3: shutting down sockets 23:39:35 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) read$char_usb(r1, &(0x7f0000000280)=""/136, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r6, 0x80585414, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x5e, 0x7, 0x1, 0x8, 0x7ff, 0x8db, 0x0, 0x9, 0x0, 0x8], 0xa, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, r5, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80000001}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r6}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r7}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008000}, 0x800) 23:39:35 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x400000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, 0x0, 0xcc5e230e34d799f3, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r3}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x880}, 0x20008000) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x24c0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000003c0), 0x101800, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r6, 0x80585414, 0x0) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r7, 0x80585414, 0x0) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x78, 0x0, 0x2, 0x70bd2b, 0x2, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x144f}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r3}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r7}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x810}, 0x4) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000140)={0x5, 0x80000000, 0x2, 0x0, 0x12}) 23:39:35 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x8002, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) syz_genetlink_get_family_id$fou(&(0x7f0000000140), r1) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000040)={0x3, 0x1, 0xfffffffe, 0x1, 0x81}) [ 1126.036550][T17133] block nbd4: shutting down sockets 23:39:35 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:35 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:35 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x1e1300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x78402) [ 1126.269659][T17148] nbd: must specify at least one socket [ 1126.277008][T17144] block nbd0: shutting down sockets [ 1126.283488][T17141] block nbd3: shutting down sockets 23:39:35 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) 23:39:35 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0xffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x80000200}, 0x1c) setsockopt$packet_buf(r3, 0x107, 0xd, &(0x7f0000000040)="e86add", 0x3) 23:39:35 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) [ 1126.355974][T17159] nbd: must specify at least one socket [ 1126.366963][T17148] block nbd3: shutting down sockets 23:39:35 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x87f, 0x101, 0x5f, 0x8, 0x5, 0x7f, 0x8000, 0x9, 0x0], 0x9, 0x80000, 0x0, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r8, 0x80585414, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, r5, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x838e}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x20}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000040) [ 1126.447886][T17154] block nbd4: shutting down sockets 23:39:36 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) [ 1126.516554][T17154] block nbd4: shutting down sockets [ 1126.546260][T17167] block nbd5: shutting down sockets 23:39:36 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) [ 1126.577949][T17168] block nbd0: shutting down sockets [ 1126.615968][T17167] block nbd5: shutting down sockets 23:39:36 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) 23:39:36 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1126.673491][T17172] block nbd2: shutting down sockets [ 1126.706049][T17177] nbd: must specify at least one socket [ 1126.727359][T17173] block nbd3: shutting down sockets [ 1126.736780][T17178] block nbd4: shutting down sockets [ 1126.748910][T17176] block nbd2: shutting down sockets 23:39:36 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1126.796207][T17178] block nbd4: shutting down sockets 23:39:36 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) 23:39:36 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x30600) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:36 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) [ 1126.827899][T17187] block nbd0: shutting down sockets [ 1126.865435][T17173] block nbd3: shutting down sockets [ 1126.893341][T17188] block nbd5: shutting down sockets 23:39:36 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_CLEAR_QUE(r0, 0xab05) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:36 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x38, r0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1e}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8010) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x8, 0x80000000, 0xffff, 0x4, 0x3f, 0x1], 0x6, 0x80800, 0x0, 0xffffffffffffffff}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001300)={&(0x7f00000012c0)=[0xc4fc, 0x2c, 0x80, 0x5, 0x7, 0x6], 0x6, 0x800, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f00000001c0)=""/219) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r6, 0x80585414, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r6, 0x40485404, &(0x7f0000001480)={{0x2, 0x1, 0x1, 0x0, 0xc}, 0x8, 0x7ff}) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000001380)={&(0x7f0000000140)=[{0x1, 0x1600, 0x1000, &(0x7f00000002c0)="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"}, {0x0, 0x200, 0xa3, &(0x7f00000013c0)="fb512147f680d2d367996484d5eb424727c90bd471b976c196aa5e5871404b6a24c844841e9e1013b2d539fa6001dc0e1e2be219d20223155d9130a83a776b38db277c5f5e961250d3fc2f5f050daf49a9d6c9ccc900d1ea7b0dc854f0fd2af5cc430cf51b645aecdb13ffa46893e0e28feb4b982db9718f6e36107cadb746e2a19493dd555dce9d91ae81ce0131e54512982f4d6ae0a2818a0cd0531c0dea0bd1c473"}], 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r5, 0xab00, r7) [ 1126.956259][T17188] block nbd5: shutting down sockets 23:39:36 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) 23:39:36 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x46c002) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x7) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x408000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) 23:39:36 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) [ 1127.097098][T17199] block nbd0: shutting down sockets 23:39:36 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x20000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x64, 0x0, &(0x7f0000000240)=[@register_looper, @enter_looper, @free_buffer, @dead_binder_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x1, 0x0, 0x26}, @flat=@handle={0x73682a85, 0x100}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/98, 0x62, 0x0, 0x2}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}], 0x13, 0x0, &(0x7f00000002c0)="2663a827b88029eb7c6f58c1a3cc3253c430ee"}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x4) 23:39:36 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1127.186024][T17206] block nbd3: shutting down sockets [ 1127.246024][T17206] block nbd3: shutting down sockets 23:39:36 executing program 5: ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000140)=""/4096) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:36 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x100000001) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) 23:39:36 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) [ 1127.347573][T17213] block nbd4: shutting down sockets [ 1127.369179][T17216] block nbd0: shutting down sockets 23:39:36 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1127.406658][T17220] block nbd4: shutting down sockets [ 1127.435033][T17218] block nbd2: shutting down sockets 23:39:37 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$I2C_SLAVE_FORCE(0xffffffffffffffff, 0x706, 0x107) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xf7) [ 1127.465989][T17224] block nbd5: shutting down sockets [ 1127.486713][T17218] block nbd2: shutting down sockets 23:39:37 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x87f, 0x101, 0x5f, 0x8, 0x5, 0x7f, 0x8000, 0x9, 0x0], 0x9, 0x80000, 0x0, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r8, 0x80585414, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, r5, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x838e}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x20}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000040) 23:39:37 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000080)=[0x1, 0xaef, 0x0, 0x4, 0x800, 0x6, 0x8, 0x1], 0x8, 0x800}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4048000) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r7, 0x80585414, 0x0) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r8, 0x80585414, 0x0) r9 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0), 0x31b7c0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r2, @ANYBLOB="04002abd7000fcdbdf25010000000c0008001f000000000000000c00060002000000000000000c00040005000000000000000c00060002000000000000001400078008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="0800ecff", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="0c00050008000000000000000c00080007000000000000000c0008001f000000000000000c000400ffff0000000000000c0005000a000000000000000c0006000100000000000000"], 0xcc}, 0x1, 0x0, 0x0, 0x20}, 0x20000810) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x401) [ 1127.525824][T17226] block nbd5: shutting down sockets [ 1127.556119][T17225] block nbd3: shutting down sockets 23:39:37 executing program 5: ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)={0x5, 0x0, 0x400, 0x0, 0x200}) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:37 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1127.615812][T17225] block nbd3: shutting down sockets [ 1127.617222][T17230] block nbd0: shutting down sockets 23:39:37 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) 23:39:37 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r1, 0xab05) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r6, 0x80585414, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r8, 0x80585414, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r2}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x41) [ 1127.746834][T17239] block nbd2: shutting down sockets [ 1127.766109][T17243] block nbd5: shutting down sockets 23:39:37 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r5) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r6, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x60, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x35}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x14) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r6, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000840) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1127.810652][T17251] nbd: must specify at least one socket [ 1127.825835][T17247] block nbd2: shutting down sockets [ 1127.825864][T17244] block nbd5: shutting down sockets [ 1127.869744][T17237] block nbd1: shutting down sockets 23:39:37 executing program 5: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) [ 1127.896149][T17249] block nbd3: shutting down sockets [ 1127.904621][T17248] block nbd0: shutting down sockets [ 1127.920892][T17250] block nbd4: shutting down sockets 23:39:37 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:37 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x87f, 0x101, 0x5f, 0x8, 0x5, 0x7f, 0x8000, 0x9, 0x0], 0x9, 0x80000, 0x0, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r8, 0x80585414, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, r5, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x838e}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x20}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000040) 23:39:37 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x319801, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x88c4}, 0x8000) [ 1127.961736][T17250] block nbd4: shutting down sockets 23:39:37 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x201c3) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:37 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x4b0000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x10001, 0x3, 0x4, 0x5, 0x8, 0x3ff, 0x6, 0x7], 0x8, 0x0, 0x0, 0xffffffffffffffff}) write$eventfd(r2, &(0x7f0000000140)=0xcdf7, 0x8) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1128.066155][T17269] nbd: must specify at least one socket 23:39:37 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1128.118111][T17268] block nbd3: shutting down sockets [ 1128.136158][T17258] block nbd2: shutting down sockets [ 1128.171459][T17269] nbd: must specify at least one socket [ 1128.200725][T17268] block nbd3: shutting down sockets [ 1128.202149][T17274] nbd: must specify at least one socket 23:39:37 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x2) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x106}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x263}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x24004040) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:37 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) [ 1128.228348][T17258] block nbd2: shutting down sockets 23:39:37 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040027bd60007cdbdf25050000000c0004000700000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1128.266069][T17267] block nbd1: shutting down sockets 23:39:37 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xc02c3) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0xffffffff], 0x1, 0x800, 0x0, 0xffffffffffffffff}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r5, 0x107, 0x5, &(0x7f0000000180)="a88723c41f0fbd8b5a7b26436914456b6db3dc503359485121309eeebb3d6df41968caa689e8e2dc3c72284fe180316a17c3160e5852f0531dff0894180ea97e4044326a6804e18c3ed9a0e77aad66fbaa6844f80665673dafee12d69cac812613a8d8ff2e7a95ae9e20c0d18c0682f8debbf460911a37d4015c4a231ae4cbe6dd3129031c800f03684abec1d290e961cc80187db6f85cea288ccdf5c917283482e9", 0xa2) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r4, 0xc0045520, &(0x7f0000000140)) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0xfffffffffffffffb) 23:39:37 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x87f, 0x101, 0x5f, 0x8, 0x5, 0x7f, 0x8000, 0x9, 0x0], 0x9, 0x80000, 0x0, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r8, 0x80585414, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, r5, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x838e}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x20}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000040) 23:39:37 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) 23:39:37 executing program 5: syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x30100) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000040)) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x10100, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000300)=[0x34, 0x6], 0x2}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x121040) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x6bc242, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x2], 0x1, 0x800}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) [ 1128.437115][T17290] block nbd3: shutting down sockets 23:39:38 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r3, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffffc0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1530}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0x4c}}, 0x8000) 23:39:38 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) [ 1128.477318][T17291] block nbd4: shutting down sockets [ 1128.495986][T17290] block nbd3: shutting down sockets [ 1128.496158][T17295] block nbd2: shutting down sockets [ 1128.555960][T17296] block nbd4: shutting down sockets 23:39:38 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x5, 0x7, 0x3, 0x9], 0x6, 0x80000, 0x0, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x140f, 0x1, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}]}, 0x4c}}, 0x8011) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) 23:39:38 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) [ 1128.615882][T17298] block nbd2: shutting down sockets [ 1128.630827][T17313] nbd: must specify at least one socket 23:39:38 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x1e0069f7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) 23:39:38 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x6) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1128.689863][T17297] block nbd1: shutting down sockets 23:39:38 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x87f, 0x101, 0x5f, 0x8, 0x5, 0x7f, 0x8000, 0x9, 0x0], 0x9, 0x80000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r6, 0x80585414, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1}) 23:39:38 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1128.767698][T17309] block nbd3: shutting down sockets [ 1128.786419][T17318] block