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"], 0x1) [ 323.303460][T11897] block nbd4: shutting down sockets 18:49:13 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0x40186366) [ 323.326729][T11898] block nbd4: Device being setup by another task [ 323.338397][T11898] block nbd4: shutting down sockets 18:49:13 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000011000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 323.459169][T11904] block nbd4: shutting down sockets [ 323.513868][T11904] block nbd4: shutting down sockets 18:49:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) 18:49:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffff3ffc}, 0x4) r4 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d0) [ 323.811118][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 323.816926][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 323.821097][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 323.828498][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:49:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r2, &(0x7f0000000200), 0x31b, 0x140010006, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, 0x0, 0x0) 18:49:13 executing program 2: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000200)=0x1) io_submit(r0, 0x0, 0x0) 18:49:13 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000014030000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:13 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0x401870c8) 18:49:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffff3ffc}, 0x4) r4 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d0) [ 323.993849][T11921] block nbd4: shutting down sockets 18:49:14 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000020000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 324.036430][T11925] block nbd4: Device being setup by another task [ 324.060236][T11925] block nbd4: shutting down sockets 18:49:14 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0x401870cb) 18:49:14 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000024030000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 324.249237][T11938] block nbd4: shutting down sockets [ 324.279125][T11938] block nbd4: shutting down sockets 18:49:14 executing program 2: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000200)=0x1) io_submit(r0, 0x0, 0x0) 18:49:14 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000030010000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 324.371051][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 324.376913][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:49:14 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f00000000c0)={0xeba3, 0x2}) 18:49:14 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0x401870cc) [ 324.645418][T11954] block nbd4: shutting down sockets [ 324.665650][T11955] block nbd4: Device being setup by another task [ 324.673325][T11955] block nbd4: shutting down sockets 18:49:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r2, &(0x7f0000000200), 0x31b, 0x140010006, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, 0x0, 0x0) 18:49:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffff3ffc}, 0x4) r4 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 18:49:14 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000040000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:14 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0x4020940d) 18:49:14 executing program 2: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000200)=0x1) io_submit(r0, 0x0, &(0x7f0000000600)) [ 324.918468][T11968] device nr0 entered promiscuous mode [ 324.933192][T11965] block nbd4: shutting down sockets 18:49:14 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000048000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 324.991519][T11970] block nbd4: Device being setup by another task [ 325.005264][T11970] block nbd4: shutting down sockets 18:49:15 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x400004c000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:15 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0x80041284) 18:49:15 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000060000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:15 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0x80041285) [ 325.193143][T11983] block nbd4: shutting down sockets [ 325.211248][T11984] block nbd4: Device being setup by another task [ 325.220417][T11984] block nbd4: shutting down sockets [ 325.382345][T11989] block nbd4: shutting down sockets [ 325.407555][T11991] block nbd4: Device being setup by another task [ 325.421828][T11991] block nbd4: shutting down sockets 18:49:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x1}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2}) r1 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x8, 0xff, 0x1, 0xf6, 0x0, 0x0, 0x400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x8, 0x100}, 0x1404, 0x7395ca86, 0xffffffff, 0x3, 0x956b, 0xffff3810, 0x8c}, r1, 0x4, 0xffffffffffffffff, 0x13) r2 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0386106, &(0x7f0000000000)) r3 = msgget$private(0x0, 0x6c0) msgsnd(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="7e358229ae528f0730fe9a045e8055955b446bf6863e1894bb76ee9d64f22979e405000000000000000c74a5958a26eff6a156295d53b03ccc9410e5d287a00aac8f42be47db489822315e1f7b07dee9d018190ff1d299d0e60000000000000007d45d57ab33b9077cc936fd10f06e0c2b69c0d0cd6690b63851fbf14d6c"], 0x78, 0x800) 18:49:15 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0x800454d2) [ 325.592016][T11998] block nbd4: shutting down sockets [ 325.607238][T11999] block nbd4: Device being setup by another task [ 325.616979][T11999] block nbd4: shutting down sockets 18:49:15 executing program 2: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000200)=0x1) io_submit(r0, 0x0, &(0x7f0000000600)) 18:49:15 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000068000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:15 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0x80081270) 18:49:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffff3ffc}, 0x4) r4 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 18:49:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)=""/156, 0x9c}, {0x0}], 0x2}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xcc, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000040)={0x80000000}, 0x10) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0xff4c, 0x0, 0x0, 0x800e0054e) shutdown(r1, 0x0) [ 325.864865][T12009] block nbd4: shutting down sockets 18:49:15 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x400006c000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 325.893173][T12013] block nbd4: Device being setup by another task [ 325.900285][T12013] block nbd4: shutting down sockets [ 325.920192][T12015] device nr0 entered promiscuous mode 18:49:15 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0x80081272) 18:49:16 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000073000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 326.098210][T12027] block nbd4: shutting down sockets 18:49:16 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x59}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1381, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) [ 326.143443][T12027] block nbd4: shutting down sockets 18:49:16 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0x80086301) [ 326.317008][T12034] block nbd4: shutting down sockets [ 326.441337][T12036] block nbd4: Device being setup by another task [ 326.464872][T12034] block nbd4: shutting down sockets 18:49:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000040), 0x4) r2 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0386106, &(0x7f0000000000)) 18:49:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xa1720495f3f7edd, 0x0, 0x0, 0x800e0056f) shutdown(r0, 0x0) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x5) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r2, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) shutdown(r1, 0x0) 18:49:16 executing program 2: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000200)=0x1) io_submit(r0, 0x0, &(0x7f0000000600)) 18:49:16 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000074000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:16 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xc0045878) [ 326.655643][T12050] block nbd4: shutting down sockets 18:49:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffff3ffc}, 0x4) r4 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 18:49:16 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000078030000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 326.709393][T12056] block nbd4: Device being setup by another task [ 326.749040][T12050] block nbd4: shutting down sockets 18:49:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x20011, r3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:49:16 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x400007a000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:16 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xc0045878) [ 326.932149][T12072] device nr0 entered promiscuous mode 18:49:17 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000b4000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 326.999258][T12078] block nbd4: shutting down sockets [ 327.028536][T12078] block nbd4: shutting down sockets 18:49:17 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xc0101282) [ 327.252771][T12088] block nbd4: shutting down sockets [ 327.290732][T12088] block nbd4: shutting down sockets 18:49:17 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_proto_private(r0, 0x89e3, &(0x7f0000000040)="659c242a83860d0865dac0660ad012c7a59e76797b1308583c25cfadb67e7502550495649352e5381d280e07a6b7687c135c4f01db8678a1876b58f6e5ed069d5833549998f6e150e133fe15a6fe0e71ae0b94cf9548ee0e024a88ba93156cc239d042075a66d06ff8498b7eddc0a091e817005d9ee9a5dab878e044ac5f506ff15e43fbcf364905ff770b3f5a4f813c455eaac51659e5f65863f3") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x404}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc0386106, &(0x7f0000000000)) 18:49:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)=""/156, 0x9c}], 0x1}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xcc, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000040)={0x80000000}, 0x10) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0xff4c, 0x0, 0x0, 0x800e0054e) shutdown(r1, 0x0) 18:49:17 executing program 2: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000200)=0x1) io_submit(r0, 0x1, &(0x7f0000000600)=[0x0]) 18:49:17 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000c8010000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:17 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xc0189436) [ 327.556133][T12095] block nbd4: shutting down sockets 18:49:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffff3ffc}, 0x4) r3 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) 18:49:17 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000cc010000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 327.629709][T12095] block nbd4: shutting down sockets 18:49:17 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xc020660b) 18:49:17 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f00000001c0)='hfsplus\x00', &(0x7f0000000200)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001c00)={[{@nls={'nls', 0x3d, 'cp437'}}]}) 18:49:17 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000d0030000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 327.798216][T12115] device nr0 entered promiscuous mode [ 327.857252][T12116] block nbd4: shutting down sockets 18:49:17 executing program 2: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000200)=0x1) io_submit(r0, 0x1, &(0x7f0000000600)=[0x0]) [ 327.912628][T12119] block nbd4: Device being setup by another task [ 327.920676][T12119] block nbd4: shutting down sockets 18:49:17 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xc0481273) [ 327.971068][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 327.971100][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 327.976865][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 327.995779][T12126] hfsplus: unable to find HFS+ superblock [ 328.131059][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 328.142568][T12133] block nbd4: shutting down sockets [ 328.173747][T12135] block nbd4: Device being setup by another task [ 328.182209][T12135] block nbd4: shutting down sockets 18:49:18 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000dc000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:18 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x800000002, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x1000000050000}]}) r0 = epoll_create(0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, 0x0, 0x0) 18:49:18 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)=0x5b6) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) getsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect(r4, &(0x7f00000001c0)=@in={0x2, 0x4e20, @remote}, 0x80) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000005c, 0x0) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) 18:49:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/\x00]v/c\x05\x00#\x00', 0x0, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000000040)={0xfffffeff, "862def0c494e6f15276b3182e8959e24dd4f0844884fa95b800b32901d64dec3", 0x3, 0x40, 0x7ff, 0x8, 0x4, 0x2, 0x7f, 0x7}) 18:49:18 executing program 1: 18:49:18 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000e8030000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 328.583994][T12150] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:49:18 executing program 1: 18:49:18 executing program 2: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000200)=0x1) io_submit(r0, 0x1, &(0x7f0000000600)=[0x0]) 18:49:18 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000f4000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffff3ffc}, 0x4) r3 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) 18:49:18 executing program 1: 18:49:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x10040, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000035c0)='/dev/hwrng\x00', 0x410580, 0x0) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x20000080, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000003600)={r8, 0x1}, &(0x7f0000003640)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={r8, 0x6}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r9, 0x32d, 0x9}, &(0x7f0000000140)=0xc) 18:49:19 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000f4010000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 329.065293][T12177] device nr0 entered promiscuous mode [ 329.166161][T12147] block nbd4: shutting down sockets [ 329.220584][T12147] block nbd4: shutting down sockets 18:49:19 executing program 1: 18:49:19 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000f4030000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:19 executing program 2: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000200)=0x1) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000040), 0xff66}]) 18:49:19 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x3169) r2 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000240)=0xfffffeff) open_by_handle_at(r5, &(0x7f00000000c0)={0xcf, 0xb72c, "0345552f1ba410f5f0c8535de502f2ebbb71089c9b1b60393d0d03f2f91d79ef0485fb06eb3643e8a4525e72b844ad77b32a6d969b4eb24298e492bb4188b8b4d502118466d1332a80a8bbdbe2524a762f46d193df8f358d6bd46961c54f57343c888e2e526778df38a895265c6031a26bf61049620e0a5212205e08a56ee0dec7697b4098940a1c49d5b0573da0ef0c694cc5ee92512a85a6aa2ece1fed6db150a26399edfeced141192740b3bce3b74a6cf8e749865b0038f575c9b34cfa16899615715a5ca7"}, 0x301200) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = dup(r8) getsockopt$bt_rfcomm_RFCOMM_LM(r9, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0xffffffffffffff8d) r10 = dup(r4) ioctl$NBD_SET_SOCK(r3, 0xab00, r10) ioctl$NBD_SET_SOCK(r2, 0xab00, r10) r11 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r11, 0xab04) 18:49:19 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000ff000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)=""/184, 0xb8}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) close(r0) recvfrom$inet(r3, 0x0, 0xe5, 0x2, 0x0, 0x800e00545) shutdown(r3, 0x0) [ 329.480309][T12195] block nbd4: shutting down sockets 18:49:19 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x1c000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 329.539762][T12195] block nbd4: Device being setup by another task [ 329.561896][T12195] block nbd4: shutting down sockets 18:49:19 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)={0xbd0f3f1661c46bff}) r3 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000080)={0x200, 0x4, 0x4, 0x1000000, 0x80000001, {r8, r9/1000+10000}, {0x0, 0x2, 0x8b, 0x0, 0xbc, 0x2d, "c04394b1"}, 0x6, 0x2, @planes=&(0x7f0000000040)={0x5, 0xc, @mem_offset=0x4, 0x8}, 0x1, 0x0, r4}) ioctl$SOUND_MIXER_WRITE_VOLUME(r10, 0xc0044d05, &(0x7f0000000100)=0x1a) r11 = dup(r5) ioctl$NBD_SET_SOCK(r4, 0xab00, r11) ioctl$NBD_SET_SOCK(r3, 0xab00, r11) r12 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r12, 0xab04) [ 329.690674][T12209] xt_l2tp: missing protocol rule (udp|l2tpip) [ 329.805859][T12213] block nbd4: shutting down sockets [ 330.051122][ C0] net_ratelimit: 3 callbacks suppressed [ 330.051130][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 330.061057][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 330.063415][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 330.069472][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:49:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffff3ffc}, 0x4) r3 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) 18:49:20 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x104000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:20 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) r0 = creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "777991", "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"}}, 0x110) 18:49:20 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x7db61b1fb6dd75f7, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) ioctl$NBD_SET_SOCK(r0, 0xab00, r4) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) 18:49:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/de\\Lcec#\x00', 0x0, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) 18:49:20 executing program 2: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000200)=0x1) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000040), 0xff66}]) 18:49:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000040)) [ 330.235335][T12228] xt_l2tp: missing protocol rule (udp|l2tpip) [ 330.260604][T12229] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing 18:49:20 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0xc03000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 330.329455][T12230] block nbd4: shutting down sockets 18:49:20 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) r0 = creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "777991", "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"}}, 0x110) [ 330.453963][T12230] block nbd4: Device being setup by another task [ 330.475881][T12242] device nr0 entered promiscuous mode [ 330.476285][T12230] block nbd4: shutting down sockets [ 330.496063][T12248] xt_l2tp: missing protocol rule (udp|l2tpip) 18:49:20 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4300000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:20 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/\xaf\xca\x1f\x81\x00', 0x0, 0xc400) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vNsf\x00', 0xd4000, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r6, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x800) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, &(0x7f0000000040)={0x0, {0x5, 0x5}}) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r7 = syz_open_dev$ndb(0x0, 0x0, 0x8200) ioctl$NBD_CLEAR_SOCK(r7, 0xab04) [ 330.611055][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 330.617154][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 330.617346][T12252] xt_l2tp: missing protocol rule (udp|l2tpip) 18:49:20 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0xff03000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 330.709987][T12254] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 330.774133][T12261] xt_l2tp: missing protocol rule (udp|l2tpip) 18:49:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) r4 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 18:49:21 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 18:49:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000040)) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) 18:49:21 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x2, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:21 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) r0 = creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "777991", "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"}}, 0x110) [ 331.351096][T12274] block nbd4: shutting down sockets [ 331.369666][T12278] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 331.417320][T12283] device nr0 entered promiscuous mode [ 331.448776][T12279] block nbd4: Device being setup by another task [ 331.472581][T12279] block nbd4: shutting down sockets 18:49:21 executing program 2: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000200)=0x1) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000040), 0xff66}]) 18:49:21 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:21 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) r0 = creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "777991", "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"}}, 0x110) 18:49:21 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0xa201) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) restart_syscall() r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) [ 331.682430][T12294] block nbd4: shutting down sockets [ 331.703723][T12295] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing 18:49:21 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 331.761665][T12300] block nbd4: Device being setup by another task [ 331.776470][T12300] block nbd4: shutting down sockets 18:49:21 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) r0 = creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "777991", "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"}}, 0x110) 18:49:21 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 332.046311][T12310] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 332.131058][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 332.131077][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 332.136956][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 332.142765][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:49:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) r4 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 18:49:22 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:22 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/d\x7fs/.b$#\x00', 0x0, 0x100) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 18:49:22 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) 18:49:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffd2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4104, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x81, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="cd9ea96b97508007ecb5f95497959c917fb8685ef39c693f885d8cb682b4ee2cd663e25834409e5c2171c197b14530c9ccac954ecdd406a457ef21ce8e17ff851907e95dfcad8197cd719f4453f5b8e6b4a0a76a2e558299b7be0fc9b7aaec85cafaf5912a", 0x65, 0x401}], 0x808029, &(0x7f0000000280)=ANY=[@ANYBLOB="736d61636b66737472616e736d7574653d2f6465762f63656323002c7375626a5f747970653d2f6465762f63656323002c66736e616d653d2f6465762f63656323002c6f626a5f726f6c653d2c66756e633d4d4d41505f434845434b2c00cc9a2e95e2ae58700c0b920e3f0f8d1701010000c0be109d485ea6f5516a45c02f9ecf06a9530dd570fff9c2d5cb7af250f5dd6011190bbe800203a83f4cbc8fccdbcea407be0e993c6f46d27c4fecdcf8bf3fb84ac22c7354a2d67561ad2955bc4bbea2af7285867c0bda992837620ce79ce99bbe72c597bcc3196123cc4a885c99bb3b816ed1bd428a462b6b"]) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, &(0x7f0000002e00)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000200)=""/55, 0x37}, {&(0x7f0000000240)=""/32, 0x20}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/97, 0x61}, {&(0x7f0000001440)=""/156, 0x9c}, {&(0x7f0000001500)=""/75, 0x4b}], 0x6, &(0x7f0000001600)=""/74, 0x4a}, 0x3}, {{&(0x7f0000001680)=@ipx, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/29, 0x1d}, {&(0x7f0000001740)=""/126, 0x7e}, {&(0x7f00000017c0)=""/131, 0x83}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/33, 0x21}, {&(0x7f00000028c0)=""/151, 0x97}, {&(0x7f0000002980)=""/32, 0x20}], 0x7, &(0x7f0000002a40)=""/142, 0x8e}, 0xaa40}, {{&(0x7f0000002b00)=@nl=@unspec, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002b80)=""/169, 0xa9}, {&(0x7f0000002c40)=""/87, 0x57}], 0x2, &(0x7f0000002d00)=""/214, 0xd6}}], 0x3, 0x40, &(0x7f0000002ec0)={0x0, 0x1c9c380}) [ 332.589528][T12324] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 332.656167][T12334] device nr0 entered promiscuous mode 18:49:22 executing program 2: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000200)=0x1) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0xff66}]) 18:49:22 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x7, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:22 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x80000) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r5, 0x401870cc, &(0x7f0000000040)={0x2, 0x4, 0x7, 0xffffffff}) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 18:49:22 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) [ 332.844466][T12342] block nbd4: shutting down sockets 18:49:22 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 332.876506][T12342] block nbd4: Device being setup by another task [ 332.932418][T12342] block nbd4: shutting down sockets 18:49:23 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) 18:49:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='ev/nbd#\x00', 0x0, 0x1) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfff, 0x210001) 18:49:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) r4 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 18:49:23 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) 18:49:23 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x9, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:23 executing program 4: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='userselfselinux,!!#wlan1#-!}\\^mime_typecpusetposix_acl_accesswlan1bdev\x00', &(0x7f0000000080)) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, {}, {}, {}, {0x0, 0x8}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x15b, 0x9, 0x4, 0x20000, 0x9, {}, {0x2373df0fdbcfee72, 0xc, 0x6, 0x7, 0x88, 0x38, "a40f256f"}, 0x3ff, 0x4, @planes=&(0x7f0000000100)={0x5, 0x401, @userptr=0x40, 0x4}, 0x3f, 0x0, r3}) pread64(r3, &(0x7f00000006c0)=""/160, 0xa0, 0x1) setsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f00000001c0)=0x5, 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r6 = dup(r5) ioctl$NBD_SET_SOCK(r2, 0xab00, r6) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x48800, 0x0) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000000500)=0x4, &(0x7f0000000540)=0x2) syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x2, 0x2000) r8 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r8) keyctl$setperm(0x5, r8, 0x0) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f00000005c0)="09f81c98220a51b3562c29fd2f31c7c7b936f4ffa36164c6e909457a37911cae364a772211d63edc4ea406c07ede0701e138884420bb21965d92232df74218d6b29a50319894c07b3669583853cf5f12ef458e3c8864a13360ee57cfe27fad409eef2a44f1cfe4e5d4d80ada78ad242b659a8b019cc8f3e81d3d1085e57de205a252b098b89d3902a912e50981fe4fbdde1eebec58c2f3c0533473d99bd962feb0a84f05c11d44947558336dda22599ec8d8f4e4103af105eaba7d6a8831cadfe429be4061f3b7f181c974235eae70748ca32778ee57189f1a0686981a5821f09942849e3c", 0xe5, r8) r9 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r11 = dup(r10) getsockopt$bt_rfcomm_RFCOMM_LM(r11, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$NBD_SET_SOCK(r9, 0xab00, r11) r12 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r12, 0xab04) 18:49:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x6, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x88c00, 0x9532bef20046b035) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x2) fchmodat(r3, &(0x7f00000000c0)='./file0\x00', 0x30) 18:49:23 executing program 2: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000200)=0x1) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0xff66}]) 18:49:23 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:23 executing program 1: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) [ 333.733920][T12380] block nbd4: shutting down sockets [ 333.783461][T12372] block nbd4: shutting down sockets [ 333.830654][T12383] device nr0 entered promiscuous mode 18:49:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = dup(r1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x8000, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'L+', 0x1}, 0x16, 0x1) getsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$NBD_SET_SOCK(r4, 0xab00, r8) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r9 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r9, 0xab04) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x4000}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={0x61}, 0x8) 18:49:23 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 333.979560][T12398] block nbd4: shutting down sockets [ 333.999687][T12395] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing 18:49:24 executing program 1: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) 18:49:24 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 334.366754][T12407] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 334.541485][ T27] audit: type=1804 audit(1577213364.501:35): pid=12417 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir129536541/syzkaller.CCvCEf/130/file0" dev="sda1" ino=16977 res=1 18:49:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300), 0x4) r4 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 18:49:24 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:24 executing program 2: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000200)=0x1) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0xff66}]) 18:49:24 executing program 1: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) 18:49:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x20000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x20000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}, 0x2c, {[{@cache_mmap='cache=mmap'}, {@aname={'aname', 0x3d, '/dev/cec#\x00'}}], [{@smackfsdef={'smackfsdef', 0x3d, '}/'}}, {@uid_gt={'uid>', r2}}, {@appraise_type='appraise_type=imasig'}, {@seclabel='seclabel'}]}}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) 18:49:24 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 334.764634][T12430] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 334.778520][T12436] block nbd4: shutting down sockets [ 334.829989][T12433] device nr0 entered promiscuous mode 18:49:24 executing program 4: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$NBD_SET_SOCK(r6, 0xab00, r2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r7 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r7, 0xab04) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = dup(r8) getsockopt$bt_rfcomm_RFCOMM_LM(r9, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) sendmsg$can_j1939(r9, &(0x7f0000000040)={0x0, 0xfffffffffffffd6f, &(0x7f0000000000)={&(0x7f0000000240)="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", 0x1000}, 0x1, 0x0, 0x0, 0x40024}, 0x0) 18:49:24 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 334.959886][T12444] block nbd4: shutting down sockets 18:49:25 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) [ 335.004403][T12445] block nbd4: shutting down sockets 18:49:25 executing program 2: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000200)=0x1) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}]) 18:49:25 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000080)={0x8, 0x1, 0x4, 0x2, 0x5fed, {r2, r3/1000+10000}, {0x125683b6a7a0baa4, 0x8, 0x40, 0x8, 0x5d, 0x3, "92f42c1f"}, 0x0, 0x3, @offset=0x1f, 0xfffffffd, 0x0, r4}) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000100)={0x2cf4f5d56ea31306, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x8000, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, 0xffffffff, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}) r6 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r7 = syz_open_dev$ndb(0x0, 0x0, 0x0) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x521940, 0x0) ioctl$LOOP_SET_CAPACITY(r9, 0x4c07) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r6, 0x40a85321, &(0x7f0000000240)={{0x2, 0x4f}, 'port1\x00', 0x28, 0x7bfcd9df464d748b, 0xff, 0x400, 0x5, 0x7, 0x3, 0x0, 0x1, 0xff}) r10 = dup(r8) ioctl$NBD_SET_SOCK(r7, 0xab00, r10) ioctl$NBD_SET_SOCK(r6, 0xab00, r10) r11 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r11, 0xab04) 18:49:25 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 335.276609][T12457] block nbd4: shutting down sockets [ 335.277252][T12455] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 335.321526][T12462] block nbd4: Device being setup by another task [ 335.328626][T12462] block nbd4: shutting down sockets 18:49:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300), 0x4) r4 = open(0x0, 0xccf82b8c3d0385e2, 0x0) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 18:49:25 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) write$uinput_user_dev(r1, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) close(r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0x14800, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000180)={0x8, 0x10d701d8}) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r5 = dup(r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) ioctl$NBD_SET_SOCK(r0, 0xab00, r5) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) r7 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x1) write$binfmt_misc(r7, &(0x7f0000000040)={'syz1', "2d711378b18991b87f6c09b3f64910d84b1f65a74d10d79af9d9a7b5ac23dbc3aca9b5951a8c40ad65b42fe2af342ac6cbf7b8c47ead7771ed9ffcc1125bdc29a1dcf77fb75bd60ff505183fb232c80c6167771d56f8d90f553788accd4f9a9446b2e2caf376c3186968e936dd612beef4edfd9016c6dbfeef04527154612efc6571c968fcd432e8963c65e68dddd7916d5454a59e9c255adbdc7e430b399bafc7d402b6416caafaf146086d84d3b8d8cb18b0d011db4b88bb1b028113fb723d705bb736713db2066be0cee950d44197298fffc01b81378dbd75160a3c2d3cd6feb000baaad5dd51736212267eff6509a4"}, 0xf5) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) 18:49:25 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) 18:49:25 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x11, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040), &(0x7f0000000080)=0x4) 18:49:25 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x12, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 335.964397][T12479] input: syz1 as /devices/virtual/input/input5 [ 335.995371][T12480] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing 18:49:26 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x13, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:26 executing program 2: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000200)=0x1) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}]) [ 336.155240][T12491] device nr0 entered promiscuous mode 18:49:26 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) [ 336.248313][T12474] block nbd4: shutting down sockets 18:49:26 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x14, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 336.291069][ C1] net_ratelimit: 14 callbacks suppressed [ 336.291077][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 336.291103][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 336.296834][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 336.302580][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:49:26 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) fcntl$dupfd(r4, 0x0, r5) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) 18:49:26 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x15, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 336.451081][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 336.457693][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 336.530184][T12506] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 336.531206][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 336.543115][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 336.593306][T12515] block nbd4: shutting down sockets [ 336.641426][T12515] block nbd4: Device being setup by another task [ 336.648625][T12515] block nbd4: shutting down sockets [ 336.851031][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 336.856893][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:49:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300), 0x4) r4 = open(0x0, 0xccf82b8c3d0385e2, 0x0) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 18:49:27 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:27 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) 18:49:27 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) [ 337.206940][T12528] block nbd4: shutting down sockets [ 337.240562][T12530] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 337.290820][T12524] block nbd4: shutting down sockets [ 337.299623][T12531] device nr0 entered promiscuous mode [ 339.433734][T12552] IPVS: ftp: loaded support on port[0] = 21 [ 339.463329][ T7] tipc: TX() has been purged, node left! [ 340.320109][T12552] chnl_net:caif_netlink_parms(): no params data found [ 340.705662][T12552] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.713292][T12552] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.721372][T12552] device bridge_slave_0 entered promiscuous mode [ 340.729788][T12552] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.737084][T12552] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.744908][T12552] device bridge_slave_1 entered promiscuous mode [ 340.766111][T12552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.778558][T12552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.800885][T12552] team0: Port device team_slave_0 added [ 340.809812][T12552] team0: Port device team_slave_1 added [ 340.884351][T12552] device hsr_slave_0 entered promiscuous mode [ 340.921487][T12552] device hsr_slave_1 entered promiscuous mode [ 340.961243][T12552] debugfs: Directory 'hsr0' with parent '/' already present! [ 341.054796][T12552] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.061977][T12552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.069265][T12552] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.076372][T12552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.128234][T12552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.143905][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 341.155440][ T2941] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.164463][ T2941] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.174286][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 341.188507][T12552] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.203975][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 341.212798][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.219928][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.231409][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 341.239901][ T2941] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.247092][ T2941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.353085][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 341.362720][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 341.371999][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 341.380486][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 341.392428][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 