:39 executing program 5: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x81}) r2 = syz_open_dev$ndb(0x0, 0x0, 0x80240) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) r3 = syz_open_dev$dspn(0x0, 0xd911, 0x20000) r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) ftruncate(0xffffffffffffffff, 0x1000000) sendfile(r5, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_SECURITY(r6, 0x12, 0x3, &(0x7f0000000480), 0x43c866) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000200)=0x1, 0x4) ptrace$setsig(0x4203, 0x0, 0x1b, &(0x7f0000000100)={0x10, 0x1ff, 0x101}) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x2) r7 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r8 = memfd_create(&(0x7f0000000040)='\x00', 0x4) ftruncate(r8, 0x1000000) sendfile(r7, r8, &(0x7f00000000c0)=0xf18001, 0xeefffdef) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) 13:27:39 executing program 1: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x81}) r2 = syz_open_dev$ndb(0x0, 0x0, 0x80240) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) r3 = syz_open_dev$dspn(0x0, 0xd911, 0x20000) r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) ftruncate(0xffffffffffffffff, 0x1000000) sendfile(r5, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_SECURITY(r6, 0x12, 0x3, &(0x7f0000000480), 0x43c866) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000200)=0x1, 0x4) ptrace$setsig(0x4203, 0x0, 0x1b, &(0x7f0000000100)={0x10, 0x1ff, 0x101}) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x2) r7 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r8 = memfd_create(&(0x7f0000000040)='\x00', 0x4) ftruncate(r8, 0x1000000) sendfile(r7, r8, &(0x7f00000000c0)=0xf18001, 0xeefffdef) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) [ 1198.048417][T23485] block nbd5: Receive control failed (result -22) [ 1198.061779][T25053] block nbd2: shutting down sockets [ 1198.100465][T23485] block nbd1: Receive control failed (result -22) 13:27:40 executing program 2: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x81}) r2 = syz_open_dev$ndb(0x0, 0x0, 0x80240) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) r3 = syz_open_dev$dspn(0x0, 0xd911, 0x20000) r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) ftruncate(0xffffffffffffffff, 0x1000000) sendfile(r5, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_SECURITY(r6, 0x12, 0x3, &(0x7f0000000480), 0x43c866) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000200)=0x1, 0x4) ptrace$setsig(0x4203, 0x0, 0x1b, &(0x7f0000000100)={0x10, 0x1ff, 0x101}) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x2) r7 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r8 = memfd_create(&(0x7f0000000040)='\x00', 0x4) ftruncate(r8, 0x1000000) sendfile(r7, r8, &(0x7f00000000c0)=0xf18001, 0xeefffdef) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) 13:27:40 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 13:27:40 executing program 4: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x81}) r2 = syz_open_dev$ndb(0x0, 0x0, 0x80240) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) r3 = syz_open_dev$dspn(0x0, 0xd911, 0x20000) r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) ftruncate(0xffffffffffffffff, 0x1000000) sendfile(r5, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_SECURITY(r6, 0x12, 0x3, &(0x7f0000000480), 0x43c866) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000200)=0x1, 0x4) ptrace$setsig(0x4203, 0x0, 0x1b, &(0x7f0000000100)={0x10, 0x1ff, 0x101}) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x2) r7 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r8 = memfd_create(&(0x7f0000000040)='\x00', 0x4) ftruncate(r8, 0x1000000) sendfile(r7, r8, &(0x7f00000000c0)=0xf18001, 0xeefffdef) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) 13:27:40 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1198.331924][T23485] block nbd4: Receive control failed (result -22) 13:27:40 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1198.411963][T23485] block nbd2: Receive control failed (result -22) 13:27:40 executing program 0: syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) 13:27:40 executing program 0: syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) [ 1198.727386][T25077] block nbd5: shutting down sockets [ 1198.775127][T25084] block nbd1: shutting down sockets 13:27:40 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 13:27:40 executing program 0: syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) 13:27:40 executing program 5: pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r2, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x40000, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:27:40 executing program 1: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x81}) r2 = syz_open_dev$ndb(0x0, 0x0, 0x80240) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) r3 = syz_open_dev$dspn(0x0, 0xd911, 0x20000) r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) ftruncate(0xffffffffffffffff, 0x1000000) sendfile(r5, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_SECURITY(r6, 0x12, 0x3, &(0x7f0000000480), 0x43c866) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000200)=0x1, 0x4) ptrace$setsig(0x4203, 0x0, 0x1b, &(0x7f0000000100)={0x10, 0x1ff, 0x101}) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x2) r7 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r8 = memfd_create(&(0x7f0000000040)='\x00', 0x4) ftruncate(r8, 0x1000000) sendfile(r7, r8, &(0x7f00000000c0)=0xf18001, 0xeefffdef) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) memfd_create(&(0x7f0000000040)='\x00', 0x4) 13:27:40 executing program 0: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x81}) r2 = syz_open_dev$ndb(0x0, 0x0, 0x80240) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) r3 = syz_open_dev$dspn(0x0, 0xd911, 0x20000) r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) ftruncate(0xffffffffffffffff, 0x1000000) sendfile(r5, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_SECURITY(r6, 0x12, 0x3, &(0x7f0000000480), 0x43c866) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000200)=0x1, 0x4) ptrace$setsig(0x4203, 0x0, 0x1b, &(0x7f0000000100)={0x10, 0x1ff, 0x101}) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x2) r7 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r8 = memfd_create(&(0x7f0000000040)='\x00', 0x4) ftruncate(r8, 0x1000000) sendfile(r7, r8, &(0x7f00000000c0)=0xf18001, 0xeefffdef) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) memfd_create(&(0x7f0000000040)='\x00', 0x4) [ 1199.021370][T25094] block nbd4: shutting down sockets [ 1199.093793][T25099] block nbd2: shutting down sockets [ 1199.129338][T23485] block nbd0: Receive control failed (result -22) 13:27:41 executing program 2: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x81}) r2 = syz_open_dev$ndb(0x0, 0x0, 0x80240) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) r3 = syz_open_dev$dspn(0x0, 0xd911, 0x20000) r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) ftruncate(0xffffffffffffffff, 0x1000000) sendfile(r5, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_SECURITY(r6, 0x12, 0x3, &(0x7f0000000480), 0x43c866) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000200)=0x1, 0x4) ptrace$setsig(0x4203, 0x0, 0x1b, &(0x7f0000000100)={0x10, 0x1ff, 0x101}) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x2) r7 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r8 = memfd_create(&(0x7f0000000040)='\x00', 0x4) ftruncate(r8, 0x1000000) sendfile(r7, r8, &(0x7f00000000c0)=0xf18001, 0xeefffdef) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) memfd_create(&(0x7f0000000040)='\x00', 0x4) 13:27:41 executing program 5: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x81}) r2 = syz_open_dev$ndb(0x0, 0x0, 0x80240) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) r3 = syz_open_dev$dspn(0x0, 0xd911, 0x20000) r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) ftruncate(0xffffffffffffffff, 0x1000000) sendfile(r5, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_SECURITY(r6, 0x12, 0x3, &(0x7f0000000480), 0x43c866) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000200)=0x1, 0x4) ptrace$setsig(0x4203, 0x0, 0x1b, &(0x7f0000000100)={0x10, 0x1ff, 0x101}) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x2) r7 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r8 = memfd_create(&(0x7f0000000040)='\x00', 0x4) ftruncate(r8, 0x1000000) sendfile(r7, r8, &(0x7f00000000c0)=0xf18001, 0xeefffdef) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) memfd_create(&(0x7f0000000040)='\x00', 0x4) 13:27:41 executing program 4: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x81}) r2 = syz_open_dev$ndb(0x0, 0x0, 0x80240) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) r3 = syz_open_dev$dspn(0x0, 0xd911, 0x20000) r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) ftruncate(0xffffffffffffffff, 0x1000000) sendfile(r5, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_SECURITY(r6, 0x12, 0x3, &(0x7f0000000480), 0x43c866) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000200)=0x1, 0x4) ptrace$setsig(0x4203, 0x0, 0x1b, &(0x7f0000000100)={0x10, 0x1ff, 0x101}) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x2) r7 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r8 = memfd_create(&(0x7f0000000040)='\x00', 0x4) ftruncate(r8, 0x1000000) sendfile(r7, r8, &(0x7f00000000c0)=0xf18001, 0xeefffdef) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) memfd_create(&(0x7f0000000040)='\x00', 0x4) memfd_create(&(0x7f0000000040)='\x00', 0x0) [ 1199.252035][T23485] block nbd1: Receive control failed (result -22) [ 1199.422090][ T1530] block nbd5: Receive control failed (result -22) [ 1199.422097][T23485] block nbd2: Receive control failed (result -22) [ 1199.524647][ T1530] block nbd4: Receive control failed (result -22) [ 1199.557580][T25139] block nbd5: shutting down sockets 13:27:41 executing program 5: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x81}) r2 = syz_open_dev$ndb(0x0, 0x0, 0x80240) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) r3 = syz_open_dev$dspn(0x0, 0xd911, 0x20000) r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) ftruncate(0xffffffffffffffff, 0x1000000) sendfile(r5, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_SECURITY(r6, 0x12, 0x3, &(0x7f0000000480), 0x43c866) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000200)=0x1, 0x4) ptrace$setsig(0x4203, 0x0, 0x1b, &(0x7f0000000100)={0x10, 0x1ff, 0x101}) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x2) r7 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r8 = memfd_create(&(0x7f0000000040)='\x00', 0x4) ftruncate(r8, 0x1000000) sendfile(r7, r8, &(0x7f00000000c0)=0xf18001, 0xeefffdef) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) memfd_create(&(0x7f0000000040)='\x00', 0x4) memfd_create(&(0x7f0000000040)='\x00', 0x0) 13:27:41 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 1199.739067][ T1530] block nbd5: Receive control failed (result -22) [ 1199.814145][T25133] block nbd0: shutting down sockets 13:27:41 executing program 0: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x81}) r2 = syz_open_dev$ndb(0x0, 0x0, 0x80240) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) r3 = syz_open_dev$dspn(0x0, 0xd911, 0x20000) r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) ftruncate(0xffffffffffffffff, 0x1000000) sendfile(r5, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_SECURITY(r6, 0x12, 0x3, &(0x7f0000000480), 0x43c866) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000200)=0x1, 0x4) ptrace$setsig(0x4203, 0x0, 0x1b, &(0x7f0000000100)={0x10, 0x1ff, 0x101}) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x2) r7 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r8 = memfd_create(&(0x7f0000000040)='\x00', 0x4) ftruncate(r8, 0x1000000) sendfile(r7, r8, &(0x7f00000000c0)=0xf18001, 0xeefffdef) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) memfd_create(&(0x7f0000000040)='\x00', 0x4) memfd_create(&(0x7f0000000040)='\x00', 0x0) [ 1199.884529][T25161] block nbd5: shutting down sockets [ 1199.913602][T25135] block nbd1: shutting down sockets 13:27:41 executing program 5: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x81}) r2 = syz_open_dev$ndb(0x0, 0x0, 0x80240) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) r3 = syz_open_dev$dspn(0x0, 0xd911, 0x20000) r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) ftruncate(0xffffffffffffffff, 0x1000000) sendfile(r5, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_SECURITY(r6, 0x12, 0x3, &(0x7f0000000480), 0x43c866) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000200)=0x1, 0x4) ptrace$setsig(0x4203, 0x0, 0x1b, &(0x7f0000000100)={0x10, 0x1ff, 0x101}) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x2) r7 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r8 = memfd_create(&(0x7f0000000040)='\x00', 0x4) ftruncate(r8, 0x1000000) sendfile(r7, r8, &(0x7f00000000c0)=0xf18001, 0xeefffdef) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) memfd_create(&(0x7f0000000040)='\x00', 0x4) memfd_create(&(0x7f0000000040)='\x00', 0x0) 13:27:41 executing program 1: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x81}) r2 = syz_open_dev$ndb(0x0, 0x0, 0x80240) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) r3 = syz_open_dev$dspn(0x0, 0xd911, 0x20000) r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) ftruncate(0xffffffffffffffff, 0x1000000) sendfile(r5, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_SECURITY(r6, 0x12, 0x3, &(0x7f0000000480), 0x43c866) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000200)=0x1, 0x4) ptrace$setsig(0x4203, 0x0, 0x1b, &(0x7f0000000100)={0x10, 0x1ff, 0x101}) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x2) r7 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r8 = memfd_create(&(0x7f0000000040)='\x00', 0x4) ftruncate(r8, 0x1000000) sendfile(r7, r8, &(0x7f00000000c0)=0xf18001, 0xeefffdef) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) memfd_create(&(0x7f0000000040)='\x00', 0x4) [ 1200.108620][ T1530] block nbd0: Receive control failed (result -22) [ 1200.120544][T25142] block nbd2: shutting down sockets [ 1200.171361][ T1530] block nbd5: Receive control failed (result -22) [ 1200.189673][T25147] block nbd4: shutting down sockets 13:27:42 executing program 2: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x81}) r2 = syz_open_dev$ndb(0x0, 0x0, 0x80240) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) r3 = syz_open_dev$dspn(0x0, 0xd911, 0x20000) r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) ftruncate(0xffffffffffffffff, 0x1000000) sendfile(r5, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_SECURITY(r6, 0x12, 0x3, &(0x7f0000000480), 0x43c866) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000200)=0x1, 0x4) ptrace$setsig(0x4203, 0x0, 0x1b, &(0x7f0000000100)={0x10, 0x1ff, 0x101}) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x2) r7 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r8 = memfd_create(&(0x7f0000000040)='\x00', 0x4) ftruncate(r8, 0x1000000) sendfile(r7, r8, &(0x7f00000000c0)=0xf18001, 0xeefffdef) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) memfd_create(&(0x7f0000000040)='\x00', 0x4) memfd_create(&(0x7f0000000040)='\x00', 0x0) [ 1200.231445][ T1530] block nbd1: Receive control failed (result -22) 13:27:42 executing program 4: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x81}) r2 = syz_open_dev$ndb(0x0, 0x0, 0x80240) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) r3 = syz_open_dev$dspn(0x0, 0xd911, 0x20000) r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) ftruncate(0xffffffffffffffff, 0x1000000) sendfile(r5, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_SECURITY(r6, 0x12, 0x3, &(0x7f0000000480), 0x43c866) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000200)=0x1, 0x4) ptrace$setsig(0x4203, 0x0, 0x1b, &(0x7f0000000100)={0x10, 0x1ff, 0x101}) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x2) r7 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r8 = memfd_create(&(0x7f0000000040)='\x00', 0x4) ftruncate(r8, 0x1000000) sendfile(r7, r8, &(0x7f00000000c0)=0xf18001, 0xeefffdef) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) memfd_create(&(0x7f0000000040)='\x00', 0x4) memfd_create(&(0x7f0000000040)='\x00', 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000280)=0x7) [ 1200.367987][T25171] block nbd5: shutting down sockets 13:27:42 executing program 5: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x81}) r2 = syz_open_dev$ndb(0x0, 0x0, 0x80240) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) r3 = syz_open_dev$dspn(0x0, 0xd911, 0x20000) r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) ftruncate(0xffffffffffffffff, 0x1000000) sendfile(r5, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_SECURITY(r6, 0x12, 0x3, &(0x7f0000000480), 0x43c866) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000200)=0x1, 0x4) ptrace$setsig(0x4203, 0x0, 0x1b, &(0x7f0000000100)={0x10, 0x1ff, 0x101}) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x2) r7 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r8 = memfd_create(&(0x7f0000000040)='\x00', 0x4) ftruncate(r8, 0x1000000) sendfile(r7, r8, &(0x7f00000000c0)=0xf18001, 0xeefffdef) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) memfd_create(&(0x7f0000000040)='\x00', 0x4) memfd_create(&(0x7f0000000040)='\x00', 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000280)=0x7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x38, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x783f5e47, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xfffffffd}, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}]}, &(0x7f0000000380)=0x10) [ 1200.453520][ T1530] block nbd2: Receive control failed (result -22) [ 1200.591236][ T1530] block nbd4: Receive control failed (result -22) 13:27:42 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 1200.691912][ T1530] block nbd5: Receive control failed (result -22) [ 1200.777171][T25168] block nbd0: shutting down sockets 13:27:42 executing program 0: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x81}) r2 = syz_open_dev$ndb(0x0, 0x0, 0x80240) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) r3 = syz_open_dev$dspn(0x0, 0xd911, 0x20000) r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) ftruncate(0xffffffffffffffff, 0x1000000) sendfile(r5, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_SECURITY(r6, 0x12, 0x3, &(0x7f0000000480), 0x43c866) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000200)=0x1, 0x4) ptrace$setsig(0x4203, 0x0, 0x1b, &(0x7f0000000100)={0x10, 0x1ff, 0x101}) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x2) r7 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r8 = memfd_create(&(0x7f0000000040)='\x00', 0x4) ftruncate(r8, 0x1000000) sendfile(r7, r8, &(0x7f00000000c0)=0xf18001, 0xeefffdef) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) memfd_create(&(0x7f0000000040)='\x00', 0x4) memfd_create(&(0x7f0000000040)='\x00', 0x0) [ 1200.897274][T25173] block nbd1: shutting down sockets 13:27:42 executing program 1: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x81}) r2 = syz_open_dev$ndb(0x0, 0x0, 0x80240) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) r3 = syz_open_dev$dspn(0x0, 0xd911, 0x20000) r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) ftruncate(0xffffffffffffffff, 0x1000000) sendfile(r5, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_SECURITY(r6, 0x12, 0x3, &(0x7f0000000480), 0x43c866) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000200)=0x1, 0x4) ptrace$setsig(0x4203, 0x0, 0x1b, &(0x7f0000000100)={0x10, 0x1ff, 0x101}) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x2) r7 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r8 = memfd_create(&(0x7f0000000040)='\x00', 0x4) ftruncate(r8, 0x1000000) sendfile(r7, r8, &(0x7f00000000c0)=0xf18001, 0xeefffdef) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) memfd_create(&(0x7f0000000040)='\x00', 0x4) memfd_create(&(0x7f0000000040)='\x00', 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000280)=0x7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x38, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x783f5e47, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xfffffffd}, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}]}, &(0x7f0000000380)=0x10) [ 1201.054803][ T1530] block nbd0: Receive control failed (result -22) [ 1201.064395][ C1] net_ratelimit: 20 callbacks suppressed [ 1201.064403][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1201.075940][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1201.149115][T25184] block nbd2: shutting down sockets 13:27:43 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r3, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x40000, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1201.180252][ T1530] block nbd1: Receive control failed (result -22) [ 1201.193602][T25205] block nbd0: shutting down sockets 13:27:43 executing program 0: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x81}) r2 = syz_open_dev$ndb(0x0, 0x0, 0x80240) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) r3 = syz_open_dev$dspn(0x0, 0xd911, 