nbd4: shutting down sockets [ 1128.846553][T17318] block nbd4: shutting down sockets [ 1128.866149][T17322] block nbd5: shutting down sockets [ 1128.866193][T17323] block nbd2: shutting down sockets [ 1128.886338][T17309] block nbd3: shutting down sockets 23:39:38 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) r3 = accept4$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14, 0x80800) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{0xdab, 0x3, 0x8, 0x8}, {0x1f, 0x1, 0x1f, 0xc2}, {0x1, 0x0, 0x7, 0xaa3}, {0x8, 0x5, 0x7, 0x526}, {0x5, 0x42, 0x7, 0xff}, {0x6, 0x1, 0x4, 0x1}]}, 0x10) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x80000001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r5) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, r6, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040015}, 0x4000000) 23:39:38 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000140)={0x5, 0x9}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x8001, 0x5e5, 0x0, 0x8, 0xff, 0x7411bdb, 0x2e6], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x3, 0x6, 0x2c38], 0x3, 0x0, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) 23:39:38 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000080)=@req={0xffffff81, 0x8, 0x8, 0x6}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={{0x2, 0x3, 0x8000, 0x2, 0x4}, 0x0, 0x6}) 23:39:38 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1128.986306][T17325] block nbd2: shutting down sockets [ 1128.990724][T17341] nbd: must specify at least one socket 23:39:38 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:38 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x87f, 0x101, 0x5f, 0x8, 0x5, 0x7f, 0x8000, 0x9, 0x0], 0x9, 0x80000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r6, 0x80585414, 0x0) [ 1129.055589][T17328] block nbd1: shutting down sockets [ 1129.069298][T17344] nbd: must specify at least one socket [ 1129.080332][T17342] block nbd4: shutting down sockets 23:39:38 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1129.148060][T17347] block nbd5: shutting down sockets [ 1129.174802][T17346] block nbd3: shutting down sockets 23:39:38 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1129.199934][T17342] block nbd4: shutting down sockets [ 1129.218216][T17347] block nbd5: shutting down sockets [ 1129.236085][T17352] block nbd2: shutting down sockets [ 1129.243958][T17346] block nbd3: shutting down sockets 23:39:38 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x10001) syz_open_dev$char_usb(0xc, 0xb4, 0x7ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 23:39:38 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$NBD_CLEAR_QUE(r2, 0xab05) 23:39:38 executing program 3: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x408c80, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:38 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x7496) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:38 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x87f, 0x101, 0x5f, 0x8, 0x5, 0x7f, 0x8000, 0x9, 0x0], 0x9, 0x80000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) [ 1129.295538][T17359] nbd: must specify at least one socket [ 1129.302026][T17356] block nbd2: shutting down sockets [ 1129.319144][T17354] block nbd1: shutting down sockets 23:39:38 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:39 executing program 4: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x64600, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x3fd) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x7) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x800) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x5, 0x3}}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) 23:39:39 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req={0x2, 0x8, 0x6, 0x10001}, 0x10) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000040)={0x2000000000000087, &(0x7f0000000000)=[{0xfae, 0x0, 0x7, 0x9}, {0x8f, 0x8, 0x1f, 0x7a6a}, {0x3, 0x4, 0x2, 0x2}, {0x4, 0x39, 0xa, 0x80000000}, {0xdf05, 0x0, 0x9, 0x8000}, {0x1c, 0x7, 0x9, 0x8}, {0x9, 0xd8, 0xf3, 0x6}]}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) r4 = inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x40000020) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x161000, 0x0) inotify_rm_watch(r5, r4) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1129.503906][T14952] block nbd3: shutting down sockets [ 1129.511093][T17370] block nbd5: shutting down sockets 23:39:39 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:39 executing program 5: setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x2, 0x3, 0x7, 0x0, 0x4, 0x3df7, 0xf9b}, 0x1c) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1129.566781][T17368] block nbd2: shutting down sockets [ 1129.596935][T17370] block nbd5: shutting down sockets [ 1129.636177][T17368] block nbd2: shutting down sockets [ 1129.655125][T17388] nbd: must specify at least one socket 23:39:39 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x800) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:39 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x87f, 0x101, 0x5f, 0x8, 0x5, 0x7f, 0x8000, 0x9, 0x0], 0x9, 0x80000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) [ 1129.676887][T17383] block nbd4: shutting down sockets [ 1129.682569][T17374] block nbd1: shutting down sockets [ 1129.685993][T17384] block nbd3: shutting down sockets 23:39:39 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) [ 1129.736389][T17383] block nbd4: shutting down sockets 23:39:39 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 1129.775900][T17387] block nbd3: shutting down sockets 23:39:39 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x408000) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x2) ioctl$NBD_DO_IT(r0, 0xab03) socket$can_j1939(0x1d, 0x2, 0x7) [ 1129.817501][T17393] block nbd5: shutting down sockets 23:39:39 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xef) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1129.866736][T17395] block nbd5: shutting down sockets [ 1129.906154][T17396] block nbd2: shutting down sockets 23:39:39 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) [ 1129.952165][T17407] nbd: must specify at least one socket [ 1129.958013][T17400] block nbd2: shutting down sockets 23:39:39 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) 23:39:39 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x9) [ 1130.000506][T17397] block nbd1: shutting down sockets 23:39:39 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x87f, 0x101, 0x5f, 0x8, 0x5, 0x7f, 0x8000, 0x9, 0x0], 0x9, 0x80000}) [ 1130.096787][T17412] block nbd5: shutting down sockets 23:39:39 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc080) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x410001) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x2bb5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x3) 23:39:39 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1130.206953][T17424] block nbd2: shutting down sockets 23:39:39 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1130.258250][T17424] block nbd2: shutting down sockets 23:39:39 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 1130.283730][T17427] nbd: must specify at least one socket [ 1130.291207][T17425] block nbd1: shutting down sockets 23:39:39 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1130.368999][T17433] block nbd5: shutting down sockets [ 1130.457182][T17437] block nbd2: shutting down sockets [ 1130.519091][T17442] nbd: must specify at least one socket [ 1130.526085][T17438] block nbd1: shutting down sockets [ 1130.736560][ T8449] block nbd4: Receive control failed (result -32) [ 1130.745875][T17405] block nbd4: shutting down sockets [ 1130.784494][ T8445] block nbd3: Receive control failed (result -32) [ 1130.803534][T17409] block nbd3: shutting down sockets 23:39:40 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x45) 23:39:40 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) ioctl$NBD_SET_SIZE(r2, 0xab02, 0x8) 23:39:40 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:40 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:40 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 23:39:40 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x420000) ioctl$NBD_DISCONNECT(r2, 0xab08) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1130.842412][T17454] block nbd4: shutting down sockets [ 1130.938863][T17458] block nbd5: shutting down sockets 23:39:40 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:40 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000013c0)={0xac, 0x0, &(0x7f0000000300)=[@clear_death, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@flat=@binder={0x73622a85, 0x10b, 0x3}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/153, 0x99, 0x1, 0xa}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x40}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x1, 0x0, 0x16}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000002c0)={0x0, 0x18, 0x38}}, 0x400}, @register_looper], 0x1000, 0x0, &(0x7f00000003c0)="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"}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1131.017208][T17458] block nbd5: shutting down sockets [ 1131.046179][T17459] block nbd3: shutting down sockets [ 1131.056607][T17464] block nbd4: shutting down sockets 23:39:40 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x80000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000000)={0x401, 0x20, [0x8, 0xacc, 0xa66d, 0x0, 0x9, 0x7ff, 0x3, 0x10001]}) [ 1131.072964][T17462] block nbd1: shutting down sockets 23:39:40 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 1131.106439][T17464] block nbd4: shutting down sockets [ 1131.111941][T17459] block nbd3: shutting down sockets 23:39:40 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:40 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x2) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:40 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1131.266284][T17478] block nbd5: shutting down sockets [ 1131.268285][T17477] block nbd2: shutting down sockets [ 1131.316996][T17486] block nbd3: shutting down sockets [ 1131.336280][T17485] block nbd4: shutting down sockets [ 1131.340050][T17478] block nbd5: shutting down sockets [ 1131.347448][T17477] block nbd2: shutting down sockets 23:39:40 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 23:39:40 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000080)={0xffff8000, 0x0, &(0x7f0000000040)=[r1, r3]}, 0x2) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1131.366319][T17491] block nbd4: shutting down sockets [ 1131.372739][T17483] block nbd1: shutting down sockets [ 1131.378519][T17486] block nbd3: shutting down sockets 23:39:40 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @random="a15bfb4e99bf"}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) getsockopt$packet_int(r2, 0x107, 0x12, &(0x7f0000000080), &(0x7f0000000100)=0x4) 23:39:40 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x7c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:ldconfig_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:tzdata_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24004804}, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x97) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x400100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) ioctl$NBD_SET_SIZE(r3, 0xab02, 0x5) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, &(0x7f0000000240)={0x6, 0x800, 0x1}) 23:39:41 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 23:39:41 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x8c], 0x2, 0x80000}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:41 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x6427c1) syz_open_dev$char_usb(0xc, 0xb4, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000140)={{0x2, 0x0, 0x3, 0x2, 0x3}, 0xffffff81, 0x100, 'id0\x00', 'timer0\x00', 0x0, 0x5, 0x80, 0x5b0, 0xd6}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000000)) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x8010, r2, 0x10000000) [ 1131.605981][T17501] block nbd2: shutting down sockets [ 1131.613329][T17500] block nbd4: shutting down sockets 23:39:41 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x22000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:41 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7fffffff, 0x5c5, 0x4, 0x9], 0x4, 0x80800}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) ioctl$NBD_DISCONNECT(r2, 0xab08) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1131.672037][T17504] block nbd1: shutting down sockets [ 1131.696404][T17500] block nbd4: shutting down sockets 23:39:41 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 23:39:41 executing program 4: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x1412, 0x200, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x4001) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) 23:39:41 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80842) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000040)) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) [ 1131.868424][T17523] block nbd5: shutting down sockets [ 1131.895971][T17523] block nbd5: shutting down sockets [ 1131.905919][T17524] block nbd2: shutting down sockets [ 1131.973244][T17524] block nbd2: shutting down sockets [ 1132.036646][T17531] block nbd3: shutting down sockets [ 1132.085331][T17529] block nbd1: shutting down sockets [ 1132.106206][T17531] block nbd3: shutting down sockets 23:39:41 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 23:39:41 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80400) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 23:39:41 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x23c58}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r4, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x400}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffff}]}, 0x68}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) 23:39:41 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x8, 0x6b], 0x2, 0x80000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) 23:39:41 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 23:39:41 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0), 0x20c02, 0x0) ioctl$I2C_TIMEOUT(r1, 0x702, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r4, 0x800, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000c04}, 0x40001) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) [ 1132.347189][ T8445] block nbd0: Receive control failed (result -32) [ 1132.362067][T14915] block nbd0: shutting down sockets 23:39:42 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x5, 0x41, 0xfd, 0x3}, {0x1ff, 0x81, 0x8, 0xfffffff8}]}, 0x10) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:42 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x80, r4, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff80000001}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0xc040) [ 1132.513348][T17552] nbd: must specify at least one socket [ 1132.522551][T17554] block nbd5: shutting down sockets [ 1132.528814][T17547] block nbd3: shutting down sockets [ 1132.599293][T17545] block nbd5: shutting down sockets [ 1132.630167][T17546] block nbd1: shutting down sockets 23:39:42 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x40200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) ioctl$NBD_CLEAR_QUE(r2, 0xab05) [ 1132.648095][T17572] nbd: must specify at least one socket 23:39:42 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:42 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 1132.696446][T17568] block nbd4: shutting down sockets [ 1132.755902][T17571] block nbd4: shutting down sockets [ 1132.757713][T17576] nbd: must specify at least one socket [ 1132.768400][T17574] block nbd3: shutting down sockets 23:39:42 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xa202) syz_open_dev$char_usb(0xc, 0xb4, 0x1) ioctl$NBD_DO_IT(r2, 0xab03) [ 1132.827313][T17581] nbd: must specify at least one socket [ 1132.834400][T17574] block nbd3: shutting down sockets [ 1132.926048][T17583] block nbd2: shutting down sockets [ 1132.976540][T17583] block nbd2: shutting down sockets [ 1133.032026][T17584] block nbd1: shutting down sockets 23:39:42 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 23:39:42 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x42040, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x0) 23:39:42 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) 23:39:42 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = io_uring_setup(0x2b8, &(0x7f0000000000)={0x0, 0x631f, 0x8, 0x1, 0x22d}) r3 = syz_open_dev$binderN(&(0x7f0000000080), 0x0, 0x2) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200), 0x9) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000001c0)={0xffffffff, 0x0, &(0x7f0000000180)=[r3, r4]}, 0x2) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:42 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 1133.350948][ T8445] block nbd0: Receive control failed (result -32) [ 