341.400723][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 341.409474][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 341.426629][T12552] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 341.438246][T12552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 341.449657][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 341.459022][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 341.480020][ T9338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 341.487699][ T9338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 341.500452][T12552] 8021q: adding VLAN 0 to HW filter on device batadv0 18:49:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) 18:49:32 executing program 2: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000200)=0x1) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}]) 18:49:32 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:32 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0xf, 0x8) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 18:49:32 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) 18:49:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300), 0x4) r4 = open(0x0, 0xccf82b8c3d0385e2, 0x0) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 18:49:32 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x18, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 342.646472][T12594] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 342.658844][T12591] device nr0 entered promiscuous mode 18:49:32 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) [ 342.771126][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 342.777266][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 342.820046][T12608] block nbd4: shutting down sockets 18:49:32 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) 18:49:32 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x19, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 342.856131][T12608] block nbd4: Device being setup by another task [ 342.878610][T12608] block nbd4: shutting down sockets 18:49:32 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x80000001) [ 343.066519][T12616] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 343.082477][T12621] block nbd4: shutting down sockets [ 343.091093][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 343.097062][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 343.103661][T12621] block nbd4: Device being setup by another task 18:49:33 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x0, 0xf0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) [ 343.113147][T12621] block nbd4: shutting down sockets 18:49:33 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x21, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 343.530051][ T7] device bridge_slave_1 left promiscuous mode [ 343.543190][ T7] bridge0: port 2(bridge_slave_1) entered disabled state 18:49:33 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) 18:49:33 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = socket$packet(0x11, 0x4, 0x300) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r4 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) ioctl$NBD_SET_SOCK(r0, 0xab00, r4) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) 18:49:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000180)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000280)=0xe8) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0xc) r8 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, r9, 0xffffffffffffffff}}) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {0x1, 0x1}, [{0x2, 0x0, r0}, {0x2, 0x3}, {0x2, 0x8, r3}, {0x2, 0x87dfba35e43a9dd1, r4}, {0x2, 0x2, r5}, {0x2, 0x1}, {0x2, 0x0, r6}, {0x2, 0x2, r7}], {0x4, 0x9}, [{0x8, 0x3, r8}, {0x8, 0x2, r9}], {0x10, 0x5}, {0x20, 0x5}}, 0x74, 0x2) r10 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r10, 0xc0386106, &(0x7f0000000000)) 18:49:33 executing program 2: [ 343.588670][ T7] device bridge_slave_0 left promiscuous mode [ 343.607087][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.713365][T12647] block nbd4: shutting down sockets [ 343.750878][T12647] block nbd4: Device being setup by another task [ 343.805227][T12641] block nbd4: shutting down sockets [ 343.891068][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 343.897221][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 344.611075][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 344.616973][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 344.621093][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 344.628645][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 346.142150][ T7] device hsr_slave_0 left promiscuous mode [ 346.191300][ T7] device hsr_slave_1 left promiscuous mode [ 346.252877][ T7] team0 (unregistering): Port device team_slave_1 removed [ 346.265541][ T7] team0 (unregistering): Port device team_slave_0 removed [ 346.278221][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.339341][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.457615][ T7] bond0 (unregistering): Released all slaves 18:49:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300), 0x4) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 18:49:36 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x22, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:36 executing program 2: 18:49:36 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/I\xb7v/nbd#\x04', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000040)={0x49, 0x29, 0x2, {0xfff, [{{0x1, 0x0, 0x6}, 0x400, 0x5, 0x7, './file0'}, {{0x0, 0x4, 0x3}, 0x5, 0xfe, 0x7, './file0'}]}}, 0x49) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) ioctl$NBD_SET_SOCK(r0, 0xab00, r4) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) 18:49:36 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) 18:49:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000040)=@generic={0x3, 0x0, 0x7b0bae04}) 18:49:36 executing program 2: 18:49:36 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x0, 0x4000, 0xa04, &(0x7f0000ffc000/0x4000)=nil) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68], 0x0, 0x400, 0x3ff}) r4 = dup(r2) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r5, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000001a40)='bbr\x00', 0x4) readv(r5, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) recvfrom(r5, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r5) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) ioctl$NBD_SET_SOCK(r0, 0xab00, r4) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) 18:49:36 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x23, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 346.791155][T12676] device nr0 entered promiscuous mode 18:49:36 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) 18:49:36 executing program 2: 18:49:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) poll(&(0x7f0000000240)=[{r0, 0xbc263bf6a752da83}, {}, {}, {}, {}], 0x21b4, 0x586) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfffffe0e, 0x0, 0x0, 0x800e00526) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) recvmsg(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000080)=""/157, 0x9d}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x2) shutdown(r1, 0x0) [ 347.545000][T12679] block nbd4: shutting down sockets [ 347.583708][T12679] block nbd4: shutting down sockets 18:49:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300), 0x4) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 18:49:37 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) 18:49:37 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x24, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x4, 0x9, 0x0, 0xfffffffffffffffe, 0x142, 0x40805e433384d502, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0xffff8003, 0xc, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) 18:49:37 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) write$P9_RXATTRWALK(r5, &(0x7f0000000000)={0xf, 0x1f, 0x1, 0x9}, 0xf) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) 18:49:37 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x25, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 347.799541][T12719] block nbd4: shutting down sockets [ 347.856518][T12719] block nbd4: Device being setup by another task [ 347.871959][T12719] block nbd4: shutting down sockets 18:49:37 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) 18:49:37 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='\xea\xe15\x947\xa7\xdc\xc4\xa4', 0x101000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) fcntl$dupfd(r4, 0xc0a, r5) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) [ 347.952110][T12727] device nr0 entered promiscuous mode 18:49:38 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x28, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 348.051071][ C0] net_ratelimit: 10 callbacks suppressed [ 348.051080][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 348.062723][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 348.100693][T12735] block nbd4: shutting down sockets 18:49:38 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) 18:49:38 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3, 0x0, 0x11]}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=[{0x18, 0x29, 0x3, '\f'}], 0x18}, 0x0) [ 348.176971][T12735] block nbd4: Device being setup by another task [ 348.202241][T12735] block nbd4: shutting down sockets 18:49:38 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) [ 348.525895][T12757] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=00000000) 18:49:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300), 0x4) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 18:49:38 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {0x80000}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r7 = dup(r6) ioctl$NBD_SET_SOCK(r1, 0xab00, r7) ioctl$NBD_SET_SOCK(r0, 0xab00, r7) r8 = syz_open_dev$ndb(0x0, 0x0, 0x0) r9 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r9) keyctl$setperm(0x5, r9, 0x0) keyctl$reject(0x13, 0x0, 0x4, 0x2, r9) ioctl$NBD_CLEAR_SOCK(r8, 0xab04) 18:49:38 executing program 2: syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x84}], 0x10000000000003c3) 18:49:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000040), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) 18:49:38 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x29, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:38 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) [ 348.881094][T12775] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=00000000) 18:49:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x20, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) 18:49:38 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x2a, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:38 executing program 2: r0 = eventfd2(0x0, 0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000600)=""/4, 0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)) clone(0x3102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$RNDZAPENTCNT(r0, 0x5204, 0x0) [ 348.928047][T12783] device nr0 entered promiscuous mode [ 349.011114][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 349.016982][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:49:39 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) 18:49:39 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x0, [], [{0x5, 0x1ff, 0x7fffffff, 0xff, 0x4, 0x4240}, {0x8, 0x1f, 0x3, 0x7, 0x143, 0x994bcd2}], [[], [], [], [], [], [], [], []]}) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) 18:49:39 executing program 2: setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYBLOB="584060ce60b7aa1ba1ef23000000000000000000000000000000008088b9079a1f7111de998e2c1263fba68c8ae25cd6bdf245da0195fcfb31dcf08d460ae4fa3deab6469d44928011cf9d3df173e85cd465389532ca0f99271499610bbea4eb4ef2f8379e8e5f8f4aaa23"]], 0x1) clone(0x700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x390, 0xfffffffffffffffb) [ 349.259904][T12805] block nbd4: shutting down sockets [ 349.293917][T12806] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=00000000) [ 349.309359][T12808] block nbd4: shutting down sockets [ 349.340159][T12810] dns_resolver: Unsupported server list version (0) [ 349.359309][T12815] dns_resolver: Unsupported server list version (0) 18:49:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300), 0x4) r4 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 18:49:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x20000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x20000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}, 0x2c, {[{@cache_mmap='cache=mmap'}, {@aname={'aname', 0x3d, '/dev/cec#\x00'}}], [{@smackfsdef={'smackfsdef', 0x3d, '}/'}}, {@uid_gt={'uid>', r2}}, {@appraise_type='appraise_type=imasig'}, {@seclabel='seclabel'}]}}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) 18:49:39 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x2b, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:39 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, {}, {}, {}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}) r4 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) ioctl$NBD_SET_SOCK(r0, 0xab00, r4) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r7 = dup(r6) getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000180)={0x10001, 0x9, 0x4, 0x0, 0x8, {r8, r9/1000+10000}, {0x4, 0x2, 0x1, 0x1, 0x5, 0x6, "4ef562bd"}, 0x2, 0x4, @planes=&(0x7f0000000080)={0x401, 0x200, @mem_offset=0x8000, 0x3}, 0x8, 0x0, 0xffffffffffffffff}) ioctl$KVM_GET_PIT(r10, 0xc048ae65, &(0x7f0000000240)) 18:49:39 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) 18:49:39 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x2c, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 349.842873][T12826] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=00000000) 18:49:39 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x2d, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:40 executing program 0: r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r1, r0, 0x16, &(0x7f00000000c0)) clone3(&(0x7f00000002c0)={0x4000800, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x32}, &(0x7f0000000100)=""/162, 0xa2, &(0x7f00000001c0)=""/142, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, r1], 0x4}, 0x50) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000340)={0x0, @multicast1, 0x4e20, 0x2, 'lblcr\x00', 0x11, 0xdb3, 0x19}, 0x2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x2, 0xffffffffffffffff, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x101000, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) getsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r9 = accept4$alg(r8, 0x0, 0x0, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r11 = dup(r10) getsockopt$bt_rfcomm_RFCOMM_LM(r11, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r12 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000035c0)='/dev/hwrng\x00', 0x410580, 0x0) r13 = socket$inet(0x2, 0x4000000805, 0x0) r14 = socket$inet_sctp(0x2, 0x5, 0x84) r15 = dup3(r13, r14, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r14, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r15, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r14, &(0x7f00003cef9f)='7', 0x1, 0x20000080, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r14, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="02002000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r15, 0x84, 0x7a, &(0x7f000059aff8)={r16}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r12, 0x84, 0x75, &(0x7f0000003600)={r16, 0x1}, &(0x7f0000003640)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f00000005c0)={r16, 0x78, &(0x7f0000000540)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e22, 0xffff, @loopback, 0x5}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xb}}, @in6={0xa, 0x4e20, 0x800, @mcast1, 0xc99}]}, &(0x7f0000000600)=0x10) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205647, &(0x7f00000004c0)={0x0, 0x3, 0x9, r9, 0x0, &(0x7f0000000480)={0x980909, 0x6, [], @value=0x9}}) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000400)='trusted.overlay.opaque\x00', &(0x7f0000000440)='y\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000500)={0xa555, 0x8, 0xfffffffd, 0x1}, 0x10) r17 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r17, 0xc0386106, &(0x7f0000000000)) 18:49:40 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) [ 350.028646][T12842] device nr0 entered promiscuous mode 18:49:40 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000040)=0x11d2a60ba5380832) ioctl$KVM_PPC_ALLOCATE_HTAB(r4, 0xc004aea7, &(0x7f0000000000)=0x8000) r7 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r7) ioctl$NBD_SET_SOCK(r0, 0xab00, r7) r8 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r8, 0xab04) 18:49:40 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x2e, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 350.097404][T12847] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20000 [ 350.131104][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 350.137035][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 350.185309][T12849] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=00000000) [ 350.220617][T12852] block nbd4: shutting down sockets [ 350.238031][T12855] block nbd4: Device being setup by another task [ 350.245334][T12855] block nbd4: shutting down sockets 18:49:40 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x20002) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) umount2(&(0x7f0000000000)='./file0\x00', 0xb) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) [ 350.468213][T12862] block nbd4: shutting down sockets [ 350.498997][T12861] block nbd4: shutting down sockets 18:49:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300), 0x4) r4 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 18:49:40 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) 18:49:40 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='userselfselinux,!!#wlan1#-!}\\^mime_typecpusetposix_acl_accesswlan1bdev\x00', &(0x7f0000000080)) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, {}, {}, {}, {0x0, 0x8}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x15b, 0x9, 0x4, 0x20000, 0x9, {}, {0x2373df0fdbcfee72, 0xc, 0x6, 0x7, 0x88, 0x38, "a40f256f"}, 0x3ff, 0x4, @planes=&(0x7f0000000100)={0x5, 0x401, @userptr=0x40, 0x4}, 0x3f, 0x0, r3}) pread64(r3, &(0x7f00000006c0)=""/160, 0xa0, 0x1) setsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f00000001c0)=0x5, 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r6 = dup(r5) ioctl$NBD_SET_SOCK(r2, 0xab00, r6) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x48800, 0x0) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000000500)=0x4, &(0x7f0000000540)=0x2) syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x2, 0x2000) r8 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r8) keyctl$setperm(0x5, r8, 0x0) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f00000005c0)="09f81c98220a51b3562c29fd2f31c7c7b936f4ffa36164c6e909457a37911cae364a772211d63edc4ea406c07ede0701e138884420bb21965d92232df74218d6b29a50319894c07b3669583853cf5f12ef458e3c8864a13360ee57cfe27fad409eef2a44f1cfe4e5d4d80ada78ad242b659a8b019cc8f3e81d3d1085e57de205a252b098b89d3902a912e50981fe4fbdde1eebec58c2f3c0533473d99bd962feb0a84f05c11d44947558336dda22599ec8d8f4e4103af105eaba7d6a8831cadfe429be4061f3b7f181c974235eae70748ca32778ee57189f1a0686981a5821f09942849e3c", 0xe5, r8) r9 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r11 = dup(r10) getsockopt$bt_rfcomm_RFCOMM_LM(r11, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$NBD_SET_SOCK(r9, 0xab00, r11) r12 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r12, 0xab04) 18:49:40 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000000c0)={0x8000, 0x1, 0x2, 0x0, 0x3, [{0xaed7, 0x1, 0x80, [], 0x4}, {0x81, 0x7, 0xffffffffffffff00, [], 0x3000}, {0x200, 0x7, 0x8, [], 0x84}]}) r1 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, &(0x7f0000000000)=0x9, 0x4) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f0000000040)=0x2, 0x4) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) 18:49:40 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x2f, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 350.898987][T12873] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20000 [ 350.905755][T12871] block nbd4: shutting down sockets [ 350.939232][T12876] block nbd4: shutting down sockets [ 350.991162][T12880] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=00000000) 18:49:41 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:41 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2ff3460c2a924b48, 0xaa) r3 = dup(r2) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0xfffffffffffffec8) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) prctl$PR_GET_NO_NEW_PRIVS(0x27) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000080)={0x800, {{0x2, 0x4e21, @remote}}}, 0x88) 18:49:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfe, 0x6, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x404480, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x100f, 0x8f, 0x3}) r1 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc0386106, &(0x7f0000000000)) [ 351.033582][T12884] device nr0 entered promiscuous mode [ 351.101076][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 351.106942][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 351.141629][T12878] block nbd2: shutting down sockets 18:49:41 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) 18:49:41 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='userselfselinux,!!#wlan1#-!}\\^mime_typecpusetposix_acl_accesswlan1bdev\x00', &(0x7f0000000080)) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, {}, {}, {}, {0x0, 0x8}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x15b, 0x9, 0x4, 0x20000, 0x9, {}, {0x2373df0fdbcfee72, 0xc, 0x6, 0x7, 0x88, 0x38, "a40f256f"}, 0x3ff, 0x4, @planes=&(0x7f0000000100)={0x5, 0x401, @userptr=0x40, 0x4}, 0x3f, 0x0, r3}) pread64(r3, &(0x7f00000006c0)=""/160, 0xa0, 0x1) setsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f00000001c0)=0x5, 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r6 = dup(r5) ioctl$NBD_SET_SOCK(r2, 0xab00, r6) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x48800, 0x0) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000000500)=0x4, &(0x7f0000000540)=0x2) syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x2, 0x2000) r8 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r8) keyctl$setperm(0x5, r8, 0x0) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f00000005c0)="09f81c98220a51b3562c29fd2f31c7c7b936f4ffa36164c6e909457a37911cae364a772211d63edc4ea406c07ede0701e138884420bb21965d92232df74218d6b29a50319894c07b3669583853cf5f12ef458e3c8864a13360ee57cfe27fad409eef2a44f1cfe4e5d4d80ada78ad242b659a8b019cc8f3e81d3d1085e57de205a252b098b89d3902a912e50981fe4fbdde1eebec58c2f3c0533473d99bd962feb0a84f05c11d44947558336dda22599ec8d8f4e4103af105eaba7d6a8831cadfe429be4061f3b7f181c974235eae70748ca32778ee57189f1a0686981a5821f09942849e3c", 0xe5, r8) r9 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r11 = dup(r10) getsockopt$bt_rfcomm_RFCOMM_LM(r11, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$NBD_SET_SOCK(r9, 0xab00, r11) r12 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r12, 0xab04) 18:49:41 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/d#L\x00', 0x0, 0x4000) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) [ 351.318320][T12899] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=00000000) 18:49:41 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) [ 351.533540][T12906] block nbd2: shutting down sockets [ 351.624774][T12913] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=00000000) 18:49:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300), 0x4) r4 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 18:49:41 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r5, 0xc08c5336, &(0x7f0000000000)={0x5, 0x6, 0x0, 'queue0\x00', 0x1}) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x200, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) 18:49:41 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='userselfselinux,!!#wlan1#-!}\\^mime_typecpusetposix_acl_accesswlan1bdev\x00', &(0x7f0000000080)) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, {}, {}, {}, {0x0, 0x8}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x15b, 0x9, 0x4, 0x20000, 0x9, {}, {0x2373df0fdbcfee72, 0xc, 0x6, 0x7, 0x88, 0x38, "a40f256f"}, 0x3ff, 0x4, @planes=&(0x7f0000000100)={0x5, 0x401, @userptr=0x40, 0x4}, 0x3f, 0x0, r3}) pread64(r3, &(0x7f00000006c0)=""/160, 0xa0, 0x1) setsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f00000001c0)=0x5, 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r6 = dup(r5) ioctl$NBD_SET_SOCK(r2, 0xab00, r6) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x48800, 0x0) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000000500)=0x4, &(0x7f0000000540)=0x2) syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x2, 0x2000) r8 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r8) keyctl$setperm(0x5, r8, 0x0) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f00000005c0)="09f81c98220a51b3562c29fd2f31c7c7b936f4ffa36164c6e909457a37911cae364a772211d63edc4ea406c07ede0701e138884420bb21965d92232df74218d6b29a50319894c07b3669583853cf5f12ef458e3c8864a13360ee57cfe27fad409eef2a44f1cfe4e5d4d80ada78ad242b659a8b019cc8f3e81d3d1085e57de205a252b098b89d3902a912e50981fe4fbdde1eebec58c2f3c0533473d99bd962feb0a84f05c11d44947558336dda22599ec8d8f4e4103af105eaba7d6a8831cadfe429be4061f3b7f181c974235eae70748ca32778ee57189f1a0686981a5821f09942849e3c", 0xe5, r8) r9 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r11 = dup(r10) getsockopt$bt_rfcomm_RFCOMM_LM(r11, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$NBD_SET_SOCK(r9, 0xab00, r11) r12 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r12, 0xab04) 18:49:41 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x31, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:41 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) [ 352.059548][T12928] block nbd4: shutting down sockets 18:49:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x800000, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000035c0)='/dev/hwrng\x00', 0x410580, 0x0) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x20000080, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000003600)={r8, 0x1}, &(0x7f0000003640)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000140)={r8, 0xb9, "f8b57c4e341f75000cfb761e8b073590700969d967b729eb64c13cc54ad58b1a9a59c59bd966505f78cd546ff4be39054bddd4f120a47213ebd80b030f40199f7bd1982ffbec2d49abffec4e67675e09a85b4dc806ad013b58f19d5286e81a82e459d8d4d6fb896fb3c66bd652bb4c579c7daa2fad32a5a2ca54935e54b5a1ca6453a88591fddb6240b5e33995239a70b1970faa6669723b751c05195f4d32db19424edb5606a0b75c50d3d2482ca80cf980b7f2c40a98298c"}, &(0x7f0000000240)=0xc1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000280)={r9, 0xe0a}, &(0x7f00000002c0)=0x8) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000080)={0x8634b18fa6b039de, 0x0, [], @raw_data=[0x80000001, 0x7fffffff, 0x8, 0x5, 0x9, 0x0, 0x200, 0x3640, 0x6, 0x1, 0x1, 0x8, 0x9, 0x8001, 0x1, 0xfffffffb, 0x5, 0x2, 0x4, 0x6, 0x7, 0x80000001, 0x0, 0x7fff, 0x7fff, 0x957, 0x6, 0x3, 0x9, 0x3, 0x7, 0x4]}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x4010, r1, 0x0) 18:49:42 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x32, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 352.111169][T12930] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=00000000) [ 352.134303][T12934] device nr0 entered promiscuous mode [ 352.190645][T12938] block nbd4: Device being setup by another task [ 352.211077][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 352.216943][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 352.238239][T12922] block nbd4: shutting down sockets 18:49:42 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) [ 352.271911][T12927] block nbd2: shutting down sockets 18:49:42 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='userselfselinux,!!#wlan1#-!}\\^mime_typecpusetposix_acl_accesswlan1bdev\x00', &(0x7f0000000080)) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, {}, {}, {}, {0x0, 0x8}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x15b, 0x9, 0x4, 0x20000, 0x9, {}, {0x2373df0fdbcfee72, 0xc, 0x6, 0x7, 0x88, 0x38, "a40f256f"}, 0x3ff, 0x4, @planes=&(0x7f0000000100)={0x5, 0x401, @userptr=0x40, 0x4}, 0x3f, 0x0, r3}) pread64(r3, &(0x7f00000006c0)=""/160, 0xa0, 0x1) setsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f00000001c0)=0x5, 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r6 = dup(r5) ioctl$NBD_SET_SOCK(r2, 0xab00, r6) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x48800, 0x0) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000000500)=0x4, &(0x7f0000000540)=0x2) syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x2, 0x2000) r8 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r8) keyctl$setperm(0x5, r8, 0x0) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f00000005c0)="09f81c98220a51b3562c29fd2f31c7c7b936f4ffa36164c6e909457a37911cae364a772211d63edc4ea406c07ede0701e138884420bb21965d92232df74218d6b29a50319894c07b3669583853cf5f12ef458e3c8864a13360ee57cfe27fad409eef2a44f1cfe4e5d4d80ada78ad242b659a8b019cc8f3e81d3d1085e57de205a252b098b89d3902a912e50981fe4fbdde1eebec58c2f3c0533473d99bd962feb0a84f05c11d44947558336dda22599ec8d8f4e4103af105eaba7d6a8831cadfe429be4061f3b7f181c974235eae70748ca32778ee57189f1a0686981a5821f09942849e3c", 0xe5, r8) r9 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r11 = dup(r10) getsockopt$bt_rfcomm_RFCOMM_LM(r11, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$NBD_SET_SOCK(r9, 0xab00, r11) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 18:49:42 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r5, 0x101, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$sock_int(r5, 0x1, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 18:49:42 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x41, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 352.640661][T12945] block nbd2: shutting down sockets [ 352.794126][T12951] block nbd4: shutting down sockets 18:49:42 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='userselfselinux,!!#wlan1#-!}\\^mime_typecpusetposix_acl_accesswlan1bdev\x00', &(0x7f0000000080)) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, {}, {}, {}, {0x0, 0x8}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x15b, 0x9, 0x4, 0x20000, 0x9, {}, {0x2373df0fdbcfee72, 0xc, 0x6, 0x7, 0x88, 0x38, "a40f256f"}, 0x3ff, 0x4, @planes=&(0x7f0000000100)={0x5, 0x401, @userptr=0x40, 0x4}, 0x3f, 0x0, r3}) pread64(r3, &(0x7f00000006c0)=""/160, 0xa0, 0x1) setsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f00000001c0)=0x5, 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r6 = dup(r5) ioctl$NBD_SET_SOCK(r2, 0xab00, r6) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x48800, 0x0) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000000500)=0x4, &(0x7f0000000540)=0x2) syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x2, 0x2000) r8 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r8) keyctl$setperm(0x5, r8, 0x0) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f00000005c0)="09f81c98220a51b3562c29fd2f31c7c7b936f4ffa36164c6e909457a37911cae364a772211d63edc4ea406c07ede0701e138884420bb21965d92232df74218d6b29a50319894c07b3669583853cf5f12ef458e3c8864a13360ee57cfe27fad409eef2a44f1cfe4e5d4d80ada78ad242b659a8b019cc8f3e81d3d1085e57de205a252b098b89d3902a912e50981fe4fbdde1eebec58c2f3c0533473d99bd962feb0a84f05c11d44947558336dda22599ec8d8f4e4103af105eaba7d6a8831cadfe429be4061f3b7f181c974235eae70748ca32778ee57189f1a0686981a5821f09942849e3c", 0xe5, r8) r9 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r11 = dup(r10) getsockopt$bt_rfcomm_RFCOMM_LM(r11, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$NBD_SET_SOCK(r9, 0xab00, r11) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) [ 352.967179][T12954] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=00000000) [ 353.091070][ C1] net_ratelimit: 4 callbacks suppressed [ 353.091078][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 353.102509][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 353.136918][T12958] block nbd2: shutting down sockets [ 353.171133][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 353.177469][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 353.245518][T12951] block nbd4: Device being setup by another task [ 353.264307][T12951] block nbd4: shutting down sockets 18:49:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300), 0x4) r4 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r4, 0x0) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 18:49:43 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x42, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:43 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) 18:49:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x523) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000040)=0xffffffff, 0x4) pause() ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) setsockopt$inet_buf(r2, 0x0, 0x0, &(0x7f0000000140)="53c53cb046bfc85430373448b834e23982bcf7a9f5ca835cc4dd684285fe7d103dda21910ad688e63764da08784249ed5c392d16fe2851757d3abc3c1aca159a4d7af133548b6b5758408c723b796e840f4959179a76b8322762ecaf1780751d842091da4c012c27b079dfbafc0b9d9d3b9403ae", 0x74) r6 = dup(r5) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x20, 0x4) 18:49:43 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='userselfselinux,!!#wlan1#-!}\\^mime_typecpusetposix_acl_accesswlan1bdev\x00', &(0x7f0000000080)) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, {}, {}, {}, {0x0, 0x8}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x15b, 0x9, 0x4, 0x20000, 0x9, {}, {0x2373df0fdbcfee72, 0xc, 0x6, 0x7, 0x88, 0x38, "a40f256f"}, 0x3ff, 0x4, @planes=&(0x7f0000000100)={0x5, 0x401, @userptr=0x40, 0x4}, 0x3f, 0x0, r3}) pread64(r3, &(0x7f00000006c0)=""/160, 0xa0, 0x1) setsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f00000001c0)=0x5, 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r6 = dup(r5) ioctl$NBD_SET_SOCK(r2, 0xab00, r6) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x48800, 0x0) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000000500)=0x4, &(0x7f0000000540)=0x2) syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x2, 0x2000) r8 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r8) keyctl$setperm(0x5, r8, 0x0) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f00000005c0)="09f81c98220a51b3562c29fd2f31c7c7b936f4ffa36164c6e909457a37911cae364a772211d63edc4ea406c07ede0701e138884420bb21965d92232df74218d6b29a50319894c07b3669583853cf5f12ef458e3c8864a13360ee57cfe27fad409eef2a44f1cfe4e5d4d80ada78ad242b659a8b019cc8f3e81d3d1085e57de205a252b098b89d3902a912e50981fe4fbdde1eebec58c2f3c0533473d99bd962feb0a84f05c11d44947558336dda22599ec8d8f4e4103af105eaba7d6a8831cadfe429be4061f3b7f181c974235eae70748ca32778ee57189f1a0686981a5821f09942849e3c", 0xe5, r8) r9 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r11 = dup(r10) getsockopt$bt_rfcomm_RFCOMM_LM(r11, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$NBD_SET_SOCK(r9, 0xab00, r11) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 18:49:43 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/218) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) [ 353.598264][T12981] block nbd4: shutting down sockets [ 353.607927][T12972] block nbd2: shutting down sockets 18:49:43 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x43, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:43 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x60, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 353.661331][T12977] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=00000000) 18:49:43 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='userselfselinux,!!#wlan1#-!}\\^mime_typecpusetposix_acl_accesswlan1bdev\x00', &(0x7f0000000080)) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, {}, {}, {}, {0x0, 0x8}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x15b, 0x9, 0x4, 0x20000, 0x9, {}, {0x2373df0fdbcfee72, 0xc, 0x6, 0x7, 0x88, 0x38, "a40f256f"}, 0x3ff, 0x4, @planes=&(0x7f0000000100)={0x5, 0x401, @userptr=0x40, 0x4}, 0x3f, 0x0, r3}) pread64(r3, &(0x7f00000006c0)=""/160, 0xa0, 0x1) setsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f00000001c0)=0x5, 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r6 = dup(r5) ioctl$NBD_SET_SOCK(r2, 0xab00, r6) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x48800, 0x0) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000000500)=0x4, &(0x7f0000000540)=0x2) syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x2, 0x2000) r8 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r8) keyctl$setperm(0x5, r8, 0x0) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f00000005c0)="09f81c98220a51b3562c29fd2f31c7c7b936f4ffa36164c6e909457a37911cae364a772211d63edc4ea406c07ede0701e138884420bb21965d92232df74218d6b29a50319894c07b3669583853cf5f12ef458e3c8864a13360ee57cfe27fad409eef2a44f1cfe4e5d4d80ada78ad242b659a8b019cc8f3e81d3d1085e57de205a252b098b89d3902a912e50981fe4fbdde1eebec58c2f3c0533473d99bd962feb0a84f05c11d44947558336dda22599ec8d8f4e4103af105eaba7d6a8831cadfe429be4061f3b7f181c974235eae70748ca32778ee57189f1a0686981a5821f09942849e3c", 0xe5, r8) syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r10 = dup(r9) getsockopt$bt_rfcomm_RFCOMM_LM(r10, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r11 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r11, 0xab04) [ 353.737012][T12989] block nbd4: Device being setup by another task [ 353.759393][T12989] block nbd4: shutting down sockets [ 353.763882][T12991] device nr0 entered promiscuous mode 18:49:43 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2={0x2000000, [{0x7f, 0xfff}, {0xfffffff9, 0x3}]}, 0x14, 0x2) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 18:49:43 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="0a617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:43 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) [ 353.924305][T12998] block nbd2: shutting down sockets [ 354.058564][T13006] block nbd4: shutting down sockets [ 354.071599][T13007] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=00000000) [ 354.077094][T13006] block nbd4: Device being setup by another task [ 354.102833][T13011] xt_l2tp: missing protocol rule (udp|l2tpip) [ 354.111488][T13000] block nbd4: shutting down sockets [ 354.291052][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 354.296894][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:49:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300), 0x4) r4 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r4, 0x0) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 18:49:44 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='userselfselinux,!!#wlan1#-!