0x20000) r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) ftruncate(0xffffffffffffffff, 0x1000000) sendfile(r5, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_SECURITY(r6, 0x12, 0x3, &(0x7f0000000480), 0x43c866) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000200)=0x1, 0x4) ptrace$setsig(0x4203, 0x0, 0x1b, &(0x7f0000000100)={0x10, 0x1ff, 0x101}) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x2) r7 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r8 = memfd_create(&(0x7f0000000040)='\x00', 0x4) ftruncate(r8, 0x1000000) sendfile(r7, r8, &(0x7f00000000c0)=0xf18001, 0xeefffdef) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) memfd_create(&(0x7f0000000040)='\x00', 0x4) memfd_create(&(0x7f0000000040)='\x00', 0x0) [ 1201.303839][T25189] block nbd4: shutting down sockets 13:27:43 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r4, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1201.386336][T25193] block nbd5: shutting down sockets 13:27:43 executing program 5: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x81}) r2 = syz_open_dev$ndb(0x0, 0x0, 0x80240) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) r3 = syz_open_dev$dspn(0x0, 0xd911, 0x20000) r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) ftruncate(0xffffffffffffffff, 0x1000000) sendfile(r5, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_SECURITY(r6, 0x12, 0x3, &(0x7f0000000480), 0x43c866) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000200)=0x1, 0x4) ptrace$setsig(0x4203, 0x0, 0x1b, &(0x7f0000000100)={0x10, 0x1ff, 0x101}) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x2) r7 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r8 = memfd_create(&(0x7f0000000040)='\x00', 0x4) ftruncate(r8, 0x1000000) sendfile(r7, r8, &(0x7f00000000c0)=0xf18001, 0xeefffdef) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) memfd_create(&(0x7f0000000040)='\x00', 0x4) memfd_create(&(0x7f0000000040)='\x00', 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000280)=0x7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x38, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x783f5e47, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xfffffffd}, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}]}, &(0x7f0000000380)=0x10) 13:27:43 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 1201.578089][ T1530] block nbd0: Receive control failed (result -22) [ 1201.624438][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1201.630293][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1201.715332][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1201.723087][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1201.789975][ T1530] block nbd5: Receive control failed (result -22) [ 1201.841039][T25208] block nbd1: shutting down sockets [ 1201.896856][T25230] block nbd5: shutting down sockets 13:27:43 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket$netlink(0x10, 0x3, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r3, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}]) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x40000, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:27:43 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r1, 0x0, &(0x7f0000329fd8)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) creat(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1202.221436][T25218] block nbd0: shutting down sockets 13:27:44 executing program 0: pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r2, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1202.264394][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1202.270317][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:27:44 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = eventfd2(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x40000, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:27:44 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r1, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) creat(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1202.504699][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1202.512508][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:27:44 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 13:27:44 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r3, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:27:44 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = eventfd2(0x0, 0x0) io_setup(0xa3c, 0x0) io_submit(0x0, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) creat(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:27:44 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket$netlink(0x10, 0x3, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r3, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}]) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:27:45 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = eventfd2(0x0, 0x0) io_setup(0xa3c, 0x0) io_submit(0x0, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) creat(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:27:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e15"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, 0x0) 13:27:45 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 13:27:45 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) socket$netlink(0x10, 0x3, 0x0) eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:27:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e15"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, 0x0) 13:27:45 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r4, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:27:45 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r4, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) creat(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:27:46 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = eventfd2(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) creat(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:27:46 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 13:27:46 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r4, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) creat(0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:27:46 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r4, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) creat(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x40000, 0x4) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:27:46 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r4, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) creat(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x40000, 0x4) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:27:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e15"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") 13:27:46 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r4, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:27:47 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e15"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:27:47 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 13:27:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e15566701800100000000006722b4ecb75c52"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") close(r3) 13:27:47 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r4, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) creat(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x40000, 0x4) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:27:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e15566701800100000000006722b4ecb75c52"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") close(r3) 13:27:47 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r4, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) creat(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x40000, 0x4) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:27:48 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 1206.424405][ C1] net_ratelimit: 20 callbacks suppressed [ 1206.424415][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1206.436088][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1206.666880][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1206.673814][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1206.744395][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1206.750296][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:27:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e15566701800100000000006722b4ecb75c52"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") close(r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:27:49 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r4, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) creat(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x40000, 0x4) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:27:49 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = eventfd2(0x0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r4, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) creat(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x40000, 0x4) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:27:49 executing program 3: syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 1207.304397][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1207.310285][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:27:49 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000001540)=[{0x0, 0x0, 0x800}, {&(0x7f0000000340)="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", 0x1c9, 0x1}]) 13:27:49 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}]}) [ 1207.665715][T25380] Dev loop1: unable to read RDB block 8 [ 1207.676790][T25380] loop1: AHDI p1 [ 1207.696088][T25380] loop1: partition table partially beyond EOD, truncated 13:27:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e15566701800100000000006722b4ecb75c52"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") close(r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 1207.864396][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1207.870316][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:27:49 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}]}) 13:27:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e15566701800100000000006722b4ecb75c52"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") close(r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 13:27:50 executing program 3: syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 