1133.359845][T17560] block nbd0: shutting down sockets 23:39:43 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 1133.526884][T17603] block nbd1: shutting down sockets [ 1133.557491][T17602] block nbd2: shutting down sockets [ 1133.574787][T17601] block nbd5: shutting down sockets [ 1133.598178][T17600] block nbd3: shutting down sockets [ 1133.635866][T17608] block nbd2: shutting down sockets [ 1133.673395][T17600] block nbd3: shutting down sockets [ 1133.685740][T17601] block nbd5: shutting down sockets 23:39:43 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x20008044) [ 1133.800412][ T8449] block nbd4: Receive control failed (result -32) [ 1133.809075][T17590] block nbd4: shutting down sockets 23:39:43 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x2, 0x6, 0xfffffb6f, 0x4, 0x0], 0x5, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}]}, 0x24}}, 0x20004010) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:43 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x546c2628440b9aaa}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x64, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010100}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40084}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, 0x0) openat$cgroup_devices(r4, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) 23:39:43 executing program 4: ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:43 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 1133.867536][T17587] block nbd4: shutting down sockets [ 1133.890029][T17619] block nbd1: shutting down sockets 23:39:43 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1134.026633][T17627] block nbd3: shutting down sockets [ 1134.032867][T17626] block nbd2: shutting down sockets [ 1134.036061][T17628] block nbd5: shutting down sockets [ 1134.086048][T17629] block nbd2: shutting down sockets [ 1134.091720][T17627] block nbd3: shutting down sockets [ 1134.106482][T17628] block nbd5: shutting down sockets [ 1134.204504][T17635] block nbd1: shutting down sockets [ 1134.237592][T17643] block nbd4: shutting down sockets [ 1134.306052][T17643] block nbd4: shutting down sockets 23:39:43 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_DO_IT(r0, 0xab03) 23:39:43 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) 23:39:43 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x11ba80) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x5) ioctl$NBD_CLEAR_QUE(r0, 0xab05) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) 23:39:43 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8001) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000400)={0x1, 0x7, 0x3, &(0x7f00000003c0)={0x14, "47a92aa7b4d15ae531d5e679eb773aa7f7a55f1ece1dbac6a1e79677d6a65cf3ab"}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0xc000) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000440)=""/38) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x5, 0xffffff66, 0xff, 0x9], 0x4, 0x800, 0x0, 0xffffffffffffffff}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) openat$cgroup_devices(r2, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) sendto$packet(r4, &(0x7f0000000540)="1ba08c804cf2e9348d8617a47fc9b077600914e41d4bcac2bc52cb59fd52a6e321883e1086d6c4cafb0e003b0543a0e5cae99d470a762775ce7fb1aad2b79cd5d485f3418b06d9c518a93e26631edfc3387165d5216e390439df32a95220a644dc9c", 0x62, 0x0, &(0x7f0000000500)={0x11, 0xf5, 0x0, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x14) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000240)=[r4, r2, 0xffffffffffffffff, r0, r1]}, 0x5) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x121a, &(0x7f00000002c0)={0x0, 0x9dcb, 0x4, 0x0, 0x294}, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000c31000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000380)) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r1) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) 23:39:43 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 23:39:43 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r2) [ 1134.349830][ T8445] block nbd0: Receive control failed (result -32) [ 1134.357847][T17612] block nbd0: shutting down sockets 23:39:44 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x103900) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x81, 0xffffffffffffffff, 0x8}, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x480200, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) 23:39:44 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_DO_IT(r0, 0xab03) 23:39:44 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:44 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 1134.546867][T17651] block nbd3: shutting down sockets [ 1134.566330][T17656] nbd: must specify at least one socket [ 1134.583836][T17650] block nbd1: shutting down sockets 23:39:44 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x7f) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:44 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_DO_IT(r0, 0xab03) [ 1134.646272][T17651] block nbd3: shutting down sockets [ 1134.646434][T17662] block nbd5: shutting down sockets 23:39:44 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) r3 = accept4$packet(r2, 0x0, &(0x7f0000000040), 0x80800) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000080)=[{0x3, 0x81, 0x0, 0x400}, {0x0, 0x0, 0x0, 0x1}, {0x4, 0x6, 0x3, 0x1}]}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/vmstat\x00', 0x0, 0x0) ioctl$I2C_SLAVE(r4, 0x703, 0x1d) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:44 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x228, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x140, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38aaacfa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9addbff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x388c58fc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1893fd8f}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13cd1133}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x272ec121}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2cffd41a}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d3e7d76}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2fed8bf6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34941364}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f182921}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x316a8c49}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb4, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e250ea0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19e26885}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x19}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x130e19dc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4108cfea}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4711da00}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20017}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cde471f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x539aca53}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x228}, 0x1, 0x0, 0x0, 0x1df805a001ee6a06}, 0x48815) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1134.745828][T17665] block nbd5: shutting down sockets [ 1134.766167][T17667] block nbd4: shutting down sockets [ 1134.808094][T17675] nbd: must specify at least one socket [ 1134.816690][T17667] block nbd4: shutting down sockets [ 1134.819007][T17672] block nbd1: shutting down sockets 23:39:44 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r4, 0x62eab7bbff600779, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x66ae}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x800) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:44 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) [ 1134.866186][T17673] block nbd2: shutting down sockets [ 1134.895947][T17673] block nbd2: shutting down sockets 23:39:44 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 1134.926696][T17678] block nbd3: shutting down sockets 23:39:44 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:44 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x201c2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 1134.998632][T17688] nbd: must specify at least one socket [ 1135.007900][T17678] block nbd3: shutting down sockets [ 1135.013636][T17681] block nbd5: shutting down sockets 23:39:44 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 23:39:44 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x58, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0xc000}, 0x800) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1135.076294][T17685] block nbd5: shutting down sockets [ 1135.078793][T17691] nbd: must specify at least one socket [ 1135.086211][T17684] block nbd4: shutting down sockets 23:39:44 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 1135.135340][T17688] nbd: must specify at least one socket [ 1135.166620][T17692] block nbd2: shutting down sockets 23:39:44 executing program 4: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:44 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x1801c0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0xa0002) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000140)={{0x1, 0x0, 0xfb6, 0x0, 0x9}, 0x7a3, 0x1ff, 'id0\x00', 'timer1\x00', 0x0, 0x7fff, 0x9, 0xb8}) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_DISCONNECT(r2, 0xab08) 23:39:44 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={{0x0, 0x2, 0x1, 0x0, 0x56f}, 0x9, 0x1ff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 23:39:44 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 23:39:44 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) ioctl$I2C_TIMEOUT(r2, 0x702, 0x8000) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1135.316013][T17697] block nbd5: shutting down sockets [ 1135.324696][T17708] nbd: must specify at least one socket 23:39:44 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 1135.396443][T17712] block nbd2: NBD_DISCONNECT [ 1135.400566][T17713] block nbd3: shutting down sockets [ 1135.402989][T17706] block nbd2: Disconnected due to user request. [ 1135.419414][T17706] block nbd2: shutting down sockets [ 1135.426468][T17705] block nbd4: shutting down sockets 23:39:45 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 1135.465818][T17715] block nbd3: shutting down sockets [ 1135.486003][T17718] block nbd2: NBD_DISCONNECT [ 1135.495719][T17706] block nbd2: Disconnected due to user request. [ 1135.503570][T17706] block nbd2: shutting down sockets [ 1135.505876][T17711] block nbd4: shutting down sockets 23:39:45 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r0, 0x1}, 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x54, r0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x81}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x9}, @NL802154_ATTR_TX_POWER={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x4000) ioctl$I2C_SLAVE(0xffffffffffffffff, 0x703, 0x3bb) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) 23:39:45 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x101801) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:45 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1135.554672][T17721] nbd: must specify at least one socket [ 1135.588772][T17717] block nbd5: shutting down sockets 23:39:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 23:39:45 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 23:39:45 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1135.716425][T17724] block nbd4: shutting down sockets [ 1135.736182][T17725] block nbd3: shutting down sockets 23:39:45 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1135.785928][T17728] block nbd3: shutting down sockets [ 1135.785928][T17726] block nbd4: shutting down sockets [ 1135.806636][T17735] nbd: must specify at least one socket 23:39:45 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x8001) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x10080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x7fffffff, 0x4], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x4) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 23:39:45 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 1135.846112][T17727] block nbd2: shutting down sockets [ 1135.859893][T17732] block nbd5: shutting down sockets [ 1135.916594][T17727] block nbd2: shutting down sockets [ 1135.922013][T17732] block nbd5: shutting down sockets 23:39:45 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) clock_getres(0x6, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x280c82) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000040)={0x5, 0x6, 0x2, 0x6000, '\x00', 0x3}) 23:39:45 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:45 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) accept4$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10, 0x800) 23:39:45 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 23:39:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 1136.076199][T17738] block nbd4: shutting down sockets 23:39:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 1136.126645][T17745] block nbd2: shutting down sockets [ 1136.156515][T17743] block nbd4: shutting down sockets [ 1136.167732][T17748] block nbd3: shutting down sockets 23:39:45 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 23:39:45 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x9) [ 1136.174528][T17747] block nbd5: shutting down sockets [ 1136.195833][T17745] block nbd2: shutting down sockets 23:39:45 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x6) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0x1}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x38, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '}'}]}, 0x38}}, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r3, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x9c, r5, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, '/dev/nbd#\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x10}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x98, r2, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40c0}, 0x4) 23:39:45 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000200)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) ioctl$NBD_CLEAR_QUE(r0, 0xab05) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000000)=0xffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r5) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, r6, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x20}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) ioctl$NBD_CLEAR_QUE(r0, 0xab05) [ 1136.270892][T17748] block nbd3: shutting down sockets [ 1136.306226][T17747] block nbd5: shutting down sockets 23:39:45 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x20100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 23:39:45 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 1136.356384][T17759] block nbd4: shutting down sockets 23:39:46 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1136.446330][T17762] block nbd4: shutting down sockets [ 1136.464869][T17771] nbd: must specify at least one socket [ 1136.475427][T17764] block nbd2: shutting down sockets [ 1136.508507][T17776] nbd: must specify at least one socket [ 1136.542391][T17764] block nbd2: shutting down sockets [ 1136.556311][T17770] block nbd5: shutting down sockets 23:39:46 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000001c0)={&(0x7f0000000180)=[{0xfff7, 0x2610, 0x47, &(0x7f0000000000)="ab117a8032ad0c6ed20a827a26f48b7817a6e08cfa7684e3a4e9dda1f2ea5bb9a9b029bfa335300e2dba5c5f2420885de1e30c361490f6ac464cebe67669de08a62a43dce2607f"}, {0x8363, 0x200, 0x0, &(0x7f0000000080)}, {0x7f, 0xc20, 0x39, &(0x7f0000000140)="b0697e047bfab859f8138665bf2b8ede54c6b78ff87f654b62602db664619e14046dfe71e830f76fcd474d68422a2c6b2b56dae2d9006e778b"}], 0x3}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f0000000080)=[0x400, 0x6], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) 23:39:46 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4000) [ 1136.586042][T17770] block nbd5: shutting down sockets 23:39:46 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 23:39:46 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 23:39:46 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1412, 0x200, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x40840}, 0x80) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:46 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x80000000, 0xffff, 0x0, 0x7, 0x4, 0x200, 0x100}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:46 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 23:39:46 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 23:39:46 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) [ 1136.800799][T17788] block nbd3: shutting down sockets [ 1136.823230][T17785] block nbd2: shutting down sockets [ 1136.836212][T17793] block nbd5: shutting down sockets 23:39:46 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1136.894977][T17797] block nbd5: shutting down sockets [ 1136.897186][T17788] block nbd3: shutting down sockets [ 1136.923095][T17798] block nbd4: shutting down sockets [ 1136.936728][T17785] block nbd2: shutting down sockets 23:39:46 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x600000) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:46 executing program 2: sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x75fa6dfef9390478}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8844}, 0x4000) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:46 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) read$char_usb(0xffffffffffffffff, &(0x7f0000000140)=""/218, 0xda) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x5c, r2, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24040044}, 0x40) 23:39:46 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 23:39:46 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 1137.176601][T17812] block nbd5: shutting down sockets [ 1137.196131][T17814] block nbd2: shutting down sockets [ 1137.202068][T17819] block nbd4: shutting down sockets [ 1137.216061][T17815] block nbd5: shutting down sockets 23:39:46 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 1137.226284][T17817] block nbd3: shutting down sockets 23:39:46 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r2, &(0x7f0000000040), 0x2, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000080)=[0x1], 0x1, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x140d, 0x8, 0x70bd2b, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4040084}, 0x4040881) 23:39:46 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x44a00) 23:39:46 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1137.265986][T17817] block nbd3: shutting down sockets [ 1137.296616][T17826] block nbd4: shutting down sockets 23:39:46 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 23:39:46 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x9, 0x582f, 0x2, 0x800, 0xd, 0x3f, 0x8], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x2, 0x1, 0x100, 0x0, 0x8, 0x4], 0x6, 0x800}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x6) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:47 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 1137.477555][T17832] block nbd3: shutting down sockets [ 1137.486934][T17831] block nbd2: shutting down sockets [ 1137.487016][T17830] block nbd5: shutting down sockets 23:39:47 executing program 2: write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0x10001, 0x8) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x1080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) [ 1137.538789][T17831] block nbd2: shutting down sockets [ 1137.557326][T17832] block nbd3: shutting down sockets 23:39:47 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x10000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) eventfd2(0x6, 0x0) [ 1137.586102][T17830] block nbd5: shutting down sockets 23:39:47 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) ioctl$NBD_DISCONNECT(r1, 0xab08) 23:39:47 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140a, 0x1, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:47 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 23:39:47 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NBD_CMD_CONNECT(r0, 0x0, 0x0) 23:39:47 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000140)={0xff, 0x9, 0x1}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xbd57211ac78b46d7) 23:39:47 executing program 5: r0 = syz_io_uring_setup(0x27ac, &(0x7f0000000040)={0x0, 0xb0eb, 0x20, 0x3, 0x54}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000140)) syz_io_uring_setup(0x5340, &(0x7f0000000180)={0x0, 0x10004309, 0x10, 0x0, 0x360, 0x0, r0}, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x551202) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0x3d75, &(0x7f0000000300)={0x0, 0x3462, 0x10, 0x2, 0x2bc, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f00000000c0), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000003c0), 0x1) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r4, 0x800c5012, &(0x7f0000000280)) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r5) [ 1137.793090][T17846] block nbd2: shutting down sockets [ 1137.796466][T17848] block nbd3: shutting down sockets 23:39:47 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xb0, r0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x24, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x6}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x50, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_KEY_MODE={0xfffffffffffffd57, 0x6, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0x100}}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xcb64}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0xfe}]}]}, 0xb0}}, 0x40001090) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, 0x0) ioctl$NBD_DISCONNECT(r4, 0xab08) [ 1137.846590][T17849] block nbd2: shutting down sockets 23:39:47 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NBD_CMD_CONNECT(r0, 0x0, 0x0) 23:39:47 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x414203) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:47 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 23:39:47 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x3a3200) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x6, 0x7], 0x3, 0x800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<*\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002dbd7000fedbdf2502000000080004000000000008000c000000000008000c000100000008000400ffffffff080008000a010101"], 0x3c}, 0x1, 0x0, 0x0, 0xa62e173be472d5f7}, 0x400005c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) [ 1138.011133][T17865] block nbd3: shutting down sockets 23:39:47 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x3ff, 0x0, 0x9d], 0x3, 0x800, 0x0, 0xffffffffffffffff}) ioctl$NBD_DO_IT(r1, 0xab03) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) 23:39:47 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) accept4$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x80800) 23:39:47 executing program 3: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c10}, 0x20040004) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1138.085798][T17869] block nbd3: shutting down sockets 23:39:47 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 23:39:47 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NBD_CMD_CONNECT(r0, 0x0, 0x0) 23:39:47 executing program 4: getitimer(0x0, &(0x7f0000000000)) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) [ 1138.246371][T17882] block nbd2: shutting down sockets [ 1138.296041][T17882] block nbd2: shutting down sockets [ 1138.311509][T17887] block nbd3: shutting down sockets [ 1138.312614][T17884] block nbd5: shutting down sockets 23:39:47 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 23:39:47 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1138.362129][T17884] block nbd5: shutting down sockets [ 1138.376425][T17892] block nbd3: shutting down sockets 23:39:47 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 23:39:47 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0xc01, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001, 0x810, r3, 0x10000000) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 23:39:48 executing program 3: r0 = eventfd2(0x1, 0x80800) read$eventfd(r0, &(0x7f0000000140), 0x8) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x90f, 0xc0000000], 0x2, 0x800, 0x0, 0xffffffffffffffff}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000000)=r2, 0x1) ioctl$NBD_DISCONNECT(r2, 0xab08) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$I2C_RETRIES(r2, 0x701, 0x9) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) 23:39:48 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 23:39:48 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x28, 0x140f, 0x10, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'cma\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x4004804) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="002120003f1ef09982b1a4cbf7b14b40032a354fc16b4dc174791097fe2e3b8a54bfbfa7bcaf28aa494f1ac4467eab11265ac423e088d96380f2c157e7babb1f2c5d32a3837d4ca70d6ba39c27a2fe17a553ae16d9d960c8c460a548c4b319218bd546e1b360a7e5cf9657cc73744b1899", @ANYRESHEX=r3, @ANYBLOB="000127bd7000fddbdf25020000000c00030006000000000000000c0002000700000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:48 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) [ 1138.587152][T17901] block nbd2: shutting down sockets [ 1138.616735][T17901] block nbd2: shutting down sockets [ 1138.626362][T17907] block nbd3: shutting down sockets [ 1138.639357][T17906] block nbd5: shutting down sockets 23:39:48 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x48, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040) 23:39:48 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x10000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x51b800) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) mq_timedreceive(r1, &(0x7f0000000380)=""/237, 0xed, 0xfffffffffffffff7, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0xb0202, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1) ioctl$NBD_SET_SOCK(r0, 0xab00, r5) r7 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x82000148) inotify_rm_watch(r6, r7) [ 1138.695270][T17906] block nbd5: shutting down sockets [ 1138.712481][T17907] block nbd3: shutting down sockets [ 1138.726126][T17911] block nbd0: shutting down sockets [ 1138.766141][T17912] block nbd4: shutting down sockets 23:39:48 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x2], 0x1, 0x180800}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:48 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 23:39:48 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 23:39:48 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x150) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000000)=[r2, r3, 0xffffffffffffffff]}, 0x3) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:48 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 1138.888616][T17919] block nbd2: shutting down sockets [ 1138.926049][T17919] block nbd2: shutting down sockets 23:39:48 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x480) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:48 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 1138.966309][T17924] block nbd0: shutting down sockets [ 1138.987249][T17925] block nbd3: shutting down sockets [ 1139.003163][T17931] block nbd5: NBD_DISCONNECT 23:39:48 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x20401, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) [ 1139.025824][T17928] block nbd3: shutting down sockets 23:39:48 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 1139.096992][T17921] block nbd5: Disconnected due to user request. [ 1139.097212][T17929] block nbd4: shutting down sockets [ 1139.109668][T17921] block nbd5: shutting down sockets [ 1139.158297][T17931] block nbd5: NBD_DISCONNECT [ 1139.166044][T17935] block nbd2: shutting down sockets [ 1139.186832][T17936] block nbd0: shutting down sockets [ 1139.196354][T17937] block nbd2: shutting down sockets 23:39:48 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x9, 0x582f, 0x2, 0x800, 0xd, 0x3f, 0x8], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x2, 0x1, 0x100, 0x0, 0x8, 0x4], 0x6, 0x800}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x6) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 23:39:48 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x2, 0x0, 0x91], 0x3, 0x80800, 0x0, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) ioctl$NBD_DISCONNECT(r1, 0xab08) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000100)=0x1) [ 1139.246444][T17931] block nbd5: Disconnected due to user request. [ 1139.253184][T17931] block nbd5: shutting down sockets 23:39:48 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) 23:39:48 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000480)={@void, @val={0x1, 0x80, 0x9, 0x6, 0x3}, @mpls={[{0xfff, 0x0, 0x1}, {0x28a3}, {0xee3}, {0x0, 0x0, 0x1}], @ipv4=@icmp={{0x32, 0x4, 0x2, 0x6, 0x199, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3c}, {[@generic={0x89, 0x2}, @cipso={0x86, 0x22, 0x0, [{0x7, 0x4, "b6fa"}, {0x6, 0x11, "37940722cab29af819f82d92d22f71"}, {0x7, 0x7, "57a7fa275b"}]}, @rr={0x7, 0x3, 0xc1}, @generic={0x83, 0xb, "ce9e28078cdcb6ff37"}, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0xa2, [@multicast2, @remote]}, @rr={0x7, 0xb, 0xc5, [@remote, @rand_addr=0x64010100]}, @lsrr={0x83, 0x1f, 0x17, [@local, @broadcast, @empty, @rand_addr=0x64010100, @remote, @multicast1, @loopback]}, @timestamp_addr={0x44, 0x14, 0x26, 0x1, 0x3, [{@broadcast, 0x8001}, {@broadcast, 0xfffff2e5}]}, @timestamp_prespec={0x44, 0x34, 0x2d, 0x3, 0x7, [{@loopback, 0xffffffff}, {@loopback, 0x7}, {@multicast1, 0x4}, {@remote}, {@local, 0x7}, {@rand_addr=0x64010102, 0xbf05}]}]}}, @echo={0x8, 0x0, 0x0, 0x9, 0x5, "b961495929d1cc894735fe1a9201277d91de01fa46a433077dceedc2ba3c96100975cfd043485c58794663a56d9b8621bc8ae3262aa3e3fc54434279403ae56e57533c127f08bffabda8ebfdd1e260f6c25796f7f567eb4061bc2b099fbfee4408704cc9c6b7c12d0f8196004725f4c2a0baee7f7cd001493ebe5847b3ee71e9ecccdfa3d8910b74e555c71251b16419654864b48f3bd2ec49e7979a972cb5c9c6d684bc1d09f10951f6afd8f5b78054370c3144b62b703aed3e5a8dd9f1644511dd30678c4e46b643"}}}}, 0x1b3) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d00)={'wpan4\x00', 0x0}) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x801) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r2) sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xc4, r6, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xa8, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2fa3fc93}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47f5be44}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a8e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x446ab600}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7122abd6}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdc34}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c1e4268}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe652}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x615b6ecd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdcd4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf880}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c9fea28}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbbd3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6bd}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7165}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37205af6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65ef82a}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:48 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 23:39:48 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0xffffffffffff8001) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) 23:39:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 1139.467316][T17949] block nbd2: shutting down sockets 23:39:49 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x10000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x51b800) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) mq_timedreceive(r1, &(0x7f0000000380)=""/237, 0xed, 0xfffffffffffffff7, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0xb0202, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1) ioctl$NBD_SET_SOCK(r0, 0xab00, r5) r7 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x82000148) inotify_rm_watch(r6, r7) [ 1139.536155][T17950] block nbd2: shutting down sockets 23:39:49 executing program 2: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x40, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008801}, 0x4000800) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) 23:39:49 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xfbb66cfcfefafc68) 23:39:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 1139.626615][T17953] block nbd3: shutting down sockets 23:39:49 executing program 3: socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000080)=""/242, &(0x7f0000000000)=0xf2) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x3, &(0x7f00000001c0)="fa99e85f80d9fdcc7f548c1db5f22c26b1cfd533", 0x14) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x2710}, 0x10) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffff1b8b) write$char_usb(r1, &(0x7f0000000200)="0cbffee9e9c5ca7284ff4161631324351b34544b179a5af1766e4bc82872b674cef00e575fb9c6b9e28d191c31a84a610cf05c6b6f3b1f017eadbad13a2127eb6d906056b676883816ab462d31409ac36c22782a43726061e05d33d87c55e98db1451ac32a94b98da6ea3f731fbc272f832ae53f81003c119c66637bd82e3536f54afc250ed61042f41cb20d7587f541cea53a8240ab9753c54019f67df394797d2c811d39d26251f377aeb902bdf773b53d9fc711059a60b43743c4729ffeb9dbbd1e9ece4a4fbc8fc4d24e996f7d8a5848a72ad2fa284a772649b7e67a6a5a97f2f02cdb89f0a500"/255, 0xff) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x400000) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f0000000340)) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x195600) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) [ 1139.681420][T17970] block nbd0: NBD_DISCONNECT [ 1139.685898][T17959] block nbd3: shutting down sockets [ 