}\\^mime_typecpusetposix_acl_accesswlan1bdev\x00', &(0x7f0000000080)) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, {}, {}, {}, {0x0, 0x8}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x15b, 0x9, 0x4, 0x20000, 0x9, {}, {0x2373df0fdbcfee72, 0xc, 0x6, 0x7, 0x88, 0x38, "a40f256f"}, 0x3ff, 0x4, @planes=&(0x7f0000000100)={0x5, 0x401, @userptr=0x40, 0x4}, 0x3f, 0x0, r3}) pread64(r3, &(0x7f00000006c0)=""/160, 0xa0, 0x1) setsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f00000001c0)=0x5, 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r6 = dup(r5) ioctl$NBD_SET_SOCK(r2, 0xab00, r6) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x48800, 0x0) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000000500)=0x4, &(0x7f0000000540)=0x2) syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x2, 0x2000) r8 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r8) keyctl$setperm(0x5, r8, 0x0) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f00000005c0)="09f81c98220a51b3562c29fd2f31c7c7b936f4ffa36164c6e909457a37911cae364a772211d63edc4ea406c07ede0701e138884420bb21965d92232df74218d6b29a50319894c07b3669583853cf5f12ef458e3c8864a13360ee57cfe27fad409eef2a44f1cfe4e5d4d80ada78ad242b659a8b019cc8f3e81d3d1085e57de205a252b098b89d3902a912e50981fe4fbdde1eebec58c2f3c0533473d99bd962feb0a84f05c11d44947558336dda22599ec8d8f4e4103af105eaba7d6a8831cadfe429be4061f3b7f181c974235eae70748ca32778ee57189f1a0686981a5821f09942849e3c", 0xe5, r8) syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r10 = dup(r9) getsockopt$bt_rfcomm_RFCOMM_LM(r10, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r11 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r11, 0xab04) 18:49:44 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="25617700000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:44 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb8", 0x5}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) 18:49:44 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) r5 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x4, 0x640a23d39af2d9d5) fsetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.origin\x00', &(0x7f0000000080)='%wlan0\x00', 0x7, 0x0) 18:49:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000400)="082aebe613926f8c75aefe0f3fc47739e6701cce064f98de2c44e489af11fc07c9849bda883ab1ab0cc6f0bd482332d5bca9457d2e763c0dfa06d9447d58168f76a14251ba7f29c7be353974ae0472576c3df7f54a4be98fe5c000699d9c336d8f32d6f2ca89796abc673fa07e213cfc9e087b1657ffdad9625bcc50746c4a945da2aa8eb679e6a4f3550e99a2f78da1a83d49c1d8e07b40ec65010aa33ec7960decec126a2cc72c5d1db386d5f03e8c0415d82a6db05afdc1f3063c753c62faf9768d943e9c3a56b01f6a18b03e73a0481909284a3acbfe3e2157e5de2f852236ca49d573a2fedd651646b406169944ddcfaafee3cc") openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000380)='/dev/watch_queue\x00', 0x101000, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0xc0386106, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20\x00', 0x509000, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000800), &(0x7f0000000780)=0xfffffffffffffebd) ioctl$VIDIOC_G_AUDIO(r5, 0x80345621, &(0x7f0000000500)) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x2b) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e22, @loopback}}, 0x8, 0x2}, &(0x7f0000000600)=0x90) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r10 = dup(r9) getsockopt$bt_rfcomm_RFCOMM_LM(r10, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r10, 0x80184151, &(0x7f00000007c0)={0x0, &(0x7f00000006c0)="b120475681076446aac0d6aee10063bf827b9cbed58f28617d51f1b470f569756d35cfc75f264a9bdf3bf3f6424eddb32e470193db47005d0f2632f19a565f341f7f55be784568e88e95f2f18c144fe50813c587cf3c82e209fd583e0539f403f2e9ff0e83a3f076188876ab770d6f6b8960f1242009646c685334375a9219d8242a5b51092760de47b9d757d8b54fa4734d77a60a20e9e6f0f7be1e595fc8e88798277b03a4f5c51512c29c2f41e6ba0fe99e943c5e", 0xb6}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000640)={r8, 0x81, 0x9}, &(0x7f0000000680)=0x8) recvmsg$can_raw(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/190, 0xbe}, {&(0x7f0000000100)=""/22, 0x16}, {&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/215, 0xd7}], 0x4}, 0x2090) [ 354.689300][T13026] xt_l2tp: missing protocol rule (udp|l2tpip) [ 354.703680][T13029] block nbd4: shutting down sockets [ 354.738994][T13028] block nbd2: shutting down sockets [ 354.767528][T13029] block nbd4: Device being setup by another task [ 354.783258][T13032] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=00000000) 18:49:44 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617702000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 354.807769][T13036] device nr0 entered promiscuous mode [ 354.818755][T13029] block nbd4: shutting down sockets 18:49:44 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617703000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:44 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='userselfselinux,!!#wlan1#-!}\\^mime_typecpusetposix_acl_accesswlan1bdev\x00', &(0x7f0000000080)) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, {}, {}, {}, {0x0, 0x8}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x15b, 0x9, 0x4, 0x20000, 0x9, {}, {0x2373df0fdbcfee72, 0xc, 0x6, 0x7, 0x88, 0x38, "a40f256f"}, 0x3ff, 0x4, @planes=&(0x7f0000000100)={0x5, 0x401, @userptr=0x40, 0x4}, 0x3f, 0x0, r3}) pread64(r3, &(0x7f00000006c0)=""/160, 0xa0, 0x1) setsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f00000001c0)=0x5, 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r6 = dup(r5) ioctl$NBD_SET_SOCK(r2, 0xab00, r6) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x48800, 0x0) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000000500)=0x4, &(0x7f0000000540)=0x2) syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x2, 0x2000) r8 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r8) keyctl$setperm(0x5, r8, 0x0) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f00000005c0)="09f81c98220a51b3562c29fd2f31c7c7b936f4ffa36164c6e909457a37911cae364a772211d63edc4ea406c07ede0701e138884420bb21965d92232df74218d6b29a50319894c07b3669583853cf5f12ef458e3c8864a13360ee57cfe27fad409eef2a44f1cfe4e5d4d80ada78ad242b659a8b019cc8f3e81d3d1085e57de205a252b098b89d3902a912e50981fe4fbdde1eebec58c2f3c0533473d99bd962feb0a84f05c11d44947558336dda22599ec8d8f4e4103af105eaba7d6a8831cadfe429be4061f3b7f181c974235eae70748ca32778ee57189f1a0686981a5821f09942849e3c", 0xe5, r8) syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r10 = dup(r9) getsockopt$bt_rfcomm_RFCOMM_LM(r10, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r11 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r11, 0xab04) [ 354.868067][T13041] xt_l2tp: missing protocol rule (udp|l2tpip) 18:49:44 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb8", 0x5}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) [ 355.011045][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 355.011078][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 355.016847][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 355.047756][T13048] xt_l2tp: missing protocol rule (udp|l2tpip) 18:49:45 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617704000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 355.097681][T13049] block nbd2: shutting down sockets 18:49:45 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='userselfselinux,!!#wlan1#-!}\\^mime_typecpusetposix_acl_accesswlan1bdev\x00', &(0x7f0000000080)) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, {}, {}, {}, {0x0, 0x8}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x15b, 0x9, 0x4, 0x20000, 0x9, {}, {0x2373df0fdbcfee72, 0xc, 0x6, 0x7, 0x88, 0x38, "a40f256f"}, 0x3ff, 0x4, @planes=&(0x7f0000000100)={0x5, 0x401, @userptr=0x40, 0x4}, 0x3f, 0x0, r3}) pread64(r3, &(0x7f00000006c0)=""/160, 0xa0, 0x1) setsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f00000001c0)=0x5, 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r6 = dup(r5) ioctl$NBD_SET_SOCK(r2, 0xab00, r6) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x48800, 0x0) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000000500)=0x4, &(0x7f0000000540)=0x2) syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x2, 0x2000) r8 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r8) keyctl$setperm(0x5, r8, 0x0) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f00000005c0)="09f81c98220a51b3562c29fd2f31c7c7b936f4ffa36164c6e909457a37911cae364a772211d63edc4ea406c07ede0701e138884420bb21965d92232df74218d6b29a50319894c07b3669583853cf5f12ef458e3c8864a13360ee57cfe27fad409eef2a44f1cfe4e5d4d80ada78ad242b659a8b019cc8f3e81d3d1085e57de205a252b098b89d3902a912e50981fe4fbdde1eebec58c2f3c0533473d99bd962feb0a84f05c11d44947558336dda22599ec8d8f4e4103af105eaba7d6a8831cadfe429be4061f3b7f181c974235eae70748ca32778ee57189f1a0686981a5821f09942849e3c", 0xe5, r8) r9 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r11 = dup(r10) ioctl$NBD_SET_SOCK(r9, 0xab00, r11) r12 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r12, 0xab04) [ 355.171094][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 355.183532][T13055] xt_l2tp: missing protocol rule (udp|l2tpip) [ 355.209991][T13051] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=00000000) [ 355.225607][T13058] block nbd2: shutting down sockets 18:49:45 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617705000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:45 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='userselfselinux,!!#wlan1#-!}\\^mime_typecpusetposix_acl_accesswlan1bdev\x00', &(0x7f0000000080)) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, {}, {}, {}, {0x0, 0x8}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x15b, 0x9, 0x4, 0x20000, 0x9, {}, {0x2373df0fdbcfee72, 0xc, 0x6, 0x7, 0x88, 0x38, "a40f256f"}, 0x3ff, 0x4, @planes=&(0x7f0000000100)={0x5, 0x401, @userptr=0x40, 0x4}, 0x3f, 0x0, r3}) pread64(r3, &(0x7f00000006c0)=""/160, 0xa0, 0x1) setsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f00000001c0)=0x5, 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r6 = dup(r5) ioctl$NBD_SET_SOCK(r2, 0xab00, r6) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x48800, 0x0) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000000500)=0x4, &(0x7f0000000540)=0x2) syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x2, 0x2000) r8 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r8) keyctl$setperm(0x5, r8, 0x0) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f00000005c0)="09f81c98220a51b3562c29fd2f31c7c7b936f4ffa36164c6e909457a37911cae364a772211d63edc4ea406c07ede0701e138884420bb21965d92232df74218d6b29a50319894c07b3669583853cf5f12ef458e3c8864a13360ee57cfe27fad409eef2a44f1cfe4e5d4d80ada78ad242b659a8b019cc8f3e81d3d1085e57de205a252b098b89d3902a912e50981fe4fbdde1eebec58c2f3c0533473d99bd962feb0a84f05c11d44947558336dda22599ec8d8f4e4103af105eaba7d6a8831cadfe429be4061f3b7f181c974235eae70748ca32778ee57189f1a0686981a5821f09942849e3c", 0xe5, r8) r9 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$NBD_SET_SOCK(r9, 0xab00, 0xffffffffffffffff) r10 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r10, 0xab04) 18:49:45 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb8", 0x5}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) 18:49:45 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x104000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r3, 0x301}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x8050}, 0x40) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r6 = dup(r5) ioctl$NBD_SET_SOCK(r4, 0xab00, r6) ioctl$NBD_SET_SOCK(r0, 0xab00, r6) r7 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r7, 0xab04) 18:49:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300), 0x4) r4 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r4, 0x0) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 18:49:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xc4, 0x0, 0x7f, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x1}, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000300), &(0x7f00000001c0)=0x4) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r6, 0x80605414, &(0x7f0000000280)) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) getsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$DRM_IOCTL_MODESET_CTL(r8, 0x40086408, &(0x7f0000000200)={0xa9000000, 0xab}) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x4, 0x2, 0x4, 0x800, 0x5, {r2, r3/1000+30000}, {0x5, 0xc411253049b3af3e, 0x1f, 0x7, 0xe1, 0x4, "cf3e4beb"}, 0x0, 0x0, @userptr=0x1ff, 0xbf2, 0x0, r4}) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r11 = dup(r10) getsockopt$bt_rfcomm_RFCOMM_LM(r11, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$SNDCTL_DSP_SUBDIVIDE(r11, 0xc0045009, &(0x7f0000000180)=0x7) ioctl$sock_inet6_tcp_SIOCINQ(r9, 0xc0386106, &(0x7f0000000100)) [ 355.759865][T13078] xt_l2tp: missing protocol rule (udp|l2tpip) [ 355.776425][T13074] block nbd2: shutting down sockets [ 355.795801][T13076] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=00000000) [ 355.807331][T13080] block nbd4: shutting down sockets [ 355.829338][T13082] device nr0 entered promiscuous mode 18:49:45 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='userselfselinux,!!#wlan1#-!}\\^mime_typecpusetposix_acl_accesswlan1bdev\x00', &(0x7f0000000080)) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, {}, {}, {}, {0x0, 0x8}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x15b, 0x9, 0x4, 0x20000, 0x9, {}, {0x2373df0fdbcfee72, 0xc, 0x6, 0x7, 0x88, 0x38, "a40f256f"}, 0x3ff, 0x4, @planes=&(0x7f0000000100)={0x5, 0x401, @userptr=0x40, 0x4}, 0x3f, 0x0, r3}) pread64(r3, &(0x7f00000006c0)=""/160, 0xa0, 0x1) setsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f00000001c0)=0x5, 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r6 = dup(r5) ioctl$NBD_SET_SOCK(r2, 0xab00, r6) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x48800, 0x0) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000000500)=0x4, &(0x7f0000000540)=0x2) syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x2, 0x2000) r8 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r8) keyctl$setperm(0x5, r8, 0x0) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f00000005c0)="09f81c98220a51b3562c29fd2f31c7c7b936f4ffa36164c6e909457a37911cae364a772211d63edc4ea406c07ede0701e138884420bb21965d92232df74218d6b29a50319894c07b3669583853cf5f12ef458e3c8864a13360ee57cfe27fad409eef2a44f1cfe4e5d4d80ada78ad242b659a8b019cc8f3e81d3d1085e57de205a252b098b89d3902a912e50981fe4fbdde1eebec58c2f3c0533473d99bd962feb0a84f05c11d44947558336dda22599ec8d8f4e4103af105eaba7d6a8831cadfe429be4061f3b7f181c974235eae70748ca32778ee57189f1a0686981a5821f09942849e3c", 0xe5, r8) r9 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$NBD_SET_SOCK(r9, 0xab00, 0xffffffffffffffff) r10 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r10, 0xab04) 18:49:45 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617706000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 355.883562][T13071] block nbd4: shutting down sockets 18:49:45 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c0000", 0x8}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) 18:49:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) socket$inet_dccp(0x2, 0x6, 0x0) r2 = dup2(r0, r1) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0386106, &(0x7f0000000040)) [ 356.088855][T13094] xt_l2tp: missing protocol rule (udp|l2tpip) [ 356.103588][T13091] block nbd2: shutting down sockets 18:49:46 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x100, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000040)={0x44b, 0xfff, 0x8, 0xd74, 0x11, 0x7fff}) syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x20, 0x2101) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r5 = dup(r4) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r6, 0x101, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r9 = epoll_create1(0x0) r10 = fcntl$dupfd(r9, 0x2, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800a61e0f2f000000000000000000009500a60000000000006f3418267570726668ed652684ae109e73eaf51e0478457f979f5dc2ca98bf92dcd2be74fc339a2c813b3d1219d4825cbfda9736ccb70e15dcdfd293e59be6452ec5eb6988839c7f75eb83bb6dbd413480e7096f60bce59ceed05836fe0a4a876d4f18316b5093bd1466b84376b35400"/149], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r8, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r10}, 0x78) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={0x0, @hci={0x1f, 0xffffffffffffffff, 0x2}, @rc={0x1f, {0x81, 0x3f, 0x4, 0x15, 0x3, 0x48}, 0x80}, @xdp={0x2c, 0x0, r8, 0x1c}, 0x9, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)='bridge_slave_0\x00', 0x0, 0x1}) ioctl$NBD_SET_SOCK(r1, 0xab00, r5) ioctl$NBD_SET_SOCK(r0, 0xab00, r5) r11 = syz_open_dev$ndb(0x0, 0x0, 0x0) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r13 = dup(r12) getsockopt$bt_rfcomm_RFCOMM_LM(r13, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$TIOCL_BLANKSCREEN(r13, 0x541c, &(0x7f0000000080)) ioctl$NBD_CLEAR_SOCK(r11, 0xab04) 18:49:46 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617707000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:46 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='userselfselinux,!!#wlan1#-!}\\^mime_typecpusetposix_acl_accesswlan1bdev\x00', &(0x7f0000000080)) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, {}, {}, {}, {0x0, 0x8}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x15b, 0x9, 0x4, 0x20000, 0x9, {}, {0x2373df0fdbcfee72, 0xc, 0x6, 0x7, 0x88, 0x38, "a40f256f"}, 0x3ff, 0x4, @planes=&(0x7f0000000100)={0x5, 0x401, @userptr=0x40, 0x4}, 0x3f, 0x0, r3}) pread64(r3, &(0x7f00000006c0)=""/160, 0xa0, 0x1) setsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f00000001c0)=0x5, 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r6 = dup(r5) ioctl$NBD_SET_SOCK(r2, 0xab00, r6) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x48800, 0x0) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000000500)=0x4, &(0x7f0000000540)=0x2) syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x2, 0x2000) r8 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r8) keyctl$setperm(0x5, r8, 0x0) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f00000005c0)="09f81c98220a51b3562c29fd2f31c7c7b936f4ffa36164c6e909457a37911cae364a772211d63edc4ea406c07ede0701e138884420bb21965d92232df74218d6b29a50319894c07b3669583853cf5f12ef458e3c8864a13360ee57cfe27fad409eef2a44f1cfe4e5d4d80ada78ad242b659a8b019cc8f3e81d3d1085e57de205a252b098b89d3902a912e50981fe4fbdde1eebec58c2f3c0533473d99bd962feb0a84f05c11d44947558336dda22599ec8d8f4e4103af105eaba7d6a8831cadfe429be4061f3b7f181c974235eae70748ca32778ee57189f1a0686981a5821f09942849e3c", 0xe5, r8) r9 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$NBD_SET_SOCK(r9, 0xab00, 0xffffffffffffffff) r10 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r10, 0xab04) [ 356.247003][T13098] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=00000000) 18:49:46 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair(0x8, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) ioctl$NBD_SET_SOCK(r0, 0xab00, r4) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) 18:49:46 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c0000", 0x8}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) [ 356.450048][T13114] xt_l2tp: missing protocol rule (udp|l2tpip) [ 356.512401][T13113] block nbd2: shutting down sockets 18:49:46 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617711000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300), 0x4) r4 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r4, 0x200004) sendfile(0xffffffffffffffff, r4, 0x0, 0x80001d00c0d0) [ 356.616199][T13118] block nbd4: shutting down sockets 18:49:46 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='userselfselinux,!!#wlan1#-!}\\^mime_typecpusetposix_acl_accesswlan1bdev\x00', &(0x7f0000000080)) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, {}, {}, {}, {0x0, 0x8}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x15b, 0x9, 0x4, 0x20000, 0x9, {}, {0x2373df0fdbcfee72, 0xc, 0x6, 0x7, 0x88, 0x38, "a40f256f"}, 0x3ff, 0x4, @planes=&(0x7f0000000100)={0x5, 0x401, @userptr=0x40, 0x4}, 0x3f, 0x0, r3}) pread64(r3, &(0x7f00000006c0)=""/160, 0xa0, 0x1) setsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f00000001c0)=0x5, 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r6 = dup(r5) ioctl$NBD_SET_SOCK(r2, 0xab00, r6) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x48800, 0x0) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000000500)=0x4, &(0x7f0000000540)=0x2) syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x2, 0x2000) r8 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r8) keyctl$setperm(0x5, r8, 0x0) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f00000005c0)="09f81c98220a51b3562c29fd2f31c7c7b936f4ffa36164c6e909457a37911cae364a772211d63edc4ea406c07ede0701e138884420bb21965d92232df74218d6b29a50319894c07b3669583853cf5f12ef458e3c8864a13360ee57cfe27fad409eef2a44f1cfe4e5d4d80ada78ad242b659a8b019cc8f3e81d3d1085e57de205a252b098b89d3902a912e50981fe4fbdde1eebec58c2f3c0533473d99bd962feb0a84f05c11d44947558336dda22599ec8d8f4e4103af105eaba7d6a8831cadfe429be4061f3b7f181c974235eae70748ca32778ee57189f1a0686981a5821f09942849e3c", 0xe5, r8) r9 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) r10 = dup(0xffffffffffffffff) ioctl$NBD_SET_SOCK(r9, 0xab00, r10) r11 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r11, 0xab04) [ 356.668896][T13123] xt_l2tp: missing protocol rule (udp|l2tpip) [ 356.679550][T13118] block nbd4: Device being setup by another task [ 356.720137][T13122] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=00000000) [ 356.741106][T13118] block nbd4: shutting down sockets 18:49:46 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617748000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:46 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x578ef9e7424ef97) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = dup(r1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) name_to_handle_at(r4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x6d, 0x8, "40c6daf9653c6f3c787d36f336e4b7dd43157d4bd95b7f97c60437867d3edac9ee9dbfc6012f353d542f577eb20b46abff795badf011d597320657cc9bca4e56934cbde8f1d0a0c9cddd0e468b697bfd321497fc6796f59e6cf9a42b181680685a852d5876"}, &(0x7f00000000c0), 0x1000) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) [ 356.797837][T13132] device nr0 entered promiscuous mode [ 356.881665][T13134] block nbd2: shutting down sockets 18:49:46 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c0000", 0x8}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) [ 356.970187][T13140] block nbd4: shutting down sockets [ 357.008165][T13142] xt_l2tp: missing protocol rule (udp|l2tpip) [ 357.054928][T13144] block nbd4: shutting down sockets [ 357.156266][T13146] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=00000000) 18:49:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/\xcd\x1f\xfe\xff\xff', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000100)=[0x2, 0x4]) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x0, 0x7, 0x4, 0x9, 0x0, 0x0, 0x8, 0x2, 0x0, 0x9, 0x8d82, 0x800, 0x7, 0x1, 0x6, 0x5b98], 0x2000, 0x4}) 18:49:47 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='userselfselinux,!!#wlan1#-!}\\^mime_typecpusetposix_acl_accesswlan1bdev\x00', &(0x7f0000000080)) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, {}, {}, {}, {0x0, 0x8}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x15b, 0x9, 0x4, 0x20000, 0x9, {}, {0x2373df0fdbcfee72, 0xc, 0x6, 0x7, 0x88, 0x38, "a40f256f"}, 0x3ff, 0x4, @planes=&(0x7f0000000100)={0x5, 0x401, @userptr=0x40, 0x4}, 0x3f, 0x0, r3}) pread64(r3, &(0x7f00000006c0)=""/160, 0xa0, 0x1) setsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f00000001c0)=0x5, 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r6 = dup(r5) ioctl$NBD_SET_SOCK(r2, 0xab00, r6) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x48800, 0x0) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000000500)=0x4, &(0x7f0000000540)=0x2) syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x2, 0x2000) r8 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r8) keyctl$setperm(0x5, r8, 0x0) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f00000005c0)="09f81c98220a51b3562c29fd2f31c7c7b936f4ffa36164c6e909457a37911cae364a772211d63edc4ea406c07ede0701e138884420bb21965d92232df74218d6b29a50319894c07b3669583853cf5f12ef458e3c8864a13360ee57cfe27fad409eef2a44f1cfe4e5d4d80ada78ad242b659a8b019cc8f3e81d3d1085e57de205a252b098b89d3902a912e50981fe4fbdde1eebec58c2f3c0533473d99bd962feb0a84f05c11d44947558336dda22599ec8d8f4e4103af105eaba7d6a8831cadfe429be4061f3b7f181c974235eae70748ca32778ee57189f1a0686981a5821f09942849e3c", 0xe5, r8) r9 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) r10 = dup(0xffffffffffffffff) ioctl$NBD_SET_SOCK(r9, 0xab00, r10) r11 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r11, 0xab04) 18:49:47 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="7261774c000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:47 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x40, 0xab00) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x10, r5, 0xbd8be000) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x2) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 18:49:47 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040", 0x9}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) [ 357.426445][T13162] block nbd4: shutting down sockets 18:49:47 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617760000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 357.464991][T13160] block nbd2: shutting down sockets [ 357.510581][T13156] block nbd4: shutting down sockets 18:49:47 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$RTC_WIE_ON(r5, 0x700f) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) [ 357.607865][T13170] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=00000000) [ 357.784432][T13183] block nbd4: shutting down sockets [ 357.829876][T13183] block nbd4: Device being setup by another task [ 357.874896][T13183] block nbd4: shutting down sockets 18:49:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300), 0x4) r4 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r4, 0x200004) sendfile(0xffffffffffffffff, r4, 0x0, 0x80001d00c0d0) 18:49:48 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='userselfselinux,!!#wlan1#-!}\\^mime_typecpusetposix_acl_accesswlan1bdev\x00', &(0x7f0000000080)) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, {}, {}, {}, {0x0, 0x8}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x15b, 0x9, 0x4, 0x20000, 0x9, {}, {0x2373df0fdbcfee72, 0xc, 0x6, 0x7, 0x88, 0x38, "a40f256f"}, 0x3ff, 0x4, @planes=&(0x7f0000000100)={0x5, 0x401, @userptr=0x40, 0x4}, 0x3f, 0x0, r3}) pread64(r3, &(0x7f00000006c0)=""/160, 0xa0, 0x1) setsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f00000001c0)=0x5, 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r6 = dup(r5) ioctl$NBD_SET_SOCK(r2, 0xab00, r6) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x48800, 0x0) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000000500)=0x4, &(0x7f0000000540)=0x2) syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x2, 0x2000) r8 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r8) keyctl$setperm(0x5, r8, 0x0) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f00000005c0)="09f81c98220a51b3562c29fd2f31c7c7b936f4ffa36164c6e909457a37911cae364a772211d63edc4ea406c07ede0701e138884420bb21965d92232df74218d6b29a50319894c07b3669583853cf5f12ef458e3c8864a13360ee57cfe27fad409eef2a44f1cfe4e5d4d80ada78ad242b659a8b019cc8f3e81d3d1085e57de205a252b098b89d3902a912e50981fe4fbdde1eebec58c2f3c0533473d99bd962feb0a84f05c11d44947558336dda22599ec8d8f4e4103af105eaba7d6a8831cadfe429be4061f3b7f181c974235eae70748ca32778ee57189f1a0686981a5821f09942849e3c", 0xe5, r8) r9 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) r10 = dup(0xffffffffffffffff) ioctl$NBD_SET_SOCK(r9, 0xab00, r10) r11 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r11, 0xab04) 18:49:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) pkey_alloc(0x0, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) 18:49:48 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040", 0x9}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) 18:49:48 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617768000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:48 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000000)={0x1ff, 0x4, 0x4, 0x20000, 0x1, {0x0, 0x7530}, {0x3, 0x0, 0x15, 0x5, 0x20, 0x6, "19288ed5"}, 0x394c, 0xa5ddcf0f5325ff50, @fd=r6, 0x0, 0x0, 0xffffffffffffffff}) ioctl$UI_BEGIN_FF_ERASE(r7, 0xc00c55ca, &(0x7f0000000080)={0x2, 0xffffffff, 0x2}) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) [ 358.177514][T13197] block nbd4: shutting down sockets [ 358.190000][T13195] block nbd2: shutting down sockets [ 358.202331][T13193] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=00000000) 18:49:48 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="7261776c000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 358.226065][T13202] device nr0 entered promiscuous mode [ 358.239905][T13197] block nbd4: Device being setup by another task [ 358.291595][T13197] block nbd4: shutting down sockets 18:49:48 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='userselfselinux,!!#wlan1#-!}\\^mime_typecpusetposix_acl_accesswlan1bdev\x00', &(0x7f0000000080)) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, {}, {}, {}, {0x0, 0x8}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x15b, 0x9, 0x4, 0x20000, 0x9, {}, {0x2373df0fdbcfee72, 0xc, 0x6, 0x7, 0x88, 0x38, "a40f256f"}, 0x3ff, 0x4, @planes=&(0x7f0000000100)={0x5, 0x401, @userptr=0x40, 0x4}, 0x3f, 0x0, r3}) pread64(r3, &(0x7f00000006c0)=""/160, 0xa0, 0x1) setsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f00000001c0)=0x5, 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r6 = dup(r5) ioctl$NBD_SET_SOCK(r2, 0xab00, r6) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x48800, 0x0) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000000500)=0x4, &(0x7f0000000540)=0x2) syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x2, 0x2000) r8 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r8) keyctl$setperm(0x5, r8, 0x0) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f00000005c0)="09f81c98220a51b3562c29fd2f31c7c7b936f4ffa36164c6e909457a37911cae364a772211d63edc4ea406c07ede0701e138884420bb21965d92232df74218d6b29a50319894c07b3669583853cf5f12ef458e3c8864a13360ee57cfe27fad409eef2a44f1cfe4e5d4d80ada78ad242b659a8b019cc8f3e81d3d1085e57de205a252b098b89d3902a912e50981fe4fbdde1eebec58c2f3c0533473d99bd962feb0a84f05c11d44947558336dda22599ec8d8f4e4103af105eaba7d6a8831cadfe429be4061f3b7f181c974235eae70748ca32778ee57189f1a0686981a5821f09942849e3c", 0xe5, r8) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r10 = dup(r9) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r10) r11 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r11, 0xab04) 18:49:48 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040", 0x9}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) 18:49:48 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x800000) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x280682, 0x126) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) fcntl$setlease(r5, 0x400, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) getsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r6, 0xc0bc5310, &(0x7f0000000080)) 18:49:48 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617773000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 358.451498][ C0] net_ratelimit: 12 callbacks suppressed [ 358.451507][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 358.463033][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 358.539174][T13211] block nbd2: shutting down sockets [ 358.574847][T13217] block nbd4: shutting down sockets 18:49:48 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617774000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 358.687929][T13218] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=00000000) [ 358.734385][T13217] block nbd4: Device being setup by another task [ 358.802381][T13216] block nbd4: shutting down sockets [ 359.171048][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 359.171066][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 359.176862][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 359.182594][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 359.331066][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 359.336926][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 359.421069][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 359.426893][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:49:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300), 0x4) r4 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r4, 0x200004) sendfile(0xffffffffffffffff, r4, 0x0, 0x80001d00c0d0) 18:49:49 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="7261777a000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:49 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='userselfselinux,!!#wlan1#-!}\\^mime_typecpusetposix_acl_accesswlan1bdev\x00', &(0x7f0000000080)) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, {}, {}, {}, {0x0, 0x8}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x15b, 0x9, 0x4, 0x20000, 0x9, {}, {0x2373df0fdbcfee72, 0xc, 0x6, 0x7, 0x88, 0x38, "a40f256f"}, 0x3ff, 0x4, @planes=&(0x7f0000000100)={0x5, 0x401, @userptr=0x40, 0x4}, 0x3f, 0x0, r3}) pread64(r3, &(0x7f00000006c0)=""/160, 0xa0, 0x1) setsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f00000001c0)=0x5, 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r6 = dup(r5) ioctl$NBD_SET_SOCK(r2, 0xab00, r6) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x48800, 0x0) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000000500)=0x4, &(0x7f0000000540)=0x2) syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x2, 0x2000) r8 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r8) keyctl$setperm(0x5, r8, 0x0) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f00000005c0)="09f81c98220a51b3562c29fd2f31c7c7b936f4ffa36164c6e909457a37911cae364a772211d63edc4ea406c07ede0701e138884420bb21965d92232df74218d6b29a50319894c07b3669583853cf5f12ef458e3c8864a13360ee57cfe27fad409eef2a44f1cfe4e5d4d80ada78ad242b659a8b019cc8f3e81d3d1085e57de205a252b098b89d3902a912e50981fe4fbdde1eebec58c2f3c0533473d99bd962feb0a84f05c11d44947558336dda22599ec8d8f4e4103af105eaba7d6a8831cadfe429be4061f3b7f181c974235eae70748ca32778ee57189f1a0686981a5821f09942849e3c", 0xe5, r8) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r10 = dup(r9) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r10) r11 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r11, 0xab04) 18:49:49 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x0, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) 18:49:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) exit_group(0x5) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x800, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000}) r5 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x7, 0x100) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)={r4, 0x40000, r5}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc0386106, &(0x7f0000000000)) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f00000003c0)) 18:49:49 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x0, 0xfffffffc}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000001340)={0x1, 0x0, 0x1000, 0xed, &(0x7f0000000240)="71ee8f301182ef1c3aca3e087f17e8e94698733e8a72004998548d08eb97d173078229e9db0f98add64015076e26371e0e32f023e64bae140897f82c4982933438235dbf71cc2c2ac60ff023acd3d890148bc2a4bd2f9a9122a8d0f0e8921e9044d456bb63bcf819a9d101cb326fec12d8bd9a8575218b676a4647a06a3e15cd418e9202d07bcd8def93f58640a0ef8c456c12c5c6bd956b760d93fdff282e1cf5991fe9ba8fc2ebf323891dcbf4f0fc127760d539dbe02f3c96ef226e396057901e7caebf3cfd7434327f2471b78b39f5e0c3543380d1c7fbe3d44402d7df9b68a6e4d0857600834dbb4f7855", 0x1000, 0x0, &(0x7f0000000340)="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"}) connect$rds(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) r1 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r4, 0x101, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000180)={0x3, 'teql0\x00', {0x6078}, 0x4}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000035c0)='/j\xa5v/hwrng\x00', 0x610580, 0x0) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x20000080, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x7a, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000) lookup_dcookie(0x55, &(0x7f00000000c0)=""/108, 0x6c) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000003600)={r9, 0x1}, &(0x7f0000003640)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={r9, 0x2}, 0x8) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$NBD_SET_SOCK(r10, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) r11 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r11, 0xab04) [ 359.564684][T13247] l2tp_mt_check4: 6 callbacks suppressed [ 359.564692][T13247] xt_l2tp: missing protocol rule (udp|l2tpip) [ 359.607632][T13239] block nbd2: shutting down sockets [ 359.637279][T13245] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=00000000) 18:49:49 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177b4000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 359.800000][T13258] xt_l2tp: missing protocol rule (udp|l2tpip) [ 359.839543][T13259] device nr0 entered promiscuous mode 18:49:50 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177dc000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:50 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x0, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) 18:49:50 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x5bffd447b165db77) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 18:49:50 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='userselfselinux,!!#wlan1#-!}\\^mime_typecpusetposix_acl_accesswlan1bdev\x00', &(0x7f0000000080)) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, {}, {}, {}, {0x0, 0x8}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x15b, 0x9, 0x4, 0x20000, 0x9, {}, {0x2373df0fdbcfee72, 0xc, 0x6, 0x7, 0x88, 0x38, "a40f256f"}, 0x3ff, 0x4, @planes=&(0x7f0000000100)={0x5, 0x401, @userptr=0x40, 0x4}, 0x3f, 0x0, r3}) pread64(r3, &(0x7f00000006c0)=""/160, 0xa0, 0x1) setsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f00000001c0)=0x5, 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r6 = dup(r5) ioctl$NBD_SET_SOCK(r2, 0xab00, r6) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x48800, 0x0) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000000500)=0x4, &(0x7f0000000540)=0x2) syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x2, 0x2000) r8 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r8) keyctl$setperm(0x5, r8, 0x0) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f00000005c0)="09f81c98220a51b3562c29fd2f31c7c7b936f4ffa36164c6e909457a37911cae364a772211d63edc4ea406c07ede0701e138884420bb21965d92232df74218d6b29a50319894c07b3669583853cf5f12ef458e3c8864a13360ee57cfe27fad409eef2a44f1cfe4e5d4d80ada78ad242b659a8b019cc8f3e81d3d1085e57de205a252b098b89d3902a912e50981fe4fbdde1eebec58c2f3c0533473d99bd962feb0a84f05c11d44947558336dda22599ec8d8f4e4103af105eaba7d6a8831cadfe429be4061f3b7f181c974235eae70748ca32778ee57189f1a0686981a5821f09942849e3c", 0xe5, r8) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r10 = dup(r9) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r10) r11 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r11, 0xab04) 18:49:50 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc0386106, &(0x7f0000000000)) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000240)={0x8098f906, 0x0, "b11e6a9a369fb2bbc1a32dc5e9aba360211177aafa0ea118a04b2daf63c12496"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) poll(&(0x7f0000000140)=[{r1}, {r3, 0x8000}, {r1, 0x8}, {r0, 0x8400}, {r4, 0xa}, {r5, 0x410}, {r6, 0x1}, {r7, 0x8}], 0x8, 0x2) [ 360.158575][T13277] xt_l2tp: missing protocol rule (udp|l2tpip) [ 360.215359][T13268] block nbd2: shutting down sockets [ 360.220694][T13272] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=00000000) 18:49:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300), 0x4) r4 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r4, 0x200004) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) 18:49:50 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177f4000000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:50 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='userselfselinux,!!#wlan1#-!