13:27:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e15566701800100000000006722b4ecb75c52"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") close(r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) clone(0x2088e100, 0x0, 0x0, 0x0, &(0x7f0000000140)="d353ff072d68b2e4dc14aa5fa8b3d94c22") 13:27:50 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}]}) 13:27:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e15566701800100000000006722b4ecb75c52"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") close(r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) clone(0x2088e100, 0x0, 0x0, 0x0, &(0x7f0000000140)="d353ff072d68b2e4dc14aa5fa8b3d94c22") 13:27:50 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}]}) 13:27:50 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}]}) 13:27:51 executing program 3: syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 13:27:51 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}]}) 13:27:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") splice(r1, &(0x7f0000000000), r2, &(0x7f0000000040), 0x1de4, 0xc) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x2088e100, 0x0, 0x0, 0x0, &(0x7f0000000140)="d353ff072d68b2e4dc14aa5fa8b3d94c22") 13:27:51 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', 0x0, 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}]}) 13:27:51 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', 0x0, 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}]}) 13:27:51 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002b40)={[{@check_relaxed='check=relaxed'}]}) 13:27:51 executing program 3: syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ppoll(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) 13:27:52 executing program 4: syz_read_part_table(0x9000, 0x2, &(0x7f0000001540)=[{0x0, 0x0, 0x800}, {&(0x7f0000000340)="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", 0x1c9, 0x1}]) 13:27:52 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', 0x0, 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}]}) [ 1210.325748][T25465] ISOFS: Unable to identify CD-ROM format. 13:27:52 executing program 2: syz_read_part_table(0xf2c, 0x2, &(0x7f0000001540)=[{0x0, 0x0, 0x800}, {&(0x7f0000000340)="5092d437f81fe98960995cd0e02ea814e0b0d4021b81946b71a8be739e178e8903b91646bbfba844277e448ab184b49f253f4e40d36755537305b9aacb7ac8455a6d6cec8ef660563e0b7b03ba668ab60489f6ce4586c054c3ed9699785cab3882f6c061145fe7d675f9e900b1d706193d8781aa97404b19405e8fd860ccd007ee844c3ea77326962a2f81a64f1833682d6b3ed59d889b687ff1fbb94e9d16a2368efc4661f68a02837b8f0cff0de3ea83ca2b8d5af62348e8e5a50eabb5c86071586e4968071e9816f91fa13ca3c12841abe75434bd142f9e8ab059d6c1c502ed06a83c57", 0xe5}]) 13:27:52 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002b40)={[{@check_relaxed='check=relaxed'}]}) [ 1210.538605][T25477] loop4: AHDI p1 13:27:52 executing program 1: syz_read_part_table(0x2000, 0x2, &(0x7f0000001540)=[{0x0, 0x0, 0x800}, {&(0x7f0000000340)="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", 0x1c9, 0x1}]) 13:27:52 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@map_off='map=off'}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}]}) 13:27:52 executing program 4: syz_read_part_table(0x1f00, 0x2, &(0x7f0000001540)=[{0x0, 0x0, 0x800}, {&(0x7f0000000340)="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", 0x1c9, 0x1}]) [ 1210.686299][T25482] ISOFS: Unable to identify CD-ROM format. [ 1210.717832][T25487] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 [ 1210.737958][T25487] loop2: p1 start 3495729504 is beyond EOD, truncated [ 1210.812797][T25487] loop2: p2 start 1151925179 is beyond EOD, truncated [ 1210.849903][T25494] ISOFS: Unable to identify CD-ROM format. 13:27:52 executing program 5: syz_read_part_table(0x9, 0x2, &(0x7f0000001540)=[{0x0, 0x0, 0x800}, {&(0x7f0000000340)="5092d437f81fe98960995cd0e02ea814e0b0d4021b81946b71a8be739e178e8903b91646bbfba844277e448ab184b49f253f4e40d36755537305b9aacb7ac8455a6d6cec8ef660563e0b7b03ba668ab60489f6ce4586c054c3ed9699785cab3882f6c061145fe7d675f9e900b1d706193d8781aa97404b19405e8fd860ccd007ee844c3ea77326962a2f81a64f1833682d6b3ed59d889b687ff1fbb94e9d16a2368efc4661f68a02837b8f0cff0de3ea83ca2b8d5af62348e8e5a50eabb5c86071586e4968071e9816f91fa13ca3c12841abe75434bd142f9e8ab059d6c1c502ed06a83c57", 0xe5}]) [ 1210.862997][T25487] loop2: p3 start 3966528858 is beyond EOD, truncated [ 1210.871158][T25499] loop1: AHDI p1 [ 1210.884711][T25487] loop2: p4 start 950754424 is beyond EOD, truncated [ 1210.891868][T25487] loop2: p5 start 3633274432 is beyond EOD, truncated [ 1210.900765][T25487] loop2: p6 start 1755023517 is beyond EOD, truncated [ 1210.920013][T25487] loop2: p7 start 2368457347 is beyond EOD, truncated [ 1210.928420][T25487] loop2: p8 start 683778876 is beyond EOD, truncated [ 1210.967065][T25503] Dev loop4: unable to read RDB block 15 [ 1210.972917][T25503] loop4: AHDI p1 [ 1210.977248][T25503] loop4: partition table partially beyond EOD, truncated 13:27:52 executing program 1: syz_read_part_table(0x10, 0x2, &(0x7f0000001540)=[{0x0, 0x0, 0x800}, {&(0x7f0000000340)="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", 0x1c9, 0x1}]) 13:27:53 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@map_off='map=off'}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}]}) 13:27:53 executing program 3: syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ppoll(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) 13:27:53 executing program 2: syz_read_part_table(0x4, 0x2, &(0x7f0000001540)=[{0x0, 0x0, 0x800}, {&(0x7f0000000340)="5092d437f81fe98960995cd0e02ea814e0b0d4021b81946b71a8be739e178e8903b91646bbfba844277e448ab184b49f253f4e40d36755537305b9aacb7ac8455a6d6cec8ef660563e0b7b03ba668ab60489f6ce4586c054c3ed9699785cab3882f6c061145fe7d675f9e900b1d706193d8781aa97404b19405e8fd860ccd007ee844c3ea77326962a2f81a64f1833682d6b3ed59d889b687ff1fbb94e9d16a2368efc4661f68a02837b8f0cff0de3ea83ca2b8d5af62348e8e5a50eabb5c86071586e4968071e9816f91fa13ca3c12841abe75434bd142f9e8ab059d6c1c502ed06a83c576f37036bc6e6e3e547b583dc9e9aa78c5d99303e9b9b068553778f4e9e668a51b7ed36af255ddb5873b4ff06178a596f6cf6fe7d95cd26db7bdf00965e701fbc4b4ad6db761bfeaf856f06d7529398720153ed8a2f4974bd376c23e785fb068f339aa3a99f0cfdf6f6c83c7a68875b0f316091b41154291f28f5b2e7af4dc65625825103d1e4e9fc86055d2fad6077b41f6b05bbaf0893a63316da33765339fab06d246e77a5cf9e7e32118fcee838327b33cbf47ae164a57878218101cede4aa0bb38c9a92e441597dda29e4510091d5c88222706f2ca562c84d4ddec9463c2e3d2e149", 0x1c9, 0x1}]) [ 1211.204959][T25508] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 [ 1211.211330][T25508] loop5: p1 start 3495729504 is beyond EOD, truncated 13:27:53 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1211.254666][T25508] loop5: p2 start 1151925179 is beyond EOD, truncated [ 1211.261640][T25508] loop5: p3 start 3966528858 is beyond EOD, truncated [ 1211.307801][T25508] loop5: p4 start 950754424 is beyond EOD, truncated [ 1211.316355][T25513] Dev loop1: unable to read RDB block 8 [ 1211.341551][T25513] loop1: AHDI p1 [ 1211.355528][T25513] loop1: partition table partially beyond EOD, truncated [ 1211.365009][T25508] loop5: p5 start 3633274432 is beyond EOD, truncated [ 1211.380091][T25508] loop5: p6 start 1755023517 is beyond EOD, truncated [ 1211.393869][T25508] loop5: p7 start 2368457347 is beyond EOD, truncated [ 1211.405688][T25529] FAULT_INJECTION: forcing a failure. [ 1211.405688][T25529] name failslab, interval 1, probability 0, space 0, times 0 [ 1211.407399][T25508] loop5: p8 start 683778876 is beyond EOD, truncated [ 1211.431953][T25529] CPU: 1 PID: 25529 Comm: syz-executor.4 Not tainted 5.4.0-rc3-next-20191018 #0 [ 1211.441031][T25529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1211.451094][T25529] Call Trace: [ 1211.454394][T25529] dump_stack+0x172/0x1f0 [ 1211.458749][T25529] should_fail.cold+0xa/0x15 [ 1211.463366][T25529] ? fault_create_debugfs_attr+0x180/0x180 [ 1211.469197][T25529] ? ___might_sleep+0x163/0x2c0 [ 1211.474077][T25529] __should_failslab+0x121/0x190 [ 1211.479048][T25529] should_failslab+0x9/0x14 [ 1211.483563][T25529] __kmalloc+0x2e0/0x770 [ 1211.487816][T25529] ? mark_held_locks+0xf0/0xf0 [ 1211.492587][T25529] ? mark_lock+0xc2/0x1220 [ 1211.497020][T25529] ? _parse_integer+0x190/0x190 [ 1211.501883][T25529] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 1211.507670][T25529] tomoyo_realpath_from_path+0xcd/0x7b0 [ 1211.513204][T25529] ? tomoyo_path_number_perm+0x193/0x520 [ 1211.518936][T25529] tomoyo_path_number_perm+0x1dd/0x520 [ 1211.524518][T25529] ? tomoyo_path_number_perm+0x193/0x520 [ 1211.530162][T25529] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1211.535975][T25529] ? __f_unlock_pos+0x19/0x20 [ 1211.540662][T25529] ? __fget+0x37f/0x550 [ 1211.544816][T25529] ? ksys_dup3+0x3e0/0x3e0 [ 1211.549235][T25529] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1211.555472][T25529] ? fput_many+0x12c/0x1a0 [ 1211.559873][T25529] tomoyo_file_ioctl+0x23/0x30 [ 1211.564623][T25529] security_file_ioctl+0x77/0xc0 [ 1211.569595][T25529] ksys_ioctl+0x57/0xd0 [ 1211.573772][T25529] __x64_sys_ioctl+0x73/0xb0 [ 1211.578363][T25529] do_syscall_64+0xfa/0x760 [ 1211.582880][T25529] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1211.588764][T25529] RIP: 0033:0x459a59 [ 1211.592638][T25529] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1211.612323][T25529] RSP: 002b:00007f98c6d90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1211.620740][T25529] RAX: ffffffffffffffda RBX: 00007f98c6d90c90 RCX: 0000000000459a59 [ 1211.628973][T25529] RDX: ffffffffffffffff RSI: 000000000000ab00 RDI: 0000000000000003 [ 1211.636965][T25529] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1211.644936][T25529] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f98c6d916d4 [ 1211.652909][T25529] R13: 00000000004c3412 R14: 00000000004d7160 R15: 0000000000000004 [ 1211.661313][ C1] net_ratelimit: 20 callbacks suppressed [ 1211.661324][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1211.672795][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1211.682374][T25529] ERROR: Out of memory at tomoyo_realpath_from_path. 13:27:53 executing program 4 (fault-call:1 fault-nth:1): r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1211.717276][T25525] Dev loop2: unable to read RDB block 8 [ 1211.722897][T25525] loop2: AHDI p1 [ 1211.748636][T25525] loop2: partition table partially beyond EOD, truncated [ 1211.757006][T25526] ISOFS: Unable to identify CD-ROM format. 