1139.716471][T17951] block nbd4: shutting down sockets 23:39:49 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7fff], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000000140)=""/147) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1139.777173][T17969] block nbd2: shutting down sockets [ 1139.783945][T17967] block nbd0: Disconnected due to user request. [ 1139.810727][T17967] block nbd0: shutting down sockets 23:39:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 1139.846172][T17969] block nbd2: shutting down sockets [ 1139.852157][T17973] block nbd5: shutting down sockets 23:39:49 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x10000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x51b800) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) mq_timedreceive(r1, &(0x7f0000000380)=""/237, 0xed, 0xfffffffffffffff7, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0xb0202, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1) ioctl$NBD_SET_SOCK(r0, 0xab00, r5) r7 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x82000148) inotify_rm_watch(r6, r7) 23:39:49 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x208882) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req={0x80800002, 0x10000, 0x7fff, 0x6}, 0x10) accept4$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80400) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:49 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) [ 1139.916904][T17973] block nbd5: shutting down sockets 23:39:49 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 1140.007936][T17981] block nbd4: shutting down sockets [ 1140.055840][T17990] block nbd0: NBD_DISCONNECT [ 1140.066382][T17981] block nbd4: shutting down sockets 23:39:49 executing program 4: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = io_uring_setup(0xdb1, &(0x7f0000000100)={0x0, 0x581c, 0x0, 0x1, 0x105, 0x0, r0}) r2 = syz_io_uring_setup(0x2609, &(0x7f0000000180)={0x0, 0xeb3, 0x10, 0x1, 0xf8, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000280)={0xb05a, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2]}, 0x2) read$char_usb(r0, 0x0, 0x0) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) [ 1140.096226][T17988] block nbd2: shutting down sockets [ 1140.127253][T17987] block nbd0: Disconnected due to user request. [ 1140.136946][T17991] block nbd2: shutting down sockets [ 1140.165839][T17987] block nbd0: shutting down sockets [ 1140.177134][T17993] block nbd5: shutting down sockets 23:39:49 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x0) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) [ 1140.216322][T17992] block nbd3: shutting down sockets 23:39:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 23:39:49 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x10000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x51b800) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) mq_timedreceive(r1, &(0x7f0000000380)=""/237, 0xed, 0xfffffffffffffff7, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0xb0202, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1) ioctl$NBD_SET_SOCK(r0, 0xab00, r5) r7 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x82000148) inotify_rm_watch(r6, r7) [ 1140.245876][T17998] block nbd5: shutting down sockets [ 1140.247260][T17992] block nbd3: shutting down sockets 23:39:49 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x4100, 0x0) 23:39:49 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000400)={&(0x7f0000000280)=[0x8, 0xc84f82f], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, 0x0, 0x300, 0x7, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r3}, {0x8, 0x1, r2}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x74}}, 0x20004080) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, 0x0) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r7, 0x80585414, 0x0) io_uring_setup(0x3306, &(0x7f0000000040)={0x0, 0xd7c9, 0x32, 0x1, 0x257, 0x0, r7}) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, 0x0, 0x3283fce5c9094317, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1f}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r4}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x11) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x10000, 0x1f, 0x9, 0x2, 0x2, 0x1f, 0x76db, 0x827, 0x1, 0x5], 0xa, 0x1000, 0x0, 0xffffffffffffffff}) write$cgroup_type(r8, &(0x7f0000000200), 0x9) 23:39:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 1140.416311][T17999] block nbd4: shutting down sockets [ 1140.437514][T18008] block nbd0: NBD_DISCONNECT [ 1140.443351][T18002] block nbd2: shutting down sockets 23:39:50 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) [ 1140.509856][T18005] block nbd5: shutting down sockets [ 1140.535899][T18003] block nbd0: Disconnected due to user request. [ 1140.536755][T18002] block nbd2: shutting down sockets [ 1140.544777][T18003] block nbd0: shutting down sockets [ 1140.563275][T18007] block nbd3: shutting down sockets 23:39:50 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x35d5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:50 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x10000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x51b800) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) mq_timedreceive(r1, &(0x7f0000000380)=""/237, 0xed, 0xfffffffffffffff7, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0xb0202, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1) ioctl$NBD_SET_SOCK(r0, 0xab00, r5) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x82000148) 23:39:50 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) ioctl$NBD_DISCONNECT(r1, 0xab08) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) 23:39:50 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1140.606732][T18007] block nbd3: shutting down sockets [ 1140.636121][T18016] block nbd5: shutting down sockets 23:39:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x1}, 0x14}}, 0x0) 23:39:50 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) ioctl$NBD_CLEAR_QUE(r2, 0xab05) [ 1140.792508][T18027] block nbd0: NBD_DISCONNECT [ 1140.872492][T18022] block nbd5: shutting down sockets [ 1140.879039][T18020] block nbd2: shutting down sockets [ 1140.896266][T18024] block nbd0: Disconnected due to user request. [ 1140.902935][T18024] block nbd0: shutting down sockets 23:39:50 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7f, 0xe9], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000340)={0x10000, 0x8, 0x5, 0x7, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x3) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) 23:39:50 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x10000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x51b800) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) mq_timedreceive(r1, &(0x7f0000000380)=""/237, 0xed, 0xfffffffffffffff7, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0xb0202, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1) ioctl$NBD_SET_SOCK(r0, 0xab00, r5) [ 1140.926906][T18021] block nbd3: shutting down sockets [ 1140.966314][T18037] nbd: must specify at least one socket [ 1140.985918][T18036] block nbd5: shutting down sockets 23:39:50 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) ioctl$NBD_DISCONNECT(r1, 0xab08) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) 23:39:50 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1141.007822][T18032] block nbd4: shutting down sockets 23:39:50 executing program 5: syz_emit_ethernet(0x16, &(0x7f0000000040)={@random="df2bf0d85654", @broadcast, @val={@val={0x9100, 0x1, 0x0, 0x4}, {0x8100, 0x3, 0x1, 0x1}}, {@generic={0x6000}}}, &(0x7f0000000080)={0x0, 0x1, [0xd0a, 0x418, 0x11, 0xb1]}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6}, 0x10) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x32e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) [ 1141.074754][T18032] block nbd4: shutting down sockets 23:39:50 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = eventfd2(0x9, 0x0) read$eventfd(r2, &(0x7f0000000300), 0x8) read$eventfd(r1, &(0x7f0000000040), 0x8) write$eventfd(r2, &(0x7f0000000000)=0x7ff, 0x8) [ 1141.127351][T18046] block nbd0: NBD_DISCONNECT [ 1141.166224][T18040] block nbd2: shutting down sockets [ 1141.228150][T18041] block nbd0: Disconnected due to user request. [ 1141.234677][T18041] block nbd0: shutting down sockets [ 1141.256185][T18047] block nbd3: shutting down sockets [ 1141.266018][T18040] block nbd2: shutting down sockets [ 1141.267038][T18044] block nbd1: shutting down sockets 23:39:50 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x785a81) ioctl$NBD_SET_SOCK(r3, 0xab00, r1) [ 1141.271540][T18048] block nbd5: shutting down sockets 23:39:50 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x10000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x51b800) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) mq_timedreceive(r1, &(0x7f0000000380)=""/237, 0xed, 0xfffffffffffffff7, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0xb0202, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x54a1) 23:39:50 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:50 executing program 1: syz_emit_ethernet(0x16, &(0x7f0000000040)={@random="df2bf0d85654", @broadcast, @val={@val={0x9100, 0x1, 0x0, 0x4}, {0x8100, 0x3, 0x1, 0x1}}, {@generic={0x6000}}}, &(0x7f0000000080)={0x0, 0x1, [0xd0a, 0x418, 0x11, 0xb1]}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6}, 0x10) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x32e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) 23:39:50 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1141.327197][T18047] block nbd3: shutting down sockets 23:39:51 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x10000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x51b800) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) mq_timedreceive(r1, &(0x7f0000000380)=""/237, 0xed, 0xfffffffffffffff7, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0xb0202, 0x0) [ 1141.438571][T18064] block nbd0: NBD_DISCONNECT 23:39:51 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000040)={0x3, 0x1, 0x100, 0x2, 0xfff}) [ 1141.536601][T18062] block nbd5: shutting down sockets [ 1141.546937][T18063] block nbd1: shutting down sockets [ 1141.576088][T18065] block nbd3: shutting down sockets [ 1141.577362][T18075] block nbd0: NBD_DISCONNECT 23:39:51 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7f, 0xe9], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000340)={0x10000, 0x8, 0x5, 0x7, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x3) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) 23:39:51 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x10) [ 1141.616255][T18067] block nbd5: shutting down sockets [ 1141.635889][T18069] block nbd3: shutting down sockets 23:39:51 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x10000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x51b800) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) mq_timedreceive(r1, &(0x7f0000000380)=""/237, 0xed, 0xfffffffffffffff7, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) 23:39:51 executing program 3: sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x28}}, 0x4010) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1141.757442][T18080] block nbd5: shutting down sockets [ 1141.763722][T18077] block nbd2: shutting down sockets [ 1141.798355][T18086] block nbd0: NBD_DISCONNECT [ 1141.807300][T18078] block nbd1: shutting down sockets [ 1141.860267][T14967] block nbd2: shutting down sockets [ 1141.891502][T14952] block nbd5: shutting down sockets [ 1141.935017][T18084] block nbd3: shutting down sockets [ 1141.986017][T18084] block nbd3: shutting down sockets [ 1142.092774][T18054] block nbd4: shutting down sockets 23:39:51 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:51 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x10000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x51b800) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) mq_timedreceive(r1, &(0x7f0000000380)=""/237, 0xed, 0xfffffffffffffff7, &(0x7f0000000000)) 23:39:51 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 23:39:51 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x115600) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x9) syz_open_dev$char_usb(0xc, 0xb4, 0x401) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 23:39:51 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x101c80, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:51 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r3, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x936}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x20000004) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1142.139993][T18054] block nbd4: shutting down sockets [ 1142.288202][T18107] block nbd0: NBD_DISCONNECT 23:39:51 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x10a82) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:51 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = eventfd2(0x9, 0x0) read$eventfd(r2, &(0x7f0000000300), 0x8) read$eventfd(r1, &(0x7f0000000040), 0x8) write$eventfd(r2, &(0x7f0000000000)=0x7ff, 0x8) 23:39:51 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x10000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x51b800) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) [ 1142.346122][T18102] block nbd3: shutting down sockets 23:39:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0x5555555555540004}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}]}, 0x54}}, 0x4000000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000425bd7000ffdbdf2a2b0096df308e05020003aaaaaaaaaaaa"], 0x20}, 0x1, 0x0, 0x0, 0x80c1}, 0x4860) r5 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) 23:39:51 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40200) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) [ 1142.396230][T18110] block nbd3: shutting down sockets [ 1142.397086][T18103] block nbd4: shutting down sockets 23:39:52 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) 23:39:52 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x1d1c40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1142.486794][T18103] block nbd4: shutting down sockets [ 1142.539719][T18121] block nbd0: NBD_DISCONNECT 23:39:52 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x10000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x51b800) 23:39:52 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x349201) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = eventfd2(0x9, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000200)=r2, 0x1) ioctl$NBD_CLEAR_QUE(r3, 0xab05) read$eventfd(r2, &(0x7f0000000300), 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) read$eventfd(r2, &(0x7f0000000000), 0x8) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, 0x0) r6 = mq_open(&(0x7f0000000040)='/dev/dlm-monitor\x00', 0x2, 0x80, &(0x7f0000000080)={0x80000000, 0x7, 0xffffffffffffffbe, 0x2}) mq_getsetattr(r6, &(0x7f0000000140)={0x8, 0x9, 0x400, 0x1}, &(0x7f0000000180)) [ 1142.611451][T18120] block nbd3: shutting down sockets 23:39:52 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101000) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x54) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) [ 1142.678166][T18125] block nbd3: shutting down sockets [ 1142.684101][T18117] block nbd5: shutting down sockets [ 1142.702855][T18124] block nbd2: shutting down sockets [ 1142.756540][T18129] block nbd5: shutting down sockets [ 1142.780087][T18124] block nbd2: shutting down sockets 23:39:52 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r0, 0x8, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x24000000) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) [ 1142.811812][T18139] block nbd0: NBD_DISCONNECT 23:39:52 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x44000) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x5) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:52 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x10000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) [ 1142.936758][T18140] block nbd3: shutting down sockets [ 1142.993458][T18152] block nbd0: NBD_DISCONNECT [ 1142.998168][T18140] block nbd3: shutting down sockets [ 1143.026506][T18145] block nbd5: shutting down sockets [ 1143.026555][T18146] block nbd2: shutting down sockets [ 1143.085869][T18145] block nbd5: shutting down sockets [ 1143.137261][T18146] block nbd2: shutting down sockets 23:39:52 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = eventfd2(0x9, 0x0) read$eventfd(r2, &(0x7f0000000300), 0x8) read$eventfd(r1, &(0x7f0000000040), 0x8) write$eventfd(r2, &(0x7f0000000000)=0x7ff, 0x8) 23:39:52 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x7) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200000) 23:39:52 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x10000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) 23:39:52 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) recvfrom$packet(r2, &(0x7f0000000000)=""/157, 0x9d, 0x120, &(0x7f0000000140)={0x11, 