}\\^mime_typecpusetposix_acl_accesswlan1bdev\x00', &(0x7f0000000080)) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, {}, {}, {}, {0x0, 0x8}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x15b, 0x9, 0x4, 0x20000, 0x9, {}, {0x2373df0fdbcfee72, 0xc, 0x6, 0x7, 0x88, 0x38, "a40f256f"}, 0x3ff, 0x4, @planes=&(0x7f0000000100)={0x5, 0x401, @userptr=0x40, 0x4}, 0x3f, 0x0, r3}) pread64(r3, &(0x7f00000006c0)=""/160, 0xa0, 0x1) setsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f00000001c0)=0x5, 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r6 = dup(r5) ioctl$NBD_SET_SOCK(r2, 0xab00, r6) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x48800, 0x0) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000000500)=0x4, &(0x7f0000000540)=0x2) syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x2, 0x2000) r8 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r8) keyctl$setperm(0x5, r8, 0x0) r9 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r11 = dup(r10) ioctl$NBD_SET_SOCK(r9, 0xab00, r11) r12 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r12, 0xab04) 18:49:50 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x0, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) 18:49:50 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) fsetxattr$security_evm(r0, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000180)=@v2={0x5, 0x1, 0x1, 0x3, 0x41, "772fe1c9daba5c36ccd2db5a45b70115086bce7fa8a31c4eae25797bb9b0fb5fed4a9d6724ce534a6961b2b2eead56e0b95a99050d43dfbcd0ae24b08b2087b006"}, 0x4b, 0x1) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r5, 0x101, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x1}) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000240)={0x3}) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000000)={0x9, 0x2, 0x8, 0x7ff, 0x9}) [ 360.922182][T13292] xt_l2tp: missing protocol rule (udp|l2tpip) [ 360.927354][T13293] block nbd4: shutting down sockets [ 360.967444][T13294] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=00000000) [ 360.986600][T13299] device nr0 entered promiscuous mode [ 361.009078][T13295] block nbd2: shutting down sockets 18:49:51 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617730010000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0xc99fc5516f621a10, 0x8) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x1000004, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x6}}, {@max_read={'max_read', 0x3d, 0x5}}, {@blksize={'blksize', 0x3d, 0xa00}}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions='default_permissions'}], [{@dont_hash='dont_hash'}, {@fowner_eq={'fowner', 0x3d, r3}}]}}) r4 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0xc0386106, &(0x7f0000000000)) 18:49:51 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='userselfselinux,!!#wlan1#-!}\\^mime_typecpusetposix_acl_accesswlan1bdev\x00', &(0x7f0000000080)) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, {}, {}, {}, {0x0, 0x8}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x15b, 0x9, 0x4, 0x20000, 0x9, {}, {0x2373df0fdbcfee72, 0xc, 0x6, 0x7, 0x88, 0x38, "a40f256f"}, 0x3ff, 0x4, @planes=&(0x7f0000000100)={0x5, 0x401, @userptr=0x40, 0x4}, 0x3f, 0x0, r3}) pread64(r3, &(0x7f00000006c0)=""/160, 0xa0, 0x1) setsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f00000001c0)=0x5, 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r6 = dup(r5) ioctl$NBD_SET_SOCK(r2, 0xab00, r6) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x48800, 0x0) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000000500)=0x4, &(0x7f0000000540)=0x2) syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x2, 0x2000) r8 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r8) r9 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r11 = dup(r10) ioctl$NBD_SET_SOCK(r9, 0xab00, r11) r12 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r12, 0xab04) 18:49:51 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(0x0, 0x0) [ 361.199825][T13311] xt_l2tp: missing protocol rule (udp|l2tpip) 18:49:51 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177c8010000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 361.341252][T13317] block nbd2: shutting down sockets 18:49:51 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='userselfselinux,!!#wlan1#-!}\\^mime_typecpusetposix_acl_accesswlan1bdev\x00', &(0x7f0000000080)) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, {}, {}, {}, {0x0, 0x8}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x15b, 0x9, 0x4, 0x20000, 0x9, {}, {0x2373df0fdbcfee72, 0xc, 0x6, 0x7, 0x88, 0x38, "a40f256f"}, 0x3ff, 0x4, @planes=&(0x7f0000000100)={0x5, 0x401, @userptr=0x40, 0x4}, 0x3f, 0x0, r3}) pread64(r3, &(0x7f00000006c0)=""/160, 0xa0, 0x1) setsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f00000001c0)=0x5, 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r6 = dup(r5) ioctl$NBD_SET_SOCK(r2, 0xab00, r6) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x48800, 0x0) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000000500)=0x4, &(0x7f0000000540)=0x2) syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x2, 0x2000) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r8 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r10 = dup(r9) ioctl$NBD_SET_SOCK(r8, 0xab00, r10) r11 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r11, 0xab04) [ 361.410574][T13320] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing 18:49:51 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(0x0, 0x0) [ 361.493854][T13327] xt_l2tp: missing protocol rule (udp|l2tpip) [ 361.545488][T13328] block nbd2: shutting down sockets [ 361.686034][T13293] block nbd4: Device being setup by another task [ 361.693666][T13293] block nbd4: shutting down sockets [ 361.814242][T13338] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing 18:49:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300), 0x4) r4 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r4, 0x200004) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) 18:49:51 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='userselfselinux,!!#wlan1#-!}\\^mime_typecpusetposix_acl_accesswlan1bdev\x00', &(0x7f0000000080)) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, {}, {}, {}, {0x0, 0x8}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x15b, 0x9, 0x4, 0x20000, 0x9, {}, {0x2373df0fdbcfee72, 0xc, 0x6, 0x7, 0x88, 0x38, "a40f256f"}, 0x3ff, 0x4, @planes=&(0x7f0000000100)={0x5, 0x401, @userptr=0x40, 0x4}, 0x3f, 0x0, r3}) pread64(r3, &(0x7f00000006c0)=""/160, 0xa0, 0x1) setsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f00000001c0)=0x5, 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r6 = dup(r5) ioctl$NBD_SET_SOCK(r2, 0xab00, r6) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x48800, 0x0) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000000500)=0x4, &(0x7f0000000540)=0x2) syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x2, 0x2000) r8 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r10 = dup(r9) ioctl$NBD_SET_SOCK(r8, 0xab00, r10) r11 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r11, 0xab04) 18:49:51 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177cc010000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:51 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 18:49:51 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(0x0, 0x0) [ 362.006705][T13344] xt_l2tp: missing protocol rule (udp|l2tpip) [ 362.058735][T13349] block nbd4: shutting down sockets 18:49:52 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177f4010000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 362.081255][T13350] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 362.112690][T13347] block nbd4: shutting down sockets [ 362.140691][T13351] block nbd2: shutting down sockets [ 362.144343][T13359] xt_l2tp: missing protocol rule (udp|l2tpip) 18:49:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xea}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) modify_ldt$write2(0x11, &(0x7f0000000040)={0xaa, 0x0, 0x400, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) 18:49:52 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700030000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 362.191496][T13353] device nr0 entered promiscuous mode [ 362.221735][T13362] xt_l2tp: missing protocol rule (udp|l2tpip) 18:49:52 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='userselfselinux,!!#wlan1#-!}\\^mime_typecpusetposix_acl_accesswlan1bdev\x00', &(0x7f0000000080)) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, {}, {}, {}, {0x0, 0x8}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x15b, 0x9, 0x4, 0x20000, 0x9, {}, {0x2373df0fdbcfee72, 0xc, 0x6, 0x7, 0x88, 0x38, "a40f256f"}, 0x3ff, 0x4, @planes=&(0x7f0000000100)={0x5, 0x401, @userptr=0x40, 0x4}, 0x3f, 0x0, r3}) pread64(r3, &(0x7f00000006c0)=""/160, 0xa0, 0x1) setsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f00000001c0)=0x5, 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r6 = dup(r5) ioctl$NBD_SET_SOCK(r2, 0xab00, r6) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x48800, 0x0) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000000500)=0x4, &(0x7f0000000540)=0x2) r8 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r10 = dup(r9) ioctl$NBD_SET_SOCK(r8, 0xab00, r10) r11 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r11, 0xab04) 18:49:52 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617710030000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0xc99fc5516f621a10, 0x8) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x1000004, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x6}}, {@max_read={'max_read', 0x3d, 0x5}}, {@blksize={'blksize', 0x3d, 0xa00}}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions='default_permissions'}], [{@dont_hash='dont_hash'}, {@fowner_eq={'fowner', 0x3d, r3}}]}}) r4 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0xc0386106, &(0x7f0000000000)) 18:49:52 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x450340) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) [ 362.409651][T13371] block nbd2: shutting down sockets [ 362.494541][T13376] xt_l2tp: missing protocol rule (udp|l2tpip) [ 362.503951][T13377] block nbd4: shutting down sockets [ 362.529909][T13377] block nbd4: shutting down sockets 18:49:52 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='userselfselinux,!!#wlan1#-!}\\^mime_typecpusetposix_acl_accesswlan1bdev\x00', &(0x7f0000000080)) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, {}, {}, {}, {0x0, 0x8}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x15b, 0x9, 0x4, 0x20000, 0x9, {}, {0x2373df0fdbcfee72, 0xc, 0x6, 0x7, 0x88, 0x38, "a40f256f"}, 0x3ff, 0x4, @planes=&(0x7f0000000100)={0x5, 0x401, @userptr=0x40, 0x4}, 0x3f, 0x0, r3}) pread64(r3, &(0x7f00000006c0)=""/160, 0xa0, 0x1) setsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f00000001c0)=0x5, 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r6 = dup(r5) ioctl$NBD_SET_SOCK(r2, 0xab00, r6) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x48800, 0x0) r7 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = dup(r8) ioctl$NBD_SET_SOCK(r7, 0xab00, r9) r10 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r10, 0xab04) 18:49:52 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617714030000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300), 0x4) r4 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r4, 0x200004) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) 18:49:52 executing program 4: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x43c3ebc459201b3b) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) openat(r4, &(0x7f0000000000)='./file0\x00', 0x40000, 0x90) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x101000, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) creat(&(0x7f00000016c0)='./file0\x00', 0x0) r6 = dup(r5) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) setsockopt$inet_dccp_buf(r6, 0x21, 0x2, &(0x7f00000000c0)="8259b4a26c191da101a9c01447c53d0673d707", 0x13) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) getsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) r10 = dup(r9) getsockopt$bt_rfcomm_RFCOMM_LM(r10, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$NBD_SET_SOCK(r10, 0xab00, r8) r11 = syz_open_dev$ndb(0x0, 0x0, 0x0) r12 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r12, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) writev(r12, &(0x7f0000001600)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000000100)="f5919c06824e6a7fac9026a8b43c4cc455ec525918ea16350d2c7ec592e3a2e0c694c873461a758e8abeaedb6a71dad217419a8b7452a2664b7008ece4fc231ee8621529ed8e5f19a4496a7eed8c215ca37d4db0f3392270b398c083e7c0a382bc9ae1e00bbe40088e73db4b9f294fe3fda30861d8d709d69df238e6ba94ec5218808204b5717e592da9a4fedc250c66b99dc164c445d48dac29c3c6de8b6ae129e46ae3ca55ebf37699dff3a5dbc6f4588754690771430f1f", 0xb9}, {&(0x7f0000001240)="68b31eb0d6c5ec635f4d2b6660c8f1c6c48eb3535fc4f29e428235a3824cd2f936560b4daaa016c34e968c88ec9d9e810c19fb3f0201b2f96a748ccf64e71d4bba9279861f6df1106f0654b231b777e5", 0x50}, {&(0x7f00000012c0)="145138967b1881d8a4de5dbaa073b1dc6545017bc87b3d1e82b129bb20b4a03d1625c1c7c35eaecc6bed001692c0ac46d805f44522f0945ceb351891491539650173e60e5c7748b777139e7ed9d2ab106c27fac6d8c5afa30b0d6d622d80f8b18e0505baafc5301f625e8b895b46bc4b496cc85631f1b210970797344c25d57e05fed6b44fef51e08be989c6940480767a4653b460c05aa7ffa36c5871834be40eb8dce97edd12e2e7b353d16348004d245c700adc29c08b56288475557cd60a29d0fcd79f9fb7b13d09f9e8ca5d4df97c5639a3fc8e226b371cfbb467700e856c7d4e3971", 0xe5}, {&(0x7f00000013c0)="0d58bc3cee960cae352830497dcac680a1e967edbfb69fdd28a0bc7a478827b27cc810b86ac814843aec8edc7ed2bd2e2ab0147dd805f9b378ed82d488619ad20c241dce6d2a2fb2bddb3afb72581c3b03ef51a92dfb94f12cd549e50d0e9d9de574d7c0f02bd4f35b9310ed91aae2c763083a4633161e7066587a54dec2dbe4b1378c33f51123d87722cd7801ca3bbeaa210d67f3cd218f628b0654cb8394195b080f83184849f3666714ff", 0xac}, {&(0x7f0000001480)="6b85d45307b32126dc1af89303a799e3cb5b9864ef3f3126cea1a899bcf43c1e1a715a8f9e718d98e34ac864d1e3b433962848606a2fe9692823aa52018c101e10dee6adf8c4ef69b4b21a179d6841", 0x4f}, {&(0x7f0000001500)="61e0c293f3daefaf51e73203c610e322a637b0e1ca5d01", 0x17}, {&(0x7f0000001540)="9951ee0ed59f853cb85573d44fb4ed8c20d994b48e1345b9d67cf87c67e3ffde2d1e010860b076830eb32f10475e190346221eee23bfa9c29fdb86256fb4bf8d3465e6e5ec9feb0d9d63c0741a119ac65954146250ce9cebbc6f4911e84493298b06128386a6c0c2dabae4f284b567d442cf1ce15d96daf2ade8964f", 0x7c}, {&(0x7f00000015c0)="e990d6b096a7abab37a027a013f99556d029445fdf7f4e7399599852ae4b674c767077eb94c77e23532dd95e32920414be6cc9563ceed8c9fa", 0x39}], 0x9) ioctl$NBD_CLEAR_SOCK(r11, 0xab04) 18:49:53 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617724030000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 363.049636][T13388] block nbd2: shutting down sockets 18:49:53 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='userselfselinux,!!#wlan1#-!}\\^mime_typecpusetposix_acl_accesswlan1bdev\x00', &(0x7f0000000080)) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, {}, {}, {}, {0x0, 0x8}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x15b, 0x9, 0x4, 0x20000, 0x9, {}, {0x2373df0fdbcfee72, 0xc, 0x6, 0x7, 0x88, 0x38, "a40f256f"}, 0x3ff, 0x4, @planes=&(0x7f0000000100)={0x5, 0x401, @userptr=0x40, 0x4}, 0x3f, 0x0, r3}) pread64(r3, &(0x7f00000006c0)=""/160, 0xa0, 0x1) setsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f00000001c0)=0x5, 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r6 = dup(r5) ioctl$NBD_SET_SOCK(r2, 0xab00, r6) r7 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = dup(r8) ioctl$NBD_SET_SOCK(r7, 0xab00, r9) r10 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r10, 0xab04) [ 363.103775][T13392] device nr0 entered promiscuous mode 18:49:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) 18:49:53 executing program 4: listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/127, 0x7f) r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="5678c37b1605"], &(0x7f0000000080)=0x6) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f00000000c0)=0x5) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x8000, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) ioctl$NBD_SET_SOCK(r0, 0xab00, r5) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) getsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$NBD_SET_SIZE_BLOCKS(r8, 0xab07, 0xcb) 18:49:53 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617778030000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x523) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000040)=0xffffffff, 0x4) pause() ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) setsockopt$inet_buf(r2, 0x0, 0x0, &(0x7f0000000140)="53c53cb046bfc85430373448b834e23982bcf7a9f5ca835cc4dd684285fe7d103dda21910ad688e63764da08784249ed5c392d16fe2851757d3abc3c1aca159a4d7af133548b6b5758408c723b796e840f4959179a76b8322762ecaf1780751d842091da4c012c27b079dfbafc0b9d9d3b9403ae", 0x74) r6 = dup(r5) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x20, 0x4) [ 363.376789][T13402] block nbd2: shutting down sockets [ 363.416634][T13412] block nbd4: shutting down sockets 18:49:53 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='userselfselinux,!!#wlan1#-!}\\^mime_typecpusetposix_acl_accesswlan1bdev\x00', &(0x7f0000000080)) syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, {}, {}, {}, {0x0, 0x8}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x15b, 0x9, 0x4, 0x20000, 0x9, {}, {0x2373df0fdbcfee72, 0xc, 0x6, 0x7, 0x88, 0x38, "a40f256f"}, 0x3ff, 0x4, @planes=&(0x7f0000000100)={0x5, 0x401, @userptr=0x40, 0x4}, 0x3f, 0x0, r2}) pread64(r2, &(0x7f00000006c0)=""/160, 0xa0, 0x1) setsockopt$ax25_int(r3, 0x101, 0x7, &(0x7f00000001c0)=0x5, 0x4) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) dup(r4) r5 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) ioctl$NBD_SET_SOCK(r5, 0xab00, r7) r8 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r8, 0xab04) [ 363.491071][ C1] net_ratelimit: 13 callbacks suppressed [ 363.491080][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 363.502604][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 363.510762][T13407] block nbd4: shutting down sockets 18:49:53 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 18:49:53 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177d0030000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x10000, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000080)={0x80, 0x5, 0x46}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xb) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) getsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r8, 0x84, 0xc, &(0x7f0000000240)=0x4, 0x4) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000140)={0x1ff, 0x7, 0x4, 0xe000, 0x9, {r5, r6/1000+10000}, {0x2, 0x0, 0x1, 0x20, 0x80, 0x9, "9835cc73"}, 0x7638, 0x3, @offset=0x59c7, 0x7, 0x0, r0}) write$apparmor_current(r9, &(0x7f0000000200)=ANY=[@ANYBLOB="737461be112000"], 0x7) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, r4, 0xffffffffffffffff}}) chown(&(0x7f00000000c0)='./file0\x00', r3, r4) [ 363.571092][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 363.576910][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 363.757424][T13426] block nbd2: shutting down sockets 18:49:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300), 0x4) r4 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x0) 18:49:54 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177e8030000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:54 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x1) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 18:49:54 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='userselfselinux,!!#wlan1#-!}\\^mime_typecpusetposix_acl_accesswlan1bdev\x00', &(0x7f0000000080)) syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, {}, {}, {}, {0x0, 0x8}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x15b, 0x9, 0x4, 0x20000, 0x9, {}, {0x2373df0fdbcfee72, 0xc, 0x6, 0x7, 0x88, 0x38, "a40f256f"}, 0x3ff, 0x4, @planes=&(0x7f0000000100)={0x5, 0x401, @userptr=0x40, 0x4}, 0x3f, 0x0, r2}) pread64(r2, &(0x7f00000006c0)=""/160, 0xa0, 0x1) setsockopt$ax25_int(r3, 0x101, 0x7, &(0x7f00000001c0)=0x5, 0x4) syz_init_net_socket$ax25(0x3, 0x5, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$NBD_SET_SOCK(r4, 0xab00, r6) r7 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r7, 0xab04) 18:49:54 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) 18:49:54 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177f4030000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 364.284601][T13438] block nbd2: shutting down sockets [ 364.292368][T13443] block nbd4: shutting down sockets [ 364.307882][T13442] device nr0 entered promiscuous mode [ 364.324183][T13436] block nbd4: shutting down sockets 18:49:54 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='userselfselinux,!!#wlan1#-!}\\^mime_typecpusetposix_acl_accesswlan1bdev\x00', &(0x7f0000000080)) syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, {}, {}, {}, {0x0, 0x8}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x15b, 0x9, 0x4, 0x20000, 0x9, {}, {0x2373df0fdbcfee72, 0xc, 0x6, 0x7, 0x88, 0x38, "a40f256f"}, 0x3ff, 0x4, @planes=&(0x7f0000000100)={0x5, 0x401, @userptr=0x40, 0x4}, 0x3f, 0x0, r2}) pread64(r2, &(0x7f00000006c0)=""/160, 0xa0, 0x1) setsockopt$ax25_int(r3, 0x101, 0x7, &(0x7f00000001c0)=0x5, 0x4) r4 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$NBD_SET_SOCK(r4, 0xab00, r6) r7 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r7, 0xab04) 18:49:54 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) ioctl$NBD_SET_SIZE(r3, 0xab02, 0x3) 18:49:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffff5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) [ 364.476454][T13448] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing 18:49:54 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='userselfselinux,!!#wlan1#-!}\\^mime_typecpusetposix_acl_accesswlan1bdev\x00', &(0x7f0000000080)) syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, {}, {}, {}, {0x0, 0x8}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x15b, 0x9, 0x4, 0x20000, 0x9, {}, {0x2373df0fdbcfee72, 0xc, 0x6, 0x7, 0x88, 0x38, "a40f256f"}, 0x3ff, 0x4, @planes=&(0x7f0000000100)={0x5, 0x401, @userptr=0x40, 0x4}, 0x3f, 0x0, r2}) pread64(r2, &(0x7f00000006c0)=""/160, 0xa0, 0x1) r3 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$NBD_SET_SOCK(r3, 0xab00, r5) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) [ 364.584011][T13458] block nbd4: shutting down sockets [ 364.597833][T13459] block nbd2: shutting down sockets 18:49:54 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700050000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 364.691059][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 364.696935][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 364.728790][T13458] block nbd4: Device being setup by another task 18:49:54 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) [ 364.743942][T13466] block nbd2: shutting down sockets [ 364.762396][T13458] block nbd4: shutting down sockets [ 364.848685][T13470] l2tp_mt_check4: 6 callbacks suppressed [ 364.848694][T13470] xt_l2tp: missing protocol rule (udp|l2tpip) [ 365.123400][T13476] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing 18:49:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300), 0x4) r4 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x0) 18:49:55 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='userselfselinux,!!#wlan1#-!}\\^mime_typecpusetposix_acl_accesswlan1bdev\x00', &(0x7f0000000080)) syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, {}, {}, {}, {0x0, 0x8}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x15b, 0x9, 0x4, 0x20000, 0x9, {}, {0x2373df0fdbcfee72, 0xc, 0x6, 0x7, 0x88, 0x38, "a40f256f"}, 0x3ff, 0x4, @planes=&(0x7f0000000100)={0x5, 0x401, @userptr=0x40, 0x4}, 0x3f, 0x0, r2}) r3 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$NBD_SET_SOCK(r3, 0xab00, r5) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) 18:49:55 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x8000) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 18:49:55 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700060000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:55 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) [ 365.329162][T13485] xt_l2tp: missing protocol rule (udp|l2tpip) [ 365.338651][T13487] block nbd4: shutting down sockets 18:49:55 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='userselfselinux,!!#wlan1#-!}\\^mime_typecpusetposix_acl_accesswlan1bdev\x00', &(0x7f0000000080)) syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, {}, {}, {}, {0x0, 0x8}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}) r3 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$NBD_SET_SOCK(r3, 0xab00, r5) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) [ 365.372355][T13484] block nbd2: shutting down sockets [ 365.385893][T13487] block nbd4: Device being setup by another task [ 365.392610][T13486] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 365.446243][T13487] block nbd4: shutting down sockets 18:49:55 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700070000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 365.473647][T13493] device nr0 entered promiscuous mode [ 365.474881][T13499] block nbd2: shutting down sockets 18:49:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x2002, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) 18:49:55 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='userselfselinux,!!#wlan1#-!}\\^mime_typecpusetposix_acl_accesswlan1bdev\x00', &(0x7f0000000080)) syz_open_dev$ndb(0x0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) [ 365.571085][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 365.577009][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:49:55 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x194, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x9c6c}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x194}, 0x1, 0x0, 0x0, 0x971875f4ce2dd3df}, 0x4000) syz_open_dev$ndb(0x0, 0x0, 0x0) [ 365.651124][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 365.656950][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:49:55 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_proto_private(r0, 0x89e3, &(0x7f0000000040)="659c242a83860d0865dac0660ad012c7a59e76797b1308583c25cfadb67e7502550495649352e5381d280e07a6b7687c135c4f01db8678a1876b58f6e5ed069d5833549998f6e150e133fe15a6fe0e71ae0b94cf9548ee0e024a88ba93156cc239d042075a66d06ff8498b7eddc0a091e817005d9ee9a5dab878e044ac5f506ff15e43fbcf364905ff770b3f5a4f813c455eaac51659e5f65863f3") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x404}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc0386106, &(0x7f0000000000)) [ 365.705594][T13508] xt_l2tp: missing protocol rule (udp|l2tpip) [ 365.753807][T13510] block nbd2: shutting down sockets [ 365.788731][T13512] block nbd4: shutting down sockets 18:49:55 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617703100000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 365.819493][T13513] block nbd4: Device being setup by another task [ 365.842279][T13513] block nbd4: shutting down sockets [ 366.027717][T13524] xt_l2tp: missing protocol rule (udp|l2tpip) 18:49:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300), 0x4) r4 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x0) 18:49:56 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='userselfselinux,!!#wlan1#-!}\\^mime_typecpusetposix_acl_accesswlan1bdev\x00', &(0x7f0000000080)) syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) 18:49:56 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 18:49:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffff3ffc}, 0x4) r4 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 18:49:56 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700110000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 366.448067][T13531] block nbd4: shutting down sockets 18:49:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dfv/sQaps`o\x03\x00', 0x40, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000280)) recvmmsg(0xffffffffffffffff, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/189, 0xbd}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e458c598ba4904c77813ab29fb450a2e834efe3f87695931515781ae36a4d148f269399022f544be4fac9508cce4df4d7015eb590bbfb45e0684f446722053f1502598808b355f7b815bdb2281145dd688759944bd09b0f55e7ca54b07bd9189de8daeb173aca360f4bca4f5019235efcea227e56f94ddc8d5e02f38fdcdad2e5cc22b1f090ecf60605f3d912967"], 0x18}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x4000000000005cd, 0x42, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x7b, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "434b1a0ecccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6bb29a6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d080872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e682037347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1"}], 0x18}}], 0x40000000000037b, 0xc000) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000080)={0x1, 0x0, {0xfffffffb, 0x3f, 0x3, 0x5}}) getsockopt$nfc_llcp(r0, 0x118, 0x4, &(0x7f0000000100)=""/20, 0x14) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0x96) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f00000000c0)) [ 366.487815][T13531] block nbd4: Device being setup by another task [ 366.499666][T13536] xt_l2tp: missing protocol rule (udp|l2tpip) [ 366.515655][T13531] block nbd4: shutting down sockets [ 366.528334][T13538] block nbd2: shutting down sockets 18:49:56 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617703140000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 366.567533][T13543] device nr0 entered promiscuous mode 18:49:56 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) setsockopt$inet6_MCAST_LEAVE_GROUP(r6, 0x29, 0x2d, &(0x7f0000000000)={0x200, {{0xa, 0x4e23, 0x81, @remote, 0x8}}}, 0x88) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 18:49:56 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='userselfselinux,!!#wlan1#-!}\\^mime_typecpusetposix_acl_accesswlan1bdev\x00', &(0x7f0000000080)) r2 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) [ 366.800007][T13556] xt_l2tp: missing protocol rule (udp|l2tpip) [ 366.808650][T13554] block nbd4: shutting down sockets 18:49:56 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700200000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 366.868170][T13554] block nbd4: Device being setup by another task [ 366.879451][T13559] block nbd2: shutting down sockets [ 366.892327][T13554] block nbd4: shutting down sockets 18:49:56 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) r2 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) 18:49:57 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000040)=0x2, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x7f, 0xa523fd8c43fbad9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x4b38}, 0x0, 0x8, 0xffffffffffffffff, 0xa) r2 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0386106, &(0x7f0000000000)) [ 367.002283][T13565] xt_l2tp: missing protocol rule (udp|l2tpip) [ 367.115652][T13570] block nbd2: shutting down sockets [ 367.278637][T13542] device nr0 entered promiscuous mode 18:49:57 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) mmap$watch_queue(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x100010, r6, 0x0) 18:49:57 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617703240000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:57 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) [ 367.616818][T13579] xt_l2tp: missing protocol rule (udp|l2tpip) [ 367.623957][T13578] block nbd4: shutting down sockets [ 367.637330][T13580] block nbd2: shutting down sockets [ 367.650174][T13578] block nbd4: Device being setup by another task 18:49:57 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffff3ffc}, 0x4) r4 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 18:49:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000040), 0x4) r2 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0386106, &(0x7f0000000000)) 18:49:57 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617701300000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 367.686806][T13578] block nbd4: shutting down sockets 18:49:57 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 18:49:57 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 367.801944][T13589] xt_l2tp: missing protocol rule (udp|l2tpip) 18:49:57 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700400000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 367.893010][T13597] block nbd2: shutting down sockets [ 367.905149][T13595] device nr0 entered promiscuous mode 18:49:57 executing program 2: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 18:49:58 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) faccessat(r5, &(0x7f0000000000)='./file0\x00', 0x24, 0x900) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) [ 368.054709][T13606] xt_l2tp: missing protocol rule (udp|l2tpip) 18:49:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) [ 368.128101][T13610] block nbd2: shutting down sockets 18:49:58 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700480000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 368.155477][T13611] block nbd4: shutting down sockets 18:49:58 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x80081) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) [ 368.197162][T13611] block nbd4: Device being setup by another task [ 368.229843][T13611] block nbd4: shutting down sockets 18:49:58 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177004c0000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 368.393575][T13622] block nbd2: shutting down sockets 18:49:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000040)) 18:49:58 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x80081) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 18:49:58 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700600000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000040), 0x4) r2 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0386106, &(0x7f0000000000)) 18:49:58 executing program 4: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, 0x0, 0x0, 0x0) msgsnd(r0, &(0x7f0000000080), 0x8, 0x0) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000040)=""/90) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000040)=""/252) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200000, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, r3) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) [ 369.045602][T13637] block nbd4: shutting down sockets 18:49:59 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700680000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:59 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) prctl$PR_GET_SECCOMP(0x15) 18:49:59 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x80081) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 18:49:59 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) flock(r0, 0x1) r3 = epoll_create1(0x0) flock(r3, 0x2) r4 = gettid() dup2(r0, r3) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000015) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x101840, 0x0) ioctl$KDSETLED(r6, 0x4b32, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0xc0386106, &(0x7f0000000000)) 18:49:59 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x80081) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 18:49:59 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177006c0000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 369.304873][T13653] block nbd4: shutting down sockets [ 369.357666][T13653] block nbd4: Device being setup by another task [ 369.395382][T13653] block nbd4: shutting down sockets 18:49:59 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = gettid() rt_tgsigqueueinfo(r2, r1, 0x16, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$getregset(0x15, r1, 0x2, &(0x7f0000000280)={0x0}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/172, 0xac}, {&(0x7f00000002c0)=""/232, 0xe8}, {&(0x7f00000003c0)=""/226, 0xe2}, {&(0x7f00000004c0)=""/178, 0xb2}, {&(0x7f0000000200)=""/28, 0x1c}], 0x5) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x72, 0x9, 0xf1, 0x1f, 0x0, 0x5, 0x20010, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x10001, 0x9}, 0x204, 0x9, 0x7, 0x4, 0xffff, 0x1000, 0xfffe}, r1, 0x6, r0, 0x9) r5 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0xc0386106, &(0x7f0000000000)) 18:49:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000040)) 18:49:59 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700730000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:49:59 executing program 4: syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = dup(r1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$NBD_SET_SOCK(r3, 0xab00, r5) syz_open_dev$ndb(0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = dup(r8) r10 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x4000, 0x0) bind$pptp(r10, &(0x7f0000000040)={0x18, 0x2, {0x3, @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1e) getsockopt$bt_rfcomm_RFCOMM_LM(r9, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$NBD_CLEAR_SOCK(r9, 0xab04) 18:49:59 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 18:49:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000040), 0x4) r2 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0386106, &(0x7f0000000000)) [ 369.978118][T13678] l2tp_mt_check4: 5 callbacks suppressed [ 369.978125][T13678] xt_l2tp: missing protocol rule (udp|l2tpip) [ 370.001190][T13680] block nbd2: shutting down sockets [ 370.010012][T13673] block nbd4: shutting down sockets 18:50:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700740000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:00 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) [ 370.054497][T13673] block nbd4: shutting down sockets 18:50:00 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) fsetxattr$smack_xattr_label(r1, &(0x7f0000000140)='security.SMACK64IPOUT\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='E@oxnet0^ppp1\x00'], 0xe, 0x1) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x24400, 0x0) ioctl$BLKSECTGET(r6, 0x1267, &(0x7f0000000280)) write$P9_RMKNOD(r5, &(0x7f0000000100)={0x14, 0x13, 0x2, {0x10, 0x0, 0x4}}, 0x14) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) getsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r9 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r9, 0x101, 0x2, &(0x7f0000000400), &(0x7f0000000380)=0xfffffffffffffcf9) ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f0000000000)=0x0) prlimit64(r10, 0x9, &(0x7f00000000c0)={0xfffffffffffffe01, 0x6}, 0x0) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r12 = dup(r11) getsockopt$bt_rfcomm_RFCOMM_LM(r12, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$SOUND_MIXER_WRITE_RECSRC(r12, 0xc0044dff, &(0x7f0000000040)=0x7) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r13 = syz_open_dev$ndb(0x0, 0x0, 0x0) r14 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r15 = dup(r14) getsockopt$bt_rfcomm_RFCOMM_LM(r15, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r15, 0x84, 0x18, &(0x7f00000002c0)={0x0, 0x7}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000340)={r16, 0x1d9}, 0x8) ioctl$NBD_CLEAR_SOCK(r13, 0xab04) 18:50:00 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) [ 370.220874][T13689] xt_l2tp: missing protocol rule (udp|l2tpip) 18:50:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617703780000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 370.297227][T13693] block nbd4: shutting down sockets 18:50:00 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) [ 370.352304][T13697] xt_l2tp: missing protocol rule (udp|l2tpip) [ 370.407740][T13690] block nbd4: shutting down sockets 18:50:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177007a0000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 370.545260][T13709] xt_l2tp: missing protocol rule (udp|l2tpip) 18:50:00 executing program 4: r0 = open(&(0x7f0000000040)='./file0\x00', 0x800, 0x20) ioctl(r0, 0x100000001, &(0x7f0000000080)="b8c27f3fe93bbf266d7c4a940b9e278ab55d179b7fdd399f802324456675ccb22c2a978c6f61cab9cc5871499c281061823b2f3c66642528632327cc45b7dffff64b23d66a4957da3b6b25109fef8f1609220ee800e6e11a8e7006b12bc709219e55bcc6da32bb896f44037b5cf3ef4c106ffcb9b5dce30e58359a9d3963391eea99e1fb67aafc223b3be4bfb354d5251d1ca7d579af9a4d129a84eb6c4f942d4ab6ebdb3c2da1afa700fdfd71c49095e4abd656a51452a62a563f7384868813e851fa345548564865090371c21407c41d33df941aa0162701211798d1") r1 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) r6 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x0, 0x481) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x503400, 0x0) ioctl$VIDIOC_S_AUDOUT(r9, 0x40345632, &(0x7f0000000340)={0x2, "3ce20d4d551edffeac574caa9b41397d5361ae3714854792a1ff47288cfeee2c", 0x1}) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) finit_module(r8, &(0x7f00000002c0)='/dev/nbd#\x00', 0x3) r10 = dup(r7) getsockopt$bt_rfcomm_RFCOMM_LM(r10, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$DRM_IOCTL_RES_CTX(r10, 0xc0106426, &(0x7f0000000240)={0x6, &(0x7f00000001c0)=[{}, {0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r6, 0x40086425, &(0x7f0000000280)={r11}) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x1, &(0x7f0000000000)=0x5, 0x4) 18:50:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8044610a, &(0x7f0000000000)) 18:50:00 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 18:50:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700b40000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f00000003c0)={[0x7, 0x4, 0x4d52, 0x6, 0x100, 0x8, 0x0, 0xfffff801, 0xed, 0x1, 0x3460, 0xffffffff, 0x244, 