13:27:53 executing program 1 (fault-call:5 fault-nth:0): r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 13:27:53 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@map_off='map=off'}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}]}) 13:27:53 executing program 5 (fault-call:6 fault-nth:0): r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1211.940874][T25542] FAULT_INJECTION: forcing a failure. [ 1211.940874][T25542] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1211.954467][T25542] CPU: 0 PID: 25542 Comm: syz-executor.4 Not tainted 5.4.0-rc3-next-20191018 #0 [ 1211.963492][T25542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1211.973565][T25542] Call Trace: [ 1211.976879][T25542] dump_stack+0x172/0x1f0 [ 1211.981234][T25542] should_fail.cold+0xa/0x15 [ 1211.985850][T25542] ? fault_create_debugfs_attr+0x180/0x180 [ 1211.991676][T25542] ? lock_downgrade+0x920/0x920 [ 1211.996548][T25542] should_fail_alloc_page+0x50/0x60 [ 1212.001773][T25542] __alloc_pages_nodemask+0x1a1/0x910 [ 1212.007167][T25542] ? __kasan_check_read+0x11/0x20 [ 1212.012206][T25542] ? mark_lock+0xc2/0x1220 [ 1212.016637][T25542] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1212.022367][T25542] ? __kasan_check_read+0x11/0x20 [ 1212.024388][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1212.027404][T25542] ? fault_create_debugfs_attr+0x180/0x180 13:27:53 executing program 2 (fault-call:6 fault-nth:0): r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1212.027437][T25542] cache_grow_begin+0x90/0xd00 [ 1212.027455][T25542] ? trace_hardirqs_off+0x62/0x240 [ 1212.027471][T25542] __kmalloc+0x6b2/0x770 [ 1212.027490][T25542] ? mark_held_locks+0xf0/0xf0 [ 1212.033252][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1212.039053][T25542] ? mark_lock+0xc2/0x1220 [ 1212.039071][T25542] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 1212.039089][T25542] tomoyo_realpath_from_path+0xcd/0x7b0 [ 1212.039108][T25542] ? tomoyo_path_number_perm+0x193/0x520 [ 1212.084924][T25542] tomoyo_path_number_perm+0x1dd/0x520 [ 1212.090398][T25542] ? tomoyo_path_number_perm+0x193/0x520 [ 1212.096061][T25542] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1212.101940][T25542] ? __f_unlock_pos+0x19/0x20 [ 1212.106753][T25542] ? __fget+0x37f/0x550 [ 1212.110935][T25542] ? ksys_dup3+0x3e0/0x3e0 [ 1212.115368][T25542] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1212.121619][T25542] ? fput_many+0x12c/0x1a0 [ 1212.126053][T25542] tomoyo_file_ioctl+0x23/0x30 [ 1212.130838][T25542] security_file_ioctl+0x77/0xc0 [ 1212.135806][T25542] ksys_ioctl+0x57/0xd0 13:27:53 executing program 3: syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ppoll(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) [ 1212.139978][T25542] __x64_sys_ioctl+0x73/0xb0 [ 1212.144580][T25542] do_syscall_64+0xfa/0x760 [ 1212.149095][T25542] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1212.154992][T25542] RIP: 0033:0x459a59 [ 1212.158900][T25542] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1212.178505][T25542] RSP: 002b:00007f98c6d90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1212.178519][T25542] RAX: ffffffffffffffda RBX: 00007f98c6d90c90 RCX: 0000000000459a59 [ 1212.178526][T25542] RDX: ffffffffffffffff RSI: 000000000000ab00 RDI: 0000000000000003 [ 1212.178534][T25542] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1212.178541][T25542] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f98c6d916d4 [ 1212.178549][T25542] R13: 00000000004c3412 R14: 00000000004d7160 R15: 0000000000000004 [ 1212.178845][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1212.190395][T25560] FAULT_INJECTION: forcing a failure. [ 1212.190395][T25560] name failslab, interval 1, probability 0, space 0, times 0 [ 1212.195118][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1212.203175][T25560] CPU: 1 PID: 25560 Comm: syz-executor.2 Not tainted 5.4.0-rc3-next-20191018 #0 [ 1212.212735][T25553] FAULT_INJECTION: forcing a failure. [ 1212.212735][T25553] name failslab, interval 1, probability 0, space 0, times 0 [ 1212.219109][T25560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1212.282983][T25560] Call Trace: [ 1212.286273][T25560] dump_stack+0x172/0x1f0 [ 1212.290603][T25560] should_fail.cold+0xa/0x15 [ 1212.295188][T25560] ? fault_create_debugfs_attr+0x180/0x180 [ 1212.300998][T25560] ? find_held_lock+0x35/0x130 [ 1212.305766][T25560] ? __sigqueue_alloc+0x173/0x4d0 [ 1212.310785][T25560] __should_failslab+0x121/0x190 [ 1212.315717][T25560] should_failslab+0x9/0x14 [ 1212.320208][T25560] kmem_cache_alloc+0x47/0x710 [ 1212.324967][T25560] ? __kasan_check_read+0x11/0x20 [ 1212.330072][T25560] __sigqueue_alloc+0x263/0x4d0 [ 1212.334914][T25560] __send_signal+0x863/0x1080 [ 1212.339595][T25560] send_signal+0x4b7/0x7d0 [ 1212.344013][T25560] force_sig_info_to_task+0x278/0x340 [ 1212.349382][T25560] force_sig_fault+0xbe/0x100 [ 1212.354050][T25560] ? force_sig_fault_to_task+0xf0/0xf0 [ 1212.359506][T25560] ? __kasan_check_write+0x14/0x20 [ 1212.364608][T25560] ? trace_hardirqs_on+0x67/0x240 [ 1212.369627][T25560] __bad_area_nosemaphore+0x32e/0x420 [ 1212.374990][T25560] ? vmacache_find+0x65/0x310 [ 1212.379668][T25560] bad_area+0x69/0x80 [ 1212.383644][T25560] __do_page_fault+0xa28/0xdd0 [ 1212.388398][T25560] ? page_fault+0x16/0x40 [ 1212.392724][T25560] do_page_fault+0x38/0x590 [ 1212.397219][T25560] page_fault+0x39/0x40 [ 1212.401362][T25560] RIP: 0033:0x45365f [ 1212.405267][T25560] Code: bc d1 f3 0f 7f 27 f3 0f 7f 6f 10 f3 0f 7f 77 20 f3 0f 7f 7f 30 49 83 c0 0f 49 29 d0 48 8d 7c 17 31 e9 95 0b 00 00 66 0f ef c0 0f 6f 0e f3 0f 6f 56 10 66 0f 74 c1 66 0f d7 d0 49 83 f8 11 0f [ 1212.424887][T25560] RSP: 002b:00007f586549a7a8 EFLAGS: 00010283 [ 1212.430947][T25560] RAX: 00007f586549a850 RBX: 00007f586549ac90 RCX: 0000000000000000 [ 1212.438940][T25560] RDX: 00000000000003ff RSI: 0000000000000000 RDI: 00007f586549a850 [ 1212.446900][T25560] RBP: 000000000075c070 R08: 00000000000003ff R09: 0000000000000000 [ 1212.454868][T25560] R10: 0000000000000064 R11: 0000000000000000 R12: 00007f586549b6d4 [ 1212.462830][T25560] R13: 00000000004c90ae R14: 00000000004e06a0 R15: 0000000000000006 [ 1212.470819][T25553] CPU: 0 PID: 25553 Comm: syz-executor.5 Not tainted 5.4.0-rc3-next-20191018 #0 [ 1212.479874][T25553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1212.489967][T25553] Call Trace: [ 1212.493279][T25553] dump_stack+0x172/0x1f0 [ 1212.497633][T25553] should_fail.cold+0xa/0x15 [ 1212.502246][T25553] ? fault_create_debugfs_attr+0x180/0x180 [ 1212.508059][T25553] ? find_held_lock+0x35/0x130 [ 1212.512838][T25553] ? __sigqueue_alloc+0x173/0x4d0 [ 1212.517883][T25553] __should_failslab+0x121/0x190 [ 1212.522837][T25553] should_failslab+0x9/0x14 [ 1212.527348][T25553] kmem_cache_alloc+0x47/0x710 [ 1212.527368][T25553] ? __kasan_check_read+0x11/0x20 [ 1212.527389][T25553] __sigqueue_alloc+0x263/0x4d0 [ 1212.527407][T25553] __send_signal+0x863/0x1080 [ 1212.527428][T25553] send_signal+0x4b7/0x7d0 [ 1212.551222][T25553] force_sig_info_to_task+0x278/0x340 [ 1212.556619][T25553] force_sig_fault+0xbe/0x100 [ 1212.561311][T25553] ? force_sig_fault_to_task+0xf0/0xf0 [ 1212.566786][T25553] ? __kasan_check_write+0x14/0x20 [ 1212.571910][T25553] ? trace_hardirqs_on+0x67/0x240 [ 1212.576952][T25553] __bad_area_nosemaphore+0x32e/0x420 [ 1212.582342][T25553] ? vmacache_find+0x65/0x310 [ 1212.586417][ T1530] block nbd5: Receive control failed (result -22) [ 1212.587024][T25553] bad_area+0x69/0x80 [ 1212.587044][T25553] __do_page_fault+0xa28/0xdd0 [ 1212.587057][T25553] ? page_fault+0x16/0x40 [ 1212.587081][T25553] do_page_fault+0x38/0x590 [ 1212.587097][T25553] page_fault+0x39/0x40 [ 1212.587115][T25553] RIP: 0033:0x45365f [ 1212.587130][T25553] Code: bc d1 f3 0f 7f 27 f3 0f 7f 6f 10 f3 0f 7f 77 20 f3 0f 7f 7f 30 49 83 c0 0f 49 29 d0 48 8d 7c 17 31 e9 95 0b 00 00 66 0f ef c0 0f 6f 0e f3 0f 6f 56 10 66 0f 74 c1 66 0f d7 d0 49 83 f8 11 0f [ 1212.597623][T25553] RSP: 002b:00007fe6c25de7a8 EFLAGS: 00010283 [ 1212.597636][T25553] RAX: 00007fe6c25de850 RBX: 00007fe6c25dec90 RCX: 0000000000000000 [ 1212.597650][T25553] RDX: 00000000000003ff RSI: 0000000000000000 RDI: 00007fe6c25de850 [ 1212.660887][T25553] RBP: 000000000075c070 R08: 00000000000003ff R09: 0000000000000000 [ 1212.660896][T25553] R10: 0000000000000064 R11: 0000000000000000 R12: 00007fe6c25df6d4 [ 1212.660904][T25553] R13: 00000000004c90ae R14: 00000000004e06a0 R15: 0000000000000006 [ 1212.669182][ C1] protocol 88fb is buggy, dev hsr_slave_0 13:27:54 executing program 4 (fault-call:1 fault-nth:2): r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1212.690978][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1212.694956][ T1530] block nbd2: Receive control failed (result -22) [ 1212.707637][T25547] block nbd2: shutting down sockets 13:27:54 executing program 3: syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0) [ 1212.793641][T25555] ISOFS: Unable to identify CD-ROM format. [ 1212.808666][T25544] block nbd5: shutting down sockets [ 1212.858710][T25673] FAULT_INJECTION: forcing a failure. [ 1212.858710][T25673] name failslab, interval 1, probability 0, space 0, times 0 13:27:54 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 13:27:54 executing program 2 (fault-call:6 fault-nth:1): r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1212.904394][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1212.910216][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:27:54 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, 0x0) [ 1213.013403][T25673] CPU: 1 PID: 25673 Comm: syz-executor.4 Not tainted 5.4.0-rc3-next-20191018 #0 [ 1213.013422][ T1530] block nbd2: Receive control failed (result -22) [ 1213.022458][T25673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1213.022465][T25673] Call Trace: [ 1213.022488][T25673] dump_stack+0x172/0x1f0 [ 1213.022512][T25673] should_fail.cold+0xa/0x15 [ 1213.022534][T25673] ? fault_create_debugfs_attr+0x180/0x180 [ 1213.022551][T25673] ? ___might_sleep+0x163/0x2c0 [ 1213.022573][T25673] __should_failslab+0x121/0x190 [ 1213.041122][T25673] should_failslab+0x9/0x14 [ 1213.041138][T25673] __kmalloc+0x2e0/0x770 [ 1213.041157][T25673] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1213.041175][T25673] ? d_absolute_path+0x11b/0x170 [ 1213.062039][T25673] ? __d_path+0x140/0x140 [ 1213.062060][T25673] ? tomoyo_encode2.part.0+0xf5/0x400 [ 1213.062076][T25673] tomoyo_encode2.part.0+0xf5/0x400 [ 1213.062094][T25673] tomoyo_encode+0x2b/0x50 [ 1213.113544][T25673] tomoyo_realpath_from_path+0x1d3/0x7b0 [ 1213.119485][T25673] tomoyo_path_number_perm+0x1dd/0x520 [ 1213.125417][T25673] ? tomoyo_path_number_perm+0x193/0x520 [ 1213.127476][T25680] FAULT_INJECTION: forcing a failure. [ 