0xc, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) setsockopt$packet_buf(r2, 0x107, 0x5, &(0x7f0000000180)="29f3f8e9288f0d0e9dc450b3d56ee50e538d0a6852ec498ad40af0d19c43b981c38e85ac41951f2f0ed56ed6125bacff9b4b9ca5f097b758a9f7a5e50a4389d44fd8dd0801ffeb9a28a414b6cc2dc337ed5c6f631bdee83af51b432b06fc716f14ec0d8fff1848e6eeaf8ece81adaba0de484a17c77445e0e4bcb984961a4e95610d813011f3b8a370fbd4e9dc5beb07c80fb62a04942a6304cf693093b6e9ee0065d4d81b47b672c61e4b39869865a67330fbc0549910a5cd7b129555d02f4b13f704f6e9b40d42a27c5b908e89e7", 0xcf) getsockopt$packet_buf(r2, 0x107, 0x1, &(0x7f0000000280)=""/162, &(0x7f0000000340)=0xa2) 23:39:52 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa4, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7f}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r4}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1143.315715][T18116] block nbd1: shutting down sockets [ 1143.468836][T18168] block nbd0: NBD_DISCONNECT 23:39:53 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x10000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) [ 1143.490792][T18161] block nbd3: shutting down sockets [ 1143.506203][T18164] block nbd2: shutting down sockets [ 1143.507079][T18163] block nbd5: shutting down sockets 23:39:53 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 1143.576246][T18166] block nbd3: shutting down sockets [ 1143.581819][T18164] block nbd2: shutting down sockets [ 1143.595906][T18169] block nbd5: shutting down sockets [ 1143.684404][T18177] block nbd0: NBD_DISCONNECT 23:39:53 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:53 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:53 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 23:39:53 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x10000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) [ 1143.758526][T18179] block nbd3: shutting down sockets 23:39:53 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000008c0)={0xc, 0x0, &(0x7f0000000800)=[@exit_looper, @acquire={0x40046305, 0x3}], 0x1, 0x0, &(0x7f0000000840)="c6"}) r3 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0xffffffffffffee65) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x80, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/137, 0x89, 0x1, 0x40}, @flat=@binder={0x73622a85, 0x1100, 0x1}, @fda={0x66646185, 0x9, 0x1, 0x2e}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}, @increfs={0x40046304, 0x2}, @free_buffer={0x40086303, r3}, @release, @increfs_done={0x40106308, 0x2}, @register_looper], 0xde, 0x0, &(0x7f0000000280)="7c45482a0f148feafdde2e451c2448422a470c01e32c05f376b972b2fc30f42a84fd5aba1e194c2e64ee42f80244aca65efb8fadc1e2264e56a6c072770a9ccfbb187485f4d569abf2f0747d7d007e03bbcc38c26ad0fb5b99ed436026354be2e19407ba2d0762853ce7a591a24be17cc175b4e76ccc405830ad2bc69416b46bbcb9ae330d9e90370d66d4ec7642073859f6da69c665a49908ff390dd84e5576563956162f03c7379d4052a46cedeb57d24377cb1817486aa8c2753c9d6240fff6d8bb41a7d96631645404468c072e6a93c1863785cfe2837bbe3f31a483"}) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000ffdbdf2507000000080007000000000014000600fe80000000000000000000000000001d06000d2022000000"], 0x38}}, 0xc800) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1143.891418][T14915] block nbd3: shutting down sockets [ 1143.907748][T18188] block nbd0: NBD_DISCONNECT [ 1143.956231][T18183] block nbd5: shutting down sockets [ 1144.009112][T18186] block nbd4: shutting down sockets [ 1144.028180][T18184] block nbd2: shutting down sockets [ 1144.045733][T18189] block nbd5: shutting down sockets [ 1144.066458][T18190] block nbd3: shutting down sockets [ 1144.087421][T18186] block nbd4: shutting down sockets [ 1144.095890][T18196] block nbd3: shutting down sockets [ 1144.136811][T18184] block nbd2: shutting down sockets 23:39:53 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = eventfd2(0x9, 0x0) read$eventfd(r2, &(0x7f0000000300), 0x8) read$eventfd(r1, &(0x7f0000000040), 0x8) write$eventfd(r2, &(0x7f0000000000)=0x7ff, 0x8) 23:39:53 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x10000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) 23:39:53 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x5a6a2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x401, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000000c0)={0x1f0000, 0x0, &(0x7f0000000000)=[r0, r0, r0]}, 0x3) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:53 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:53 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x48, 0x1412, 0x407, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x48080}, 0x4) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) 23:39:53 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x9) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000840)=@req={0x2, 0x4, 0x1ff, 0x10000}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRESOCT=r3, @ANYBLOB="10002abd7000fedbdf25020000000c00000800010000000000", @ANYRES32=r4, @ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1c}, 0x24000000) [ 1144.303123][T18165] block nbd1: shutting down sockets [ 1144.448581][T18209] block nbd0: NBD_DISCONNECT 23:39:54 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x10000) 23:39:54 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000000)) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0xfffffbff, 0x0, 0x3, 0x6, 0x95b], 0x5}) [ 1144.489051][T18205] block nbd2: shutting down sockets [ 1144.568325][T18203] block nbd3: shutting down sockets [ 1144.571624][T18205] block nbd2: shutting down sockets [ 1144.576006][T18206] block nbd4: shutting down sockets 23:39:54 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) [ 1144.646135][T18203] block nbd3: shutting down sockets [ 1144.678501][T18225] block nbd0: NBD_DISCONNECT 23:39:54 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:54 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) [ 1144.706190][T18223] block nbd4: shutting down sockets [ 1144.712898][T18221] block nbd5: shutting down sockets 23:39:54 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x200041, 0x0) mq_timedsend(r2, &(0x7f0000000140)="25cd0ff6c0e2086b33b9e685a861e5b1ea5e9c6500d03cc098951e91e9b10bfd0dbf0b8b3d19db390b0b7f06262eadf9457f76139dc0e10d70a93498697fa9642c3bc72cdd35bad78073d330af660027a94cd06395c70177e6e904a4c2d0cc9ad0e9331df3f30f6e21564fa4923dbfbc08041403e93868cb29909e7dd60ba2b897f60bf0bbe2595055202e18e28d0d73e634de6678278e2f45778feb7dca315710c47351299ce0246e88976e12925e2c923c71fd877a68af5d841fe0fcf7088d898d3768b9d46445ddf4d991c85e53867322b6de3d6080f072e2f3aee77703a4", 0xe0, 0x847, &(0x7f0000000040)={0x0, 0x989680}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) mq_getsetattr(r2, &(0x7f0000000080)={0x1, 0x7, 0x8, 0x7}, &(0x7f0000000240)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1144.786080][T18227] block nbd5: shutting down sockets [ 1144.796266][T18228] block nbd2: shutting down sockets [ 1144.882727][T18236] block nbd0: NBD_DISCONNECT [ 1144.888017][T18228] block nbd2: shutting down sockets [ 1144.906069][T18231] block nbd3: shutting down sockets [ 1144.966054][T18231] block nbd3: shutting down sockets [ 1144.977143][T18234] block nbd4: shutting down sockets [ 1145.057589][T18234] block nbd4: shutting down sockets 23:39:54 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = eventfd2(0x9, 0x0) read$eventfd(r2, &(0x7f0000000300), 0x8) read$eventfd(r1, &(0x7f0000000040), 0x8) 23:39:54 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) write$cgroup_type(r2, &(0x7f0000000040), 0x9) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40000) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x401, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/crypto\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r8, 0x80585414, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, r4, 0xe3330f3058d868b0, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r5}, {0x8, 0x1, r1}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c001}, 0x4000010) 23:39:54 executing program 2: ioctl$I2C_TIMEOUT(0xffffffffffffffff, 0x702, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x25100, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000000c0)={0x0, 0x8, 0x6, &(0x7f0000000080)={0x1b, "e69d5a719c84373b9b26caab1f5ad37a93ebca86c413f6ae5c8af65afbed817b14"}}) ioctl$I2C_TENBIT(r1, 0x704, 0x0) 23:39:54 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) 23:39:54 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x1, 0x20, 0x1aa1, 0x6956, 0x0], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000080)=""/54) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:54 executing program 4: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40000000) inotify_rm_watch(r0, r1) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) [ 1145.370775][T18210] block nbd1: shutting down sockets 23:39:55 executing program 3: getitimer(0x0, &(0x7f0000000080)) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x10010, r0, 0x10000000) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x81, 0x0, &(0x7f0000000000)=[r2, r3]}, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) [ 1145.528789][T18257] block nbd0: NBD_DISCONNECT 23:39:55 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x2}, 0x4) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) syz_open_dev$I2C(&(0x7f0000000000), 0xfffffffffffff704, 0x331200) 23:39:55 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) [ 1145.564002][T18246] block nbd5: shutting down sockets [ 1145.565999][T18250] block nbd4: shutting down sockets 23:39:55 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) [ 1145.616421][T18259] block nbd3: shutting down sockets 23:39:55 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_QUE(r0, 0xab05) [ 1145.664258][T18246] block nbd5: shutting down sockets 23:39:55 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r3, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xd0}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xa}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x19}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004810}, 0x20008054) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1145.768578][T18273] block nbd0: NBD_DISCONNECT [ 1145.796249][T18267] block nbd4: shutting down sockets [ 1145.806551][T18268] block nbd2: shutting down sockets [ 1145.852893][T18274] block nbd5: shutting down sockets [ 1145.866215][T18272] block nbd2: shutting down sockets [ 1145.871655][T18271] block nbd4: shutting down sockets [ 1145.916125][T18274] block nbd5: shutting down sockets [ 1145.958582][T18275] block nbd3: shutting down sockets [ 1146.039961][T18275] block nbd3: shutting down sockets 23:39:55 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) eventfd2(0x9, 0x0) read$eventfd(r1, &(0x7f0000000040), 0x8) 23:39:55 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) 23:39:55 executing program 4: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4282008}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x89}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4048010) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x1410, 0x200, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x480c4}, 0x1) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="23e82386aaf4c860f2e580d5e44a2250e8805ef2aa80a9ea80d66b6cc6ca90552d1e33cd3ced2dc7afb2eb02215f4fce62ca62423f720b2c96d477366e3d21b43b7d42255e45a7b0fb1ed911c94a7e34039abc949d92f3d0fa08f7ceae1a30cf52d38fca2fb3329f42822d92d5029805ec789772b6397e7f02e9b2ffa521de994d01013efcf73485234f266794cba60cd10581a8567982e78f42959fa851e27012dfd06633dfda2ec8ef4b5ce7db3b0c1264eb55a071000e6d2626e580fd2b04066aff02d9143965a603752f312f1bcb993cfc44a9945def3e8135e45a47118b50d4172ccde0a49ea7aefb8f95206c7052dcb9b07574604012de0c74775f4b", @ANYBLOB="0100000000fffffffa000500000008000c000000000014000500fe8000000000000000000000000000aa057548950001007d000000"], 0x38}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fbdbdf250500000008000c000200000008000c0000000000dc65d5e302648a527973fad7ce49e22e8ab131579bdc003980a5429044cff172d32121844250ca85c74fd231f239e26c44b31cd9452aee076dee896da815084acea0ae50bf4a53f21bf0ff42a7bd5a5ed2735fbb113361bba6e272356e8e001c8b57c0f894b706b761f6332a003c8955f3f1bf78409ca6dc2ee18e89318bdebe3d143c238d9e2fb1e31733745df9c6d55b0feafa1e0c372236a46e93663b6acc37ce416403000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x2008815) 23:39:55 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x30, 0x140d, 0x2, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048800}, 0x800) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 23:39:55 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40002}, 0x4) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:55 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 1146.331123][T18251] block nbd1: shutting down sockets 23:39:56 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000000)) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:56 executing program 0: ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) [ 1146.457644][T18308] block nbd0: NBD_DISCONNECT [ 1146.495364][T18301] block nbd2: shutting down sockets [ 1146.526132][T18300] block nbd5: shutting down sockets 23:39:56 executing program 0: ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) [ 1146.573412][T18305] block nbd2: shutting down sockets [ 1146.579096][T18310] block nbd5: shutting down sockets 23:39:56 executing program 0: ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) 23:39:56 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) 23:39:56 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x2883, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) [ 1146.685983][T18319] block nbd4: shutting down sockets [ 1146.858221][T18330] block nbd5: shutting down sockets [ 1146.926475][T18330] block nbd5: shutting down sockets 23:39:56 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) read$eventfd(r1, &(0x7f0000000040), 0x8) 23:39:56 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x282100, 0x0) getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000080), &(0x7f0000000140)=0x4) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x9) 23:39:56 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) 23:39:56 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x636702, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r0) 23:39:56 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400242) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1147.256266][T18303] block nbd1: shutting down sockets [ 1147.282896][ T8445] block nbd3: Receive control failed (result -32) [ 1147.346507][T18341] block nbd3: Device being setup by another task [ 1147.364920][T18341] block nbd3: shutting down sockets 23:39:56 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) 23:39:56 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) 23:39:56 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x54, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100000000}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r1}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xa}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000000}, 0x1) 23:39:56 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x5], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) read$rfkill(r2, &(0x7f0000000140), 0x8) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x80000001) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1147.461529][T18340] block nbd2: shutting down sockets 23:39:57 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x82200) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) 23:39:57 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) [ 1147.534698][T18340] block nbd2: shutting down sockets 23:39:57 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) [ 1147.579036][T18354] block nbd5: shutting down sockets [ 1147.617264][T18357] block nbd3: shutting down sockets [ 1147.637308][T18354] block nbd5: shutting down sockets [ 1147.665867][T18363] block nbd3: shutting down sockets [ 1147.756244][T18369] block nbd2: shutting down sockets [ 1147.836009][T18369] block nbd2: shutting down sockets 23:39:57 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) read$eventfd(r0, &(0x7f0000000040), 0x8) 23:39:57 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0xba1a632862fa0e77, 0x0) ioctl$NBD_DISCONNECT(r2, 0xab08) 23:39:57 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:57 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20000) ioctl$NBD_SET_SIZE(r2, 0xab02, 0x5) 23:39:57 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) 23:39:57 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x10000) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000428bd7000fedbdf25050000000c00060004000000000000000c000600010000000000a1821c6415afed6d47a8ec17d7000008000100000000008c00050002000000000000000c0003008e00000000000000bc872a6490daaaa479abaeef0b2c501f57127072f5793f3ff5da3147994235b556852cd0d8f53947f3c5a13a67c62cffaaec8fd273f045caa9f8dc39279e4cbe04ec487d"], 0x4c}, 0x1, 0x0, 0x0, 0x24008040}, 0x1) [ 1148.226637][T18347] block nbd1: shutting down sockets [ 1148.328252][T18386] block nbd3: shutting down sockets 23:39:57 