0xffffffff, 0x7, 0xb7de, 0x1ff, 0x6, 0x2, 0xfffffffc, 0x1, 0x4d, 0xb65, 0x1000, 0x8, 0x8, 0x6, 0x0, 0x19b0, 0x5, 0x4, 0x1, 0x93, 0x20, 0x10001, 0x8ea5, 0x0, 0x8, 0x2, 0x7ff, 0x10, 0x15f8, 0x4, 0x401, 0x6, 0x5, 0x1000, 0x6, 0x0, 0x2, 0x0, 0x0, 0x80000000, 0x0, 0x4, 0x2400, 0xad9e, 0xfffffffe, 0x80000000, 0x0, 0x193c, 0x10001, 0x9, 0x8, 0x6, 0x7958, 0x8000, 0xcd, 0xffff, 0x1000, 0x640c, 0x1, 0x0, 0x7fffffff, 0xfff, 0x8000, 0xdb, 0x7fff, 0x20000000, 0x0, 0x3, 0x3, 0x3, 0x2, 0x7, 0x2, 0x81, 0xa662, 0x2, 0x7f, 0xffffff00, 0x6, 0x0, 0x8d9c, 0x3, 0x36, 0x2, 0x9, 0xfffffffd, 0x2, 0x7, 0x80000000, 0x4, 0x8428, 0x101, 0x81, 0x1c, 0x8000, 0x0, 0x101, 0x4, 0x120000, 0x6, 0x3, 0x7ff, 0x40, 0x9, 0x8, 0x7, 0x0, 0x3, 0x8, 0x7fffffff, 0x9d, 0x1, 0xffffffe1, 0x1, 0x81, 0x5, 0xce0, 0x4, 0x53, 0x6, 0x1, 0x7, 0x5, 0x5f74, 0xfdf6, 0x4be, 0x4, 0x657, 0x2, 0xf7, 0x4, 0x9d, 0xff, 0x1002, 0x7e0e, 0x1, 0x100, 0x1, 0x6a7, 0x10001, 0x366a, 0xfffffff7, 0x7ff, 0x9, 0x7, 0x7, 0x5, 0x6, 0x1000, 0x7f, 0xffffffe1, 0x8, 0x3, 0x1, 0x1, 0x81, 0x7ff, 0xffff, 0xa, 0x6, 0x0, 0x8001, 0x309f, 0x1, 0x200, 0x7, 0x3, 0x236, 0xef, 0x396, 0x1f20, 0x9, 0x985, 0x5, 0xc76, 0x400, 0x9, 0x4, 0x3, 0x4, 0x0, 0x10001, 0x1c6, 0x4, 0x1f, 0x100, 0x6, 0x8, 0x9, 0xfb4, 0x9, 0x7fffffff, 0x8000, 0x5, 0x3, 0x86, 0x3d, 0x8, 0x5, 0x1, 0x5, 0xe15, 0x81, 0xffffff7f, 0x200, 0x9, 0x0, 0x80, 0x7, 0x5, 0x6, 0xffffff4b, 0xffff, 0x0, 0x0, 0x1a, 0x9, 0xc16f, 0x3, 0x7fffffff, 0x2, 0x400, 0xfff, 0x20, 0xf1a8, 0xbf9, 0x1f800000, 0x7ff, 0xeba, 0x5, 0x8000, 0x0, 0x3, 0x3, 0x3, 0xffff, 0x3ff, 0x1, 0xc0c, 0xfffffe01, 0x1, 0x3, 0x9, 0x9, 0x7e, 0x0, 0x5, 0x4, 0x5, 0x8, 0x8, 0x401, 0x8001, 0x2, 0x800, 0x2, 0x2, 0x200, 0x1c79, 0x0, 0x9, 0x105f9d6e, 0x2, 0x80, 0xafbc, 0x3, 0xef9, 0xdeab, 0x8, 0x0, 0xa73, 0x401, 0x10000, 0x10001, 0xff, 0x200, 0x0, 0xff, 0x3, 0x5, 0x4, 0x2, 0x8, 0x10000, 0x6, 0x9f6, 0x6, 0x0, 0x400, 0x10001, 0x6, 0x8000, 0x8, 0x40, 0xfffffffe, 0x7, 0x6, 0x62, 0x9, 0x1, 0xc2, 0xc1, 0x7ff, 0xfffffffd, 0x2, 0x1000, 0x4, 0x2, 0x0, 0x800, 0x3ff, 0x3599, 0x19e0, 0x4, 0x3, 0x1, 0x2, 0x18, 0x7, 0xff800000, 0x200, 0x3, 0x0, 0xfffffb55, 0x8, 0xf65e, 0x9, 0xfffffffe, 0x5, 0x0, 0x9, 0x1, 0x6, 0x9, 0x0, 0x3, 0xadc3, 0x7, 0x8, 0x9b, 0x5, 0x1, 0x9426, 0x401, 0x9, 0x3f, 0x2, 0xfffffffd, 0xfff, 0x0, 0x2, 0x4, 0x4, 0x1, 0x1, 0x7b639e0, 0x1f, 0x1, 0x1, 0x0, 0x3, 0x6, 0xffffffff, 0x0, 0x8, 0x0, 0xc, 0x401, 0x444, 0x4, 0x8001, 0x6, 0x1, 0x800, 0x100, 0x0, 0x8, 0x88a7, 0xb0000000, 0x2, 0x4, 0x7, 0x0, 0x80, 0x0, 0x7, 0x5, 0x9, 0x8, 0xb26, 0x0, 0x1e, 0x9, 0x0, 0x1000, 0x0, 0x10001, 0x80, 0x2, 0x1ff, 0x10000, 0x8, 0x0, 0x1, 0x81, 0x80000000, 0xba9, 0x4, 0xa, 0x100, 0x6, 0x5, 0x26d8f42f, 0x800000, 0x5, 0x5, 0x100, 0x1f, 0x10001, 0x7, 0xc00, 0x7, 0x6, 0x7fffffff, 0x441c, 0x800, 0x8, 0x7f, 0x3, 0x0, 0x2, 0xffffff80, 0x8, 0xc8be, 0xfd1, 0x3f, 0x200, 0x1f3, 0x8, 0x40, 0x4, 0x8, 0xfffffffa, 0x4, 0xb3, 0x7, 0x101, 0x7fffffff, 0x6, 0x5, 0x8, 0x2, 0x66de8315, 0x5, 0x9, 0x81, 0x1b, 0x9, 0xded, 0x4, 0x8000, 0xffffffff, 0x9, 0x4, 0xf3, 0x7, 0x0, 0x0, 0x7, 0x7dc3, 0x7, 0x2000000, 0x9, 0x0, 0xe680, 0x9, 0x10001, 0x7, 0x5, 0x80000000, 0x400, 0x1, 0x1800, 0xa3fc, 0x8f8d, 0xffff502a, 0x777, 0x7, 0x5, 0x7, 0x8, 0x200, 0x20, 0x5, 0x9, 0x6, 0x9, 0x101, 0x5d94, 0x0, 0x6, 0x90, 0xd6, 0xffffff80, 0x7, 0x5, 0x0, 0x401, 0x0, 0x6, 0x1ff, 0x8, 0xffff, 0x9f85, 0x4c18, 0x5, 0x6, 0x0, 0x5, 0x0, 0x800, 0xfffffa79, 0x10001, 0x9, 0xffffffff, 0x1, 0xd1, 0x6, 0x1258208d, 0x7ca4, 0x0, 0x8001, 0x3, 0xe8c, 0x8001, 0x7f, 0x5, 0x9, 0x8, 0x4dc8, 0x9daf, 0x8, 0x9, 0x4, 0x1, 0x800, 0x401, 0x80, 0x8, 0x8001, 0x2, 0x401, 0x59, 0xcaa, 0xfffff000, 0x0, 0xae98, 0xa5eb, 0xec, 0x5, 0x8903, 0x800, 0xfff, 0x5, 0x4, 0x2, 0x7, 0xd15, 0x3, 0x58bca333, 0x3f, 0x4, 0x2, 0x100, 0x2, 0xa71500d5, 0x1, 0x40, 0x2, 0x8, 0x3f, 0x6, 0x2, 0x52, 0x4, 0x2, 0x8, 0x2, 0x40, 0x6, 0x401, 0x0, 0x3, 0xff4, 0x8, 0x6, 0xfff, 0xfffffffc, 0x401, 0x1f, 0x85, 0x22e, 0xfd90, 0x400, 0x1, 0x2, 0x7, 0x0, 0x5, 0x8c2f, 0x2, 0x3, 0x2, 0x6, 0x6, 0x80000001, 0x10001, 0x1, 0x9, 0x7fff, 0x80000000, 0x9, 0x8, 0x2f2, 0x401, 0x24be, 0x8af, 0x2, 0xfffffffb, 0x1, 0x6, 0x7, 0x4, 0x8, 0x0, 0xffffffff, 0x3, 0x400, 0x8, 0xa5ed, 0x9, 0x7f, 0x7, 0xfffffffb, 0x1, 0x5, 0x2d46ed78, 0x100, 0xd9, 0x2, 0xd229, 0x4, 0x80, 0x5590, 0x7, 0xfffffffa, 0x6, 0x400, 0xa54, 0x1, 0x100, 0x6, 0x7, 0x4, 0x6, 0x7fff, 0xffff, 0x3, 0x6, 0x7ff, 0x8000, 0x4, 0x18, 0x80000001, 0xd1, 0x6, 0x8, 0x5, 0x3, 0x7ddf, 0x7, 0x2, 0x418, 0x1, 0x1000, 0x1, 0x3, 0x1f, 0x1000, 0xd0bb, 0x3, 0x8, 0x3, 0x7f80000, 0xdbd, 0x1, 0x3, 0x7, 0xfffffffd, 0x0, 0x4, 0x0, 0x9, 0xc61, 0x1f, 0x1, 0x7, 0x574, 0x4, 0x8, 0xc8, 0x0, 0x3, 0x1, 0x9, 0x7, 0xffffff7f, 0x6, 0x991e, 0x7, 0x1, 0x69e, 0x80000001, 0x1, 0x3, 0x401, 0x1ff, 0x9, 0xfffffffd, 0x8, 0x3, 0xffffffff, 0xffff, 0x3, 0x1, 0x8, 0x8dcd, 0x401, 0x200, 0x5, 0x5, 0x1, 0x2, 0x4, 0x1e, 0x7ff, 0xa5, 0x9, 0x7ff, 0x4, 0x1, 0x8, 0xffffb82d, 0xbe3, 0x5, 0xb0, 0x9, 0x2, 0x7, 0xffffff00, 0x9, 0x1, 0x538c09cc, 0x3f, 0x8, 0xfffffffd, 0x8, 0x80000000, 0xfffffffe, 0x1, 0xffffffff, 0x3, 0x68b, 0x4a05, 0x0, 0x3f, 0x400, 0x2be9, 0xc71, 0x7fff, 0x9, 0x81, 0x8, 0x800, 0x400, 0x100, 0x3, 0x3, 0x40, 0xbe, 0x200, 0x3, 0x4, 0x8000, 0x1, 0xfffffff9, 0xffffffff, 0x1, 0x3, 0x9, 0x79bd, 0x2, 0x4, 0x8, 0x34, 0x20, 0x0, 0x100, 0x2, 0x0, 0x4, 0x3f, 0xcdb3, 0x200, 0x5, 0x0, 0x7, 0x3, 0x1ff, 0x9, 0x200, 0x8, 0x1f, 0x6, 0xc5, 0x6, 0xf63, 0x3, 0x1000, 0x400, 0xffff, 0x8, 0x9, 0x5, 0x8, 0x4, 0x7ff, 0x3, 0x0, 0x6310f83d, 0x101, 0x6, 0x4, 0x4, 0x8, 0x9, 0x1000, 0x21, 0x9, 0x6, 0x8, 0x0, 0x6, 0x40, 0x0, 0x7, 0x18c, 0xd98, 0x3, 0x1, 0x7, 0x5, 0x6, 0x48b, 0x5, 0x7, 0x6, 0xce5, 0x200, 0x0, 0x5, 0x1, 0xfffffffa, 0x3, 0x7fff, 0x0, 0x3, 0x200, 0x5, 0x400000, 0x8, 0x401, 0x23, 0x9, 0x0, 0x8, 0x7, 0x3, 0x13d4, 0x1, 0x9, 0xaae, 0x6, 0x4039, 0x4, 0x2, 0x7, 0x9, 0x401, 0x4, 0x3, 0x4, 0xf040, 0xfff, 0xf9d, 0x8001, 0x20, 0x8, 0x7, 0x0, 0x1a, 0x0, 0xa188, 0x7, 0x3ff, 0x3, 0x8000, 0x20, 0x7, 0x4e, 0x8, 0x1, 0x1, 0x0, 0x2, 0x82, 0x6, 0x3, 0x2513, 0x2, 0x4, 0x7fffffff, 0x8000, 0x8, 0x3, 0x0, 0x4, 0x6, 0x80000001, 0xd9, 0x2, 0xe552, 0x0, 0xffffffff, 0xff, 0x27c, 0x107, 0x2, 0x5, 0x7142, 0x7, 0x1, 0x20, 0xa5, 0x4723, 0x2, 0x80000001, 0x0, 0x8, 0x0, 0x10001, 0x7fffffff, 0x1, 0x0, 0x5, 0x6, 0x6, 0x5, 0x7fff, 0x94d, 0x0, 0x3, 0x2, 0x3, 0x1, 0x3f, 0xff, 0x80000000, 0x4, 0x0, 0x8882, 0x5, 0x7f, 0x65b3, 0x1, 0x2, 0x8, 0x800, 0x6, 0x7fff, 0x25a, 0x9, 0x46be, 0x4, 0x4, 0xd251, 0x17c8, 0x4, 0x80000001, 0x800, 0x100, 0x5c46e3b6, 0x1, 0x9, 0x800, 0x7, 0x7, 0x10000, 0x7, 0x7f, 0x6]}) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) 18:50:00 executing program 5: r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r1, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$getregset(0x15, r0, 0x2, &(0x7f0000000280)={0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) r3 = getpid() r4 = gettid() rt_tgsigqueueinfo(r4, r3, 0x16, &(0x7f00000000c0)) r5 = getpid() r6 = gettid() syz_init_net_socket$nfc_raw(0x27, 0xca6ed0e7d8fddf3c, 0x0) rt_tgsigqueueinfo(r6, r5, 0x16, &(0x7f00000000c0)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0xfffffffffffffd37, &(0x7f0000000300)='\x93n\x8f\xacY3\xd8\a\x9f6\x05\xf9\xebH/\xfb\x92\xd8\xd4|\a2YY\x8c\xaaj5\xfb\xfc\xc3\xe8\x980xffffffffffffffff}, 0x48800) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000200)={0x1, &(0x7f0000000180), 0x4, r9, 0xf}) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r11 = dup(r10) getsockopt$bt_rfcomm_RFCOMM_LM(r11, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$SNDRV_PCM_IOCTL_STATUS64(r11, 0x80984120, &(0x7f00000003c0)) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r13 = dup(r12) getsockopt$bt_rfcomm_RFCOMM_LM(r13, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$KVM_GET_REG_LIST(r13, 0xc008aeb0, &(0x7f0000000240)={0x7, [0x7, 0x3, 0x3, 0x20, 0x1000, 0x0, 0x642781f5]}) [ 370.899501][T13723] xt_l2tp: missing protocol rule (udp|l2tpip) [ 370.914681][T13722] block nbd4: shutting down sockets 18:50:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617701c80000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 370.969261][T13722] block nbd4: shutting down sockets 18:50:01 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 18:50:01 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) bind$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 18:50:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000000)) [ 371.156747][T13732] xt_l2tp: missing protocol rule (udp|l2tpip) 18:50:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617701cc0000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 371.297876][T13740] block nbd4: shutting down sockets 18:50:01 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 371.359726][T13740] block nbd4: Device being setup by another task [ 371.382283][T13740] block nbd4: shutting down sockets 18:50:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000000)) [ 371.429696][T13746] xt_l2tp: missing protocol rule (udp|l2tpip) 18:50:01 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0xb04200) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) 18:50:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617703d00000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 371.688014][T13759] xt_l2tp: missing protocol rule (udp|l2tpip) 18:50:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) connect$can_bcm(r2, &(0x7f0000000040), 0x10) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x80, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000100)=0xff, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) 18:50:01 executing program 1 (fault-call:10 fault-nth:0): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300), 0x4) r4 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 18:50:01 executing program 2: syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 18:50:01 executing program 5 (fault-call:2 fault-nth:0): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) 18:50:01 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x100000000, 0x9, 0x1, 0x2, 0x9, 0xfffffffffffffffc, 0xd993, 0x9, 0x20, 0xef6, 0x80000001, 0xac, 0x2, 0x4ac, 0x8, 0x4], 0x3000, 0x20198adc267a713d}) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r5 = dup(r4) ioctl$NBD_SET_SOCK(r3, 0xab00, r5) ioctl$NBD_SET_SOCK(r0, 0xab00, r5) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) 18:50:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700dc0000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 371.939020][T13776] xt_l2tp: missing protocol rule (udp|l2tpip) [ 371.970060][T13774] device nr0 entered promiscuous mode [ 371.982033][T13778] block nbd4: shutting down sockets 18:50:02 executing program 2: syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 372.025163][T13769] block nbd4: shutting down sockets [ 372.031767][T13774] FAULT_INJECTION: forcing a failure. [ 372.031767][T13774] name failslab, interval 1, probability 0, space 0, times 0 [ 372.059948][T13785] FAULT_INJECTION: forcing a failure. [ 372.059948][T13785] name failslab, interval 1, probability 0, space 0, times 0 [ 372.083532][T13774] CPU: 1 PID: 13774 Comm: syz-executor.1 Not tainted 5.5.0-rc2-next-20191220-syzkaller #0 [ 372.093572][T13774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 372.104152][T13774] Call Trace: [ 372.107450][T13774] dump_stack+0x197/0x210 [ 372.111793][T13774] should_fail.cold+0xa/0x10 [ 372.116389][T13774] ? setup_fault_attr+0x220/0x220 [ 372.121437][T13774] ? ___might_sleep+0x163/0x2c0 [ 372.126293][T13774] __should_failslab+0x121/0x190 [ 372.131676][T13774] should_failslab+0x9/0x14 [ 372.136186][T13774] kmem_cache_alloc_trace+0x2d3/0x790 [ 372.141571][T13774] alloc_pipe_info+0x116/0x4c0 [ 372.146340][T13774] splice_direct_to_actor+0x80e/0xa30 [ 372.151722][T13774] ? generic_pipe_buf_nosteal+0x10/0x10 [ 372.157278][T13774] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 372.163519][T13774] ? do_splice_to+0x180/0x180 [ 372.168202][T13774] ? rw_verify_area+0x126/0x360 [ 372.173054][T13774] do_splice_direct+0x1da/0x2a0 [ 372.177907][T13774] ? splice_direct_to_actor+0xa30/0xa30 [ 372.183462][T13774] ? rw_verify_area+0x126/0x360 [ 372.188313][T13774] do_sendfile+0x597/0xd00 [ 372.192743][T13774] ? do_compat_pwritev64+0x1c0/0x1c0 [ 372.198056][T13774] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 372.204313][T13774] ? fput+0x1b/0x20 [ 372.208138][T13774] __x64_sys_sendfile64+0x1dd/0x220 [ 372.213341][T13774] ? __ia32_sys_sendfile+0x230/0x230 [ 372.218630][T13774] ? do_syscall_64+0x26/0x790 [ 372.223309][T13774] ? lockdep_hardirqs_on+0x421/0x5e0 [ 372.228623][T13774] ? trace_hardirqs_on+0x67/0x240 [ 372.233654][T13774] do_syscall_64+0xfa/0x790 [ 372.238159][T13774] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 372.244050][T13774] RIP: 0033:0x45a919 [ 372.247944][T13774] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 372.267543][T13774] RSP: 002b:00007ff033900c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 372.275950][T13774] RAX: ffffffffffffffda RBX: 00007ff033900c90 RCX: 000000000045a919 18:50:02 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)={0x6}) 18:50:02 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617703e80000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 372.283914][T13774] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 372.291881][T13774] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 372.299857][T13774] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 00007ff0339016d4 [ 372.307822][T13774] R13: 00000000004c925e R14: 00000000004e0f88 R15: 0000000000000007 [ 372.321303][T13777] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 372.360835][T13785] CPU: 0 PID: 13785 Comm: syz-executor.5 Not tainted 5.5.0-rc2-next-20191220-syzkaller #0 [ 372.370884][T13785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 372.381095][T13785] Call Trace: [ 372.382377][T13789] block nbd4: shutting down sockets [ 372.384417][T13785] dump_stack+0x197/0x210 [ 372.384441][T13785] should_fail.cold+0xa/0x10 [ 372.384463][T13785] ? setup_fault_attr+0x220/0x220 [ 372.403400][T13789] block nbd4: Device being setup by another task [ 372.403561][T13785] ? ___might_sleep+0x163/0x2c0 [ 372.412204][T13789] block nbd4: shutting down sockets [ 372.414723][T13785] __should_failslab+0x121/0x190 [ 372.414755][T13785] should_failslab+0x9/0x14 [ 372.429354][T13785] kmem_cache_alloc+0x2aa/0x710 [ 372.434220][T13785] getname_flags+0xd6/0x5b0 [ 372.438747][T13785] getname+0x1a/0x20 [ 372.442653][T13785] do_sys_openat2+0x4a6/0x840 [ 372.447346][T13785] ? file_open_root+0x5f0/0x5f0 [ 372.452204][T13785] ? wait_for_completion+0x440/0x440 18:50:02 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'hwsim0\x00', 0x1}, 0x18) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) [ 372.457502][T13785] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 372.463758][T13785] do_sys_open+0xfc/0x190 [ 372.468095][T13785] ? filp_open+0x80/0x80 [ 372.472364][T13785] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 372.477835][T13785] ? do_syscall_64+0x26/0x790 [ 372.482543][T13785] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 372.488612][T13785] ? do_syscall_64+0x26/0x790 [ 372.490571][T13794] xt_l2tp: missing protocol rule (udp|l2tpip) [ 372.493290][T13785] ? lockdep_hardirqs_on+0x421/0x5e0 [ 372.493310][T13785] __x64_sys_creat+0x61/0x80 18:50:02 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700f40000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 372.493329][T13785] do_syscall_64+0xfa/0x790 [ 372.493349][T13785] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 372.493360][T13785] RIP: 0033:0x45a919 [ 372.493374][T13785] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 372.493381][T13785] RSP: 002b:00007f1d734e8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 372.493401][T13785] RAX: ffffffffffffffda RBX: 00007f1d734e8c90 RCX: 000000000045a919 18:50:02 executing program 2: syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 372.559746][T13785] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200000c0 [ 372.567737][T13785] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 372.575760][T13785] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d734e96d4 [ 372.578205][T13796] block nbd4: shutting down sockets [ 372.583741][T13785] R13: 00000000004c11be R14: 00000000004d5060 R15: 0000000000000005 [ 372.641472][T13799] block nbd4: Device being setup by another task [ 372.672907][T13799] block nbd4: shutting down sockets 18:50:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000040)) 18:50:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300), 0x4) r4 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 18:50:03 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 18:50:03 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617701f40000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:03 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x810100, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000080)=0x400) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x100, 0x0) ioctl$KDFONTOP_SET_DEF(r5, 0x4b72, &(0x7f00000000c0)={0x2, 0x1, 0x5, 0xb, 0x106, &(0x7f0000000240)="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"}) ioctl$NBD_SET_SOCK(r0, 0xab00, r4) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 18:50:03 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x0) 18:50:03 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 373.358100][T13821] Unknown ioctl 19314 18:50:03 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617703f40000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 373.390801][T13817] block nbd4: shutting down sockets [ 373.404702][T13822] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing 18:50:03 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 373.432368][T13821] Unknown ioctl 19314 [ 373.436633][T13830] block nbd4: Device being setup by another task [ 373.443321][T13817] block nbd4: shutting down sockets 18:50:03 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 18:50:03 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x2) 18:50:03 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) [ 373.605649][T13831] device nr0 entered promiscuous mode [ 373.644938][T13839] block nbd4: shutting down sockets [ 373.667984][T13839] block nbd4: Device being setup by another task [ 373.681976][T13839] block nbd4: shutting down sockets [ 373.731059][ C1] net_ratelimit: 6 callbacks suppressed [ 373.731067][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 373.731109][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 373.748339][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:50:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r3 = accept4$x25(r2, 0x0, &(0x7f0000000180), 0x80800) fstatfs(r3, &(0x7f00000001c0)=""/20) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x9) r4 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7, 0x88001) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0xc0386106, &(0x7f0000000000)) [ 373.891044][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 373.896943][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 373.971104][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 373.973395][T13850] block nbd2: shutting down sockets [ 373.977001][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 374.016525][T13852] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing 18:50:04 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/200) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 18:50:04 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700ff0000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:04 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x3) 18:50:04 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 18:50:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x5, 0x82401) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x6, 0x5, 0x3}}, 0x30) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000300), 0x4) r5 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r5, 0x200004) sendfile(r1, r5, 0x0, 0x80001d00c0d0) [ 374.694662][T13868] block nbd4: shutting down sockets [ 374.710103][T13866] block nbd2: shutting down sockets [ 374.734595][T13872] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 374.738397][T13863] block nbd4: shutting down sockets 18:50:04 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000400000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:04 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) r6 = syz_open_dev$swradio(&(0x7f0000003640)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_G_CROP(r6, 0xc038563b, &(0x7f0000003680)={0x1, 0x0, {0x9, 0xae0, 0x401, 0x5}}) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f0000000700)=@framed, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5}, 0x78) sendmmsg$inet6(r1, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)="31bc81495990278b56c371a09080118ff11269afedc877a08fb392083afe0a5a561885f401be99e4bfbabec885673e66bb7d58295a5d8228706fe3d4b537f59cbfcd088c2460761caa0029ffdf6cbf136eb62e79832f41d2c3736d41", 0x5c}, {&(0x7f00000000c0)="2f803402ffe4d91dbd49d1068cee173da9f55cc70ba988bdddd1816bbbe203bf8aa49cb63455e4fdf4fd855a09972f9b71a375a6d2f259a51d4b6385c5b548540ac462903794520b1c01a836642b7cbadef2a6c07dc3cdd23d932d22f10eec35cbda3af55ff6d9ac523ae736114c0c140bbcd557d1c1bd6a3fbbb98c4fa2ea7431863f74a2712184338ef31dbad468c7e086ce51b0adb6e3f07f723156b6d9626da7f54a6cd62d98084735bd2998fa4150a9335c6dc9166fe382d7f43a8b35a2b8d167747339f413348c0cd97023740a785c88602e1c6698ca36b60ce53ef259ded203d92bd90ba7ea780b74ff69cce9e9", 0xf1}, {&(0x7f0000000240)="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", 0xff}, {&(0x7f0000000340)="2fe540cd5ba00755cd291ba61dab59aefbfa9a5ec10cb007f57a1e8993623bb8e85be614d27cd7ac2a90cff279ee1e269f4b6a367d9b4a5e329f6c955321d441a42344eba98031557e3c5efed270cb1d44ca84e8aed21780420180d8a15829b1332e0080f38bfb1f731027b4d19a26bbf741a1baa2725272780ae3a901dde3005a5b606a4fa1bf43693a5c4be847ea6e8a31e96e56c25f93a43f3846b87463b0f50632d146936f25c0329d833d9032f640c3059c22dc702488ccb43586c54bac0482c911d1432dec3179", 0xca}, {&(0x7f0000000440)="b4f43d594b5e01e71485a3bd46985c26fe4b21a45d41eb1f56cda7fa0cd91b0fbc4dd80235fa059496bedf3724059bb06f05df12691b98c01575bdad1290244bf1184a63382d758b843902971dd24e028a756f1edf7c7152fc97e5a9ae4c85fd069c30cb1de8f2ed429f4cb6a3ed5752a70b85bf6982204363", 0x79}, {&(0x7f00000004c0)="1172706e7ffbdfe88f9b4f5fa8eafe3f68d8c1fdf0453a62df1bf00835b602adb92a342691c9e407946e731ea0aa31984d0421d2399f8e667300757f99678b239005dc23e5ffded4d6210ce66c2b5fe3990340f2a615994972b6bda66a454da5c6b217ec3966bfec028b7c25d31651cc410138c51f69b54e295eeb007e18d213d606866ffe62c83bed66b0ed12eddca4e0ab127503413129424716c94b1e53388e583acd7d4e3508121f10a6fcc2f57f1bb932b8b3f1f4dc", 0xb8}], 0x6, &(0x7f0000000600)=[@rthdr={{0x28, 0x29, 0x39, {0x32, 0x2, 0x0, 0x5, 0x0, [@mcast2]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x5c, 0x6, 0x0, 0x88, 0x0, [@initdev={0xfe, 0x88, [], 0x1, 0x0}, @remote, @mcast1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r3}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x0, 0x0, [], [@jumbo={0xc2, 0x4, 0x9}]}}}, @dstopts_2292={{0xa0, 0x29, 0x4, {0x87, 0x10, [], [@jumbo={0xc2, 0x4, 0x2}, @jumbo={0xc2, 0x4, 0x1}, @calipso={0x7, 0x18, {0x20, 0x4, 0x9, 0x0, [0x100000000, 0x37f7]}}, @calipso={0x7, 0x18, {0x6, 0x4, 0x40, 0x7, [0x7, 0x1f]}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x8, 0x8, 0x6, 0x3, [0x4, 0x8, 0x81, 0x9]}}, @hao={0xc9, 0x10, @empty}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x108, 0xe, 0x2, 0x1, 0x0, [@empty, @rand_addr="cddf0f4dcaf1e422b0dfd36827d62316", @empty, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}]}}}, @dstopts_2292={{0x188, 0x29, 0x4, {0x3b, 0x2d, [], [@enc_lim={0x4, 0x1, 0x81}, @pad1, @ra={0x5, 0x2, 0x200}, @pad1, @generic={0xfe, 0xc3, "f05b63caf90ca1a94787c55e83561294be8f9032ebfc6ad3e9637273abca9ac1e2cce0f422ff184d553c50b2a45fb201ce35ed4b110d453578427a99a7d8fb1e89c665764712c28ae61b2ba5ee844dfd6babcdc614901e90d72a0cc2d7e2ea2e5e981ca1ed4058ffa888dafd03076bb9493273e7f5e378804b9febd1272ac5950b8a378cb5248b7f8c64d5307e5c20f91b708410151cc892e032862c277aecf20d4409578107bfa78ac90dde4b452836a2e8922d52ad9b407d8d1be90f9d7b211f7140"}, @generic={0x1, 0x83, "95d3b7948e32fec71a275f239b3dff69617fac0388e826f85b9ae678bdb02af4ac5ff655c7883a0443d2c21db30bcb076da99b6761d2a3367967f94bcc6a67678c9e4cd22aaee83315ff564e429f31bc0cd87d6da1a7e36ce682c7d3f21c03e5ddf87c0abc654e165daf02297abb9b20aa9bfc216bc68e910918f4cffbdb6ada608d6c"}, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x7f}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1]}}}], 0x380}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0x6, @mcast2, 0x4}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000000980)="2195326f975546938ddd4884c06891d3084f5e387180fca505620888b235f9604cfe62cbaa4d034639ba3ee293f47dc9e41c71a5ca0a0caad0508c9c9956589a6f3960406150f6dd00f4ecc8fb6aa7f386f8e8621277c91bc1280d6f3a6e20aaea2ccb841d0fddc47a8e5b8f0257f2332b087bfd4e7fedcca9fcb99b56065aa4345c690471b99c85d69358d3dcb1c376f6d28016b97083c3ab1ae0a9d80459774616be4f8a176b72b5fa01d1ff10d67638f17c78cc40ec3eca77d6717d1ec8e597f9cd63effb445159a4899293443816e1f4d9d30baeed4c6000ba7d2400a80afc9bebab900f25", 0xe7}, {&(0x7f0000000a80)="897a42d651428604ce060a713b864fc4281668310e55ab5cc993e8acf9664ec738235392f3aa3c5de5e514f6074761c3ca9495ceaec74b4ac9f8df497c1b2fccc77ecfc5f78347672a07b92f9b00b1e48805f623130ea00e29337dadf53b08686c2e8ad9af5842f8145d4468bcb0273267d3bedfe3283f26e3ba8a3c3d5f274b5f99255efaa0364e01fb027a2fd6dfeb136ba51f2085135d8ea724c96bdfdaed05101d5dc6022ffd", 0xa8}, {&(0x7f0000000b40)="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", 0x1000}], 0x3}}, {{&(0x7f0000001b80)={0xa, 0x4e24, 0x5, @ipv4={[], [], @rand_addr=0x5}, 0x800000}, 0x1c, &(0x7f0000002c40)=[{&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f0000002bc0)="63ecd20102a0f4bb489ad77eac9efb1c773756d0004a788cf2e4ae25d2cc70e901ee9350d65d9e925ae75ba9c1a165f039800ce415c0dbcc3a820fd8cb86770755dbe97d40c74d759a852fd75f3a503a3750910058d332ca3c1d6b2ab97f9d0229f21e669cbc747c6ef74d10f0b86391be64e03fbf0c2495831846e1ee", 0x7d}], 0x2, &(0x7f0000002c80)=[@hoplimit={{0x14, 0x29, 0x34, 0x7ff}}, @hopopts={{0xc0, 0x29, 0x36, {0x2f, 0x14, [], [@pad1, @calipso={0x7, 0x58, {0x52, 0x14, 0x9, 0x1, [0x100000000, 0x1ff, 0xfffffffffffffffd, 0xffff, 0xa7, 0x80000001, 0x0, 0x6, 0x20, 0x9]}}, @calipso={0x7, 0x28, {0x7, 0x8, 0xb7, 0x80, [0x8c, 0x100000001, 0x81, 0x8]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @hao={0xc9, 0x10, @remote}, @pad1]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x5e, 0x6, 0x3, 0x6, 0x0, [@rand_addr="188f6029e872fc94adbbca747955f1ef", @mcast1, @rand_addr="16970d68fcf71d515a3c61721c6bb213"]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xae0}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @hoplimit={{0x14, 0x29, 0x34, 0x800}}], 0x1c0}}, {{&(0x7f0000002e40)={0xa, 0x4e24, 0x6, @empty, 0x421}, 0x1c, &(0x7f0000003280)=[{&(0x7f0000002e80)="b47f990ad06d5acd78de1bde71532b8b1bb843594b88c5bd1f0cc114c0d0c91438d00039fd2afec914030dd541fbc91beb3ec9b521750fbdcf752940df4262264031c215d19089956df1ad31c0d37fce59df9d6bef6b3b96b3214093cbfc1ad376d8e52ba2e5e8c09d0f2bd547c613cf8dc2859dcb5c0163dda42f0570fd4941433522b4dc73fefe88321c21a752b7fb9ff749ba897350800233baf025479cc077c5b0ca71c8943e5f39beecbf7fc622ddf1c9781bde85f30b5f", 0xba}, {&(0x7f0000002f40)="8dbf54679845ac4137bb22484107392e6f7865d7865d0c8caae84f6dd81dc9961e04d8a0127904606695e8ce914bb85d20861475858425d7", 0x38}, {&(0x7f0000002f80)="960a34341be3ef66018a39c8c2011a8f02af0f6686f3d54d9680ba1c1aa939e1458033f7c7ef94", 0x27}, {&(0x7f0000002fc0)="53c98923e7000e594311a5c0299d46020c1da527e37e66162c00f3a898868f67acc1033265c82061348e201e026f4bd5b4da5cb27e6d27411aa47d2d7ad4ab7f405f2e5570538fe8438475a2821b3fd6c847578cbd8b366bb2c2689bdc1845e16ee304c528d48b5a143ad10de8801e192576d9ea4cebe2f50ed49dd49c945762d7dfdbd27a8a80f487bb210c3521ec10", 0x90}, {&(0x7f0000003080)="cfa6ca2970bbad6b97d2b7e3d93d575e8604a43e1d89be9263271350", 0x1c}, {&(0x7f00000030c0)="480cfcbc9c46a32d6caee0f528d7170fac500839a0ac56ac6012dfbd6e47163e31", 0x21}, {&(0x7f0000003100)="d72a8b6448be496e86711932e0a16eb77d87fa4f698ecc57b517214631bff938e05dec71d8a25e8861c2e40ebe7480949b22444ff9ff9aeb2443193ab2d3f65cd48f6092986fbc222f872be289004e05b0ac9ebf19fd0a8f6570cd051af1cf259e07db424eadd9b6eee5e0", 0x6b}, {&(0x7f0000003180)="7ff74b431f8bf8a9b9968ceed88be7f4138f5f50fc04553fb6baeb3f0fc6725655d18e4340f3bd32b6c7560e968f591383f749b49af47d333428b1e02ff606637fbadc8f27cea81da2f573f4cdc64b16692dacc18753b73cdfacf9d23bd6ab059044da554603737e665f79687709b460eae1486d22fabcdca46a4873c56695470b85eeb8674b8023a97fed7292a082fdd10a6d5b9c7bf4fdd357831f118706c6ebfba596164be40ee0266050e9351065957916142632dc", 0xb7}, {&(0x7f0000003240)="f0fac4627dece1427ae8961be05108360fbfce71b9a7c4ed6db9ecda6dfdd73bfe9d487aa147bcc5ee2048beb21e8331a7b4ac", 0x33}], 0x9, &(0x7f0000003340)=[@flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x80, 0x29, 0x4, {0x2c, 0xc, [], [@pad1, @generic={0x81, 0x62, "3524fb6f37a801fa2e8298c5787f3ae77a8c9c9226dfb862afcff421e8a362a2c47fdcfdbdf85db4ee56d4bce8bb44349b55b8462f03cf99c2bfdba3597d43bb127fa37ffd65ba8ba984d0a7fbf634a4fc22f14d74b454fc1bbb6af815ef46fcf539"}]}}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x88, 0x14, 0x0, 0x9, 0x0, [@empty, @mcast1, @local, @remote, @remote, @loopback, @mcast2, @local, @mcast2, @rand_addr="fd8d051f1cb701e1c4516d73fc8852ff"]}}}, @tclass={{0x14, 0x29, 0x43, 0x5}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x30, 0xa, 0x1, 0x1, 0x0, [@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, @mcast1, @mcast1]}}}], 0x1d0}}], 0x4, 0x20000800) r7 = syz_open_dev$ndb(0x0, 0x0, 0x0) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r9 = dup(r8) ioctl$NBD_SET_SOCK(r7, 0xab00, r9) ioctl$NBD_SET_SOCK(r0, 0xab00, r9) r10 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r10, 0xab04) 18:50:04 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) [ 374.860913][T13880] device nr0 entered promiscuous mode 18:50:04 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000001000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:04 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000040)}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x1, 0x100000001}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendto(r0, &(0x7f0000000200)="cba65885fad058f25f3e34a53344ed677a18deee74bbac72dad00e76ddfe43d04f2925bb848d33d5463b8076df6ba3d8d7f57ade6676145ed6ad454d63fd50a8c76b72a28c1505600b427279e12cd7a3eab1697961fd2eec80904c2971e49502fc4a37f5af2fa7522ae846f226da9ef5eceb1ba28d0305cc3b74b916687b6ef1773fd68c0d4c8ae7fa1b1bd054b4876b8e1a00149749b8c2dc794936b6e445109407ac8a11e785cc315b0f5f64b0a885fac294b36c3e5db9b738de297854ba20ffeabcc3602227aa3b0ba9b3e32d4a92b3992032f7d107cd", 0xd8, 0x5, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$USBDEVFS_RESETEP(r3, 0x80045503, &(0x7f0000000300)={0xf, 0x1}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000400)=0x3) r6 = dup(r5) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$SIOCX25GDTEFACILITIES(r6, 0x89ea, &(0x7f00000003c0)) r7 = dup(r4) getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000340)={0x0, 'nr0\x00', 0x2}, 0x18) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0xc0386106, &(0x7f0000000000)) socket$inet_smc(0x2b, 0x1, 0x0) 18:50:05 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x4) [ 375.039777][T13889] block nbd2: shutting down sockets [ 375.067939][T13887] block nbd4: shutting down sockets 18:50:05 executing program 2: [ 375.091070][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 375.096921][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 375.121895][T13899] l2tp_mt_check4: 5 callbacks suppressed [ 375.121903][T13899] xt_l2tp: missing protocol rule (udp|l2tpip) 18:50:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) r1 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x4000c398, 0x101000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x8000, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$VIDIOC_ENUMAUDOUT(r3, 0xc0345642, &(0x7f0000000040)={0x1, "39bf2a56f74e5698222ece1b58104fce8cf8edc18198f61e095133dd23a098c1", 0x7, 0x1}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) [ 375.186281][T13887] block nbd4: shutting down sockets [ 375.224398][T13902] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing 18:50:05 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000002000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:05 executing program 2: 18:50:05 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000003000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 375.363251][T13912] xt_l2tp: missing protocol rule (udp|l2tpip) [ 375.513510][T13919] xt_l2tp: missing protocol rule (udp|l2tpip) [ 375.811096][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 375.927907][T13880] device nr0 entered promiscuous mode 18:50:06 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r7 = accept4$alg(r6, 0x0, 0x0, 0x3db096acc3dcb784) ioctl$sock_inet_SIOCGIFDSTADDR(r7, 0x8917, &(0x7f0000000000)={'syzkaller1\x00', {0x2, 0x4e22, @local}}) 18:50:06 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x5) 18:50:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r3 = accept4$x25(r2, 0x0, &(0x7f0000000180), 0x80800) fstatfs(r3, &(0x7f00000001c0)=""/20) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x9) r4 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7, 0x88001) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0xc0386106, &(0x7f0000000000)) 18:50:06 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000004000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000000), &(0x7f00000001c0)=0x4) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = dup(r8) getsockopt$bt_rfcomm_RFCOMM_LM(r9, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$sock_inet6_tcp_SIOCINQ(r9, 0xc0386106, &(0x7f00000000c0)) 18:50:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x40000, 0x0) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000140)) close(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r4 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r4, 0x800443d3, &(0x7f0000000200)={{0x2, 0x5, 0x0, 0x1f, 0x0, 0x1}, 0x7, 0x1, 0x40}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'\x00\x00\x00\x00e\t5\xefkk`\xa5ZqA\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000300), 0x4) r6 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r6, 0x200004) sendfile(r1, r6, 0x0, 0x80001d00c0d0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) getsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$VIDIOC_ENUMAUDIO(r8, 0xc0345641, &(0x7f00000000c0)={0x8000, "d7906a38f41125a7cc81a6916c6651ae588924ae3b99d1f1434a2ab5ef42193a", 0x4}) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r10 = dup(r9) getsockopt$bt_rfcomm_RFCOMM_LM(r10, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r10, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @sack_perm, @sack_perm, @timestamp, @sack_perm], 0x5) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000000)={0x2, 'team_slave_1\x00'}) [ 376.369186][T13932] block nbd4: shutting down sockets [ 376.387060][T13934] xt_l2tp: missing protocol rule (udp|l2tpip) [ 376.436425][T13936] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing 18:50:06 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000005000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:06 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x40, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000035c0)='/dev/hwrng\x00', 0x410580, 0x0) r6 = socket$inet(0x2, 0x4000000805, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f0000000100)={0x7, 0x7, 0x6, 0x2}) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x20000080, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="02000100", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x7a, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000003600)={r9, 0x1}, &(0x7f0000003640)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000040)={r9, @in={{0x2, 0x4e21, @local}}, 0x4, 0x6}, 0x90) r10 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r10, 0xab04) [ 376.482123][T13932] block nbd4: Device being setup by another task [ 376.509184][T13932] block nbd4: shutting down sockets 18:50:06 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x6) [ 376.608709][T13951] block nbd4: shutting down sockets [ 376.627331][T13951] block nbd4: Device being setup by another task [ 376.672752][T13950] block nbd4: shutting down sockets [ 376.699892][T13957] xt_l2tp: missing protocol rule (udp|l2tpip) 18:50:06 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000006000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:06 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_config_ext={0x80000}, 0x0, 0x40000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000035c0)='/dev/hwrng\x00', 0x410580, 0x0) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x20000080, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000003600)={r6, 0x1}, &(0x7f0000003640)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0xff, 0x2, 0x8000, 0x20, 0x9, 0xfffffe00, 0x7f, 0x2, r6}, &(0x7f0000000180)=0x20) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r9, 0x40505330, &(0x7f0000000280)={{0x1f, 0x7}, {0x2}, 0x4, 0x4, 0x9}) getsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r11 = dup(r10) getsockopt$bt_rfcomm_RFCOMM_LM(r11, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$VHOST_SET_VRING_ERR(r8, 0x4008af22, &(0x7f0000000200)={0x3, r11}) r12 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r12, 0xc0386106, &(0x7f0000000000)) 18:50:06 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r5, 0x101, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r6, 0x101, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmmsg$sock(r5, &(0x7f0000005ac0)=[{{&(0x7f0000000000)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f0000001400)=[{&(0x7f0000000080)="75f82b8acb7f90d8fb28b42b5cb794b5072bfc06fcdb14ae1b9a688c9fbf98dda91a5d88901707d8291244177fd63975e4e49cd6eaeec09d49ba3d46e520c40756cb7fbf2f36009e31324bfe0b46314fa3917d453e", 0x55}, {&(0x7f0000000100)="f3ca6ead311d1d13ae76a50f991667bc1c848e0b7f9cbe210dfdc624354971d1d9c6b6d3a739aa80ee019c47d4109c58e91c954f3d9035b038229f07a02dfdaa3e5a2c37df66a1ffa5e70e7c705794e067dcda114ae6b8", 0x57}, {&(0x7f0000000180)="ad3165890bc3eafa738468df75cdc6f737e9295f2dee3d014cdf7871383fbec7bc306c53e61d96eaf072d4e29dd8751395d6f085539dc526fa44fb3cd582cc132892ccb7008230faefd4612027e3c7e171c361ad7d99fb1f3cf75cb082fd4f3845ad9b4f9501940662fbd9aa", 0x6c}, {&(0x7f0000000240)="c28887898982e7bc5753c320cefc12ffa41643d794866de988e0f44ec91434f013cae8b06f9b6216891b0ce6ebe390f8e40629b4858b06f616239735322a4583185c75f6983c6f5feca05c15f58e44a39242241261c717ff732ce3e867a320ffc6a9a7e6fde7da80a4bdfccb9e90d89116b3c52ea05c2e311f5ae794a2735ea1bc836510b133f47138a32c43a2ec5f02827c6f3f6b9f770133469ef071167aea82fe99bf131fd5d0447d75a4d5c6958c3fa5e6c9f6bec203d26a0945df437cd05a3a1ed6336db2d13daaad0c6a1e24b00bcf362bfa", 0xd5}, {&(0x7f0000000340)="6d361aebc72b1e2b244b3871d4f4eab8e1d58f143fdda8faef895e3ab479f4cb8360213fbad2e17afa8f92c3b408939ab8450ce10b0fd9fb779b43deda6473f1d1dbabca633933d70242cdd9788822ccafa4c5ecc69bb0e51d1066814f99d01453495979a4405889246ed2a9445d862eab42804fcae831707f1e59500b465709c7793f1baed2375e001bd33c1a39f029438aabba21dd88059c", 