1213.127476][T25680] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.131200][T25673] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1213.151607][T25673] ? __f_unlock_pos+0x19/0x20 [ 1213.159243][T25673] ? __fget+0x37f/0x550 [ 1213.163513][T25673] ? ksys_dup3+0x3e0/0x3e0 [ 1213.167950][T25673] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1213.174293][T25673] ? fput_many+0x12c/0x1a0 [ 1213.178830][T25673] tomoyo_file_ioctl+0x23/0x30 [ 1213.183769][T25673] security_file_ioctl+0x77/0xc0 [ 1213.189003][T25673] ksys_ioctl+0x57/0xd0 [ 1213.194029][T25673] __x64_sys_ioctl+0x73/0xb0 [ 1213.200326][T25673] do_syscall_64+0xfa/0x760 [ 1213.205431][T25673] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1213.211494][T25673] RIP: 0033:0x459a59 [ 1213.215481][T25673] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1213.236953][T25673] RSP: 002b:00007f98c6d90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1213.246446][T25673] RAX: ffffffffffffffda RBX: 00007f98c6d90c90 RCX: 0000000000459a59 [ 1213.254884][T25673] RDX: ffffffffffffffff RSI: 000000000000ab00 RDI: 0000000000000003 [ 1213.263460][T25673] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1213.272594][T25673] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f98c6d916d4 [ 1213.280876][T25673] R13: 00000000004c3412 R14: 00000000004d7160 R15: 0000000000000004 [ 1213.289236][T25680] CPU: 0 PID: 25680 Comm: syz-executor.2 Not tainted 5.4.0-rc3-next-20191018 #0 [ 1213.296189][T25673] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1213.298462][T25680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1213.298470][T25680] Call Trace: [ 1213.298490][T25680] dump_stack+0x172/0x1f0 [ 1213.298512][T25680] should_fail.cold+0xa/0x15 [ 1213.316019][T25680] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 1213.323815][T25680] ? fault_create_debugfs_attr+0x180/0x180 [ 1213.343033][T25680] ? ___might_sleep+0x163/0x2c0 [ 1213.349661][T25680] __should_failslab+0x121/0x190 [ 1213.354621][T25680] should_failslab+0x9/0x14 [ 1213.359747][T25680] kmem_cache_alloc+0x2aa/0x710 [ 1213.364791][T25680] ? do_signal+0x4f8/0x1700 [ 1213.370201][T25680] getname_flags+0xd6/0x5b0 [ 1213.374719][T25680] getname+0x1a/0x20 [ 1213.379080][T25680] do_sys_open+0x2c9/0x5d0 [ 1213.383789][T25680] ? filp_open+0x80/0x80 [ 1213.388748][T25680] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1213.395857][T25680] ? do_syscall_64+0x26/0x760 [ 1213.400929][T25680] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1213.407060][T25680] ? do_syscall_64+0x26/0x760 [ 1213.411746][T25680] __x64_sys_open+0x7e/0xc0 [ 1213.416412][T25680] do_syscall_64+0xfa/0x760 [ 1213.420924][T25680] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1213.426822][T25680] RIP: 0033:0x413941 [ 1213.430858][T25680] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1213.451017][T25680] RSP: 002b:00007f58654dc7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1213.473487][T25680] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413941 [ 1213.481555][T25680] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f58654dc850 [ 1213.489685][T25680] RBP: 000000000075bf20 R08: 00007f58654dc7b0 R09: 000000000075bf20 [ 1213.498548][T25680] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f58654dd6d4 [ 1213.506535][T25680] R13: 00000000004c90ae R14: 00000000004e06a0 R15: 0000000000000006 [ 1213.523823][T25679] block nbd2: shutting down sockets 13:27:55 executing program 5 (fault-call:6 fault-nth:1): r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:27:55 executing program 4 (fault-call:1 fault-nth:3): r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 13:27:55 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x2, 0x0) 13:27:55 executing program 2 (fault-call:6 fault-nth:2): r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:27:55 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, 0x0) 13:27:55 executing program 3: syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0) [ 1213.737957][ T1530] block nbd5: Receive control failed (result -22) [ 1213.759056][T25695] FAULT_INJECTION: forcing a failure. [ 1213.759056][T25695] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.794519][T25695] CPU: 1 PID: 25695 Comm: syz-executor.5 Not tainted 5.4.0-rc3-next-20191018 #0 [ 1213.803856][T25695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1213.814215][T25695] Call Trace: [ 1213.817646][T25695] dump_stack+0x172/0x1f0 [ 1213.822266][T25695] should_fail.cold+0xa/0x15 [ 1213.826955][T25695] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 1213.833193][T25695] ? fault_create_debugfs_attr+0x180/0x180 [ 1213.839235][T25695] ? ___might_sleep+0x163/0x2c0 [ 1213.844173][T25695] __should_failslab+0x121/0x190 [ 1213.849187][T25695] should_failslab+0x9/0x14 [ 1213.853849][T25695] kmem_cache_alloc+0x2aa/0x710 [ 1213.858999][T25695] ? do_signal+0x4f8/0x1700 [ 1213.863511][T25695] getname_flags+0xd6/0x5b0 [ 1213.868637][T25695] getname+0x1a/0x20 [ 1213.872866][T25695] do_sys_open+0x2c9/0x5d0 [ 1213.877410][T25695] ? filp_open+0x80/0x80 [ 1213.881816][T25695] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1213.887433][T25695] ? do_syscall_64+0x26/0x760 [ 1213.892464][T25695] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1213.898890][T25695] ? do_syscall_64+0x26/0x760 [ 1213.903830][T25695] __x64_sys_open+0x7e/0xc0 [ 1213.909047][T25695] do_syscall_64+0xfa/0x760 [ 1213.914941][T25695] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1213.921808][T25695] RIP: 0033:0x413941 [ 1213.925878][T25695] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1213.947066][T25695] RSP: 002b:00007fe6c26207a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1213.955995][T25695] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413941 [ 1213.964670][T25695] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fe6c2620850 [ 1213.973351][T25695] RBP: 000000000075bf20 R08: 00007fe6c26207b0 R09: 000000000075bf20 [ 1213.982176][T25695] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fe6c26216d4 [ 1213.990945][T25695] R13: 00000000004c90ae R14: 00000000004e06a0 R15: 0000000000000006 [ 1214.000929][T25707] FAULT_INJECTION: forcing a failure. [ 1214.000929][T25707] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1214.014208][T25707] CPU: 0 PID: 25707 Comm: syz-executor.2 Not tainted 5.4.0-rc3-next-20191018 #0 [ 1214.023343][T25707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1214.033580][T25707] Call Trace: [ 1214.036891][T25707] dump_stack+0x172/0x1f0 [ 1214.041365][T25707] should_fail.cold+0xa/0x15 [ 1214.046463][T25707] ? fault_create_debugfs_attr+0x180/0x180 [ 1214.052806][T25707] ? __kasan_check_read+0x11/0x20 [ 1214.058316][T25707] ? __lock_acquire+0x16f2/0x4a00 [ 1214.063798][T25707] should_fail_alloc_page+0x50/0x60 [ 1214.069274][T25707] __alloc_pages_nodemask+0x1a1/0x910 [ 1214.074928][T25707] ? fs_reclaim_release+0xf/0x30 [ 1214.080131][T25707] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1214.085863][T25707] ? fs_reclaim_release+0xf/0x30 [ 1214.085887][T25707] ? fault_create_debugfs_attr+0x180/0x180 [ 1214.085904][T25707] cache_grow_begin+0x90/0xd00 [ 1214.085920][T25707] ? trace_hardirqs_off+0x62/0x240 [ 1214.085938][T25707] kmem_cache_alloc+0x64e/0x710 [ 1214.112806][T25707] getname_flags+0xd6/0x5b0 [ 1214.112827][T25707] getname+0x1a/0x20 [ 1214.121370][T25707] do_sys_open+0x2c9/0x5d0 [ 1214.124247][T25694] block nbd5: shutting down sockets [ 1214.125899][T25707] ? filp_open+0x80/0x80 [ 1214.125920][T25707] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1214.125936][T25707] ? do_syscall_64+0x26/0x760 [ 1214.125954][T25707] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1214.125966][T25707] ? do_syscall_64+0x26/0x760 [ 1214.125982][T25707] __x64_sys_open+0x7e/0xc0 [ 1214.144816][ T1530] block nbd2: Receive control failed (result -22) [ 1214.145987][T25707] do_syscall_64+0xfa/0x760 [ 1214.146011][T25707] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1214.162506][T25707] RIP: 0033:0x413941 13:27:56 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x10, 0x0) 13:27:56 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1214.162524][T25707] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1214.162533][T25707] RSP: 002b:00007f58654bb7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1214.162548][T25707] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413941 [ 1214.162557][T25707] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f58654bb850 [ 1214.162564][T25707] RBP: 000000000075bfc8 R08: 00007f58654bb7b0 R09: 000000000075bfc8 [ 1214.162577][T25707] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f58654bc6d4 [ 1214.179550][T25707] R13: 00000000004c90ae R14: 00000000004e06a0 R15: 0000000000000006 [ 1214.191232][T25700] block nbd2: shutting down sockets [ 1214.249806][T25716] binder: 25715:25716 ioctl 10 0 returned -22 13:27:56 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x4c00, 0x0) 13:27:56 executing program 5 (fault-call:6 fault-nth:2): r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:27:56 executing program 2 (fault-call:6 fault-nth:3): r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:27:56 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x2, 0xffffffffffffffff) 13:27:56 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, 0x0) [ 1214.479955][T25732] binder: 25726:25732 ioctl 4c00 0 returned -22 [ 1214.488662][ T1530] block nbd2: Receive control failed (result -22) [ 1214.514018][ T1530] block nbd5: Receive control failed (result -22) [ 1214.524247][T25723] block nbd2: shutting down sockets [ 1214.525383][T25730] FAULT_INJECTION: forcing a failure. [ 1214.525383][T25730] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1214.542786][T25730] CPU: 0 PID: 25730 Comm: syz-executor.5 Not tainted 5.4.0-rc3-next-20191018 #0 [ 1214.553764][T25730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1214.565468][T25730] Call Trace: [ 1214.568762][T25730] dump_stack+0x172/0x1f0 [ 1214.573203][T25730] should_fail.cold+0xa/0x15 [ 1214.577818][T25730] ? fault_create_debugfs_attr+0x180/0x180 [ 1214.583651][T25730] ? __kasan_check_read+0x11/0x20 [ 1214.588966][T25730] ? __lock_acquire+0x16f2/0x4a00 [ 1214.594011][T25730] should_fail_alloc_page+0x50/0x60 [ 1214.599224][T25730] __alloc_pages_nodemask+0x1a1/0x910 [ 1214.604787][T25730] ? fs_reclaim_release+0xf/0x30 [ 1214.609746][T25730] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1214.615703][T25730] ? fs_reclaim_release+0xf/0x30 [ 1214.621097][T25730] ? fault_create_debugfs_attr+0x180/0x180 [ 1214.627316][T25730] cache_grow_begin+0x90/0xd00 [ 1214.632090][T25730] ? trace_hardirqs_off+0x62/0x240 [ 1214.637499][T25730] kmem_cache_alloc+0x64e/0x710 [ 1214.643881][T25730] getname_flags+0xd6/0x5b0 [ 1214.648523][T25730] getname+0x1a/0x20 [ 1214.652769][T25730] do_sys_open+0x2c9/0x5d0 [ 1214.657197][T25730] ? filp_open+0x80/0x80 [ 1214.661550][T25730] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1214.667140][T25730] ? do_syscall_64+0x26/0x760 [ 1214.671927][T25730] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1214.678308][T25730] ? do_syscall_64+0x26/0x760 [ 1214.683170][T25730] __x64_sys_open+0x7e/0xc0 [ 1214.687946][T25730] do_syscall_64+0xfa/0x760 [ 1214.692919][T25730] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1214.699292][T25730] RIP: 0033:0x413941 [ 1214.703345][T25730] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 13:27:56 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x10, 0xffffffffffffffff) 13:27:56 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x4c01, 0x0) [ 1214.725105][T25730] RSP: 002b:00007fe6c26207a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1214.733831][T25730] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413941 [ 1214.741988][T25730] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fe6c2620850 [ 1214.750711][T25730] RBP: 000000000075bf20 R08: 00007fe6c26207b0 R09: 000000000075bf20 [ 1214.750720][T25730] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fe6c26216d4 [ 1214.750729][T25730] R13: 00000000004c90ae R14: 00000000004e06a0 R15: 0000000000000006 13:27:56 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1214.801359][T25728] block nbd5: shutting down sockets 13:27:56 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) 13:27:56 executing program 3: syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0) 13:27:56 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:27:56 executing program 5 (fault-call:6 fault-nth:3): r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1214.967728][T25751] binder: 25748:25751 ioctl 4c01 0 returned -22 [ 1215.049377][ T1530] block nbd2: Receive control failed (result -22) [ 1215.083836][T25745] block nbd2: shutting down sockets 13:27:56 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) 13:27:57 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x4c04, 0x0) 13:27:57 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x2, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1215.288131][T25774] binder: 25771:25774 ioctl 4c04 0 returned -22 [ 1215.298348][ T1530] block nbd5: Receive control failed (result -22) [ 1215.319190][T25770] FAULT_INJECTION: forcing a failure. [ 1215.319190][T25770] name failslab, interval 1, probability 0, space 0, times 0 13:27:57 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) [ 1215.391019][ T1530] block nbd2: Receive control failed (result -22) [ 1215.400643][T25777] block nbd2: shutting down sockets [ 1215.413078][T25770] CPU: 0 PID: 25770 Comm: syz-executor.5 Not tainted 5.4.0-rc3-next-20191018 #0 [ 1215.422132][T25770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1215.432458][T25770] Call Trace: [ 1215.435768][T25770] dump_stack+0x172/0x1f0 [ 1215.440122][T25770] should_fail.cold+0xa/0x15 [ 1215.444724][T25770] ? is_bpf_text_address+0xce/0x160 [ 1215.450988][T25770] ? fault_create_debugfs_attr+0x180/0x180 [ 1215.456814][T25770] ? ___might_sleep+0x163/0x2c0 [ 1215.461687][T25770] __should_failslab+0x121/0x190 [ 1215.466815][T25770] should_failslab+0x9/0x14 [ 1215.474129][T25770] kmem_cache_alloc+0x2aa/0x710 [ 1215.479519][T25770] ? stack_trace_save+0xac/0xe0 13:27:57 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125f, 0xffffffffffffffff) 13:27:57 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x4c05, 0x0) [ 1215.486558][T25770] ? stack_trace_consume_entry+0x190/0x190 [ 1215.492561][T25770] __alloc_file+0x27/0x340 [ 1215.497026][T25770] alloc_empty_file+0x72/0x170 [ 1215.502092][T25770] path_openat+0xef/0x4710 [ 1215.506891][T25770] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1215.513147][T25770] ? kasan_slab_alloc+0xf/0x20 [ 1215.518020][T25770] ? kmem_cache_alloc+0x121/0x710 [ 1215.523422][T25770] ? getname_flags+0xd6/0x5b0 [ 1215.528668][T25770] ? getname+0x1a/0x20 [ 1215.534104][T25770] ? do_sys_open+0x2c9/0x5d0 [ 1215.539584][T25770] ? __x64_sys_open+0x7e/0xc0 [ 1215.539605][T25770] ? __kasan_check_read+0x11/0x20 [ 1215.539621][T25770] ? mark_lock+0xc2/0x1220 [ 1215.539642][T25770] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1215.560074][T25770] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 1215.565733][T25770] ? __alloc_fd+0x487/0x620 [ 1215.570626][T25770] do_filp_open+0x1a1/0x280 [ 1215.578057][T25770] ? may_open_dev+0x100/0x100 [ 1215.578075][T25770] ? lock_downgrade+0x920/0x920 [ 1215.578088][T25770] ? rwlock_bug.part.0+0x90/0x90 [ 1215.578108][T25770] ? __kasan_check_read+0x11/0x20 [ 1215.578122][T25770] ? do_raw_spin_unlock+0x57/0x270 [ 1215.578140][T25770] ? _raw_spin_unlock+0x28/0x40 [ 1215.578153][T25770] ? __alloc_fd+0x487/0x620 [ 1215.578177][T25770] do_sys_open+0x3fe/0x5d0 [ 1215.578197][T25770] ? filp_open+0x80/0x80 [ 1215.599805][T25787] binder: 25784:25787 ioctl 4c05 0 returned -22 [ 1215.604390][T25770] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1215.604406][T25770] ? do_syscall_64+0x26/0x760 13:27:57 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x5421, 0x0) [ 1215.604424][T25770] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1215.604436][T25770] ? do_syscall_64+0x26/0x760 [ 1215.604454][T25770] __x64_sys_open+0x7e/0xc0 [ 1215.604469][T25770] do_syscall_64+0xfa/0x760 [ 1215.604487][T25770] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1215.604497][T25770] RIP: 0033:0x413941 [ 1215.604512][T25770] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 13:27:57 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)) [ 1215.604525][T25770] RSP: 002b:00007fe6c26207a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1215.696542][T25770] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413941 [ 1215.704527][T25770] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fe6c2620850 [ 1215.712511][T25770] RBP: 000000000075bf20 R08: 00007fe6c26207b0 R09: 000000000075bf20 [ 1215.720490][T25770] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fe6c26216d4 [ 1215.728468][T25770] R13: 00000000004c90ae R14: 00000000004e06a0 R15: 0000000000000006 13:27:57 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1260, 0xffffffffffffffff) [ 1215.766251][ T1530] block nbd2: Receive control failed (result -22) [ 1215.770939][T25765] block nbd5: shutting down sockets [ 1215.805486][T25777] block nbd2: shutting down sockets 13:27:57 executing program 5 (fault-call:6 fault-nth:4): r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:27:57 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x5450, 0x0) 13:27:57 executing program 3 (fault-call:4 fault-nth:0): r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 13:27:57 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x3, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:27:57 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)) 13:27:57 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1261, 0xffffffffffffffff) 13:27:57 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x5451, 0x0) [ 1216.125374][ T1530] block nbd5: Receive control failed (result -22) [ 1216.140074][T25810] FAULT_INJECTION: forcing a failure. [ 1216.140074][T25810] name failslab, interval 1, probability 0, space 0, times 0 [ 1216.167420][ T1530] block nbd2: Receive control failed (result -22) [ 1216.202952][T25814] block nbd2: shutting down sockets [ 1216.256209][T25810] CPU: 1 PID: 25810 Comm: syz-executor.5 Not tainted 5.4.0-rc3-next-20191018 #0 [ 1216.265285][T25810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1216.275362][T25810] Call Trace: [ 1216.278676][T25810] dump_stack+0x172/0x1f0 [ 1216.283031][T25810] should_fail.cold+0xa/0x15 [ 1216.287647][T25810] ? fault_create_debugfs_attr+0x180/0x180 [ 1216.293470][T25810] ? ___might_sleep+0x163/0x2c0 [ 1216.298343][T25810] __should_failslab+0x121/0x190 13:27:58 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x5452, 0x0) 13:27:58 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1262, 0xffffffffffffffff) [ 1216.303302][T25810] should_failslab+0x9/0x14 [ 1216.307836][T25810] kmem_cache_alloc+0x2aa/0x710 [ 1216.312700][T25810] ? kmem_cache_alloc+0x364/0x710 [ 1216.317742][T25810] security_file_alloc+0x39/0x170 [ 1216.322772][T25810] __alloc_file+0xde/0x340 [ 1216.327223][T25810] alloc_empty_file+0x72/0x170 [ 1216.331976][T25810] path_openat+0xef/0x4710 [ 1216.336378][T25810] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1216.342164][T25810] ? kasan_slab_alloc+0xf/0x20 [ 1216.346908][T25810] ? kmem_cache_alloc+0x121/0x710 [ 1216.351914][T25810] ? getname_flags+0xd6/0x5b0 [ 1216.356572][T25810] ? getname+0x1a/0x20 [ 1216.360620][T25810] ? do_sys_open+0x2c9/0x5d0 [ 1216.365190][T25810] ? __x64_sys_open+0x7e/0xc0 [ 1216.369864][T25810] ? __kasan_check_read+0x11/0x20 [ 1216.375133][T25810] ? mark_lock+0xc2/0x1220 [ 1216.379533][T25810] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1216.385070][T25810] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 1216.390429][T25810] ? __alloc_fd+0x487/0x620 [ 1216.394920][T25810] do_filp_open+0x1a1/0x280 [ 1216.399421][T25810] ? may_open_dev+0x100/0x100 [ 1216.404086][T25810] ? lock_downgrade+0x920/0x920 [ 1216.408921][T25810] ? rwlock_bug.part.0+0x90/0x90 [ 1216.413871][T25810] ? __kasan_check_read+0x11/0x20 [ 1216.418887][T25810] ? do_raw_spin_unlock+0x57/0x270 [ 1216.423995][T25810] ? _raw_spin_unlock+0x28/0x40 [ 1216.428845][T25810] ? __alloc_fd+0x487/0x620 [ 1216.433341][T25810] do_sys_open+0x3fe/0x5d0 [ 1216.437744][T25810] ? filp_open+0x80/0x80 [ 1216.441973][T25810] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1216.447422][T25810] ? do_syscall_64+0x26/0x760 [ 1216.452082][T25810] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1216.458129][T25810] ? do_syscall_64+0x26/0x760 [ 1216.462800][T25810] __x64_sys_open+0x7e/0xc0 [ 1216.467289][T25810] do_syscall_64+0xfa/0x760 [ 1216.471778][T25810] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1216.477651][T25810] RIP: 0033:0x413941 [ 1216.481619][T25810] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1216.501205][T25810] RSP: 002b:00007fe6c26207a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1216.509599][T25810] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413941 [ 1216.517553][T25810] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fe6c2620850 [ 1216.525512][T25810] RBP: 000000000075bf20 R08: 00007fe6c26207b0 R09: 000000000075bf20 [ 