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) [ 1148.377637][T18385] block nbd4: shutting down sockets [ 1148.396247][T18384] block nbd5: shutting down sockets [ 1148.401104][T18386] block nbd3: shutting down sockets 23:39:58 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) 23:39:58 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x3) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x9, 0x8000, 0x40], 0x3, 0x800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) [ 1148.436252][T18385] block nbd4: shutting down sockets [ 1148.446192][T18384] block nbd5: shutting down sockets 23:39:58 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x10000) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000428bd7000fedbdf25050000000c00060004000000000000000c000600010000000000a1821c6415afed6d47a8ec17d7000008000100000000008c00050002000000000000000c0003008e00000000000000bc872a6490daaaa479abaeef0b2c501f57127072f5793f3ff5da3147994235b556852cd0d8f53947f3c5a13a67c62cffaaec8fd273f045caa9f8dc39279e4cbe04ec487d"], 0x4c}, 0x1, 0x0, 0x0, 0x24008040}, 0x1) 23:39:58 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x40) 23:39:58 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1148.686083][T18413] block nbd4: shutting down sockets [ 1148.741416][T18414] block nbd5: shutting down sockets [ 1148.767381][T18417] block nbd4: shutting down sockets [ 1148.807212][T18414] block nbd5: shutting down sockets 23:39:58 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) 23:39:58 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2440) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:58 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:58 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x82200) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) 23:39:58 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:58 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4200) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0xffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) [ 1149.321911][T18441] block nbd2: shutting down sockets [ 1149.341523][T18442] block nbd3: shutting down sockets 23:39:58 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x40) 23:39:58 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) [ 1149.366131][T18440] block nbd4: shutting down sockets [ 1149.371843][T18443] block nbd5: shutting down sockets [ 1149.396844][T18445] block nbd2: shutting down sockets [ 1149.402383][T18442] block nbd3: shutting down sockets 23:39:59 executing program 3: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x400) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) 23:39:59 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x143) ioctl$NBD_CLEAR_QUE(r1, 0xab05) [ 1149.447705][T18449] block nbd4: shutting down sockets [ 1149.453189][T18443] block nbd5: shutting down sockets 23:39:59 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000180)=0x100) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000200)=""/229) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) syz_io_uring_setup(0x7023, &(0x7f0000000300)={0x0, 0xdad8, 0x10, 0x2, 0x1, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) 23:39:59 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x80000) setsockopt$packet_buf(r2, 0x107, 0xd, &(0x7f0000000140)="04af301ed7debc86872cab7de295e1081995ed929891f8977e4f9ba18cd9718faa14efe9f144a6896912995bf9de1e5922189a69a2f24fd1d9559b9e13ee6aeeae12e0dbef8c0172b72b7744260030ffc151f6c63adeeecd2e44c46dd881cf5d9c13c7da18a3acd47b420f95d62987eab58379d40cb20ce9ffb9943d523a664a5a9dd066e2b90c9365f4373c075c9e4fbf721c595754debddf160ba507c29f77eb16b76d8b22c79f8a", 0xa9) 23:39:59 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) [ 1149.641721][T18457] block nbd3: shutting down sockets [ 1149.642691][T18455] block nbd0: shutting down sockets [ 1149.676223][T18461] block nbd5: shutting down sockets 23:39:59 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:59 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x7) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mlockall(0x1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x8a00, 0x0) ioctl$NBD_DISCONNECT(r2, 0xab08) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x6) [ 1149.706171][T18457] block nbd3: shutting down sockets [ 1149.723181][T18464] block nbd4: shutting down sockets 23:39:59 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x8, 0x8fe, 0x1, 0x4, 0x9], 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xdb) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x6) 23:39:59 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1149.776458][T18464] block nbd4: shutting down sockets 23:39:59 executing program 4: socket$vsock_stream(0x28, 0x1, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = syz_open_dev$binderN(&(0x7f00000007c0), 0x0, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000008c0)={0xc, 0x0, &(0x7f0000000800)=[@exit_looper, @acquire={0x40046305, 0x3}], 0x1, 0x0, &(0x7f0000000840)="c6"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x2}], 0x59, 0x0, &(0x7f0000000040)="c350be5da19740b67d7957761e1daec245c03d2d6638137cd23c5816ef6a253e091cb061712c48928f3389fb98df7c639700253a99b9ae4430d020b759b7ccf6855e488c18014fd839307be30cb01ea9d813bc69e15ed5afef"}) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) inotify_add_watch(r3, &(0x7f00000001c0)='./file0\x00', 0x62000219) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:39:59 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) read$eventfd(r0, &(0x7f0000000040), 0x8) 23:39:59 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 1149.936925][T18474] block nbd0: shutting down sockets [ 1149.981442][T18477] block nbd3: shutting down sockets [ 1150.009135][T18485] binder: 18480:18485 ioctl c0306201 20000140 returned -11 [ 1150.019036][T18479] block nbd5: shutting down sockets [ 1150.056812][T18482] block nbd3: shutting down sockets [ 1150.076526][T18480] block nbd4: shutting down sockets [ 1150.082152][T18479] block nbd5: shutting down sockets 23:39:59 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xffffffffffffff60) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 1150.100204][T18485] binder: 18480:18485 ioctl c0306201 20000140 returned -11 23:39:59 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x70, r3, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1f}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3800000000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x840) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x1) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) ioctl$NBD_DO_IT(r4, 0xab03) 23:39:59 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x402440) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d00)={'wpan4\x00'}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x44, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004c095}, 0x4040) [ 1150.154648][T18480] block nbd4: shutting down sockets 23:39:59 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) r3 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x41000108) inotify_rm_watch(r2, r3) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f0000000040)) [ 1150.232906][T18500] nbd: must specify at least one socket 23:39:59 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000240)={0x1, 0x7f, 0x5, &(0x7f0000000200)={0x1e, "4937382c8c1b663c477731e290abeaa230243c9521dbf55c54cba6d3ca1a60f78a"}}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x90, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10a}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5e0220c614663ded}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x3e40831827a48b6e}, 0x40000a5) r4 = eventfd(0x6) read$eventfd(r4, &(0x7f0000000300), 0x8) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000280)) [ 1150.376242][T18498] block nbd3: shutting down sockets [ 1150.388711][T18510] block nbd5: shutting down sockets 23:40:00 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x6) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1150.447634][T18498] block nbd3: shutting down sockets [ 1150.476861][T18515] block nbd5: shutting down sockets [ 1150.591134][T18517] block nbd4: shutting down sockets [ 1150.615777][T18476] block nbd2: shutting down sockets [ 1150.637771][T18519] block nbd3: shutting down sockets [ 1150.673161][T18517] block nbd4: shutting down sockets [ 1150.705986][T18522] block nbd3: shutting down sockets [ 1150.712422][T18476] block nbd2: shutting down sockets 23:40:00 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) 23:40:00 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x400000) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0x8000000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000140)=[@register_looper, @enter_looper, @enter_looper], 0x5f, 0x0, &(0x7f0000000180)="73b656e333672913b792ac17b5d7e9397f279f0c5f4f30287f01201418d81991ec80601e3508b7ed5bda0cf26f85d359bbfd6cda86137846937c015f698a34560985b4a03dc8ea8c1de497a38b78943180b22823327e69caacd268224b0dc0"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:40:00 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) ioctl$I2C_RETRIES(r2, 0x701, 0x2) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x100080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x6, 0x7fff, 0x7, 0x7, 0x47ac, 0x8, 0x7fffffff, 0x6, 0x0, 0x343], 0xa, 0x800, 0x0, 0xffffffffffffffff}) ioctl$NBD_DO_IT(r4, 0xab03) ioctl$NBD_SET_SOCK(r3, 0xab00, r1) 23:40:00 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x28080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:40:00 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) [ 1150.981234][ T8445] block nbd0: Receive control failed (result -32) [ 1150.989527][T18494] block nbd0: shutting down sockets 23:40:00 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 1151.067064][T18534] block nbd2: shutting down sockets [ 1151.105952][T18530] block nbd5: shutting down sockets 23:40:00 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) [ 1151.116739][T18532] block nbd4: shutting down sockets [ 1151.122504][T18531] block nbd3: shutting down sockets [ 1151.125869][T18534] block nbd2: shutting down sockets 23:40:00 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r4}, {0x8, 0x1, r5}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x800}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x68b9}]}, 0x84}, 0x1, 0x0, 0x0, 0x20040084}, 0x44000) [ 1151.165862][T18537] block nbd4: shutting down sockets [ 1151.171840][T18531] block nbd3: shutting down sockets [ 1151.177177][T18530] block nbd5: shutting down sockets 23:40:00 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4880) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2000) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x15c000) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, 0x0) ioctl$NBD_DISCONNECT(r3, 0xab08) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:40:00 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e, 0x7, &(0x7f0000000140)={r1, r2+10000000}) ioctl$NBD_DO_IT(r0, 0xab03) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x4c4000, 0x0) ioctl$NBD_CLEAR_QUE(r3, 0xab05) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r4) 23:40:00 executing program 5: mq_timedreceive(0xffffffffffffffff, &(0x7f0000000140)=""/4096, 0x1000, 0x7, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:40:00 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) [ 1151.326699][T18550] block nbd4: shutting down sockets [ 1151.366027][T18550] block nbd4: shutting down sockets [ 1151.410668][T18553] block nbd5: shutting down sockets [ 1151.433613][T18546] block nbd2: shutting down sockets [ 1151.446874][T18554] block nbd3: shutting down sockets 23:40:01 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) 23:40:01 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) ioctl$NBD_SET_SIZE(r2, 0xab02, 0x5) [ 1151.465845][T18555] block nbd5: shutting down sockets 23:40:01 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000000d1400022dbd7000fcdbdf25100003000100000008003e000500000008003e000300000008000100020000001fbdb924309fda8bd8578e424a67b2c5945dcac297912656f1ae190a593a89bdd3fa776a3bd12c8dea2cd79c8a962d5220201b36e4e747a4b5908a97e24a6e95e5002beb867832b3d9e26d"], 0x30}, 0x1, 0x0, 0x0, 0x44001}, 0x400c095) [ 1151.492441][T18546] block nbd2: shutting down sockets [ 1151.506165][T18557] block nbd3: shutting down sockets 23:40:01 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:40:01 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x4000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1151.637483][T18562] block nbd4: shutting down sockets [ 1151.723267][T18562] block nbd4: shutting down sockets [ 1151.741656][T18569] block nbd2: shutting down sockets [ 1151.785820][T18573] block nbd2: shutting down sockets [ 1151.809468][T18568] block nbd3: shutting down sockets [ 1152.057521][ T8445] block nbd0: Receive control failed (result -32) [ 1152.057807][T18545] block nbd0: shutting down sockets 23:40:01 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 23:40:01 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) 23:40:01 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000000)) 23:40:01 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) ioctl$NBD_DISCONNECT(r1, 0xab08) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) 23:40:01 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 23:40:01 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:40:01 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) [ 1152.290845][T18588] block nbd3: shutting down sockets [ 1152.326369][T18589] block nbd2: shutting down sockets 23:40:01 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1152.341899][T18585] block nbd5: shutting down sockets [ 1152.366365][T18587] block nbd4: shutting down sockets 23:40:01 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) read$eventfd(r0, 0x0, 0x0) [ 1152.387266][T18589] block nbd2: shutting down sockets 23:40:02 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0x9, 0x8) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1152.416741][T18502] block nbd3: shutting down sockets [ 1152.425991][T18596] block nbd5: shutting down sockets [ 1152.445810][T18595] block nbd4: shutting down sockets 23:40:02 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x7}, 0x4) 23:40:02 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x30b500) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x400) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x100, 0x5, 0x9], 0x3, 0x0, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000140), r2) [ 1152.537174][T18605] block nbd3: shutting down sockets [ 1152.605885][T18605] block nbd3: shutting down sockets [ 1152.646746][T18608] block nbd5: shutting down sockets [ 1152.706030][T18612] block nbd5: shutting down sockets [ 1152.712040][T18610] block nbd2: shutting down sockets [ 1152.782098][T18610] block nbd2: shutting down sockets 23:40:02 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_DO_IT(r0, 0xab03) 23:40:02 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) read$eventfd(r0, 0x0, 0x0) 23:40:02 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x5c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3800000000}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8020}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xaa7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x8871) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:40:02 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x2c, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xd5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) 23:40:02 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x80000001) 23:40:02 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_DISCONNECT(r0, 0xab08) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x4], 0x1, 0x80000, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, &(0x7f0000000140)={r4}) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) [ 1153.105530][ T8445] block nbd0: Receive control failed (result -32) [ 1153.113448][T18593] block nbd0: shutting down sockets 23:40:02 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1153.169505][T18628] block nbd2: NBD_DISCONNECT [ 1153.186001][T18629] block nbd2: NBD_DISCONNECT 23:40:02 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) read$eventfd(r0, 0x0, 0x0) 23:40:02 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_DO_IT(r0, 0xab03) [ 1153.280720][T18624] block nbd3: shutting down sockets [ 1153.296544][T18625] block nbd4: shutting down sockets [ 1153.312857][T18626] block nbd5: shutting down sockets [ 1153.356705][T18625] block nbd4: shutting down sockets [ 1153.365914][T18631] block nbd3: shutting down sockets [ 1153.396431][T18633] block nbd5: shutting down sockets 23:40:02 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:40:02 executing program 4: ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000000)=0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x805) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) [ 1153.407170][T18632] block nbd2: shutting down sockets 23:40:03 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) read$eventfd(r0, 