0x99}, {&(0x7f0000000400)="a79b3095bdeaa21c8fa5e7a411d5e2fb2f3f8d617c1e652ec6f116ef1f02c2c7ca0927bfdfe5d54a60b69ad6a8921685a627bcfb8f3ec53baf922478b1a633e330e4f89c861825ae4f56b597288779f6654fa8de9821a89a7b907c9e7062db4cd4ddab0dfe758a14ae69c40bbf873f8ebfdb767e737f8101a425d38ad955b1c17c97dee42b663d6e890da3a031d8b3bd68a3b6f51762d89277f990a8372bfce6aad19f7d8b2a19ef7ee385ec904d8bc831782a9aec15d7e89fe60547ff940e84d9fab91dbb8405e613aa629256e17213ffe995f0514ba50afba19091ced10a213e46f28c91a61c2a78a6bef3f806a8e2d3f203af5d8a990e18c0d2dc7544f267c28723780a37d875cf56cd9bd0844d023209b2bab1cad08dff1f9eccaa3a8967873636a484145498580b752e4b94f85a03396813603cfacad8a4592d18cda5784dbd26302773272ddfd092eb21598d31ca0b659c5983e3c33f27e7cb4aeeb61a539481c73880b64a0dd9313922d5728c80c84ee3b12bb82c000d6c46882ec7ab2e37dca9c41170f3171f1055897315c4e052682362a10b12341f99e34518a2aa7c2aa6886021a8b7d6f3caebe356022f545ca3dc273937830da29491bcc77885d7d31198d106019e13be1229933705e279c3b39bf24a9845c3bba4511bb51b268cf3b41850728a5fdcdc1c8b216194be29d2e1aad19d88273a51a1358e3ce5834746e3d48a0855fd474c97d41e421d6af0e553d31ccf239f10803bebab36069d9c031e05030b4374ce58a9c33b7ce3cec50e65e1e704641e81897cf54da5e503a15a43308c9f57a99d10035a48eb09c0b13de769bad32e490a67d52e88b5ef35cdfba12387fc9f726927ccf9a02ceae659e1f6fee59eae7d3c23c8503be49c3d95a7882ec9867518e39be315d99fb46dd3ea336ce88a4d1f853c97c1fcbd5645a9d9efef3b87505a69eab6c26abe0e08f924083faa08bb234752923a4dbea2d60d0069a152b24de6ecd1ae5419fb5638614d5184175207a5c4e749eb7f44f9827a58a7df022fb82152665bd62ace7383c942e9cb7a280502596d8553b61d483f90c94f6cd5ea8c060bbf3e32831a0517fb71e0cfea61f1f5e34d9397692cc6f665aa020f5722b5374a721292cc1d4a058631f36f51a9153e165fe97894469e2215b89af688032fddc43f7d75fbf687b9f6a409a0ba26ae706a6fec789e3a53cb47d5b5f1a19349fd9fd803a5b3d6b7213f7fb552ed588a9f9107f376332a94721c8f867a1339370788b25214e5333ea077febbe86ac4514ebd3cc9fce27e17012bf91b5ae00fb72cf01827b91a89ef20510f7549721e4a8f8151b500b121d9629d7beb41c06153c8fd798bb40fc04a239f5be41acd0ade4ef359183683e0a784703ef7159687461fc5d43dd25e9409dad5e37b0a800d42ed41ec49a1eecc78efad70cb4aed22e0dbf6235968a9b84d9c9b34a677a50d6e9aa9a050fafafb9fdceb0d09b1d6ec0004b3f57727cf6f0f3fb91946f559ef6778f2efc42d48e844d6f93a4943e2db08f11b33ea0ad92905c8f4f6626c94102b692f66740bb1e17aceffda7994a91023f5bc01440abbbba544b19ba8d1c1c533597ddbc4aedcb97353245d85b85d30cd59f83bca2ff317f85a8081706d7f7757b89005a79fb9cb37e0faba2e4888c26dee5ec19611e8ec3fc93f1363d62e0e58c294c547b06e09bebc1cf232fd451291b3b74e4a562d9c0732439379d0df6fde90ecc6cac698acfee0ca278aada14223c2e9d76ef2d6384e7a6fa3aadf9fe3a7cc5b5d95398fb5dab3b3c5d2b691d067abd7f7afb460fdd57213b6af7652a846272e885da6264c8e5a9c05d6f829f3f35b6c57f469f65034002a3c912104de92c4ecfce1f66cc8f1899761f848241211b9df4ec5eefcbb6c0d19e306c46be7de615fa086a1282268959144623857211636296d99f825b6f97540e0aa63f59a0507435099ad3681b20befb3aafff376fc7ecc906d91cc26bffa8417cdd661726ee4b8e1b35f75913a0d121a78f870ae541cf70d7aa39641842e84045be96f3632d75e4a3a354c3bb8869ef405056a780bf89b976bfa86252bfe3cd1452055d0b222bbaac57e80c10e23c1ca0d8c0a177667423edbaffad74c76de8610f471f290e0feb3d45171ee3a7a748afe8bef571097e48316afc37fd62cc2290e45d5dc60e9fc8df760d5395f72edfff770d7a67144a1ba3c6d67716f2eb68020a3020841e7b4858e774a9dd4a43f215228a94afe579829cf408b76a3c76c136b785567ff52a629f0b4bb74ab197de42df4e74bc3d485b809305a75bf04c937bb0845c5bcbfd6796794f3c593e4824a918150f59fb8fcba78681c45c16b2435a804ef5befef6d90beb67a10fdb935ce5bafb26a648917a3ec8c897a592e0375870d099b1883836c192b8410108308fe9805f9932cefd9a255f5f1f280692246c6c6cb9dd189d3604548b4fa79505bc28aa3502229aa5e86dab895791c8fa532378d0461cf066ce9de957b32b747300dce99b7dfe1eea295c4bc3db0b7798dd7602c99481aa45d2b3385b9823cf21ff52654586690173747e325fddc6ba30567cfd7dfb6375d0b6b80d51966513a55402ec1e526ca2bbf237864af98174347e900f20c501659b42d625ff5652a568c3fcafd48bc13d74955dd50b190e7bed02d5b809c2e73f25ce25f2f7de8cf5c0aa02fe5fb39202917cae35de428c6bd21146b965fe2ba8bb5ddb1e4310ecf59cc1c7dcd160015cf3e337fba71e61d169c3b92c79790ccc32a9e4514aff210eb7366adde2f1fd241f11c643fe27e865163b3628ea0ff9a703f73508c77a3fd6f1ccc46ba3dc81c9e1a40f1126e74f4fe682899eb15bf06e28c11e54f4ad0872eaa1d2aa83c587ec614e78c74d6ff603c4c8cf73dd0eab63f39dccb11f8f637566d92ddcaa4a540b63bc926baabe48079c464157b240b894cc2fcc564e60c002d6d13f4d9ee551d799ce61a7bac66dc30c066359fb37506c9de9375e952e9128bce4574f04a1ce8fbddcbdd25decc92ec7f9b849fdaa8a5106541b5b28a1103d4bdc79d32260e7214ac984fc7a0ed1785dd2a4332ed3c20d5afa5422dfbb9cc05de733d14e05e3952b5841e3c5bd4d63b6c3895d2341653bbf82ee83b2f1d009bfbc92f7a135b64517c33ce9f8a6ef6da222f6ef3a4ecdfa8bb58b058047563099bf534b28440b8962ab7db6cd2380e22a4c5d035152db78a2ed8f76c236c2d29ccc3d84b567a491d86789e6ec9a4ff8ba4312a334454dc01332d131185e783693ae592f1d1fcd990e28fd1bc03785f599c3359a868762f13168112dab52435db3b4e07669d4eb6e7d29cb55bdd039ba55fa5a0f83bbe5c8a637a7b95ad64ad0d3d8fffec7e9564a85fa34fb3990a62a0632e720e3864c04627115096a81abeb1e2a5efdd066bc0dc574866b38ff6b4083c8d9f7ce95e6b7d802d6e692df2276cc60beb2858b867e0f8270af1c612fd14efdf664965f7b8ee8017e313a2852a627b3636de8e48ee9d10d57f99cc16dcd0c85649cca8864dc133dc624c8859ca007a5214692cc515f7739fb69580cb33841e078b94943ecc6d74dc9c0c7ba191db3f2292e7362afcf5bdae9269524182c9655f8a70dc223d73bbcb8d4d60da8f72f151105a531696cd1d976cf5900c38e71c9c7332f06b6c1903321b485f01e87b26e3ed9670841449540894814eaa239d04d43a1d26a43142f8b7ec002b643245c28a4ddc51b9847071f0ef52950ea0f99935cdcfd735d49e852ab448a9d060d03341f917b3781afc104dcbfc7b28938215f82014e88fb782d91cad4dbf8f23221c31678ed106d807649ba81acf0922e8d3fbaa9f9e5f8146736e105ddbd99ecb5964cfb0654ef295b95d3dc1df3472aafdffd61086345853dfc68809abcfeb9a98658970da1b9bf95a83a303399fdfa72bbd8502a54d9ac59cb5ccb14e4dd112f85b1c6cf2cd9181f29219f7e051ddfe14d4f4c7fd8ae5f424a5e9c28652dc7d9395da9ecb4174baa78a6a17bb57b4b2a15f44b44633bf5126ceef716bf316d3dc514ff873a80197d1df9fee816e238d41f71802c3280e43224b74b7ed7cd3f061dc2090976fc1b7bb9626b5a52aefd676edbe92312ebbb79d840275391877dbde2c269eccb1c6b62d56e6b7c0082afd038cea618de38b307d22278120b003ced01d5fbe629e77891f8e778a505a3483c7bc29a34c2d913b82df30567f7d166077d2e829340308e1e9c321aa673d7902f9cb72081426941aa60af4e5dc9ee55450eddddc7b4711af9c457917ff60d8282737e172ce46981b26c8ecd0f5600ba5b216e6ddba0d2d93eca6a693c44b61c0f15ea48163aabc1299d6a6bc7c0bb358344ab2830feb27f6caa33fb5d86222a4d4dd6182241802a8960ad6f27186582e05b5c9717a5b2a32f0dc63703c9e7834da68e5e3373f1676746eeb1a8f134a62afd4de4f2dc01eccf2b4b4c6f96f463950ec4cfcb3d5e37d8348e48790359ce128874712a8c7fcd84f097a928171ff9478525f160939cacae9499f46b8a98450e0f1235be6a22ce03911a3762b444e07a30a3a856294e170410b8fa2ef83a0f70e15997b5cd19d022c7131c6641f76b09545a2bf5e09a28d0b9d0bca7bc80dad43f3e326802f22a5677206700d6f21fb4d7102c66c32c9eacc499339a62382f4598fc5b379a64efdb6cfe3bbd91749dfa15db6853d3c53a101fd03816c6217ba25c10f0ad0563f7670d69886f0eeb6b1580a5b39b7683f06bc52adea85c4fcba0a5d4e3c9dc0125c2b390d0f91502e83eb8ab76fbe1421c7e8bd8eb2bd0db07190f7d5d7b1c9c008098d65cc6b6d115e37a49cdcd913b44372db773a18d5edd9ce2a8a173d278f8b07ed609fdf44e73e416c3c8d46681922a73f7be6869744dce5c74bd2be0bd19ca9883720b4dc36c547f9f4e783f5e64e2badc991f2ff34afe4c39bd1f5244b9c0667c134cddf5917e4cda7caaa17883b872ee66adedcfb55dcbbe36f7025c0d0e3f254ccd3a5c611392d5471090c60a0c78ff32721113ef219ac2f6565e3bce87943d4e494dba649b1823212e10ae2d0dce7256238f078c0b18987eb89451d3c6423a86bbfe665118697ca24316470e68064bc7424d643069f36e7d680c817db4c356aac4a5dec24f2ecd01c8236dc3924180a03709df6e19ad268727ceca80e6d8f5052fe1ecea2d0357839826ddb59deaf49e2d81fc646a9e928acc701097fe6b2914f9d3b7ac1b730adaf3040cf2595dee0d1263772ecf40adeb6e9719b09ff0bafb785fecc1f45cbaa8311d482450a95a2c733fe3ee699264821a7a2c1d803df73c2003838849c30bf4ea7d9a1cfe5eaef51696ac0819e2ce05092a6f0d84502c168dbde7073a83bd1eda83befa91a83380d7557f6a6025d893b1336ec99b26b051e6b6f19e1fc533192f94654fdf308e6c36734d2b55e4afe8fe37f0d0f410dae8a82afa00d065448e6f42bd328d96fee2333cd93a9046abe4a53540ad85887d4cae345d29077a1fc53094ab3e325e06e10cfcd5145b4b89f49c3d133930808d4e41bba7c973e5158a5aed08da90b7111bdb515d9f364df40498fc2e34b3077353ad18fd11e500423df140708c5d2939c16149af5851f056d4b6f439cfb5fa3ee722154ba5e77ac7a9cca0a3883c78dbd6cc535705d161aa35c4cd2dd8bd370620d35455d768b360222345be534b47b1a8c98ee1207ae2648fd763664a9bd458ace9551a802eedbba26b8abc89817c0e8470020bb56", 0x1000}], 0x6}}, {{&(0x7f0000001480)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e21, @remote}, 0x4, 0x2, 0x2, 0x3}}, 0x80, &(0x7f0000002900)=[{&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000002500)="3d9574d859d4c2b1174aa40f19cdf9b8b4f8dc921f4b950a63069bc5da5821c86df9f2f2aff7bf393776a7d855e59bf7e30368dcc27a6d0b86c17f289f9d824f", 0x40}, {&(0x7f0000002540)="9ee2a11656fbc69b74341529a184885e1bd6f44620755ca882f8e8a56af6fb5cc0ff5aeb0d7fdbadc475c2bf569e9c20ad8205c85c86475be2aa432e5ea4caa92a9f9c7dd10b91c3c106db29c9ac5a324a5722c9d878a6f13a64161fcd7826746d2fa2fc23d4ff0b7d2acda33d8364c98da25518dbbd1abc82ee08f1544125fe83cf6badef7316af47384ee1de640b71cf4d14ee55324b05a6c3ab8d0e24d5a560d9c42673a4ba1271195904c323263d2a5b5774f66d0d9750f1c7842c9322ac7d6ef8a03cca2899db1553657028845176d8393bdae82b6c8e2964a16775674f3851ce737480b7d976041310730c", 0xee}, {&(0x7f0000002640)="489e3a0b353097b06c02939e7f0925c717f9a01dc0fa9ecba761abf85943e52c3c4c3c7da73eb15660f68311e77b3259a651f8985cd463260cbfede0f6819dc4d1803a4d702194dd67d9a5d3ad563e3a47864b90053b578620d2ff2a20e359c82370878b868027c45a7f494522b6823c5546cbefdeabebf071", 0x79}, {&(0x7f00000026c0)="400b3568ca692d4208b0b71dbe79e3b7eda65eac431206abb7603942497145ec43cdaf4e2ac8757dbbfc85b884f4815de681ed8c09b1a6ef2a9dc695686b688601a6a2d9c36b2aba302ef3fa77318f34c9b0e15d46731dcf2f2c9294b350455ce632421ef60e98817f17894ad474e450330abc14b86a77a61408cbc2e935d28c38270a12bdd22f68c86e8e7486051993ab6ab7ecb1ff620dc9606cebcddec72e627c4aba582b4e533b40b38a3246a2e88dcd1c3f01fefd53c74b4dcb235aaf3709c30d52a43c5c5c9ef89a3d7e2d885adae9744cbb90ba71c318f9e9c302d089d7153300b4b491d1518463f624", 0xed}, {&(0x7f00000027c0)="830f823b6a39c7825221f45cda", 0xd}, {&(0x7f0000002800)="ce80d158319c67414b872de4d817f31ae99ccc34c2b577ac1eb6742ddf7ecf81540d53e1b10b6e8cf21342e48578d0e9b7ecf74eeaa79a810f7ebd8c93aebe2eb819cb45aed3891e951cd72bab8839e1ac7613d17bbf8effba3cab1ec81b6e1298933e84b25f4edbe9ecae809da5a48782e4b5118aa3fe0b972e5fc298b652485ba4d90929a7c0a9f219ae8e6e7743f662dd87e3d6e446d423dbdfa7cd8ac83cb9e894134425f6d01a60b15db3510a5b510ffab8b2f967187cd41cc8de97b6ca6cdf44f4793dd9e67f34d9762f", 0xcd}], 0x7, &(0x7f0000002980)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x60}}, {{&(0x7f0000002a00)=@ipx={0x4, 0x100, 0x101, "d152cbef4f0b", 0x1}, 0x80, &(0x7f0000003e00)=[{&(0x7f0000002a80)="a7b66ec0037854535d95084800d978aa2934c415afad3aa4c5f8ea9c87609db5fc02e7cdb294db0684517dd892489b67fc9b73c8499a62b785a2f1cd10b41abf713220013743180bddf3e1e53a56218c7ac268ca810d49b5ce7679ede1dede3ba80297af71596a97abd25bb9f63f8296b90a063c232ef7f2e292e7553132dfdaff21b9071de7e4b6", 0x88}, {&(0x7f0000002b40)="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", 0x1000}, {&(0x7f0000003b40)="5feda23e8e3087844d3765eb11e3f53f1154a8f6c7315c4150f6c973a5b59a47d873b858428e880dd62b6a59dd485bb2745cd9232de2320e672b22d28d902658858795bc", 0x44}, {&(0x7f0000003bc0)="9af3361b99ab16af64d5e431fd835de52095a2baab489bb98c952bddc3675efc652402bab54b7d581c7bc37a8517320976a665d45f69fb0fd540a5ab4623b582f8e0f67a5921a17362a2e13be2dea2b7f7d25ab66faa4b819e2f41977d89fd16", 0x60}, {&(0x7f0000003c40)="14a4d118201f4ca20a4639d97f4c0e0359921f7b6fa1a06256197c0482fd423ce41a014d6129e0c29835a629c940b710a1e19122a2c8add01279de00ada9fc2087a7705fd542f98f6c8e0b996be849a4f4480e64899789fb0cd54150d33fe71f82636fbc2d4f5ca79eb224a038618994a0bcadffcdc9704e67725e0c747d6f38e7427b0df37606ec867f6176e4a71b73bed646be326725c5b2c419cb0f62b78fd74cb3db5cc2b21463c3f8d5", 0xac}, {&(0x7f0000003d00)="b615bf0d9ac440e821ef7274ac20f7343744c4a0458178efffe240585662c3ade382885a477e887e85c55787c987204bcc36a0b4bc285aa4225265fd458d03cd40bfb779234955e6aa24552b27a69b7640c7bf44b49ae334fbcee360484e9d53e1644795e831535757ca383610fea25b81d16961904738599516f15ead29b06af4f54c2c03f9ab7ba836f0e6fc1ace09576c75141b6da0a9e2812a84bb85862f33b21a7f41799a829cb2f8f361309c1270e6786f1da9e9544f311f54a6181138d49e4fb25941f26f0a18ce4a101e44", 0xcf}], 0x6, &(0x7f0000003e80)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x3ff}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffaf}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x78}}, {{&(0x7f0000003f00)=@ipx={0x4, 0x41, 0x9, "e2cd2737661f", 0x1}, 0x80, &(0x7f0000004240)=[{&(0x7f0000003f80)="c134a127a302dad6949117b7a3d0ed70edfeaae9793b8c59eca75725cfe16338ee173c5fd1b6f9f2e457a9f339b9d8ef4b6e9ec431da15aee139decf815edf8139e8da6bce29871f3918a7a8b310473b3d31eb105afd402f0f11bf36415cad739f0e97b0c4ed04ad16d2dce16a4087a5082fe13b65716587de05db39a7e0a50aa6e44e16ee9f659c8db78a15929ef4ed28c0c617c095b99de240600b279bda713244d784339f60c63c8ce3ecd172ae3ea06b0306f4dfbe494caa69ad24d7a35b4e1cee9f9c148221b50740bff81351d65475f2c3f75b31f7b8bc900a4305c898ab88e8d865f64f7525d278", 0xeb}, {&(0x7f0000004080)="de0a5e5d27d0dc46383fd912d991a2d8a168", 0x12}, {&(0x7f00000040c0)}, {&(0x7f0000004100)="b67b634e0777922be1e37f62f14f2671cb4a24fc0375c4184e5da8d44126f76cb293467227b89bb4897eabacee821d031d1fb7961bc2be491c8f7e23ba529f8d9dc7c245fcd7a51ee8ae384ea8e70693696f40298a1b54d3087c7381f58c56dc76302ff1", 0x64}, {&(0x7f0000004180)="a41f5a562296f1f743768332dc2a64abf161d2713ed095f78ecb0aa9316bd97e35e3734a669cc83a37f44b46b10db63c39396a2df0800acb5b78ed99b023c15376382d53978b6c6c64f3b81d07c51afdd01509c071d564963b1818df629cc85a4e870d5043691ba396c0fdc9ebf826bb13e25b2dc1ea06df65fcdad93ae615c6c88cf8cb5da26719df90d211", 0x8c}], 0x5, &(0x7f00000042c0)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0x30}}, {{&(0x7f0000004300)=@pptp={0x18, 0x2, {0x2, @multicast1}}, 0x80, &(0x7f0000004500)=[{&(0x7f0000004380)="255726867c1c5288b16fb5f4b137a9b870597562503f5b9460a44e9e10da61337302187c3db7ceae5c6ef25e6d24ab23d2e1232307e8212440848d724b4bf1b8bf494d1c1637f057ff09aae2d9754ce9e069fe0057e12eec4243f57a1d6b6ec8e33562d8861622f9f0dd0d72938168a7f1365adadccf641e84e1ad401003016f0c3cad438800ec375eb61d5c24d16bf1c1572d63ed59", 0x96}, {&(0x7f0000004440)="75769b1901da080c8a87ff58e7651d01e9d83cea47505a71110a8afae8305b84751d39a1ad3bd5fcc3f61dbb9b44a800582ef29f5a57ba08334db553018bc4af000b1cf3d8ab9b9803de1a3a460db0a03abe3da3e2d6077aa5cd5ff5c49ddd124c4f5c7f4aca77accf7c37f8b85605db1638f52b98df0c19460c2ec63c1565d987c42b", 0x83}], 0x2, &(0x7f0000004540)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x18}}, {{&(0x7f0000004580)=@in={0x2, 0x4e20, @multicast2}, 0x80, &(0x7f00000057c0)=[{&(0x7f0000004600)="ebf43f95e18d66cd50853e01f15b11bb36fd998bfac5a9de81b8882f566f3bad9b248ec91c38e2", 0x27}, {&(0x7f0000004640)="289cbeb42b8efb04cda5463a9feccabb4362db7a767cd5003fb1d6826f89ba61169f6bc510edf1f69f8ead3a145fd1fb62a28f0dd4fff23f5fa60a200cee6b040cd7fe5b319757ee09ae94ceffe8f891a557b77e3dba795170730a3d5c40fad3dc3e93d0f444e6b55e9421bd56e75c0936a4c9a1066d2788941a798c74a3948f67948fae5479ffc2093dc4fe1a2efc9cfda40614869c8e3efb9984e8cd8d56c9104e3afa32c3d4240fc16ef31c0dc131e3e1058fc5aeded3c013a48de9677c5e463b76cd1610f826edf8284735b48515ec549501", 0xd4}, {&(0x7f0000004740)="1708204bec56c4ad7aee021ee855f9ffb760a4a3907ee212261d2d8621e7a0c5682bd046e49ee5d6c3b01f54ae96c12ab876167b8beed63b447de10c17298dde3b5f6106ea893efca41d76d5", 0x4c}, {&(0x7f00000047c0)="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", 0x1000}], 0x4, &(0x7f0000005800)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x10}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000005a00)=[{&(0x7f00000058c0)="da419111f1773c1be592393a6f350ab939315b75041f35790fddd3638c2696cd47f3dc20deadba101ec618cf1e6450639513fc607ef2ebcb361b9dd403219f76506915db439dc20ead4c67674af19113f50c85ee4c59162793e66d76b8be2862", 0x60}, {&(0x7f0000005940)="ecfe36dfbecc9c8c", 0x8}, {&(0x7f0000005980)="a4d88037a2c0774ae963794a3a07e2d16d02fcc438545e8a62c3d61e69a9cbc959b14d55cafe0dde2a37590377be9644edcf8a00e9a5f32a5a55fd5c1ad481dafe1096dabf958b8d3c3d2746aac29afaf6cd8ac6e14eb31e", 0x58}], 0x3, &(0x7f0000005a40)=[@timestamping={{0x14, 0x1, 0x25, 0x200}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x200}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x78}}], 0x7, 0x40000) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) [ 376.893731][T13965] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 376.963203][T13973] xt_l2tp: missing protocol rule (udp|l2tpip) 18:50:07 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000007000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:07 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x7) [ 377.035023][T13976] block nbd4: shutting down sockets [ 377.053941][T13976] block nbd4: Device being setup by another task [ 377.068764][T13976] block nbd4: shutting down sockets [ 377.160111][T13981] xt_l2tp: missing protocol rule (udp|l2tpip) [ 377.217286][T13985] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing 18:50:07 executing program 2 (fault-call:5 fault-nth:0): r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 18:50:07 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 18:50:07 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000310000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) write$FUSE_NOTIFY_DELETE(r4, &(0x7f00000000c0)={0x29, 0x6, 0x0, {0x0, 0x2}}, 0x29) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) r5 = semget$private(0x0, 0x4, 0x20) semop(r5, &(0x7f0000000380)=[{0x1, 0x0, 0x1000}, {0x4, 0x3, 0x1800}, {0x4, 0x8001}, {0x7, 0x3c, 0x3800}, {0x0, 0x3, 0x1000}], 0x5) semctl$SETVAL(r5, 0x3, 0x10, &(0x7f0000000040)=0x400) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000300), 0x4) r7 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x81030, r8, 0xd6000) ftruncate(r7, 0x200004) sendfile(r1, r7, 0x0, 0x15) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r10 = dup(r9) getsockopt$bt_rfcomm_RFCOMM_LM(r10, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r11 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$LOOP_CHANGE_FD(r10, 0x4c06, r11) 18:50:07 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000011000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 377.309075][T13992] xt_l2tp: missing protocol rule (udp|l2tpip) 18:50:07 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x8) [ 377.450028][T13995] block nbd4: shutting down sockets [ 377.450923][T14000] xt_l2tp: missing protocol rule (udp|l2tpip) [ 377.510133][T13995] block nbd4: Device being setup by another task [ 377.525576][T14001] device nr0 entered promiscuous mode [ 377.536419][T13995] block nbd4: shutting down sockets [ 377.550880][T14005] FAULT_INJECTION: forcing a failure. [ 377.550880][T14005] name failslab, interval 1, probability 0, space 0, times 0 [ 377.591213][T14006] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 377.610227][T14005] CPU: 0 PID: 14005 Comm: syz-executor.2 Not tainted 5.5.0-rc2-next-20191220-syzkaller #0 [ 377.620157][T14005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 377.630221][T14005] Call Trace: [ 377.633534][T14005] dump_stack+0x197/0x210 [ 377.637888][T14005] should_fail.cold+0xa/0x10 [ 377.642495][T14005] ? setup_fault_attr+0x220/0x220 [ 377.647548][T14005] ? ___might_sleep+0x163/0x2c0 [ 377.652410][T14005] __should_failslab+0x121/0x190 [ 377.657362][T14005] should_failslab+0x9/0x14 [ 377.661865][T14005] __kmalloc+0x2e0/0x770 [ 377.666110][T14005] ? mark_held_locks+0xf0/0xf0 [ 377.670881][T14005] ? mark_lock+0xc2/0x1220 [ 377.675304][T14005] ? _parse_integer+0x190/0x190 [ 377.680169][T14005] ? tomoyo_realpath_from_path+0xc5/0x660 [ 377.686351][T14005] tomoyo_realpath_from_path+0xc5/0x660 [ 377.691977][T14005] ? tomoyo_path_number_perm+0x193/0x520 [ 377.697653][T14005] tomoyo_path_number_perm+0x1dd/0x520 [ 377.703123][T14005] ? tomoyo_path_number_perm+0x193/0x520 [ 377.708765][T14005] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 377.714579][T14005] ? __f_unlock_pos+0x19/0x20 [ 377.719305][T14005] ? __fget+0x37f/0x550 [ 377.723471][T14005] ? do_dup2+0x4f0/0x4f0 [ 377.727719][T14005] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 377.733967][T14005] ? fput_many+0x12c/0x1a0 [ 377.738390][T14005] tomoyo_file_ioctl+0x23/0x30 [ 377.743160][T14005] security_file_ioctl+0x77/0xc0 [ 377.748106][T14005] ksys_ioctl+0x56/0x180 [ 377.752362][T14005] __x64_sys_ioctl+0x73/0xb0 [ 377.756961][T14005] do_syscall_64+0xfa/0x790 [ 377.761471][T14005] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 377.767363][T14005] RIP: 0033:0x45a919 [ 377.771263][T14005] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 377.790905][T14005] RSP: 002b:00007f5080501c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 377.799331][T14005] RAX: ffffffffffffffda RBX: 00007f5080501c90 RCX: 000000000045a919 [ 377.807311][T14005] RDX: 0000000000000000 RSI: 000000000000ab04 RDI: 0000000000000006 [ 377.815279][T14005] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 377.815287][T14005] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f50805026d4 [ 377.815299][T14005] R13: 00000000004c4646 R14: 00000000004d9e30 R15: 0000000000000007 18:50:07 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000314000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 377.849850][T14005] ERROR: Out of memory at tomoyo_realpath_from_path. [ 377.849887][T14005] block nbd2: shutting down sockets 18:50:07 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000020000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 377.888538][T14014] xt_l2tp: missing protocol rule (udp|l2tpip) 18:50:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x3, 0x2, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) 18:50:08 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000324000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:08 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x10) 18:50:08 executing program 2 (fault-call:5 fault-nth:1): r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 18:50:08 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000035c0)='/dev/hwrng\x00', 0x410580, 0x0) r8 = socket$inet(0x2, 0x4000000805, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = dup3(r8, r9, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r10, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r9, &(0x7f00003cef9f)='7', 0x1, 0x20000080, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x7a, &(0x7f000059aff8)={r11}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000003600)={r11, 0x1}, &(0x7f0000003640)=0x8) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r13 = dup(r12) getsockopt$bt_rfcomm_RFCOMM_LM(r13, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r14 = accept$netrom(r13, 0x0, &(0x7f0000000240)) setsockopt$netrom_NETROM_IDLE(r14, 0x103, 0x7, &(0x7f0000000280)=0x81, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r11, 0x3, 0x9}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000000180)={r15, 0x17, "b168b139145b5f4ad686e02302a175939620911f27e77f"}, &(0x7f00000001c0)=0x1f) write$binfmt_misc(r4, &(0x7f0000000000)={'syz0', "7ab93c6b12daac4289b59094d04f8178573728ad6ad63a5f2e94a1ae093fea1bc5b31a95e5b719c1e5a36c5ea5f760f4"}, 0x34) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r16 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r16, 0xab04) [ 378.098719][T14001] device nr0 entered promiscuous mode [ 378.165845][T14030] FAULT_INJECTION: forcing a failure. [ 378.165845][T14030] name failslab, interval 1, probability 0, space 0, times 0 [ 378.179558][T14029] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 378.201316][T14030] CPU: 1 PID: 14030 Comm: syz-executor.2 Not tainted 5.5.0-rc2-next-20191220-syzkaller #0 [ 378.211341][T14030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 378.221395][T14030] Call Trace: [ 378.221419][T14030] dump_stack+0x197/0x210 [ 378.221444][T14030] should_fail.cold+0xa/0x10 [ 378.221463][T14030] ? setup_fault_attr+0x220/0x220 [ 378.221485][T14030] ? ___might_sleep+0x163/0x2c0 [ 378.244207][T14030] __should_failslab+0x121/0x190 [ 378.244229][T14030] should_failslab+0x9/0x14 [ 378.244241][T14030] __kmalloc+0x2e0/0x770 [ 378.244274][T14030] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 378.264205][T14030] ? d_absolute_path+0x11b/0x170 [ 378.269158][T14030] ? __d_path+0x140/0x140 [ 378.273503][T14030] ? tomoyo_encode2.part.0+0xf5/0x400 [ 378.278914][T14030] tomoyo_encode2.part.0+0xf5/0x400 [ 378.284143][T14030] tomoyo_encode+0x2b/0x50 [ 378.288585][T14030] tomoyo_realpath_from_path+0x19c/0x660 [ 378.294241][T14030] tomoyo_path_number_perm+0x1dd/0x520 [ 378.299727][T14030] ? tomoyo_path_number_perm+0x193/0x520 [ 378.305380][T14030] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 378.311204][T14030] ? __f_unlock_pos+0x19/0x20 [ 378.314578][T14034] block nbd4: shutting down sockets [ 378.315924][T14030] ? __fget+0x37f/0x550 [ 378.315946][T14030] ? do_dup2+0x4f0/0x4f0 [ 378.329514][T14030] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 378.335759][T14030] ? fput_many+0x12c/0x1a0 [ 378.340181][T14030] tomoyo_file_ioctl+0x23/0x30 [ 378.344961][T14030] security_file_ioctl+0x77/0xc0 [ 378.349935][T14030] ksys_ioctl+0x56/0x180 [ 378.354193][T14030] __x64_sys_ioctl+0x73/0xb0 [ 378.358799][T14030] do_syscall_64+0xfa/0x790 [ 378.363311][T14030] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 378.369210][T14030] RIP: 0033:0x45a919 [ 378.373118][T14030] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 378.389478][T14039] block nbd4: Device being setup by another task [ 378.392736][T14030] RSP: 002b:00007f5080501c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 18:50:08 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000130000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 378.392754][T14030] RAX: ffffffffffffffda RBX: 00007f5080501c90 RCX: 000000000045a919 [ 378.392763][T14030] RDX: 0000000000000000 RSI: 000000000000ab04 RDI: 0000000000000006 [ 378.392772][T14030] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 378.392781][T14030] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f50805026d4 [ 378.392790][T14030] R13: 00000000004c4646 R14: 00000000004d9e30 R15: 0000000000000007 18:50:08 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000040000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 378.452820][T14030] ERROR: Out of memory at tomoyo_realpath_from_path. [ 378.452862][T14030] block nbd2: shutting down sockets [ 378.609401][T14039] block nbd4: shutting down sockets 18:50:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300), 0x4) r4 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d0) ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0x5) 18:50:09 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x11) 18:50:09 executing program 2 (fault-call:5 fault-nth:2): r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 18:50:09 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000048000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:09 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8000, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r1 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) ioctl$NBD_CLEAR_QUE(r4, 0xab05) socket$can_j1939(0x1d, 0x2, 0x7) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) [ 379.081070][T14059] FAULT_INJECTION: forcing a failure. [ 379.081070][T14059] name failslab, interval 1, probability 0, space 0, times 0 [ 379.095609][T14060] block nbd4: shutting down sockets [ 379.114532][T14060] block nbd4: Device being setup by another task [ 379.163769][T14059] CPU: 0 PID: 14059 Comm: syz-executor.2 Not tainted 5.5.0-rc2-next-20191220-syzkaller #0 [ 379.173707][T14059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 379.183783][T14059] Call Trace: [ 379.187073][T14059] dump_stack+0x197/0x210 [ 379.191428][T14059] should_fail.cold+0xa/0x10 [ 379.191451][T14059] ? setup_fault_attr+0x220/0x220 [ 379.191471][T14059] ? ___might_sleep+0x163/0x2c0 [ 379.191494][T14059] __should_failslab+0x121/0x190 [ 379.191514][T14059] should_failslab+0x9/0x14 [ 379.191528][T14059] __kmalloc+0x2e0/0x770 [ 379.191544][T14059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 379.191565][T14059] ? d_absolute_path+0x11b/0x170 [ 379.230860][T14059] ? __d_path+0x140/0x140 [ 379.235204][T14059] ? tomoyo_encode2.part.0+0xf5/0x400 [ 379.240288][T14064] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 379.240591][T14059] tomoyo_encode2.part.0+0xf5/0x400 [ 379.252879][T14059] tomoyo_encode+0x2b/0x50 [ 379.257314][T14059] tomoyo_realpath_from_path+0x19c/0x660 [ 379.262977][T14059] tomoyo_path_number_perm+0x1dd/0x520 [ 379.268464][T14059] ? tomoyo_path_number_perm+0x193/0x520 [ 379.272465][T14055] block nbd4: shutting down sockets [ 379.274113][T14059] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 379.274134][T14059] ? __f_unlock_pos+0x19/0x20 [ 379.289808][T14059] ? __fget+0x37f/0x550 [ 379.293990][T14059] ? do_dup2+0x4f0/0x4f0 [ 379.298255][T14059] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 379.304519][T14059] ? fput_many+0x12c/0x1a0 [ 379.308958][T14059] tomoyo_file_ioctl+0x23/0x30 [ 379.314696][T14059] security_file_ioctl+0x77/0xc0 [ 379.319660][T14059] ksys_ioctl+0x56/0x180 [ 379.323922][T14059] __x64_sys_ioctl+0x73/0xb0 [ 379.328518][T14059] do_syscall_64+0xfa/0x790 [ 379.333072][T14059] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 379.333091][T14059] RIP: 0033:0x45a919 [ 379.333113][T14059] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 18:50:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80000, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x3, 0x4, 0x8, 0x101, 0x9, "a69701ab7dfdca98"}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) 18:50:09 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="7261770000004c000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:09 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x12) 18:50:09 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) getsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000000)=0x10000, &(0x7f0000000040)=0x4) [ 379.333128][T14059] RSP: 002b:00007f5080501c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 379.333149][T14059] RAX: ffffffffffffffda RBX: 00007f5080501c90 RCX: 000000000045a919 [ 379.333157][T14059] RDX: 0000000000000000 RSI: 000000000000ab04 RDI: 0000000000000006 [ 379.333165][T14059] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 379.333180][T14059] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f50805026d4 [ 379.402939][T14059] R13: 00000000004c4646 R14: 00000000004d9e30 R15: 0000000000000007 18:50:09 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000060000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 379.440201][T14076] device nr0 entered promiscuous mode [ 379.460203][T14059] ERROR: Out of memory at tomoyo_realpath_from_path. [ 379.531236][T14059] block nbd2: shutting down sockets [ 379.583258][T14084] block nbd4: shutting down sockets 18:50:09 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000068000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 379.624288][T14084] block nbd4: Device being setup by another task [ 379.643958][T14087] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 379.656988][T14084] block nbd4: shutting down sockets 18:50:09 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000001540)={{0x2, 0x4}, 'port0\x00', 0x85, 0x20067, 0x5, 0x3, 0x4, 0x0, 0x0, 0x0, 0x9, 0x3}) ioctl$SG_IO(r1, 0x2285, &(0x7f00000014c0)={0x53, 0xfffffffffffffffb, 0x75, 0x5b, @scatter={0x5, 0x0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/143, 0x8f}, {&(0x7f0000000100)=""/219, 0xdb}, {&(0x7f0000000240)=""/87, 0x57}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/45, 0x2d}]}, &(0x7f0000001380)="7b53a15b73d4ca95634a316d6c96346021b68444ded3a68d980be2c5e9ccf119bfa62ada788b05816327fccb7a93d1d66d06b5ca0019303f2054e0e1596e2b0d193c74260f9146b2fdd5a0c5370856c4809f21bc8159f9e0b6ed6d392821961773393c5e468de23b28802575c858ce3b569a895612", &(0x7f0000001400)=""/73, 0x5, 0x34, 0x3, &(0x7f0000001480)}) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) ioctl$NBD_SET_SOCK(r0, 0xab00, r4) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) [ 379.788941][T14097] block nbd4: shutting down sockets [ 379.805559][T14096] block nbd4: shutting down sockets [ 379.971094][ C0] net_ratelimit: 15 callbacks suppressed [ 379.971102][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 379.971134][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 379.976858][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 379.982655][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 380.131053][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 380.136896][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 380.211140][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 380.217002][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:50:10 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x200) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 18:50:10 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x13) 18:50:10 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="7261770000006c000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:10 executing program 2 (fault-call:5 fault-nth:3): r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 18:50:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000040)) r2 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0386106, &(0x7f0000000000)) 18:50:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)={0xe6, 0x4, 0x1f, 0x0, 0x0, 0x7f, 0x2c, 0x0, 0xfe, 0x3, 0x40, 0xfc, 0x0, 0x10000, 0x80, 0x0, 0x4, 0x3f, 0xfa, [], 0xe7, 0x4}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000300)={'bcsf0\x00', 0xa08}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r6 = socket$packet(0x11, 0x2, 0x300) sync() setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000300), 0x4) r7 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d23a7e2, 0xa0) ftruncate(r7, 0x200004) sendfile(r1, r7, 0x0, 0x80001d00c0d0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = dup(r8) getsockopt$bt_rfcomm_RFCOMM_LM(r9, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0xe1, "edbd9be24c22071bddeb5662078828a6294de1a7285f7428559f1e0d8d29aa8cd5d2da38eb6c3c388d4a593903b2b7e42dc69d4dda25eaf499596665f6be01dac451bd820fae5159cc1df5841749174eba6a86f66323a24146eee8abdb6427f30fe49877e567025724b987abff9ae8edcd206a8a6a96a8b684fad2ac40a0d8fc8b4818530433c2a9c59346d14b2c0d5d56c41c4629de8c9e0a3a226087711e31a4a76348c4e2b00fde9a64c18f3d927a73cd99aa178c6752454b908f0edee9f0b98e959c2cf7c452fb8397b6ea68f00998e4cef2164b2deaacc3397cc426dd86e5"}, &(0x7f0000000040)=0xe9) [ 380.525074][T14115] l2tp_mt_check4: 8 callbacks suppressed [ 380.525080][T14115] xt_l2tp: missing protocol rule (udp|l2tpip) [ 380.529079][T14117] block nbd4: shutting down sockets [ 380.547512][T14118] block nbd2: shutting down sockets 18:50:10 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) [ 380.571680][T14122] block nbd4: Device being setup by another task [ 380.583060][T14122] block nbd4: shutting down sockets [ 380.616960][T14120] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing 18:50:10 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x80102) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = dup(r1) fcntl$setflags(r2, 0x2, 0x3) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x22442, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$NBD_SET_SOCK(r7, 0xab00, r5) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r8 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r8, 0xab04) 18:50:10 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x14) 18:50:10 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000073000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 380.758338][T14132] block nbd4: shutting down sockets [ 380.806263][T14131] block nbd4: shutting down sockets [ 380.874721][T14140] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 380.920362][T14139] block nbd2: shutting down sockets [ 380.931570][T14147] xt_l2tp: missing protocol rule (udp|l2tpip) 18:50:11 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x15) 18:50:11 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000074000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:11 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x2000) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 18:50:11 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x2) [ 381.126188][T14156] xt_l2tp: missing protocol rule (udp|l2tpip) [ 381.153262][T14158] block nbd4: shutting down sockets [ 381.171058][T14157] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 381.199517][T14158] block nbd4: Device being setup by another task [ 381.211914][T14158] block nbd4: shutting down sockets [ 381.216993][T14160] block nbd2: shutting down sockets [ 381.234230][T14160] block nbd2: shutting down sockets 18:50:11 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000378000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:11 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x10) 18:50:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000100)={0x4, 0x4c, &(0x7f0000000040)="da2688f104771860437ceb9f165f0b255d57eaaa11de97e17d7e550ea20fc92b4b0eb4853d3bc0c8a1240bd65f84f09b03cdafa2fdffc9bd81800d9392e27dcd8d6f39f1fa0426ffe23683aabc52f8747f7d91f13eb2fd1319908f246aefded25a187c04638fbbc1fb60e01bee0c5c073025d6e45111d9107d2c712d0a48a5c36b6f5e1e44346ad660776f6c3b84571002847f7c5d4af049bcc2a6517419d0fd476a4af20168115699252c25957bc8d3b76e637a98288d6b140264e801c24c", {0xdd7, 0x10001, 0x54513d32, 0x6, 0x1000, 0xbe, 0x9, 0xfffffffc}}) 18:50:11 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x16) 18:50:11 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x14002) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) [ 381.452483][T14177] xt_l2tp: missing protocol rule (udp|l2tpip) [ 381.467427][T14179] block nbd4: shutting down sockets [ 381.505772][T14176] block nbd2: shutting down sockets [ 381.538941][T14176] block nbd2: shutting down sockets [ 381.545324][T14180] block nbd4: Device being setup by another task [ 381.559568][T14180] block nbd4: shutting down sockets [ 381.583725][T14187] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing 18:50:11 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x301) 18:50:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000000)={{0x2, 0x4e24, @rand_addr=0x9}, {0x0, @remote}, 0x4, {0x2, 0x4e20, @loopback}, 'erspan0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000300), 0x4) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000980)={{0x0, 0x0, 0x80, {0x10000, 0x5000, 