0x0, 0x0) 23:40:03 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20008084) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:40:03 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x501000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) ioctl$NBD_DO_IT(r2, 0xab03) [ 1153.466838][T18632] block nbd2: shutting down sockets 23:40:03 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$NBD_DO_IT(r0, 0xab03) [ 1153.607067][T18646] block nbd3: shutting down sockets [ 1153.636106][T18650] block nbd5: shutting down sockets 23:40:03 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) read$eventfd(r0, 0x0, 0x0) 23:40:03 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) [ 1153.655881][T18646] block nbd3: shutting down sockets [ 1153.676192][T18647] block nbd4: shutting down sockets [ 1153.696170][T18650] block nbd5: shutting down sockets 23:40:03 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 1153.736839][T18653] block nbd4: shutting down sockets 23:40:03 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x20000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:40:03 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 23:40:03 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="040028bd7000ffdbdf250100000008000600e000000108000600e000003f08000b00", @ANYRES16, @ANYBLOB="08000600e0000001140009000000000000000000000000000000000114000900fc000000000000000000000000000001080006000a01010006000a004e210000"], 0x6c}, 0x1, 0x0, 0x0, 0x48814}, 0x24008000) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140), 0xc, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040010}, 0x24000080) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:40:03 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) read$eventfd(r0, 0x0, 0x0) 23:40:03 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) [ 1153.926450][T18664] block nbd5: shutting down sockets [ 1153.943293][T18663] block nbd3: shutting down sockets [ 1153.975982][T18664] block nbd5: shutting down sockets [ 1154.002870][T18666] block nbd2: shutting down sockets 23:40:03 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004004) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x40, r2, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4888c}, 0x4004001) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x20000050) [ 1154.023201][T18663] block nbd3: shutting down sockets [ 1154.026736][T18670] block nbd4: shutting down sockets 23:40:03 executing program 3: sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x911, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x200) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) 23:40:03 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x19e582d6540cbe42, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:40:03 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xffff) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x9) [ 1154.066803][T18673] block nbd2: shutting down sockets [ 1154.085916][T18675] block nbd4: shutting down sockets 23:40:03 executing program 1: read$eventfd(0xffffffffffffffff, 0x0, 0x0) 23:40:03 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 23:40:03 executing program 1: read$eventfd(0xffffffffffffffff, 0x0, 0x0) [ 1154.254257][T18680] block nbd5: shutting down sockets 23:40:03 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x2) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x4) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 23:40:03 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 1154.336870][T18683] block nbd5: shutting down sockets [ 1154.366966][T18684] block nbd2: shutting down sockets 23:40:03 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x90500) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000000)={0xa, 0x5, 0x6, 0x7, '\x00', 0x1f}) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000040)=0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000080)=[0x5, 0x9, 0x80000000, 0x4, 0x2], 0x5, 0x800, 0x0, 0xffffffffffffffff}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) openat$cgroup_devices(r3, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) write$eventfd(r2, &(0x7f00000001c0)=0x7, 0x8) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 23:40:04 executing program 1: read$eventfd(0xffffffffffffffff, 0x0, 0x0) [ 1154.434041][T18701] nbd4: detected capacity change from 0 to 18 [ 1154.437383][T18692] block nbd2: shutting down sockets 23:40:04 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7, 0x5, 0x8, 0xfaa, 0xff, 0x6, 0xfffffffd, 0x9], 0x8, 0x800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r3) 23:40:04 executing program 5: sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x44, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4004005) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10001, 0x200}, 0x1c) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1007}, 0x4) 23:40:04 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 23:40:04 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) [ 1154.606807][T18702] block nbd3: shutting down sockets [ 1154.626349][T18713] block nbd5: shutting down sockets [ 1154.648357][T18712] block nbd2: shutting down sockets [ 1154.696108][T18710] block nbd3: shutting down sockets [ 1154.711492][T18713] block nbd5: shutting down sockets [ 1154.737296][T18712] block nbd2: shutting down sockets [ 1155.146179][ T8445] block nbd4: Receive control failed (result -104) [ 1176.476219][ T3258] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.482761][ T3258] ieee802154 phy1 wpan1: encryption failed: -22 [ 1237.916225][ T3258] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.923251][ T3258] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.367024][ T3258] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.373664][ T3258] ieee802154 phy1 wpan1: encryption failed: -22 [ 1313.435861][ T1637] INFO: task systemd-udevd:18641 blocked for more than 143 seconds. [ 1313.444223][ T1637] Not tainted 5.13.0-rc2-syzkaller #0 [ 1313.452508][ T1637] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1313.462447][ T1637] task:systemd-udevd state:D stack:26408 pid:18641 ppid: 4857 flags:0x00004000 [ 1313.473992][ T1637] Call Trace: [ 1313.478824][ T1637] __schedule+0x916/0x23e0 [ 1313.483264][ T1637] ? io_schedule_timeout+0x140/0x140 [ 1313.489999][ T1637] ? preempt_schedule_thunk+0x16/0x18 [ 1313.495388][ T1637] ? preempt_schedule_common+0x59/0xc0 [ 1313.502274][ T1637] schedule+0xcf/0x270 [ 1313.507033][ T1637] io_schedule+0xba/0x130 [ 1313.511383][ T1637] wait_on_page_bit_common+0x571/0xe90 [ 1313.518337][ T1637] ? filemap_map_pages+0x1860/0x1860 [ 1313.523630][ T1637] ? bdev_evict_inode+0x460/0x460 [ 1313.530015][ T1637] ? lru_cache_add+0x500/0xa40 [ 1313.534798][ T1637] ? end_buffer_async_read_io+0x300/0x300 [ 1313.542669][ T1637] ? __filemap_set_wb_err+0x240/0x240 [ 1313.549499][ T1637] ? __page_cache_alloc+0x10d/0x3a0 [ 1313.554708][ T1637] do_read_cache_page+0x95c/0x1390 [ 1313.560558][ T1637] read_part_sector+0x146/0x620 [ 1313.565445][ T1637] adfspart_check_ICS+0x9d/0xc90 [ 1313.572817][ T1637] ? pointer+0xa00/0xa00 [ 1313.578127][ T1637] ? adfspart_check_ADFS+0x7f0/0x7f0 [ 1313.583422][ T1637] ? snprintf+0xbb/0xf0 [ 1313.587614][ T1637] ? vsprintf+0x30/0x30 [ 1313.591786][ T1637] ? adfspart_check_ADFS+0x7f0/0x7f0 [ 1313.597139][ T1637] blk_add_partitions+0x585/0xe00 [ 1313.602173][ T1637] bdev_disk_changed+0x244/0x4d0 [ 1313.607328][ T1637] __blkdev_get+0x86c/0xa30 [ 1313.611837][ T1637] blkdev_get_by_dev+0x200/0x660 [ 1313.616848][ T1637] blkdev_open+0x154/0x2b0 [ 1313.621267][ T1637] do_dentry_open+0x4b9/0x11b0 [ 1313.626251][ T1637] ? blkdev_get_by_dev+0x660/0x660 [ 1313.631367][ T1637] path_openat+0x1c0e/0x27e0 [ 1313.636077][ T1637] ? path_lookupat+0x850/0x850 [ 1313.640848][ T1637] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1313.646886][ T1637] do_filp_open+0x190/0x3d0 [ 1313.651392][ T1637] ? may_open_dev+0xf0/0xf0 [ 1313.655966][ T1637] ? do_raw_spin_lock+0x120/0x2b0 [ 1313.660988][ T1637] ? rwlock_bug.part.0+0x90/0x90 [ 1313.665960][ T1637] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1313.672374][ T1637] ? _find_next_bit+0x1e3/0x260 [ 1313.680018][ T1637] ? _raw_spin_unlock+0x24/0x40 [ 1313.684976][ T1637] ? alloc_fd+0x2e6/0x660 [ 1313.689351][ T1637] do_sys_openat2+0x16d/0x420 [ 1313.694031][ T1637] ? build_open_flags+0x6f0/0x6f0 [ 1313.699125][ T1637] ? __context_tracking_exit+0xb8/0xe0 [ 1313.704594][ T1637] __x64_sys_open+0x119/0x1c0 [ 1313.709391][ T1637] ? do_sys_open+0x140/0x140 [ 1313.713985][ T1637] ? __secure_computing+0x104/0x360 [ 1313.719232][ T1637] do_syscall_64+0x3a/0xb0 [ 1313.723651][ T1637] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1313.729588][ T1637] RIP: 0033:0x7fdde305e840 [ 1313.734000][ T1637] RSP: 002b:00007ffc937ee298 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1313.742451][ T1637] RAX: ffffffffffffffda RBX: 000055eafe71a6e0 RCX: 00007fdde305e840 [ 1313.750477][ T1637] RDX: 000055eafe191fe3 RSI: 00000000000a0800 RDI: 000055eafe71fe70 [ 1313.758637][ T1637] RBP: 00007ffc937ee410 R08: 000055eafe191670 R09: 0000000000000010 [ 1313.766674][ T1637] R10: 00007fdde2dd8d70 R11: 0000000000000246 R12: 00007ffc937ee360 [ 1313.774641][ T1637] R13: 000055eafe71fcf0 R14: 0000000000000003 R15: 000000000000000e [ 1313.783162][ T1637] INFO: task syz-executor.4:18694 blocked for more than 143 seconds. [ 1313.792603][ T1637] Not tainted 5.13.0-rc2-syzkaller #0 [ 1313.798791][ T1637] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1313.807673][ T1637] task:syz-executor.4 state:D stack:28488 pid:18694 ppid: 8442 flags:0x00004004 [ 1313.817090][ T1637] Call Trace: [ 1313.820368][ T1637] __schedule+0x916/0x23e0 [ 1313.824773][ T1637] ? io_schedule_timeout+0x140/0x140 [ 1313.830095][ T1637] schedule+0xcf/0x270 [ 1313.834166][ T1637] schedule_preempt_disabled+0xf/0x20 [ 1313.839717][ T1637] __mutex_lock+0x81f/0x1120 [ 1313.844315][ T1637] ? find_held_lock+0x2d/0x110 [ 1313.849118][ T1637] ? blkdev_put+0x59/0x580 [ 1313.853540][ T1637] ? mutex_lock_io_nested+0xf70/0xf70 [ 1313.858958][ T1637] ? do_raw_spin_lock+0x120/0x2b0 [ 1313.864160][ T1637] ? rwlock_bug.part.0+0x90/0x90 [ 1313.869146][ T1637] ? locks_check_ctx_file_list+0x1d/0x110 [ 1313.874870][ T1637] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1313.881165][ T1637] ? _raw_spin_unlock+0x24/0x40 [ 1313.886597][ T1637] ? locks_remove_file+0x312/0x560 [ 1313.891722][ T1637] blkdev_put+0x59/0x580 [ 1313.897910][ T1637] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1313.904256][ T1637] blkdev_close+0x8c/0xb0 [ 1313.909031][ T1637] __fput+0x288/0x920 [ 1313.913030][ T1637] ? blkdev_put+0x580/0x580 [ 1313.917705][ T1637] task_work_run+0xdd/0x1a0 [ 1313.922271][ T1637] exit_to_user_mode_prepare+0x272/0x280 [ 1313.927953][ T1637] syscall_exit_to_user_mode+0x19/0x60 [ 1313.933418][ T1637] do_syscall_64+0x47/0xb0 [ 1313.937909][ T1637] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1313.943803][ T1637] RIP: 0033:0x4665d9 [ 1313.947725][ T1637] RSP: 002b:00007f06f525e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1313.956400][ T1637] RAX: 0000000000000000 RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1313.964371][ T1637] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 1313.972370][ T1637] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1313.980397][ T1637] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 1313.988926][ T1637] R13: 00007fff0eed407f R14: 00007f06f525e300 R15: 0000000000022000 [ 1314.003331][ T1637] INFO: task syz-executor.4:18701 blocked for more than 143 seconds. [ 1314.011823][ T1637] Not tainted 5.13.0-rc2-syzkaller #0 [ 1314.019012][ T1637] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1314.029043][ T1637] task:syz-executor.4 state:D stack:28488 pid:18701 ppid: 8442 flags:0x00000004 [ 1314.038697][ T1637] Call Trace: [ 1314.041980][ T1637] __schedule+0x916/0x23e0 [ 1314.046675][ T1637] ? io_schedule_timeout+0x140/0x140 [ 1314.051973][ T1637] schedule+0xcf/0x270 [ 1314.056364][ T1637] schedule_preempt_disabled+0xf/0x20 [ 1314.061745][ T1637] __mutex_lock+0x81f/0x1120 [ 1314.066601][ T1637] ? blkdev_get_by_dev+0x1f6/0x660 [ 1314.071722][ T1637] ? mutex_lock_io_nested+0xf70/0xf70 [ 1314.077633][ T1637] ? __up_read+0x1a1/0x7b0 [ 1314.082065][ T1637] ? _down_write_nest_lock+0x150/0x150 [ 1314.088310][ T1637] ? kobject_get_unless_zero+0x15a/0x1e0 [ 1314.093960][ T1637] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1314.100266][ T1637] ? disk_block_events+0x1d/0x130 [ 1314.105298][ T1637] blkdev_get_by_dev+0x1f6/0x660 [ 1314.110291][ T1637] blkdev_open+0x154/0x2b0 [ 1314.114710][ T1637] do_dentry_open+0x4b9/0x11b0 [ 1314.119524][ T1637] ? blkdev_get_by_dev+0x660/0x660 [ 1314.124641][ T1637] path_openat+0x1c0e/0x27e0 [ 1314.129831][ T1637] ? path_lookupat+0x850/0x850 [ 1314.134607][ T1637] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1314.141049][ T1637] do_filp_open+0x190/0x3d0 [ 1314.145571][ T1637] ? may_open_dev+0xf0/0xf0 [ 1314.150330][ T1637] ? do_raw_spin_lock+0x120/0x2b0 [ 1314.155558][ T1637] ? rwlock_bug.part.0+0x90/0x90 [ 1314.160547][ T1637] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1314.166862][ T1637] ? _find_next_bit+0x1e3/0x260 [ 1314.171719][ T1637] ? _raw_spin_unlock+0x24/0x40 [ 1314.176619][ T1637] ? alloc_fd+0x2e6/0x660 [ 1314.180952][ T1637] do_sys_openat2+0x16d/0x420 [ 1314.185668][ T1637] ? build_open_flags+0x6f0/0x6f0 [ 1314.191082][ T1637] ? __context_tracking_exit+0xb8/0xe0 [ 1314.196972][ T1637] ? lock_downgrade+0x6e0/0x6e0 [ 1314.201826][ T1637] ? lock_downgrade+0x6e0/0x6e0 [ 1314.206725][ T1637] __x64_sys_openat+0x13f/0x1f0 [ 1314.211576][ T1637] ? __ia32_sys_open+0x1c0/0x1c0 [ 1314.216579][ T1637] ? syscall_enter_from_user_mode+0x27/0x70 [ 1314.222480][ T1637] do_syscall_64+0x3a/0xb0 [ 1314.226944][ T1637] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1314.232837][ T1637] RIP: 0033:0x4196c4 [ 1314.238618][ T1637] RSP: 002b:00007f06f523ccc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1314.247236][ T1637] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004196c4 [ 1314.255577][ T1637] RDX: 0000000000000000 RSI: 00007f06f523cd60 RDI: 00000000ffffff9c [ 1314.264000][ T1637] RBP: 00007f06f523cd60 R08: 0000000000000000 R09: 002364626e2f7665 [ 1314.272018][ T1637] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1314.280390][ T1637] R13: 00007fff0eed407f R14: 00007f06f523d300 R15: 0000000000022000 [ 1314.288539][ T1637] [ 1314.288539][ T1637] Showing all locks held in the system: [ 1314.296844][ T1637] 1 lock held by khungtaskd/1637: [ 1314.301864][ T1637] #0: ffffffff8bf792a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 1314.311792][ T1637] 1 lock held by systemd-udevd/18641: [ 1314.317297][ T1637] #0: ffff88814593aea0 (&bdev->bd_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x1f6/0x660 [ 1314.327446][ T1637] 1 lock held by syz-executor.4/18694: [ 1314.333159][ T1637] #0: ffff88814593aea0 (&bdev->bd_mutex){+.+.}-{3:3}, at: blkdev_put+0x59/0x580 [ 1314.342350][ T1637] 1 lock held by syz-executor.4/18701: [ 1314.347933][ T1637] #0: ffff88814593aea0 (&bdev->bd_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x1f6/0x660 [ 1314.358089][ T1637] [ 1314.360415][ T1637] ============================================= [ 1314.360415][ T1637] [ 1314.369055][ T1637] NMI backtrace for cpu 0 [ 1314.373389][ T1637] CPU: 0 PID: 1637 Comm: khungtaskd Not tainted 5.13.0-rc2-syzkaller #0 [ 1314.381697][ T1637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1314.391733][ T1637] Call Trace: [ 1314.394999][ T1637] dump_stack+0x141/0x1d7 [ 1314.399331][ T1637] nmi_cpu_backtrace.cold+0x44/0xd7 [ 1314.404513][ T1637] ? lapic_can_unplug_cpu+0x80/0x80 [ 1314.409868][ T1637] nmi_trigger_cpumask_backtrace+0x1b3/0x230 [ 1314.415839][ T1637] watchdog+0xd48/0xfb0 [ 1314.420002][ T1637] ? reset_hung_task_detector+0x30/0x30 [ 1314.425621][ T1637] kthread+0x3b1/0x4a0 [ 1314.429684][ T1637] ? __kthread_bind_mask+0xc0/0xc0 [ 1314.434777][ T1637] ret_from_fork+0x1f/0x30 [ 1314.439684][ T1637] Sending NMI from CPU 0 to CPUs 1: [ 1314.444953][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_idle_do_entry+0x1c9/0x250 [ 1314.453758][ T1637] Kernel panic - not syncing: hung_task: blocked tasks [ 1314.460599][ T1637] CPU: 0 PID: 1637 Comm: khungtaskd Not tainted 5.13.0-rc2-syzkaller #0 [ 1314.468922][ T1637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1314.478960][ T1637] Call Trace: [ 1314.482234][ T1637] dump_stack+0x141/0x1d7 [ 1314.486558][ T1637] panic+0x306/0x73d [ 1314.490435][ T1637] ? __warn_printk+0xf3/0xf3 [ 1314.495004][ T1637] ? lapic_can_unplug_cpu+0x80/0x80 [ 1314.500185][ T1637] ? preempt_schedule_thunk+0x16/0x18 [ 1314.505557][ T1637] ? nmi_trigger_cpumask_backtrace+0x196/0x230 [ 1314.511691][ T1637] ? watchdog.cold+0x5/0x158 [ 1314.516452][ T1637] watchdog.cold+0x16/0x158 [ 1314.520960][ T1637] ? reset_hung_task_detector+0x30/0x30 [ 1314.526494][ T1637] kthread+0x3b1/0x4a0 [ 1314.530543][ T1637] ? __kthread_bind_mask+0xc0/0xc0 [ 1314.535636][ T1637] ret_from_fork+0x1f/0x30 [ 1314.546135][ T1637] Kernel Offset: disabled [ 1314.550629][ T1637] Rebooting in 86400 seconds..