0x1}}, "67456966cc74dbe436523e1738eaaddecabeeecafdeedcf8b20f3e246ad2db81cd82620f0a86b1ff1cf265816966e5a3f90b38c7c7448401e4241536547455a0326db861a7e79ea72f7178e0987113e3073cee4f13ef1d92322b2ebbd0fcb53594f5a2edf43988c9fcc25229dc0400a6ee5a9399552dbbe4dfb247efbd6842d2448b829e7c397cff1e93c7de8539a639d48756a9f6cca6c4c904986a3c334b5f9735127be939665597afe1c28188c7c9a284544f18d6166dca4ea862e98dee034b34b28176a44c5e1b297a267b6aa3f8965f43977901d54365068f49f55bcfba598263c7dbaf305f710968831c62b396ae763e595e7e791137007dc905d603f58c5ec8d4e4bbf6788d3dd72ed094af361a0d00d0701ee46ee8b7f8df5051fbc023dd7f131e3ed6feccad34ecee7c3ebdefffb93c4c3b327648aa6f541bbd2c970032fae5853a471957cbd5ae4770041557cd78ca376ecdb2866cdf8e192a9a6d71cdf71df7e663e390c368a38f9857824276c0d88d5f6cf2f30c69837e0d20261098b3a00460c1b668837d89cd5124a0351be7a272e820302bfd661e3fdd27787a714af8eb03139ecb0c45e7d7dadcccc70e1dd98ab8a8a810df09beb17b6976b7d2cdec6d3620bde901b57466adc722b47601b363e7a6a0402756998cfa8b44ebf175ca307216919793402bf610c03b7ec9577050b37d5fd80c045b99fbc598208e2e26256532f81bac7699785bbcefc5ae6617a298a7e4fc9d600609e7ea6c6d3af9f934702c71807cdbde11378f4b720e60bfc4522f350842adc677c37e9974fb83c8a127b831199b907ea1f8dd0f4b37ec10ca691db00271326081b9136c5bc134453e13520305c4841878c609642c6097f50bd3df16f2cfe7d2756a192505a586ca5e3f5e88e4598dd2ea64b01a31485f7ae58861a5da7dbad2fd23f2560eee7c8f8a108f4fa1a4deff8f53c12eb568c15ee8089645cafac816e38c0f71c169fb12121382a56b6209e6c2b12257d14b6c221a291aff7031f173dda8800bae36147deddfe7c5340806dcd3333360cc419a6c97d736e09530fd7d5e416f5771904441a9b709150fb9cf85e361c4671d74de46fc3bd3fc47c40e5f27665e08237730dcbbeff7c30e76c4db70addf81cbb1d273fa09b3917710c5d13ae1f1e8cdd5d53c6ef5b1a13e70c6ca292b5a2d10b255e1471b38ef3196659554a4ed696e130bd1cbc1e1aaeddaa002f530ef2d7a5c91a46322813bbbfea4d46974862c41ab74b633e2d2abc426bbd64fb3280925bee2d20591b5a63354aea99016fbb04d2c2ee5b42ca1b970b02c02420239492386b8b4fd58c316bc8132f72929c033fbac86b8444ceb2708329d57af3b0f52e8814288717f0576b2d4e687f3e3d732f084ec7182dbdf8383eebabec40149b52796d986660d0f12c29a2646bafbacaed2173a8670aa7602ecdb17d5583b0e36658f6acefa515f19f5197780014dd87c3aea614b7c1cf9bdfdfd39740dee89127e252b93c4618f38ea651050d6fcf1cb73417b03e5119a4b25b83bbbe1fa1c70b1254525f0ec5589ad43cc60c6eec37abb3ed97a477914549ba830ddf01094b318d42aae6a73a6dd474de1a9eadf9c5c677355c614909301b796dcb60bf9bff83aa26a38086217daee72ed3399cd4d9d05a88684f9bdc3ce42c3d250a26d2646e73a3cf84ed2dca42aa311adbb556e940a57ccf7c7505cc9db4099aabe328eec9393a2928c2462def7f00513c2c86114f86e4ba0c7cf08ead040a7d0eca4fe097b4fffd1f9e481ba013dc1b8e2b75757a4a3256397f65cb1b6a199b5997b2961169375228f06ef41fcb5f2fb6267accfa060a17de17cf7cb7cfeff3a3123a5aac7a70d7c74971c6aeeef70161d8dfa384992a21873ab26c340f141e484095cbd0c0dae12db1bf1307b233599fd51518e01f566eedcf90164437dc9b0c18b56e1ef9984d6b61b765c18aa0857444e18b82a48b1e59e6136b4540c295256ca61680e3ae650cfc8220a117d671697fde18cce10dfd82db904564bb53c165ef3fb5d505a8acd9f32adf465a75827f490d7955af30b08b92f7cca7fcaa506deab82e8f19cfb3019498b17c78015031e455fd0970849d5755ed02704b2c654c6ead186d2da4150327d763b3e7eea38e7e7554c35aa34b4fd9b9df26b2d3f03ba1b017ade5d5723bb5b0c1933e899c3df59ae250e9d4cba6f7b2ef8749a0ca13771ba9450e2e912fce7f3aaa06386f31e0856952eb4188f58541a9f58a8ae3517664321ce2219092583bde95e6637fbdf30b72ed446941ebc511dde0b93f88dd50b88b71d6cc461403c13f77dbafdcbfd9a0790cc50e501f3afd87459511e1546cd6197dd56dc76462d9a2119655dff4e4895d4aa893dcb616a1348c24d394911b46e93b21335d0c58343b29917150205226eb69c29d5d147b486499d958449388943f06a84a2757b600cc31860748fe67b08ea5c466210c0ad4a43aea43621fcdd3e9972024051388c39bf99f1e660221488d72e595e3b0df54cb8ff11ce8ca50e2e3c8671a28386da40c7957cdbfb5929b00cd2ab541f731725e75acd9257f66d4642b8b02fd9ded25925e979adce6a9886b2039c83b1e204d1c3ea473472981d11d1e42d851174d90f1cdd196190ed6ebee8c4f486b1ff8234738af81cd0770991cec24a692325ac931a93fd8f5af581db2818bee9a6de370790f57df52eeea244cf37dacd5a980f19c663ca673ba34006ab2a806f4f226df1da125b49e109ab05a1e2589b18e7539b8f6bf8e7369a63427089190112cac7e7862f62c7d78e5b045d5020ff8bedbd109ef3a5edc89851416e381c6940d7b11461d041b2cb5947e31625429732d8e3b75cc016bbcd1ede6a0ca952da6e0b3ce28474d60844541d72d831b827fe6dbaeab1605838c31d7da38830927a5cb202a4bf923b82b9a7dc11a1a9cedb6e68ff2fec676fd0b19d553dde4a0286a437aff95dd8afcd74b93c1e598d44ecb62e58401042d47f1b5aed69477c19e283ad11cc7b491d1d1baceee99d451c17410d0c9c675c23bcfb29252ea06b0e04d99e53a507b49f9fc7ccb0162b0b01d1e58ed1e2a7f37b711437453773834f6925afb3af726f11ff7ea2e762d4cd448994d2e056504149572911c0d9dae87676586a0431a7226486bc42221a5fdc4d7a424eddbe64412c2dc57195ecd0ae3622f23bc53169f011bb3396fae81ec41592b06e71d22dc62d410113ef1c8ea0620ef99dec2b7aaaf95fcc818d711d1fdf239ff14eee7c9c89d80e67c2d40e01078a6eb2f3038747e4a1714d606d0d0dd307f5bcbfc6bd2007cb6834afc66de80bde9c1bb342dd919d90cc8fdbefb0e08b54be31716e924fbe0ff08841134db2eb7ffaab7a113f221161252a882af0b91e9c685dedd962f7251976455dfbbb489a3b8b5932f3f635ee7bb3696f68e7519be8e3abf7798e80626e095f536319c78fb2b3ea5f95ccef27ee093149171ca10961defebfcf8d8cd0a1eded60cf26c854f589170754e1495e19ce32a38f9c24529a9b05fd1fc5a5b2bf7c3d1d4a321ec5f4597a556db3e2365a1c67b66524ab7b90ba02548b9433574c5e739ca5129f3364b41d604ce4890f0e4aac1991fee63b7bf54c387b97739130f92fc3fdfa3621f2ed66d9d51dde646067696b20242e0193772bc292f62c34ad39c28ecea6297713dfa7d12096ffd3d225b018c6ecb07f3eb780d31002f34c6bafabfae79902bbf95ffa14f6e2685803630dfa194406dae9ecb4962c71975bd57ea3cd115a82337b4e6b02ad6c9d7adfc05256ffa48a2409a48a881f5b6505a01909a64eb2e9d7401f93a455523e4ed628457eacf05db445e10c2a70d8a16f4348f69b909335838c0fefcb3a19aaa9ec4edbd7fd1543df950395b46fb005055943f46143faab292b38efaa04d46444798b2c54485634efab822a5cfd612f534b92619f29e87314a13f6eb2c7fba533d6ef46d570735628c8379574b08e2ee039200b86f47a755d94e5fa7edf9efbf94d721c4a23d948b16340ca253d16490c29d2fd563cce5a51f4ce3d5d2b8208e7674334aaad93bbbc2782517afee6c440d4e614cca6664ebe79dba3ab4ebafc5218ec3c1c170779255aebaee990926c41666a26e2081b4c91489be0b81d735638cc22de10db1f2d8a29380e31c0cd7369e3147019c4e7b069c12457cc65b0f9f6d22ff4f8562e3d3d9571910137a4104e3e5f6958cc5fdbddaef05b1d6992e902946dd1208b49b2d1ebeafdc82d313ec32031acd69246b07f6bef3589aaa49f81b8c2b35c489496930cd63069398536d34dd9de906d10e5e6a295e2c028ec881d5d7cdb79bbcaf2d5f39fff3d3f53cc4720c34f16fc39c74cb2e03fe956f9ec48ae6cc39a2219cc0ff899e319438450ba768b8f677c419f3c0ade9638d8204da4299088627ae74aeb0cf623c8f25fda5546dbdfd9bd4cc7207145e29d5f87f6d28b8000a6ca8da2cab3c5141f43c14c2c4c48b039174d296b13c1c483066ff6cca9d0d64606371cdf08745d73af4aa703728fb0adb705964169d0092fc8bfa0468e932c37057467ee2141f868cf59fd64a57d2adc9259e9379d908687e4a0fd14b24c59839dd239c5c96386878f00eebe80383ae37b0d7d2d2057edaa34cbac1e847388ab7b1d6bb923f57755e410aa3f9ac169010f326cd6b3a07b85bb78d30dfb92588b80cbc52ac7aebf5298ca5bcb6653176b0cf04e7ee5e26b3957e9fdb896fc9a4d2c40195d4f4794ae995bff458ca3cd0795ce42f847e844e8eea8c9c946a3dfd8bdb0304abf353a9399087499368b2fb24beefceb2b7aa9eac39893b0448cb0504c1475905806ba932b8d6830f29707f42040ea36b0ae43f3bd3ebb9a9f6892d3135fff8dabdde6029a507c209fa6261215618811ad45d289f6b7320e46a6395e4173c2bec3ba4a08158c00752ca360d39d5433e0cac5ed4623ccac1651e19a41e40b7f44224b79161a50e2637ed82e629ee9638260aa1ba4fbe539bae15f491602a997a6662f88ad78a8348f32f48c4d932b862cde7bc2dd06de067c6f8ebabf2f4c6f014844a1b32accc7126c65eb24ea5ca8741b23cc29e582ccf0383774a3b5bec23a69e2ab986b95ad1dea42d32d94dcbf844c85d03f5338dcb7084000169c2b614fcf77517e6d247b16a324334de9a297d3dfa1f5637f2125d1151204eb7c3dc3ef8b2ab7e83e8fdfb47494a3ad8a1460287197ef108c17d6179cb6312a0ded4fe3d093c787780df931252ecf0f15b39c096b4215bf22e8f5a5b12708a0f95f4c9407d00ec4e9d10d79e9267ff7ab09943304a657a9900c5f8cf62c492b60401ee7a6dee430086ff8f85e021bb18f0d779205e6cf7f86111c8b33541f3599bbc86cf7be1ecbefa2e8ab49910d001b98ea00766f5e516d18eec2235f2b92c2fb19a76ed7e391360343abfa996b4d1919830c91cecb855327e0795fc5e988f6232172d7a2ab5c29d3414d28731aefb032ece391568ce06417b4319073ee4e4bff96e279c3dab54ffd78767971410f48080214ef4bfd0df7413177a9fbafb319aecd5f829ff48e2ddbed8b252d7d10dbcbbca9d1f6630fd13b4876b10fe1cfeda371af6f0546886b8b5d62ba69bdc7f84fe597cb157cb52f41d73fd405078dc046fd5c3ea5d5afc797812b30e0da538ff64b770fb1bad25c7d8251069a77cc0b219aec3abe398337f83c5123fd21696b4a77cf95ead2a16fc3099761f1d62f108e9a2370ece96ad00231bc315a67349622", "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"}) r6 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) ftruncate(r6, 0x200004) r7 = getpid() process_vm_readv(r7, &(0x7f00000002c0)=[{&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000000180)=""/44, 0x2c}, {&(0x7f00000004c0)=""/147, 0x93}], 0x3, &(0x7f0000003e40)=[{&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000600)=""/129, 0x81}, {&(0x7f0000003a00)=""/26, 0x1a}, {&(0x7f0000003a40)=""/38, 0x26}, {&(0x7f0000003a80)=""/214, 0xd6}, {&(0x7f0000003b80)=""/249, 0xf9}, {&(0x7f0000003c80)=""/176, 0xb0}, {&(0x7f0000003d40)=""/242, 0xf2}], 0x8, 0x0) r8 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4", 0xbd, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) socket$bt_bnep(0x1f, 0x3, 0x4) keyctl$dh_compute(0x17, &(0x7f0000000580)={r9, r8, r8}, &(0x7f0000000d40)=""/257, 0x105, &(0x7f0000000300)={&(0x7f0000000d00)={'blake2s-128-generic\x00\x85\x00'}}) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000000c0)={r9, 0x0, 0xc0}, &(0x7f0000000100)={'enc=', 'oaep', ' hash=', {'sha224-ni\x00'}}, &(0x7f0000000180), &(0x7f0000000200)=""/192) sendfile(r1, r6, 0x0, 0x80001d00c0d0) 18:50:11 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="7261770000007a000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:11 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000000)={0x100, 0x400, 0xfffffffc, 0x3ff, 0x6}) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) [ 381.739702][T14199] block nbd4: shutting down sockets [ 381.757615][T14201] block nbd4: Device being setup by another task [ 381.764521][T14201] block nbd4: shutting down sockets [ 381.787924][T14197] block nbd2: shutting down sockets [ 381.788588][T14202] xt_l2tp: missing protocol rule (udp|l2tpip) 18:50:11 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000b4000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:11 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) r2 = dup(r1) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000)={0x8, 0x4}, 0x2) [ 381.850478][T14203] device nr0 entered promiscuous mode [ 381.864010][T14197] block nbd2: shutting down sockets 18:50:11 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x17) [ 381.945369][T14208] block nbd4: shutting down sockets [ 381.973171][T14214] block nbd4: shutting down sockets [ 381.980234][T14211] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 382.051117][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 382.056945][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:50:12 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x125d) 18:50:12 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f0000000000)=""/215) r5 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r5) ioctl$NBD_SET_SOCK(r0, 0xab00, r5) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) getsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000100), 0x2) [ 382.093416][T14218] xt_l2tp: missing protocol rule (udp|l2tpip) [ 382.168130][T14221] block nbd4: shutting down sockets [ 382.204356][T14222] block nbd2: shutting down sockets [ 382.209864][T14221] block nbd4: Device being setup by another task [ 382.235774][T14222] block nbd2: shutting down sockets [ 382.248212][T14221] block nbd4: shutting down sockets 18:50:12 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x125e) 18:50:12 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x18) 18:50:12 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000001c8000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 382.549172][T14235] block nbd2: shutting down sockets [ 382.560658][T14240] xt_l2tp: missing protocol rule (udp|l2tpip) [ 382.577984][T14239] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 382.596077][T14235] block nbd2: shutting down sockets [ 382.907470][T14203] device nr0 entered promiscuous mode 18:50:13 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x19) 18:50:13 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0xfffffffffffffef9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x159e0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x2000, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000180)={0xc025, 0x1}) r1 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc0386106, &(0x7f0000000000)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r4 = accept4$vsock_stream(r3, &(0x7f00000000c0), 0x10, 0x800) bind$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x2711, @host}, 0x228) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xa100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 18:50:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x125f) 18:50:13 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000001cc000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:13 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000035c0)='/dev/hwrng\x00', 0x410580, 0x0) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x20000080, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000003600)={r10, 0x1}, &(0x7f0000003640)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000380)={r10, 0x2, 0xffff, 0x3}, 0x10) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r11 = syz_open_dev$ndb(0x0, 0x0, 0x0) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r13 = dup(r12) getsockopt$bt_rfcomm_RFCOMM_LM(r13, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, r15, 0xffffffffffffffff}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, r16, 0xffffffffffffffff}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, r17, 0xffffffffffffffff}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, r18, 0xffffffffffffffff}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, r19, 0xffffffffffffffff}}) getgroups(0x9, &(0x7f00000001c0)=[r15, 0x0, r16, r17, 0x0, 0x0, 0xee01, r18, r19]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x2, &(0x7f0000000240)={{'fd', 0x3d, r13}, 0x2c, {'rootmode', 0x3d, 0xeedb9ac2e242e4c}, 0x2c, {'user_id', 0x3d, r14}, 0x2c, {'group_id', 0x3d, r20}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}, {@blksize={'blksize', 0x3d, 0x1400}}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x1f}}], [{@uid_lt={'uid<'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@euid_gt={'euid>', 0xee01}}]}}) ioctl$NBD_CLEAR_SOCK(r11, 0xab04) 18:50:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300), 0x4) r4 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000035c0)='/dev/hwrng\x00', 0x410580, 0x0) r8 = socket$inet(0x2, 0x4000000805, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r11 = dup(r10) getsockopt$bt_rfcomm_RFCOMM_LM(r11, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) setsockopt$inet6_MCAST_MSFILTER(r11, 0x29, 0x30, &(0x7f0000000980)={0x7f, {{0xa, 0x4e20, 0xfffffffe, @mcast2, 0x6}}, 0x0, 0x6, [{{0xa, 0x4e20, 0x8001, @rand_addr="bd955cf50ac1179ea46256bae15a83ab", 0xffffffff}}, {{0xa, 0x4e24, 0x401, @mcast1, 0x9e}}, {{0xa, 0x4e22, 0x9, @rand_addr="e42e3cdbff5fc113e5449d56506b1948", 0x4}}, {{0xa, 0x4e22, 0xffffffff, @loopback, 0x80}}, {{0xa, 0x4e22, 0x1f, @loopback, 0xfff}}, {{0xa, 0x4e20, 0x6, @rand_addr="6da9d65163374cffcdfb90fdbdbecdb1", 0x47a5}}]}, 0x390) r12 = dup3(r8, r9, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r12, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r9, &(0x7f00003cef9f)='7', 0x1, 0x20000080, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r12, 0x84, 0x7a, &(0x7f000059aff8)={r13}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000003600)={r13, 0x1}, &(0x7f0000003640)=0x8) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 18:50:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x1260) [ 383.400144][T14259] xt_l2tp: missing protocol rule (udp|l2tpip) [ 383.416088][T14254] block nbd2: shutting down sockets [ 383.428592][T14257] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 383.434236][T14254] block nbd2: shutting down sockets [ 383.480293][T14265] device nr0 entered promiscuous mode 18:50:13 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000003d0000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 383.547853][T14261] block nbd4: shutting down sockets [ 383.625144][T14261] block nbd4: Device being setup by another task [ 383.649089][T14261] block nbd4: shutting down sockets [ 383.655727][T14269] block nbd2: shutting down sockets 18:50:13 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x54, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6fbd32b6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x69}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8008094}, 0x40000) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r5 = dup(r4) ioctl$NBD_SET_SOCK(r1, 0xab00, r5) ioctl$NBD_SET_SOCK(r0, 0xab00, r5) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) 18:50:13 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x1a) [ 383.709791][T14275] xt_l2tp: missing protocol rule (udp|l2tpip) 18:50:13 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000dc000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x1261) [ 383.881482][T14281] block nbd4: shutting down sockets [ 383.934180][T14290] block nbd4: Device being setup by another task [ 383.942335][T14290] block nbd4: shutting down sockets [ 383.959178][T14282] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 383.967647][T14289] xt_l2tp: missing protocol rule (udp|l2tpip) [ 383.976815][T14288] block nbd2: shutting down sockets 18:50:13 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x1, 0x100000000, 0x8}}, 0x30) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) [ 384.041910][T14288] block nbd2: shutting down sockets [ 384.096822][T14294] block nbd4: shutting down sockets 18:50:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0xf7, 0x4, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1ff, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x2c) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r1, 0x2}, 0x8) r2 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0386106, &(0x7f0000000000)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$VIDIOC_G_STD(r4, 0x80085617, &(0x7f0000000040)) 18:50:14 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000003e8000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:14 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x1b) 18:50:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x1262) [ 384.289574][T14305] block nbd4: Device being setup by another task [ 384.308612][T14301] block nbd2: shutting down sockets [ 384.314445][T14305] block nbd4: shutting down sockets [ 384.371916][T14301] block nbd2: shutting down sockets [ 384.433003][T14313] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 384.548174][T14265] device nr0 entered promiscuous mode 18:50:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) setsockopt$inet6_opts(r1, 0x29, 0x16, &(0x7f0000000000)=@routing={0x2c, 0x4, 0x3, 0x4, 0x0, [@empty, @ipv4={[], [], @multicast2}]}, 0x28) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300), 0x4) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x400, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000080)={0xbea1e7ed770bcc95}) r6 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r7, 0x101, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f00000000c0)) ftruncate(r6, 0x200004) sendfile(r1, r6, 0x0, 0x100080001d00c0d0) 18:50:15 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000f4000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:15 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x1263) 18:50:15 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = dup(r1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$NBD_SET_SOCK(r4, 0xab00, r2) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) 18:50:15 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x1c) [ 385.089357][T14327] block nbd2: shutting down sockets [ 385.096324][T14331] block nbd4: shutting down sockets [ 385.099475][T14329] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 385.161228][T14327] block nbd2: shutting down sockets [ 385.166940][T14336] block nbd4: shutting down sockets [ 385.177645][T14340] device nr0 entered promiscuous mode 18:50:15 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000001f4000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:15 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x1d) 18:50:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e24, 0x1f3, @mcast1, 0x80000000}, 0x1c) 18:50:15 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x1264) 18:50:15 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000000)={0x1, 0x2, 0x6e, 0x20, 0x78}) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x4000, 0x0) ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000080)={0x5, 0x40}) ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0) 18:50:15 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000003f4000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 385.505385][T14358] block nbd4: shutting down sockets [ 385.525021][T14349] block nbd2: shutting down sockets [ 385.564357][T14363] block nbd4: Device being setup by another task [ 385.573981][T14349] block nbd2: shutting down sockets [ 385.580273][T14356] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 385.590649][T14363] block nbd4: shutting down sockets [ 385.606970][T14365] l2tp_mt_check4: 3 callbacks suppressed [ 385.606978][T14365] xt_l2tp: missing protocol rule (udp|l2tpip) 18:50:15 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x1265) [ 385.651041][ C0] net_ratelimit: 16 callbacks suppressed [ 385.651049][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 385.662544][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 385.724658][T14367] block nbd2: shutting down sockets [ 385.744349][T14367] block nbd2: shutting down sockets [ 386.207342][T14340] device nr0 entered promiscuous mode [ 386.371070][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 386.376903][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 386.461094][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 386.466900][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:50:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) write$UHID_DESTROY(r4, &(0x7f0000000000), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000300), 0x4) r6 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r6, 0x200004) sendfile(r1, r6, 0x0, 0x80001d00c0d0) 18:50:16 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000040)={'\x00', {0x2, 0x4e24, @local}}) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) ioctl$NBD_SET_SOCK(r0, 0xab00, r4) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) 18:50:16 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000ff000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:16 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x1e) 18:50:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x1267) 18:50:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeee8, 0x6, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) read$usbmon(r1, &(0x7f00000000c0)=""/71, 0x47) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000200), &(0x7f0000000180)=0x27ca) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000040)='/dev/cec#\x00') syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) r2 = dup(r1) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0386106, &(0x7f0000000240)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$USBDEVFS_RESETEP(r4, 0x80045503, &(0x7f0000000140)={0xc}) [ 386.751246][T14385] xt_l2tp: missing protocol rule (udp|l2tpip) [ 386.779955][T14381] block nbd2: shutting down sockets [ 386.787813][T14389] QAT: Invalid ioctl [ 386.798543][T14381] block nbd2: shutting down sockets 18:50:16 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000004000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x1268) [ 386.833775][T14389] block nbd4: shutting down sockets [ 386.841043][T14390] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 386.908573][T14396] device nr0 entered promiscuous mode [ 386.915023][T14397] block nbd2: shutting down sockets [ 386.930875][T14397] block nbd2: shutting down sockets [ 386.938712][T14403] QAT: Invalid ioctl 18:50:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x1269) [ 386.959484][T14389] block nbd4: Device being setup by another task [ 387.008773][T14405] xt_l2tp: missing protocol rule (udp|l2tpip) 18:50:17 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000010000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 387.058888][T14406] block nbd2: shutting down sockets [ 387.062950][T14389] block nbd4: shutting down sockets [ 387.085777][T14406] block nbd2: shutting down sockets 18:50:17 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x1274) 18:50:17 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0xf0) [ 387.169219][T14414] xt_l2tp: missing protocol rule (udp|l2tpip) [ 387.386552][T14418] block nbd2: shutting down sockets [ 387.394881][T14421] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 387.437466][T14418] block nbd2: shutting down sockets [ 387.731077][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 387.736942][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:50:17 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000020000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:17 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000000)={0x5, 0x81, 0x3, 0x7fffffff}) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 18:50:17 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x300) 18:50:17 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) socket$netlink(0x10, 0x3, 0xe) close(r1) prctl$PR_SET_FPEMU(0xa, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300), 0x4) r4 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 18:50:17 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x1276) 18:50:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, &(0x7f0000000180)=0x4) r4 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000040)={0x3, 0xb, 0x4, 0xcea411278d2d1d16, 0xa33, {0x77359400}, {0x4, 0x2, 0x5, 0x1f, 0x40, 0x9, "8a72c383"}, 0x0, 0x3, @fd, 0x10001, 0x0, r5}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'hsr0\x00'}) [ 388.009325][T14444] block nbd4: shutting down sockets [ 388.032051][T14450] xt_l2tp: missing protocol rule (udp|l2tpip) [ 388.051703][T14440] block nbd2: shutting down sockets [ 388.057083][T14446] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 388.088639][T14444] block nbd4: Device being setup by another task [ 388.101814][T14444] block nbd4: shutting down sockets [ 388.106013][T14440] block nbd2: shutting down sockets 18:50:18 executing program 4 (fault-call:5 fault-nth:0): openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000200)=0x1) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0xff66}]) 18:50:18 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000030000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 388.145146][T14459] device nr0 entered promiscuous mode 18:50:18 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x429) 18:50:18 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x1277) [ 388.289644][T14465] xt_l2tp: missing protocol rule (udp|l2tpip) [ 388.291075][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 388.296011][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 388.360200][T14466] FAULT_INJECTION: forcing a failure. [ 388.360200][T14466] name failslab, interval 1, probability 0, space 0, times 0 18:50:18 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000040000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 388.472490][T14466] CPU: 1 PID: 14466 Comm: syz-executor.4 Not tainted 5.5.0-rc2-next-20191220-syzkaller #0 [ 388.478771][T14467] block nbd2: shutting down sockets [ 388.482444][T14466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.482451][T14466] Call Trace: [ 388.482473][T14466] dump_stack+0x197/0x210 [ 388.482499][T14466] should_fail.cold+0xa/0x10 [ 388.482520][T14466] ? setup_fault_attr+0x220/0x220 [ 388.482540][T14466] ? ___might_sleep+0x163/0x2c0 [ 388.482560][T14466] __should_failslab+0x121/0x190 [ 388.482585][T14466] should_failslab+0x9/0x14 [ 388.482600][T14466] kmem_cache_alloc+0x2aa/0x710 [ 388.482622][T14466] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 388.482643][T14466] ? _copy_from_user+0x12c/0x1a0 [ 388.525576][T14467] block nbd2: shutting down sockets [ 388.528716][T14466] io_submit_one+0x10f/0x2ec0 [ 388.528737][T14466] ? lookup_ioctx+0x1d7/0x7f0 [ 388.564038][T14466] ? __might_fault+0x12b/0x1e0 [ 388.568795][T14466] ? find_held_lock+0x35/0x130 [ 388.573554][T14466] ? aio_poll_wake+0x1200/0x1200 [ 388.578510][T14466] __x64_sys_io_submit+0x1bd/0x540 [ 388.583611][T14466] ? __x64_sys_io_submit+0x1bd/0x540 [ 388.588911][T14466] ? __ia32_sys_io_destroy+0x3e0/0x3e0 [ 388.594361][T14466] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 388.599820][T14466] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 388.605530][T14466] ? do_syscall_64+0x26/0x790 [ 388.610212][T14466] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 388.616361][T14466] ? do_syscall_64+0x26/0x790 [ 388.621298][T14466] ? lockdep_hardirqs_on+0x421/0x5e0 [ 388.626690][T14466] do_syscall_64+0xfa/0x790 [ 388.631360][T14466] ? do_syscall_64+0xfa/0x790 [ 388.636322][T14466] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 388.642212][T14466] RIP: 0033:0x45a919 [ 388.646111][T14466] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 18:50:18 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x1278) [ 388.665880][T14466] RSP: 002b:00007f5ce683cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 388.674277][T14466] RAX: ffffffffffffffda RBX: 00007f5ce683cc90 RCX: 000000000045a919 [ 388.682231][T14466] RDX: 0000000020000600 RSI: 0000000000000001 RDI: 00007f5ce681c000 [ 388.690534][T14466] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 388.698489][T14466] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5ce683d6d4 [ 388.706447][T14466] R13: 00000000004c2019 R14: 00000000004d7040 R15: 0000000000000005 [ 388.767708][T14470] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 388.811535][T14479] xt_l2tp: missing protocol rule (udp|l2tpip) 18:50:18 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x500) [ 388.967977][T14483] block nbd2: shutting down sockets 18:50:19 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000050000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f00000003c0)={[0x6, 0x3, 0x8000, 0xfffffff9, 0x7fffffff, 0x4, 0xffffffff, 0x81, 0xfffffff7, 0x5, 0x73, 0x6fa5, 0x8, 0xfffffffd, 0x3ff, 0xfff, 0x1f, 0x7a, 0x80000000, 0x7, 0x250, 0x3f, 0x1, 0xfffffff8, 0x200, 0x4, 0x10000000, 0xfff, 0x7, 0x4c91, 0xffff, 0x2, 0xff, 0x1, 0x0, 0x7, 0x4, 0x7, 0x80000000, 0xffffff81, 0x9, 0x80, 0x9, 0x8001, 0xffffffff, 0x1, 0xfff, 0x1, 0x1, 0x7fffffff, 0x7, 0xfffffffb, 0x4f, 0x6, 0x4, 0x80000000, 0xad, 0x5, 0x80000000, 0x80000000, 0x6, 0xbce9, 0x1f, 0x0, 0x81, 0x1f, 0x800, 0x17, 0x1, 0x8, 0x6, 0x400, 0x7, 0x80, 0x7, 0x4, 0x7, 0x0, 0x1, 0x9, 0x401, 0x52, 0x5, 0x1, 0x80000, 0x8001, 0x2, 0x80000001, 0x25, 0xe41d, 0x302, 0xc53a, 0x0, 0x5, 0x4, 0x220, 0x4, 0x7c, 0x64, 0x80, 0x80000000, 0x7fff, 0x9, 0x4, 0xfffffffd, 0x2, 0x400, 0x2c, 0x0, 0x4, 0x9, 0x2, 0x5, 0x6, 0x1000, 0x497b, 0x0, 0x1, 0x1000, 0x1, 0x800, 0xa65dba2, 0xffffffab, 0x9, 0x73, 0x5, 0x40, 0x2, 0x80000001, 0x3, 0x200, 0x54, 0x2, 0x2, 0xc3c0, 0x4c, 0x1, 0xfff, 0x9, 0x6, 0x80000000, 0x7, 0x0, 0x1000, 0x0, 0x6, 0x9, 0x140, 0xfff, 0x9, 0x7, 0x4, 0x401, 0x40, 0x0, 0x0, 0xf28, 0x2, 0x3f, 0x9, 0x8000, 0xfffffff8, 0x2, 0xff, 0x9, 0x0, 0x4, 0x5, 0x3, 0x9, 0x2, 0x1, 0x6, 0x0, 0x7, 0x1e, 0x3, 0x4, 0x0, 0x7, 0x9, 0x2000000, 0xa7, 0x5, 0x1, 0x8000, 0x2, 0x1cdbbd5, 0x8, 0x7fffffff, 0x7, 0x5, 0x1, 0xadc, 0x1278c0, 0xff, 0x80, 0x0, 0x1, 0x6, 0xffffffc1, 0xfffffff7, 0x9, 0x4, 0x3f, 0xfff, 0x5aa8, 0x9e9, 0x8, 0x7, 0x9, 0x7, 0x7d, 0x4, 0x6, 0x6, 0x8, 0x8, 0x1, 0x88, 0x3ff, 0x7f, 0x80000000, 0x1000, 0x200, 0x0, 0xfffffffd, 0xfffffffa, 0x8, 0x2dbc, 0x1c, 0x7, 0x7414, 0x7, 0x4, 0x3893, 0x3, 0x2, 0x3, 0x400, 0x4, 0x2, 0xd02f, 0x40, 0xa534, 0x272, 0x2, 0x2, 0x10001, 0x7, 0xbd, 0xa13, 0x80000001, 0x1, 0x2, 0xfffffffd, 0x1cbcb51, 0x21, 0x0, 0x0, 0x6, 0x1b1f, 0x9, 0x800, 0xfffffffb, 0x3, 0x2, 0xffffffe1, 0xc63, 0x81, 0x4, 0x10001, 0x100, 0x3, 0x0, 0x7, 0xff, 0x0, 0x9bd3, 0x1ff, 0xfffffffd, 0x1, 0x5, 0x9, 0x6, 0x200, 0x7ff, 0x101, 0xffffffff, 0x2, 0x6, 0x2, 0x7, 0x251e, 0x10000, 0x7, 0x7, 0x0, 0x8000, 0x2, 0x3, 0x0, 0x3, 0xfffffffa, 0x3ff, 0x7, 0xffff65d3, 0x80000000, 0x7f, 0x2, 0x43d, 0x9, 0x80, 0x5, 0x6, 0x1, 0x1, 0x5, 0xfffffffe, 0x2, 0x8e, 0x3, 0x83b3, 0x7, 0xfffffff9, 0x8000, 0x9, 0x0, 0x7, 0x2d4, 0xce7, 0x1, 0x1f, 0x2, 0x20, 0x9, 0x41, 0x10001, 0x9, 0x10000, 0x200, 0xfffffeff, 0x80000000, 0x1, 0x59, 0x7fff, 0x7, 0x0, 0xfb, 0xebf0, 0x0, 0x7, 0x314, 0x1b, 0x8, 0x2, 0x8, 0x20, 0x1, 0x80000001, 0x4, 0x3b6, 0x3, 0x40, 0x101, 0x9, 0x1000, 0x7fffffff, 0x2, 0x918, 0x4, 0x9, 0x3, 0x20000000, 0x0, 0xe4a, 0x7, 0x10000, 0x6, 0x10001000, 0x7, 0x20, 0x64, 0x4, 0x18be, 0x6, 0x3, 0x800, 0x9, 0x81, 0x100, 0x5, 0xfffffff8, 0x80000001, 0x4, 0x1f, 0x7, 0xffff2249, 0x7f, 0x5f, 0x6, 0x6, 0x7ff, 0x8, 0x8001, 0xe0000000, 0x7, 0x9, 0x3f, 0xfffffffd, 0x0, 0x0, 0x8, 0x7, 0x7fffffff, 0x7f, 0x9, 0x7, 0x6, 0x7f, 0x7, 0xfffff800, 0x1000, 0xfffffff9, 0xb1, 0x7, 0x81, 0x8, 0x5, 0x101, 0x514, 0x4852, 0x7f, 0x1, 0x10000, 0x1, 0x4, 0x7, 0x7, 0x0, 0x4, 0x2, 0x5, 0x1f, 0x3, 0x7fff, 0x80000001, 0x2, 0x20, 0x3949, 0xffff7fff, 0x401, 0xfffffff9, 0x9, 0x1, 0x0, 0x65, 0x1, 0x1000, 0x4000, 0x7, 0x3419400, 0x0, 0x81, 0x7fff, 0xd4a, 0xce4, 0x10001, 0xfffffffd, 0x7, 0x10000, 0x1000, 0x9, 0x7, 0xff, 0x2, 0x3ff, 0x1, 0x100, 0x40, 0x1, 0x40000, 0x4, 0x101, 0x3, 0x7, 0x8000, 0x3, 0x4, 0x0, 0x4, 0x8, 0x1095, 0x5, 0x8, 0x5, 0x3, 0x1f, 0x93, 0x5, 0xeb0f, 0x0, 0x1, 0x80000000, 0x1e88, 0x1, 0x6, 0x1, 0x4, 0x1, 0x3f, 0x11ee, 0x4, 0x1, 0x8, 0x800, 0x3, 0x4, 0x40, 0xff, 0x9, 0x263, 0x3, 0xffffff7d, 0x5, 0x7fff, 0x4, 0x0, 0x6, 0x9, 0xe3e, 0x7, 0x200, 0x1, 0x8001, 0xfffffffa, 0x1, 0x80, 0x1, 0x20000000, 0x6, 0x2, 0x4, 0x11, 0x1f, 0x7, 0x9b9, 0x5, 0x20, 0x2, 0x1, 0x1000, 0x7f, 0x1, 0x6, 0x8, 0xfffffff9, 0x6, 0x4, 0x4, 0x37ed0931, 0x800, 0x1000, 0x0, 0x8, 0xffffff47, 0x9, 0x6, 0x20, 0x81, 0xffffff00, 0x5, 0x864, 0x2000, 0x1, 0x3, 0x5, 0x8, 0x80, 0xff, 0x20000, 0x70000000, 0x9, 0xd6d, 0xffffe0e1, 0x1, 0x2, 0x80000001, 0x51f3f1e7, 0xfffffffe, 0xfff, 0x0, 0x3, 0x3, 0x7ff, 0x7ff, 0x1000, 0x9, 0x800, 0xe58, 0xbd8, 0x5, 0x5, 0x5, 0x9, 0xfffffffd, 0x6, 0x4, 0x5, 0xf85, 0x1, 0x9, 0x81, 0x1, 0x800, 0xfffffbff, 0x101, 0x8a2c, 0x7f, 0x5, 0x0, 0x4, 0x4, 0x1, 0x800, 0x1, 0x2, 0xed3c, 0x8, 0x80000000, 0x10001, 0x9, 0x6, 0x6, 0x80, 0x1, 0x78d, 0x4a, 0x5, 0x400, 0xfffffffa, 0x6, 0xfff, 0x8, 0x2, 0x4, 0x80000001, 0x1, 0x0, 0x3f, 0x0, 0x9, 0x2, 0x7f, 0x8, 0x8000, 0x101, 0x8, 0xfffffffa, 0x1ff, 0x200, 0x1, 0x5, 0x15, 0x2, 0x3, 0x3, 0x59c, 0x8001, 0xfffffff8, 0x1, 0x6, 0x9, 0x7, 0xcf1, 0x7, 0x9, 0x6, 0x401, 0x4, 0x20, 0x8, 0x100, 0x400, 0x7104, 0x7ff, 0x3, 0x3, 0x3, 0x1ff, 0x1a, 0x0, 0x4, 0x3, 0x20, 0x1ff, 0xfff, 0x1ff, 0x63e929fb, 0x4, 0x4, 0xffffc000, 0x3bfe, 0x374aa513, 0x2, 0x2, 0x0, 0x40, 0x3, 0xd689, 0x6, 0x20, 0x8, 0x3, 0x0, 0x3, 0x0, 0x5, 0x1069, 0xfff, 0x2, 0x3, 0x7, 0x5, 0x2, 0x6, 0x2, 0xfc, 0x3, 0x7, 0x1, 0x3f, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7632, 0xff, 0x1, 0xffffffff, 0x3ff, 0xffffffff, 0x0, 0x3, 0x80000000, 0x10001, 0x69c5, 0x2, 0x5, 0x5, 0x4, 0x3, 0x8, 0xfffffffe, 0x7fff, 0x9d5c, 0x1000, 0xffff, 0x3, 0x199e, 0x9, 0x8, 0x1, 0x1f, 0xf6, 0x200, 0x8, 0x1ecb, 0x401, 0x9, 0x8, 0x5, 0x1000, 0x6, 0x43df, 0x5, 0xfff, 0x241b, 0xdf, 0x55c, 0x200, 0x8, 0x5, 0x400, 0x200, 0x5, 0x3, 0x4e, 0xfff, 0x3, 0x4db1990e, 0x3ff, 0x8, 0x20, 0x1, 0x800, 0x400, 0x61, 0x5, 0x3, 0x2, 0x2, 0xfffffffe, 0xfffffff9, 0xf83, 0xffffff82, 0x1ff, 0x4, 0xff, 0x1, 0x3, 0x0, 0x4, 0x80000001, 0x2, 0x0, 0x4, 0x0, 0xffffffff, 0x8, 0x10000, 0x4, 0x0, 0x1, 0x26b, 0x0, 0x8000, 0x1, 0x7, 0x9, 0x6, 0x401, 0x3, 0x8, 0x4, 0x0, 0x10001, 0x400, 0x1, 0x3, 0x8000, 0x8, 0x10001, 0xfffffbff, 0xff, 0x6, 0xfffffffd, 0x2, 0x16, 0xfff, 0xffffffff, 0x8, 0xd36, 0x4, 0x1, 0x10000, 0xfff, 0x3, 0x1f, 0x0, 0x9, 0x3, 0x40, 0xff, 0x90000000, 0x9, 0x695c626b, 0x80000000, 0x8, 0x8, 0x9, 0x80000000, 0x1, 0x200, 0x2, 0x1ff, 0x7, 0x1, 0xee, 0x8, 0x8, 0x5, 0x7, 0x4, 0x28, 0x8, 0x5, 0x1, 0x3ff, 0x1, 0x9, 0x0, 0xffffffff, 0x3, 0x7, 0x2daf, 0x9, 0x0, 0x80000000, 0xf3, 0x81, 0xfffffffb, 0x6, 0x7f, 0x7, 0x401, 0x101, 0x0, 0x1, 0x10001, 0x8, 0x0, 0x8000, 0x9, 0x401, 0x9, 0x58, 0x7fffffff, 0x9, 0x8, 0x0, 0x3, 0x1, 0x9, 0x7, 0x6, 0x212, 0x96, 0x1, 0x1, 0x1f, 0x45, 0x9, 0x6, 0x7, 0xefad, 0x28, 0x1, 0x9, 0x1, 0x9, 0x2, 0x0, 0x4, 0x7, 0x28326a5f, 0x4, 0x6, 0x6, 0x7, 0x81, 0x1, 0x40, 0x2, 0x977f, 0x1, 0x7, 0x1, 0xfffff001, 0x60187948, 0x1ff, 0x4, 0x101, 0x80, 0x1, 0x7a1f, 0x4553, 0x80000000, 0x6, 0x8001, 0x5, 0x5f, 0x6, 0x6, 0x20, 0xffffffff, 0x2, 0x7, 0x2, 0x6, 0x6, 0x80, 0x800, 0x10001, 0x80000000, 0x6, 0x3ff, 0x1f, 0x0, 0x3, 0x10001, 0x4, 0xf85, 0xe942, 0x1, 0x7, 0xfffffffc, 0x65, 0x9, 0x80000001, 0x3ff, 0xffffffff, 0x7f, 0x8, 0xffff, 0x4, 0xfff, 0x7ff, 0x5, 0x80000001, 0x1, 0x0, 0xffffffff, 0x8, 0x1, 0xffff, 0x1f, 0x8802, 0x80000001, 0x4, 0x8, 0x5, 0x4]}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) [ 389.097012][T14483] block nbd2: shutting down sockets [ 389.168279][T14490] xt_l2tp: missing protocol rule (udp|l2tpip) [ 389.282581][T14496] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 389.410878][T14453] device nr0 entered promiscuous mode 18:50:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300), 0x4) r4 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x7291dac21a900c78, 0x10, r4, 0x4) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 18:50:19 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x1279) 18:50:19 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000060000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:19 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x600) 18:50:19 executing program 4 (fault-call:5 fault-nth:1): openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000200)=0x1) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0xff66}]) 18:50:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x80400, 0x5b) mq_timedsend(r1, &(0x7f0000000080)="b3547c860b21a0443aa849920d5bb35b8bfd87d4b6cf21a5de1f1d0b4a5b5d16b3588c4dbc68a38a428c20a4c43f5bf680157b78fbff3572e0947b4806cd288214115966789566c6019bc349347b8f50b1b56aa8756f5dd2f1370aac976ed911ddfbecb3042809c152ffbb740a41f2373191cf011d577fb9c4b5a63cf72ad3255a78dc59fc96251c890ba454c6670acbae7cc75e36c90b439c53a295b4319b7de75c9bd6dce91718822770734cd0ac15da", 0xb1, 0x0, 0x0) [ 389.977869][T14511] xt_l2tp: missing protocol rule (udp|l2tpip) 18:50:20 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000070000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 390.043124][T14509] block nbd2: shutting down sockets [ 390.084391][T14514] FAULT_INJECTION: forcing a failure. [ 390.084391][T14514] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 390.097657][T14514] CPU: 0 PID: 14514 Comm: syz-executor.4 Not tainted 5.5.0-rc2-next-20191220-syzkaller #0 [ 390.107553][T14514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 390.117680][T14514] Call Trace: [ 390.121019][T14514] dump_stack+0x197/0x210 [ 390.125372][T14514] should_fail.cold+0xa/0x10 [ 390.130458][T14514] ? setup_fault_attr+0x220/0x220 [ 390.135678][T14514] ? __kasan_check_read+0x11/0x20 [ 390.140726][T14514] ? __lock_acquire+0x16f2/0x4a00 [ 390.145779][T14514] should_fail_alloc_page+0x50/0x60 [ 390.145798][T14514] __alloc_pages_nodemask+0x1a1/0x910 [ 390.145820][T14514] ? fs_reclaim_release+0xf/0x30 [ 390.145841][T14514] ? __alloc_pages_slowpath+0x2900/0x2900 [ 390.168262][T14514] ? fs_reclaim_release+0xf/0x30 [ 390.168288][T14514] ? setup_fault_attr+0x220/0x220 [ 390.168308][T14514] cache_grow_begin+0x90/0xc60 [ 390.168333][T14514] ? io_submit_one+0x10f/0x2ec0 [ 390.177861][T14523] xt_l2tp: missing protocol rule (udp|l2tpip) [ 390.178994][T14514] ? trace_hardirqs_off+0x62/0x240 [ 390.179015][T14514] kmem_cache_alloc+0x64e/0x710 [ 390.179037][T14514] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 390.179058][T14514] io_submit_one+0x10f/0x2ec0 [ 390.179080][T14514] ? lookup_ioctx+0x1d7/0x7f0 [ 390.194906][T14514] ? __might_fault+0x12b/0x1e0 [ 390.194924][T14514] ? find_held_lock+0x35/0x130 18:50:20 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000003100000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 390.194946][T14514] ? aio_poll_wake+0x1200/0x1200 [ 390.194983][T14514] __x64_sys_io_submit+0x1bd/0x540 [ 390.204987][T14514] ? __x64_sys_io_submit+0x1bd/0x540 [ 390.205009][T14514] ? __ia32_sys_io_destroy+0x3e0/0x3e0 [ 390.205033][T14514] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 390.226343][T14514] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 390.226362][T14514] ? do_syscall_64+0x26/0x790 [ 390.226382][T14514] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 390.241256][T14514] ? do_syscall_64+0x26/0x790 [ 390.241275][T14514] ? lockdep_hardirqs_on+0x421/0x5e0 [ 390.241298][T14514] do_syscall_64+0xfa/0x790 [ 390.241314][T14514] ? do_syscall_64+0xfa/0x790 [ 390.241334][T14514] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 390.241352][T14514] RIP: 0033:0x45a919 [ 390.252393][T14514] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 390.252403][T14514] RSP: 002b:00007f5ce683cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 390.252419][T14514] RAX: ffffffffffffffda RBX: 00007f5ce683cc90 RCX: 000000000045a919 [ 390.252432][T14514] RDX: 0000000020000600 RSI: 0000000000000001 RDI: 00007f5ce681c000 [ 390.252440][T14514] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 390.252449][T14514] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5ce683d6d4 [ 390.252458][T14514] R13: 00000000004c2019 R14: 00000000004d7040 R15: 0000000000000005 [ 390.306937][T14509] block nbd2: shutting down sockets [ 390.354268][T14516] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing 18:50:20 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000110000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:20 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x700) [ 390.468319][T14524] device nr0 entered promiscuous mode 18:50:20 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000003140000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:20 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x127a) [ 390.715905][T14545] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 390.728372][T14547] l2tp_mt_check4: 2 callbacks suppressed [ 390.728380][T14547] xt_l2tp: missing protocol rule (udp|l2tpip) [ 390.753784][T14543] block nbd2: shutting down sockets [ 390.774982][T14543] block nbd2: shutting down sockets 18:50:21 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x127b) 18:50:21 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000200000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:21 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x1100) 18:50:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) 18:50:21 executing program 4 (fault-call:5 fault-nth:2): openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000200)=0x1) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0xff66}]) 18:50:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='\x8eNev/\t\x00', 0x0, 0x0) r3 = socket(0x0, 0x4, 0x1d) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000200)=""/15, &(0x7f0000000240)=0xf) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000300), 0x4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f00000000c0)=""/243) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00', {0x0, 0x0, 0x0, 0x4}, 0x0, [0x0, 0x0, 0x0, 0xffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffffd]}, 0x45c) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r8, 0x40045565, 0xf7) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$UI_DEV_DESTROY(r8, 0x5502) r11 = dup(r7) getsockopt$bt_rfcomm_RFCOMM_LM(r11, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r11, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) [ 391.553119][T14565] xt_l2tp: missing protocol rule (udp|l2tpip) [ 391.572057][T14567] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 391.586304][T14566] FAULT_INJECTION: forcing a failure. [ 391.586304][T14566] name failslab, interval 1, probability 0, space 0, times 0 [ 391.610852][T14560] block nbd2: shutting down sockets [ 391.626241][T14566] CPU: 1 PID: 14566 Comm: syz-executor.4 Not tainted 5.5.0-rc2-next-20191220-syzkaller #0 [ 391.636184][T14566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 391.648608][T14566] Call Trace: [ 391.651904][T14566] dump_stack+0x197/0x210 [ 391.656281][T14566] should_fail.cold+0xa/0x10 18:50:21 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x127c) [ 391.657306][T14560] block nbd2: shutting down sockets [ 391.660894][T14566] ? setup_fault_attr+0x220/0x220 [ 391.660917][T14566] ? ___might_sleep+0x163/0x2c0 [ 391.660946][T14566] __should_failslab+0x121/0x190 [ 391.681040][T14566] should_failslab+0x9/0x14 [ 391.685556][T14566] kmem_cache_alloc_node_trace+0x274/0x750 [ 391.691480][T14566] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 391.697484][T14566] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 391.703318][T14566] __kmalloc_node_track_caller+0x3d/0x70 [ 391.709341][T14566] __kmalloc_reserve.isra.0+0x40/0xf0 [ 391.715350][T14566] __alloc_skb+0x10b/0x5e0 [ 391.719822][T14566] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 391.725398][T14566] ? __kasan_check_read+0x11/0x20 [ 391.730530][T14566] ? aa_file_perm+0x62a/0x15f0 [ 391.735682][T14566] alloc_skb_with_frags+0x93/0x590 [ 391.740992][T14566] ? find_held_lock+0x35/0x130 [ 391.745775][T14566] ? __might_fault+0x12b/0x1e0 [ 391.750570][T14566] sock_alloc_send_pskb+0x7ad/0x920 [ 391.755806][T14566] ? iov_iter_advance+0x29a/0xe20 [ 391.760940][T14566] ? sock_wmalloc+0x120/0x120 [ 391.765651][T14566] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 391.765668][T14566] ? iov_iter_advance+0x29a/0xe20 [ 391.765684][T14566] ? _copy_from_iter_full+0x255/0x870 [ 391.765786][T14566] tun_get_user+0xb07/0x3fc0 [ 391.765807][T14566] ? __kasan_check_read+0x11/0x20 [ 391.791824][T14566] ? tun_build_skb.isra.0+0x1480/0x1480 [ 391.797406][T14566] ? lock_downgrade+0x920/0x920 [ 391.802283][T14566] ? rcu_read_lock_held+0x9c/0xb0 [ 391.807333][T14566] ? __kasan_check_read+0x11/0x20 [ 391.807357][T14566] tun_chr_write_iter+0xbd/0x156 [ 391.807382][T14566] aio_write+0x2f2/0x540 [ 391.807404][T14566] ? aio_read+0x3b0/0x3b0 [ 391.826859][T14566] ? lock_downgrade+0x920/0x920 [ 391.829602][T14580] block nbd2: shutting down sockets [ 391.831785][T14566] io_submit_one+0xfbd/0x2ec0 [ 391.831801][T14566] ? lookup_ioctx+0x1d7/0x7f0 [ 391.831827][T14566] ? aio_poll_wake+0x1200/0x1200 [ 391.831863][T14566] __x64_sys_io_submit+0x1bd/0x540 [ 391.851574][T14566] ? __x64_sys_io_submit+0x1bd/0x540 [ 391.859898][T14580] block nbd2: shutting down sockets [ 391.862139][T14566] ? __ia32_sys_io_destroy+0x3e0/0x3e0 [ 391.862162][T14566] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 391.862178][T14566] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 391.862192][T14566] ? do_syscall_64+0x26/0x790 [ 391.862212][T14566] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 391.883945][T14566] ? do_syscall_64+0x26/0x790 [ 391.883964][T14566] ? lockdep_hardirqs_on+0x421/0x5e0 [ 391.883987][T14566] do_syscall_64+0xfa/0x790 [ 391.884003][T14566] ? do_syscall_64+0xfa/0x790 [ 391.884025][T14566] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 391.899441][T14577] input: syz1 as /devices/virtual/input/input7 [ 391.899498][T14566] RIP: 0033:0x45a919 [ 391.919815][T14566] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 391.919825][T14566] RSP: 002b:00007f5ce683cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 391.919839][T14566] RAX: ffffffffffffffda RBX: 00007f5ce683cc90 RCX: 000000000045a919 [ 391.919848][T14566] RDX: 0000000020000600 RSI: 0000000000000001 RDI: 00007f5ce681c000 [ 391.919857][T14566] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 391.919866][T14566] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5ce683d6d4 [ 391.919873][T14566] R13: 00000000004c2019 R14: 00000000004d7040 R15: 0000000000000005 [ 391.926476][ C0] net_ratelimit: 16 callbacks suppressed [ 391.926483][ C0] protocol 88fb is buggy, dev hsr_slave_0 18:50:21 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x127d) 18:50:21 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000003240000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:22 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000001300000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 391.926536][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 391.992372][T14587] xt_l2tp: missing protocol rule (udp|l2tpip) 18:50:22 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x1200) 18:50:22 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x127e) 18:50:22 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000400000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 392.122716][T14593] xt_l2tp: missing protocol rule (udp|l2tpip) 18:50:22 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000480000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 392.228079][T14598] xt_l2tp: missing protocol rule (udp|l2tpip) [ 392.258098][T14594] block nbd2: shutting down sockets [ 392.295415][T14594] block nbd2: shutting down sockets [ 392.301271][T14600] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing 18:50:22 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000004c0000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 392.347790][T14608] xt_l2tp: missing protocol rule (udp|l2tpip) 18:50:22 executing program 4 (fault-call:5 fault-nth:3): openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000200)=0x1) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0xff66}]) 18:50:22 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x127f) 18:50:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000000000)="1132de7342e204aebe05274f43dce5d659d8c5b23a20", 0x16, r2}, 0x68) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r3, 0x101, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_netdev_private(r3, 0x89fb, &(0x7f0000000000)) close(r1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000300), 0x4) r6 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r6, 0x200004) sendfile(r1, r6, 0x0, 0x80001d00c0d0) 18:50:22 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x1300) 18:50:22 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000040)) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) fcntl$dupfd(r0, 0x406, r3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) unshare(0x28040000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, 0x0, 0x3, r5, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$KDADDIO(r7, 0x4b34, 0x4a2a7c46) uname(&(0x7f00000003c0)=""/4096) r8 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0xc0386106, &(0x7f0000000000)) [ 392.617097][T14618] block nbd2: shutting down sockets [ 392.635307][T14620] FAULT_INJECTION: forcing a failure. [ 392.635307][T14620] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 392.648868][T14620] CPU: 1 PID: 14620 Comm: syz-executor.4 Not tainted 5.5.0-rc2-next-20191220-syzkaller #0 [ 392.659292][T14620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 392.669758][T14620] Call Trace: [ 392.673145][T14620] dump_stack+0x197/0x210 [ 392.677495][T14620] should_fail.cold+0xa/0x10 [ 392.678811][T14626] xt_l2tp: missing protocol rule (udp|l2tpip) [ 392.682279][T14620] ? setup_fault_attr+0x220/0x220 [ 392.682300][T14620] ? __kasan_check_read+0x11/0x20 [ 392.682314][T14620] ? __lock_acquire+0x16f2/0x4a00 [ 392.682334][T14620] ? alloc_skb_with_frags+0x93/0x590 [ 392.709700][T14620] should_fail_alloc_page+0x50/0x60 18:50:22 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000600000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 392.709716][T14620] __alloc_pages_nodemask+0x1a1/0x910 [ 392.709734][T14620] ? fs_reclaim_release+0xf/0x30 18:50:22 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000680000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 392.709751][T14620] ? __alloc_pages_slowpath+0x2900/0x2900 18:50:22 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x4c01) [ 392.709769][T14620] ? fs_reclaim_release+0xf/0x30 [ 392.709790][T14620] ? setup_fault_attr+0x220/0x220 [ 392.709809][T14620] cache_grow_begin+0x90/0xc60 [ 392.709823][T14620] ? __kmalloc_node_track_caller+0x3d/0x70 [ 392.709840][T14620] ? trace_hardirqs_off+0x62/0x240 [ 392.709875][T14620] kmem_cache_alloc_node_trace+0x689/0x750 18:50:23 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x1400) 18:50:23 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x4c80) 18:50:23 executing program 4 (fault-call:5 fault-nth:4): openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000200)=0x1) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0xff66}]) [ 392.709892][T14620] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 392.709907][T14620] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 392.709927][T14620] __kmalloc_node_track_caller+0x3d/0x70 [ 392.709948][T14620] __kmalloc_reserve.isra.0+0x40/0xf0 [ 392.709968][T14620] __alloc_skb+0x10b/0x5e0 [ 392.709988][T14620] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 392.710002][T14620] ? __kasan_check_read+0x11/0x20 [ 392.710019][T14620] ? aa_file_perm+0x62a/0x15f0 [ 392.710038][T14620] alloc_skb_with_frags+0x93/0x590 18:50:23 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000006c0000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 392.710050][T14620] ? find_held_lock+0x35/0x130 [ 392.710067][T14620] ? __might_fault+0x12b/0x1e0 [ 392.710088][T14620] sock_alloc_send_pskb+0x7ad/0x920 [ 392.710108][T14620] ? iov_iter_advance+0x29a/0xe20 [ 392.710128][T14620] ? sock_wmalloc+0x120/0x120 [ 392.710146][T14620] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 392.710159][T14620] ? iov_iter_advance+0x29a/0xe20 [ 392.710174][T14620] ? _copy_from_iter_full+0x255/0x870 [ 392.710197][T14620] tun_get_user+0xb07/0x3fc0 [ 392.710211][T14620] ? __kasan_check_read+0x11/0x20 [ 392.710238][T14620] ? tun_build_skb.isra.0+0x1480/0x1480 [ 392.710258][T14620] ? lock_downgrade+0x920/0x920 [ 392.710273][T14620] ? rcu_read_lock_held+0x9c/0xb0 [ 392.710289][T14620] ? __kasan_check_read+0x11/0x20 [ 392.710309][T14620] tun_chr_write_iter+0xbd/0x156 [ 392.710328][T14620] aio_write+0x2f2/0x540 [ 392.710347][T14620] ? aio_read+0x3b0/0x3b0 [ 392.710375][T14620] ? lock_downgrade+0x920/0x920 [ 392.710414][T14620] io_submit_one+0xfbd/0x2ec0 [ 392.710433][T14620] ? lookup_ioctx+0x1d7/0x7f0 [ 392.710460][T14620] ? aio_poll_wake+0x1200/0x1200 [ 392.710499][T14620] __x64_sys_io_submit+0x1bd/0x540 [ 392.710516][T14620] ? __x64_sys_io_submit+0x1bd/0x540 [ 392.710535][T14620] ? __ia32_sys_io_destroy+0x3e0/0x3e0 [ 392.710556][T14620] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 392.710571][T14620] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 392.710587][T14620] ? do_syscall_64+0x26/0x790 [ 392.710602][T14620] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 392.710616][T14620] ? do_syscall_64+0x26/0x790 [ 392.710630][T14620] ? lockdep_hardirqs_on+0x421/0x5e0 [ 392.710651][T14620] do_syscall_64+0xfa/0x790 [ 392.710667][T14620] ? do_syscall_64+0xfa/0x790 [ 392.710684][T14620] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 392.710695][T14620] RIP: 0033:0x45a919 [ 392.710711][T14620] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 392.710719][T14620] RSP: 002b:00007f5ce683cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 392.710733][T14620] RAX: ffffffffffffffda RBX: 00007f5ce683cc90 RCX: 000000000045a919 [ 392.710742][T14620] RDX: 0000000020000600 RSI: 0000000000000001 RDI: 00007f5ce681c000 [ 392.710750][T14620] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 392.710758][T14620] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5ce683d6d4 [ 392.710767][T14620] R13: 00000000004c2019 R14: 00000000004d7040 R15: 0000000000000005 [ 392.728123][T14618] block nbd2: shutting down sockets [ 392.808507][T14631] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 392.883401][T14643] xt_l2tp: missing protocol rule (udp|l2tpip) [ 392.976239][T14646] block nbd2: shutting down sockets [ 392.986408][T14646] block nbd2: shutting down sockets [ 393.047401][T14652] xt_l2tp: missing protocol rule (udp|l2tpip) [ 393.124995][T14645] device nr0 entered promiscuous mode [ 393.516360][T14665] xt_l2tp: missing protocol rule (udp|l2tpip) [ 393.576075][T14659] block nbd2: shutting down sockets [ 393.611561][T14662] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 393.615023][T14659] block nbd2: shutting down sockets 18:50:23 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000730000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$alg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="5ba33283d32a3318f417787dc56109c1175fd19228d91ff3ed413f0e11af8ac0f143069541f0950a3401834cc5fed09ffb7a7d008c7661d20cf3dcc3dec3ded735d4f41155abdf1f03c78ab9e184b1e34346a1511fb22bfb258526f6ad4fc64d3b20936b4398d4b2e0593598d4e84ba5d0d2784575ab9ec3599b2d0470be21138ee7ee46318e71fbaed91175", 0x8c}], 0x1, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18}, @op={0x18}, @op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18, 0x117, 0x3, 0x68081fed9a59da4c}, @assoc={0x18}], 0xc0, 0x20000000}, 0x20000040) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$sock_bt_hci(r3, 0xc00cd972, &(0x7f0000000280)="0ec181c772b96b007a044743211a381d67b4888341394599d284811432c7d61b5721de410744d81977e55d808724dac9bfbd2fed322b7b8170c0f7881cdf0ee236275dc1b8ac4e58e21070b6f7a89ecaf5d482558dcac8383bca75b62e0264bccc1f9dd4c47f1c97da197e30f83d889fd46322a8651a4198f272915b55cc84871a11f3d2aa") [ 393.971044][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 393.976913][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:50:24 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x1500) 18:50:24 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x5408) 18:50:24 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000740000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x400000001, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000040)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000300), 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x6cf6d77e03201f3f, 0x0) r5 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r5, 0x200004) sendfile(r1, r5, 0x0, 0x80001d00c0d0) 18:50:24 executing program 4: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000200)=0x1) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0xff66}]) [ 394.295650][T14692] block nbd2: shutting down sockets 18:50:24 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000003780000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:24 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x5421) [ 394.329835][T14692] block nbd2: shutting down sockets [ 394.339819][T14699] device nr0 entered promiscuous mode [ 394.468600][T14707] block nbd2: shutting down sockets [ 394.485965][T14707] block nbd2: shutting down sockets 18:50:24 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x5450) [ 394.531095][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 394.531100][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 394.531182][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 394.536943][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 394.549342][T14695] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing 18:50:24 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x1600) 18:50:24 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="726177000000000000007a0000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 394.657782][T14714] block nbd2: shutting down sockets 18:50:24 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x5451) [ 394.678172][T14714] block nbd2: shutting down sockets [ 394.691061][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 394.697591][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:50:24 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) accept$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0xc0386106, &(0x7f0000000000)) [ 394.816322][T14723] block nbd2: shutting down sockets 18:50:24 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000b40000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 394.873500][T14723] block nbd2: shutting down sockets 18:50:24 executing program 4: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000200)=0x1) io_submit(r0, 0x2, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0xff66}]) 18:50:24 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x5452) [ 395.121062][T14739] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 395.213996][T14742] block nbd2: shutting down sockets [ 395.294842][T14742] block nbd2: shutting down sockets [ 395.545690][T14708] device nr0 entered promiscuous mode 18:50:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() r2 = gettid() rt_tgsigqueueinfo(r2, r1, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) ptrace$getregset(0x15, r1, 0x2, &(0x7f0000000280)={0x0}) ptrace$getsig(0x4202, r1, 0xffff, &(0x7f0000000000)) r3 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x10}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000300), 0x4) r6 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r6, 0x200004) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r7, 0x5418, &(0x7f0000000140)=0x4e9) sendfile(r3, r6, 0x0, 0x80001d00c0d0) 18:50:25 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x1700) 18:50:25 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000001c80000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:25 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x5460) 18:50:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0xc0386106, &(0x7f0000000040)) 18:50:25 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000001cc0000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 395.960028][T14762] l2tp_mt_check4: 4 callbacks suppressed [ 395.960035][T14762] xt_l2tp: missing protocol rule (udp|l2tpip) [ 395.992845][T14758] block nbd2: shutting down sockets 18:50:26 executing program 4: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000200)=0x1) io_submit(r0, 0x3, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0xff66}]) [ 396.049163][T14758] block nbd2: shutting down sockets [ 396.085068][T14763] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing 18:50:26 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x6364) [ 396.144670][T14781] xt_l2tp: missing protocol rule (udp|l2tpip) 18:50:26 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000003d00000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000280), 0xd}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x2, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000200), &(0x7f00000001c0)=0x15) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000080), &(0x7f0000000240)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @loopback}}, [0xffffffff, 0x6, 0x3, 0x7ff, 0x20, 0x8, 0xffffffffffffffff, 0x1, 0x1, 0x8, 0x0, 0xfff, 0x5, 0x10000, 0x8a]}, &(0x7f0000000140)=0x100) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={r7, 0x10001}, 0x8) 18:50:26 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x1800) [ 396.391541][T14793] xt_l2tp: missing protocol rule (udp|l2tpip) [ 396.421786][T14787] block nbd2: shutting down sockets 18:50:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f0000000000)={0x9, 0x1}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r5 = socket$packet(0x11, 0x2, 0x300) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10c33a43ba685927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r8 = dup3(r6, r7, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000040)='nr0\x01\x00') setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000300), 0x4) r9 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r9, 0x200004) sendfile(r1, r9, 0x0, 0x80001d00c0d0) 18:50:26 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000dc0000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:26 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x8933) [ 396.598327][T14803] device nr0 entered promiscuous mode [ 396.607869][T14804] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing 18:50:26 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x89f0) [ 396.678371][T14809] block nbd2: shutting down sockets [ 396.680567][T14812] xt_l2tp: missing protocol rule (udp|l2tpip) [ 396.703214][T14809] block nbd2: shutting down sockets 18:50:26 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x1900) 18:50:26 executing program 4: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000200)=0x1) io_submit(r0, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0xff66}]) 18:50:26 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000003e80000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 396.860233][T14818] block nbd2: shutting down sockets 18:50:27 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab00) 18:50:27 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000f40000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 397.000147][T14827] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 397.017936][T14830] xt_l2tp: missing protocol rule (udp|l2tpip) 18:50:27 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x1a00) [ 397.212387][T14840] xt_l2tp: missing protocol rule (udp|l2tpip) [ 397.220743][T14835] block nbd2: shutting down sockets [ 397.262584][T14835] block nbd2: shutting down sockets 18:50:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, &(0x7f0000000040)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) 18:50:27 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000001f40000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 397.472742][T14852] xt_l2tp: missing protocol rule (udp|l2tpip) [ 397.486725][T14853] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 397.586169][T14803] device nr0 entered promiscuous mode 18:50:28 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x1b00) 18:50:28 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab01) 18:50:28 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000003f40000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:28 executing program 4: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000200)=0x1) io_submit(r0, 0x5, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0xff66}]) 18:50:28 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/213) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400084201, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000035c0)='/dev/hwrng\x00', 0x410580, 0x0) r9 = socket$inet(0x2, 0x4000000805, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) r11 = dup3(r9, r10, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r11, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x20000080, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x7a, &(0x7f000059aff8)={r12}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000003600)={r12, 0x1}, &(0x7f0000003640)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000140)={r12, @in={{0x2, 0x4e22, @multicast2}}}, &(0x7f0000000200)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000240)={r13, 0xcd}, 0x8) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r14 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r14, 0x107, 0x12, &(0x7f0000000300), 0x4) r15 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) r16 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2000, 0x0) ftruncate(r16, 0xfffffffeffffffff) sendfile(r2, r15, 0x0, 0x80001d00c0d0) [ 398.175194][T14868] xt_l2tp: missing protocol rule (udp|l2tpip) [ 398.192222][T14867] block nbd2: shutting down sockets 18:50:28 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab02) [ 398.220720][T14870] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 398.228188][T14867] block nbd2: shutting down sockets 18:50:28 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000000000ff0000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) userfaultfd(0x800) 18:50:28 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x1c00) 18:50:28 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab03) [ 398.376660][T14880] block nbd2: shutting down sockets [ 398.395248][T14880] block nbd2: shutting down sockets [ 398.453554][T14890] xt_l2tp: missing protocol rule (udp|l2tpip) 18:50:28 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700000000ffffffff0000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) 18:50:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300), 0x4) r4 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x9, 0x1000, 0x7}, 0x8) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r7, 0x101, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) bind$ax25(r7, &(0x7f00000000c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@default, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x48) ioctl$SG_GET_VERSION_NUM(r6, 0x2282, &(0x7f0000000000)) [ 398.639916][T14903] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing 18:50:28 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x1d00) [ 398.766456][T14914] xt_l2tp: missing protocol rule (udp|l2tpip) [ 398.784997][T14915] device nr0 entered promiscuous mode 18:50:28 executing program 4: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000200)=0x1) io_submit(r0, 0x7, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0xff66}]) 18:50:28 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700020000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 398.851050][ C1] net_ratelimit: 6 callbacks suppressed [ 398.851058][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 398.862709][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 398.931074][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 398.936935][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:50:29 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700030000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 399.053361][T14924] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing 18:50:29 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x1e00) 18:50:29 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700040000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 399.370897][T14938] block nbd2: Device being setup by another task [ 399.386336][T14901] block nbd2: shutting down sockets [ 399.399051][T14941] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing 18:50:29 executing program 5: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) creat(&(0x7f00000000c0)='./file0/file1\x00', 0x2904) 18:50:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386106, &(0x7f0000000000)) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'security.', '/dev/cec#\x00'}, &(0x7f00000000c0)=""/181, 0xb5) 18:50:29 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="72617700050000000000000000000000000000000000000000000000000000000200000003000000600200003001000000000000000000003001000030010000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0003001000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000003000700000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000006000434c55535445524950000000000000000000000000000000000000000000010000000180c2000002f9ff1e002b002700160001001d001200130039001900000018000f0036001400440021000000020000000400000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020710000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1) [ 399.570394][T14915] device nr0 entered promiscuous mode [ 399.695734][T14955] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 558.771179][ T1110] INFO: task syz-executor.2:14901 can't die for more than 143 seconds. [ 558.779880][ T1110] syz-executor.2 D28040 14901 9329 0x00004004 [ 558.787757][ T1110] Call Trace: [ 558.793413][ T1110] __schedule+0x934/0x1f90 [ 558.798085][ T1110] ? firmware_map_remove+0x1a0/0x1a0 [ 558.805096][ T1110] ? __kasan_check_read+0x11/0x20 [ 558.810266][ T1110] ? __lock_acquire+0x16f2/0x4a00 [ 558.815756][ T1110] schedule+0xdc/0x2b0 [ 558.819926][ T1110] schedule_timeout+0x72b/0xc60 [ 558.824821][ T1110] ? find_held_lock+0x35/0x130 [ 558.829596][ T1110] ? usleep_range+0x170/0x170 [ 558.834819][ T1110] ? lock_downgrade+0x920/0x920 [ 558.839673][ T1110] ? _raw_spin_unlock_irq+0x23/0x80 [ 558.844916][ T1110] ? wait_for_completion+0x294/0x440 [ 558.850205][ T1110] ? _raw_spin_unlock_irq+0x23/0x80 [ 558.855817][ T1110] ? lockdep_hardirqs_on+0x421/0x5e0 [ 558.861567][ T1110] ? trace_hardirqs_on+0x67/0x240 [ 558.866615][ T1110] wait_for_completion+0x29c/0x440 [ 558.871848][ T1110] ? wait_for_completion_interruptible+0x470/0x470 [ 558.879362][ T1110] ? wake_up_q+0x140/0x140 [ 558.884606][ T1110] ? flush_workqueue_prep_pwqs+0x29e/0x4f0 [ 558.890514][ T1110] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 558.897029][ T1110] flush_workqueue+0x40a/0x14c0 [ 558.902095][ T1110] ? __dev_printk+0x202/0x20e [ 558.906758][ T1110] ? _dev_warn+0xd7/0x109 [ 558.911246][ T1110] ? pwq_unbound_release_workfn+0x2f0/0x2f0 [ 558.917589][ T1110] ? release_sock+0x156/0x1c0 [ 558.922768][ T1110] ? sock_shutdown+0x83/0x200 [ 558.927759][ T1110] nbd_ioctl+0xb2e/0xc44 [ 558.932054][ T1110] ? nbd_ioctl+0xb2e/0xc44 [ 558.936474][ T1110] ? nbd_release+0x150/0x150 [ 558.941312][ T1110] ? do_vfs_ioctl+0x11b/0x1340 [ 558.946238][ T1110] ? finish_wait+0x260/0x260 [ 558.951033][ T1110] ? ioctl_file_clone+0x180/0x180 [ 558.956076][ T1110] ? __fget+0x37f/0x550 [ 558.960233][ T1110] ? nbd_release+0x150/0x150 [ 558.964938][ T1110] blkdev_ioctl+0x263/0x670 [ 558.969512][ T1110] ? blkdev_common_ioctl+0x1810/0x1810 [ 558.975521][ T1110] ? ns_to_kernel_old_timeval+0x100/0x100 [ 558.981863][ T1110] block_ioctl+0xee/0x130 [ 558.986479][ T1110] ? blkdev_fallocate+0x410/0x410 [ 558.992196][ T1110] ksys_ioctl+0x123/0x180 [ 558.996973][ T1110] __x64_sys_ioctl+0x73/0xb0 [ 559.001626][ T1110] do_syscall_64+0xfa/0x790 [ 559.006155][ T1110] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 559.013719][ T1110] RIP: 0033:0x45a919 [ 559.018271][ T1110] Code: Bad RIP value. [ 559.023539][ T1110] RSP: 002b:00007f5080501c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 559.033344][ T1110] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 000000000045a919 [ 559.041635][ T1110] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000006 [ 559.049687][ T1110] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 559.057937][ T1110] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f50805026d4 [ 559.066227][ T1110] R13: 00000000004c4646 R14: 00000000004d9e30 R15: 00000000ffffffff [ 559.074923][ T1110] INFO: task syz-executor.2:14901 blocked for more than 143 seconds. [ 559.085531][ T1110] Not tainted 5.5.0-rc2-next-20191220-syzkaller #0 [ 559.093505][ T1110] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 559.102491][ T1110] syz-executor.2 D28040 14901 9329 0x00004004 [ 559.109277][ T1110] Call Trace: [ 559.112666][ T1110] __schedule+0x934/0x1f90 [ 559.117108][ T1110] ? firmware_map_remove+0x1a0/0x1a0 [ 559.122467][ T1110] ? __kasan_check_read+0x11/0x20 [ 559.128029][ T1110] ? __lock_acquire+0x16f2/0x4a00 [ 559.134203][ T1110] schedule+0xdc/0x2b0 [ 559.138522][ T1110] schedule_timeout+0x72b/0xc60 [ 559.144716][ T1110] ? find_held_lock+0x35/0x130 [ 559.149650][ T1110] ? usleep_range+0x170/0x170 [ 559.154415][ T1110] ? lock_downgrade+0x920/0x920 [ 559.159595][ T1110] ? _raw_spin_unlock_irq+0x23/0x80 [ 559.165296][ T1110] ? wait_for_completion+0x294/0x440 [ 559.171063][ T1110] ? _raw_spin_unlock_irq+0x23/0x80 [ 559.176581][ T1110] ? lockdep_hardirqs_on+0x421/0x5e0 [ 559.182139][ T1110] ? trace_hardirqs_on+0x67/0x240 [ 559.187919][ T1110] wait_for_completion+0x29c/0x440 [ 559.193647][ T1110] ? wait_for_completion_interruptible+0x470/0x470 [ 559.200248][ T1110] ? wake_up_q+0x140/0x140 [ 559.204826][ T1110] ? flush_workqueue_prep_pwqs+0x29e/0x4f0 [ 559.211134][ T1110] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 559.217395][ T1110] flush_workqueue+0x40a/0x14c0 [ 559.222304][ T1110] ? __dev_printk+0x202/0x20e [ 559.226995][ T1110] ? _dev_warn+0xd7/0x109 [ 559.231407][ T1110] ? pwq_unbound_release_workfn+0x2f0/0x2f0 [ 559.237310][ T1110] ? release_sock+0x156/0x1c0 [ 559.242086][ T1110] ? sock_shutdown+0x83/0x200 [ 559.246859][ T1110] nbd_ioctl+0xb2e/0xc44 [ 559.251674][ T1110] ? nbd_ioctl+0xb2e/0xc44 [ 559.256115][ T1110] ? nbd_release+0x150/0x150 [ 559.260805][ T1110] ? do_vfs_ioctl+0x11b/0x1340 [ 559.265720][ T1110] ? finish_wait+0x260/0x260 [ 559.270774][ T1110] ? ioctl_file_clone+0x180/0x180 [ 559.276489][ T1110] ? __fget+0x37f/0x550 [ 559.280645][ T1110] ? nbd_release+0x150/0x150 [ 559.285310][ T1110] blkdev_ioctl+0x263/0x670 [ 559.289820][ T1110] ? blkdev_common_ioctl+0x1810/0x1810 [ 559.295346][ T1110] ? ns_to_kernel_old_timeval+0x100/0x100 [ 559.301529][ T1110] block_ioctl+0xee/0x130 [ 559.305875][ T1110] ? blkdev_fallocate+0x410/0x410 [ 559.310884][ T1110] ksys_ioctl+0x123/0x180 [ 559.315265][ T1110] __x64_sys_ioctl+0x73/0xb0 [ 559.319865][ T1110] do_syscall_64+0xfa/0x790 [ 559.324415][ T1110] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 559.330332][ T1110] RIP: 0033:0x45a919 [ 559.334360][ T1110] Code: Bad RIP value. [ 559.338441][ T1110] RSP: 002b:00007f5080501c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 559.347368][ T1110] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 000000000045a919 [ 559.355474][ T1110] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000006 [ 559.363509][ T1110] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 559.371699][ T1110] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f50805026d4 [ 559.379933][ T1110] R13: 00000000004c4646 R14: 00000000004d9e30 R15: 00000000ffffffff [ 559.387971][ T1110] [ 559.387971][ T1110] Showing all locks held in the system: [ 559.395730][ T1110] 1 lock held by khungtaskd/1110: [ 559.402374][ T1110] #0: ffffffff899af980 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x279 [ 559.413626][ T1110] 1 lock held by rsyslogd/9196: [ 559.418658][ T1110] #0: ffff88809e44b160 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 559.427330][ T1110] 2 locks held by getty/9285: [ 559.432061][ T1110] #0: ffff88808a158090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 559.442063][ T1110] #1: ffffc900016fb2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 559.452068][ T1110] 2 locks held by getty/9286: [ 559.456794][ T1110] #0: ffff8880a6815090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 559.466108][ T1110] #1: ffffc9000170b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 559.475737][ T1110] 2 locks held by getty/9287: [ 559.480410][ T1110] #0: ffff8880a82a4090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 559.489402][ T1110] #1: ffffc9000177b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 559.499185][ T1110] 2 locks held by getty/9288: [ 559.504311][ T1110] #0: ffff88809f4f5090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 559.514510][ T1110] #1: ffffc9000171b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 559.524537][ T1110] 2 locks held by getty/9289: [ 559.529327][ T1110] #0: ffff88809aa95090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 559.539087][ T1110] #1: ffffc9000173b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 559.548972][ T1110] 2 locks held by getty/9290: [ 559.553896][ T1110] #0: ffff8880a87dc090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 559.563369][ T1110] #1: ffffc9000176b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 559.573607][ T1110] 2 locks held by getty/9291: [ 559.578467][ T1110] #0: ffff8882189f3090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 559.587467][ T1110] #1: ffffc900011342e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 559.597309][ T1110] 2 locks held by knbd2-recv/14904: [ 559.602558][ T1110] #0: ffff8880a29f0928 ((wq_completion)knbd2-recv){+.+.}, at: process_one_work+0x88b/0x1740 [ 559.612852][ T1110] #1: ffffc90002247d30 ((work_completion)(&args->work)){+.+.}, at: process_one_work+0x8c1/0x1740 [ 559.623785][ T1110] [ 559.626128][ T1110] ============================================= [ 559.626128][ T1110] [ 559.635137][ T1110] NMI backtrace for cpu 1 [ 559.639659][ T1110] CPU: 1 PID: 1110 Comm: khungtaskd Not tainted 5.5.0-rc2-next-20191220-syzkaller #0 [ 559.649164][ T1110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 559.659270][ T1110] Call Trace: [ 559.662592][ T1110] dump_stack+0x197/0x210 [ 559.666983][ T1110] nmi_cpu_backtrace.cold+0x70/0xb2 [ 559.672308][ T1110] ? vprintk_func+0x86/0x189 [ 559.677224][ T1110] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 559.682848][ T1110] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 559.688815][ T1110] arch_trigger_cpumask_backtrace+0x14/0x20 [ 559.694919][ T1110] watchdog+0xdf1/0x14e0 [ 559.699261][ T1110] kthread+0x361/0x430 [ 559.703329][ T1110] ? reset_hung_task_detector+0x30/0x30 [ 559.708854][ T1110] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 559.714554][ T1110] ret_from_fork+0x24/0x30 [ 559.719155][ T1110] Sending NMI from CPU 1 to CPUs 0: [ 559.724884][ C0] NMI backtrace for cpu 0 [ 559.724892][ C0] CPU: 0 PID: 7 Comm: kworker/u4:0 Not tainted 5.5.0-rc2-next-20191220-syzkaller #0 [ 559.724898][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 559.724902][ C0] Workqueue: bat_events batadv_purge_orig [ 559.724908][ C0] RIP: 0010:lockdep_hardirqs_off+0xc8/0x2e0 [ 559.724920][ C0] Code: 95 64 8b 48 ba 00 00 00 00 00 fc ff df 48 89 c1 83 e0 07 48 c1 e9 03 83 c0 03 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 b9 01 00 00 <8b> 0d a2 3f 09 0a 85 c9 0f 84 ea 00 00 00 48 8d bb 68 08 00 00 48 [ 559.724924][ C0] RSP: 0018:ffffc90000cdfb68 EFLAGS: 00000097 [ 559.724931][ C0] RAX: 0000000000000003 RBX: ffff8880a99a81c0 RCX: 1ffffffff16c92ac [ 559.724936][ C0] RDX: 0000000000000004 RSI: 0000000000000000 RDI: ffff8880a99a8a5c [ 559.724941][ C0] RBP: ffffc90000cdfb80 R08: ffff8880a99a81c0 R09: ffffed100ae5c587 [ 559.724946][ C0] R10: ffffed100ae5c586 R11: ffff8880572e2c33 R12: ffffffff81477bda [ 559.724951][ C0] R13: ffff8880a99a81c0 R14: ffffffff81477bda R15: 00000000000000ca [ 559.724956][ C0] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 559.724960][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 559.724966][ C0] CR2: 00007ffe5b025eee CR3: 0000000097a44000 CR4: 00000000001406f0 [ 559.724971][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 559.724976][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 559.724978][ C0] Call Trace: [ 559.724982][ C0] ? batadv_purge_orig_ref+0xc95/0x1370 [ 559.724985][ C0] ? _raw_spin_unlock_bh+0x2c/0x30 [ 559.724989][ C0] trace_hardirqs_off+0x62/0x240 [ 559.724993][ C0] ? batadv_purge_orig_ref+0xc95/0x1370 [ 559.724996][ C0] __local_bh_enable_ip+0x11a/0x270 [ 559.725000][ C0] _raw_spin_unlock_bh+0x2c/0x30 [ 559.725003][ C0] batadv_purge_orig_ref+0xc95/0x1370 [ 559.725007][ C0] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 559.725011][ C0] ? batadv_orig_node_new+0x8c0/0x8c0 [ 559.725014][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 559.725018][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 559.725022][ C0] ? trace_hardirqs_on+0x67/0x240 [ 559.725025][ C0] batadv_purge_orig+0x1b/0x70 [ 559.725029][ C0] process_one_work+0x9af/0x1740 [ 559.725032][ C0] ? pwq_dec_nr_in_flight+0x320/0x320 [ 559.725036][ C0] ? lock_acquire+0x190/0x410 [ 559.725039][ C0] worker_thread+0x98/0xe40 [ 559.725042][ C0] kthread+0x361/0x430 [ 559.725045][ C0] ? process_one_work+0x1740/0x1740 [ 559.725049][ C0] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 559.725052][ C0] ret_from_fork+0x24/0x30 [ 559.726270][ T1110] Kernel panic - not syncing: hung_task: blocked tasks [ 559.987682][ T1110] CPU: 1 PID: 1110 Comm: khungtaskd Not tainted 5.5.0-rc2-next-20191220-syzkaller #0 [ 559.997293][ T1110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 560.007343][ T1110] Call Trace: [ 560.010671][ T1110] dump_stack+0x197/0x210 [ 560.015187][ T1110] panic+0x2e3/0x75c [ 560.019210][ T1110] ? add_taint.cold+0x16/0x16 [ 560.023882][ T1110] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 560.029547][ T1110] ? ___preempt_schedule+0x16/0x18 [ 560.034711][ T1110] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 560.041124][ T1110] ? nmi_trigger_cpumask_backtrace+0x24c/0x28b [ 560.047355][ T1110] ? nmi_trigger_cpumask_backtrace+0x256/0x28b [ 560.053501][ T1110] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 560.059787][ T1110] watchdog+0xe02/0x14e0 [ 560.064024][ T1110] kthread+0x361/0x430 [ 560.068093][ T1110] ? reset_hung_task_detector+0x30/0x30 [ 560.073633][ T1110] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 560.079615][ T1110] ret_from_fork+0x24/0x30 [ 560.085887][ T1110] Kernel Offset: disabled [ 560.090392][ T1110] Rebooting in 86400 seconds..