1216.533467][T25810] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fe6c26216d4 [ 1216.541420][T25810] R13: 00000000004c90ae R14: 00000000004e06a0 R15: 0000000000000006 [ 1216.566358][T25809] block nbd5: shutting down sockets [ 1216.614040][T25816] block nbd2: Could not allocate knbd recv work queue. [ 1216.632291][T25816] block nbd2: shutting down sockets 13:27:58 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x5460, 0x0) 13:27:58 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)) 13:27:58 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1263, 0xffffffffffffffff) 13:27:58 executing program 5 (fault-call:6 fault-nth:5): r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:27:58 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x4, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1216.824387][ C1] net_ratelimit: 20 callbacks suppressed [ 1216.824396][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1216.835889][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1216.842019][T25813] FAULT_INJECTION: forcing a failure. [ 1216.842019][T25813] name failslab, interval 1, probability 0, space 0, times 0 [ 1216.884641][T25813] CPU: 1 PID: 25813 Comm: syz-executor.3 Not tainted 5.4.0-rc3-next-20191018 #0 [ 1216.893704][T25813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1216.903762][T25813] Call Trace: [ 1216.907064][T25813] dump_stack+0x172/0x1f0 [ 1216.911411][T25813] should_fail.cold+0xa/0x15 [ 1216.916021][T25813] ? fault_create_debugfs_attr+0x180/0x180 [ 1216.921842][T25813] ? ___might_sleep+0x163/0x2c0 [ 1216.926714][T25813] __should_failslab+0x121/0x190 [ 1216.931680][T25813] should_failslab+0x9/0x14 [ 1216.936194][T25813] kmem_cache_alloc+0x2aa/0x710 [ 1216.941076][T25813] ? lock_downgrade+0x920/0x920 [ 1216.945938][T25813] taskstats_exit+0x6ba/0xcd0 [ 1216.950628][T25813] ? taskstats_user_cmd+0xcd0/0xcd0 [ 1216.955837][T25813] ? _raw_spin_unlock_irq+0x59/0x80 [ 1216.961041][T25813] ? acct_collect+0x68b/0x850 [ 1216.965826][T25813] do_exit+0x3e1/0x2e60 [ 1216.970007][T25813] ? find_held_lock+0x35/0x130 [ 1216.970025][T25813] ? get_signal+0x392/0x24f0 [ 1216.970042][T25813] ? mm_update_next_owner+0x640/0x640 [ 1216.979370][T25813] ? lock_downgrade+0x920/0x920 [ 1216.979388][T25813] ? _raw_spin_unlock_irq+0x23/0x80 [ 1216.979398][T25813] ? get_signal+0x392/0x24f0 [ 1216.979415][T25813] ? _raw_spin_unlock_irq+0x23/0x80 [ 1217.004654][T25813] do_group_exit+0x135/0x360 [ 1217.009263][T25813] get_signal+0x47c/0x24f0 [ 1217.013686][T25813] ? vfs_write+0x34c/0x5d0 [ 1217.018125][T25813] do_signal+0x87/0x1700 [ 1217.022383][T25813] ? poll_schedule_timeout.constprop.0+0x200/0x200 [ 1217.028896][T25813] ? wait_for_completion+0x440/0x440 [ 1217.034190][T25813] ? set_user_sigmask+0x166/0x1e0 [ 1217.039223][T25813] ? sigprocmask+0x2b0/0x2b0 [ 1217.043828][T25813] ? setup_sigcontext+0x7d0/0x7d0 [ 1217.048968][T25813] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1217.054442][ T1530] block nbd5: Receive control failed (result -22) [ 1217.055222][T25813] ? fput_many+0x12c/0x1a0 [ 1217.055242][T25813] ? __x64_sys_ppoll+0x1f8/0x310 [ 1217.055257][T25813] ? exit_to_usermode_loop+0x43/0x380 [ 1217.055275][T25813] ? do_syscall_64+0x65f/0x760 [ 1217.063234][ T1530] block nbd2: Receive control failed (result -22) [ 1217.066325][T25813] ? exit_to_usermode_loop+0x43/0x380 [ 1217.066348][T25813] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1217.066363][T25813] ? trace_hardirqs_on+0x67/0x240 [ 1217.066380][T25813] exit_to_usermode_loop+0x286/0x380 [ 1217.066397][T25813] do_syscall_64+0x65f/0x760 [ 1217.066417][T25813] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1217.066432][T25813] RIP: 0033:0x459a59 [ 1217.066446][T25813] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1217.078218][T25813] RSP: 002b:00007f60c8e4ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1217.078232][T25813] RAX: 0000000000000001 RBX: 00007f60c8e4ec90 RCX: 0000000000459a59 [ 1217.078240][T25813] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000200001c0 [ 1217.078248][T25813] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1217.078256][T25813] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f60c8e4f6d4 13:27:59 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 13:27:59 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1264, 0xffffffffffffffff) 13:27:59 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x6364, 0x0) [ 1217.078263][T25813] R13: 00000000004c6b99 R14: 00000000004dc308 R15: 0000000000000007 [ 1217.089701][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1217.115074][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1217.144446][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1217.152987][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1217.175718][T25855] block nbd2: shutting down sockets 13:27:59 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1265, 0xffffffffffffffff) [ 1217.272653][T25856] block nbd5: shutting down sockets [ 1217.292689][T25871] binder: 25867:25871 ioctl 6364 0 returned -22 13:27:59 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x8912, 0x0) 13:27:59 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:27:59 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x5, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1217.481108][T25883] binder: 25877:25883 ioctl 8912 0 returned -22 13:27:59 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1267, 0xffffffffffffffff) 13:27:59 executing program 0 (fault-call:0 fault-nth:0): syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1217.591953][ T1530] block nbd5: Receive control failed (result -22) [ 1217.624501][ T1530] block nbd2: Receive control failed (result -22) [ 1217.639537][T25888] block nbd2: shutting down sockets [ 1217.650995][T25884] block nbd5: shutting down sockets [ 1217.682272][T25895] FAULT_INJECTION: forcing a failure. 13:27:59 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x8933, 0x0) [ 1217.682272][T25895] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.704505][T25895] CPU: 0 PID: 25895 Comm: syz-executor.0 Not tainted 5.4.0-rc3-next-20191018 #0 [ 1217.713570][T25895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1217.723628][T25895] Call Trace: [ 1217.723654][T25895] dump_stack+0x172/0x1f0 [ 1217.723678][T25895] should_fail.cold+0xa/0x15 [ 1217.723697][T25895] ? fault_create_debugfs_attr+0x180/0x180 [ 1217.723716][T25895] ? ___might_sleep+0x163/0x2c0 [ 1217.723738][T25895] __should_failslab+0x121/0x190 [ 1217.723757][T25895] should_failslab+0x9/0x14 [ 1217.723769][T25895] __kmalloc+0x2e0/0x770 [ 1217.723785][T25895] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1217.723799][T25895] ? fput_many+0x12c/0x1a0 [ 1217.723814][T25895] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1217.723826][T25895] ? strnlen_user+0x1ed/0x2e0 [ 1217.723841][T25895] ? __x64_sys_memfd_create+0x13c/0x470 [ 1217.723859][T25895] __x64_sys_memfd_create+0x13c/0x470 [ 1217.723875][T25895] ? memfd_fcntl+0x18c0/0x18c0 [ 1217.723889][T25895] ? do_syscall_64+0x26/0x760 [ 1217.723904][T25895] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1217.723919][T25895] ? trace_hardirqs_on+0x67/0x240 [ 1217.723934][T25895] do_syscall_64+0xfa/0x760 [ 1217.723956][T25895] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1217.815163][T25902] binder: 25898:25902 ioctl 8933 0 returned -22 [ 1217.817047][T25895] RIP: 0033:0x459a59 [ 1217.817063][T25895] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1217.817072][T25895] RSP: 002b:00007f1508709a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1217.817086][T25895] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000459a59 [ 1217.817095][T25895] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004be9b7 [ 1217.817104][T25895] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 13:27:59 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1268, 0xffffffffffffffff) 13:27:59 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x2, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1217.817113][T25895] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f150870a6d4 [ 1217.817122][T25895] R13: 00000000004c8ea1 R14: 00000000004e0448 R15: 0000000000000003 [ 1217.903264][ T1530] block nbd2: Receive control failed (result -22) [ 1217.910621][T25896] block nbd2: shutting down sockets [ 1217.910735][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1217.921686][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1218.046980][ T1530] block nbd5: Receive control failed (result -22) [ 1218.071878][T25907] block nbd5: shutting down sockets 13:27:59 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 13:27:59 executing program 0 (fault-call:0 fault-nth:1): syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:27:59 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x400454ca, 0x0) 13:27:59 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x6, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:00 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1269, 0xffffffffffffffff) [ 1218.167771][T25907] block nbd5: shutting down sockets [ 1218.197351][T25920] FAULT_INJECTION: forcing a failure. [ 1218.197351][T25920] name failslab, interval 1, probability 0, space 0, times 0 [ 1218.218170][T25921] binder: 25917:25921 ioctl 400454ca 0 returned -22 [ 1218.245868][T25920] CPU: 0 PID: 25920 Comm: syz-executor.0 Not tainted 5.4.0-rc3-next-20191018 #0 [ 1218.254936][T25920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1218.264427][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1218.264997][T25920] Call Trace: [ 1218.270773][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1218.274000][T25920] dump_stack+0x172/0x1f0 [ 1218.282445][ T1530] block nbd2: Receive control failed (result -22) [ 1218.284010][T25920] should_fail.cold+0xa/0x15 [ 1218.284034][T25920] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1218.295168][T25920] ? fault_create_debugfs_attr+0x180/0x180 [ 1218.295187][T25920] ? ___might_sleep+0x163/0x2c0 [ 1218.295208][T25920] __should_failslab+0x121/0x190 [ 1218.295224][T25920] ? shmem_destroy_inode+0x80/0x80 [ 1218.295252][T25920] should_failslab+0x9/0x14 [ 1218.311941][T25920] kmem_cache_alloc+0x2aa/0x710 [ 1218.311957][T25920] ? __alloc_fd+0x487/0x620 [ 1218.311975][T25920] ? shmem_destroy_inode+0x80/0x80 [ 1218.311992][T25920] shmem_alloc_inode+0x1c/0x50 [ 1218.330526][T25919] block nbd2: shutting down sockets [ 1218.331435][T25920] alloc_inode+0x68/0x1e0 [ 1218.331454][T25920] new_inode_pseudo+0x19/0xf0 [ 1218.331471][T25920] new_inode+0x1f/0x40 [ 1218.364230][T25920] shmem_get_inode+0x84/0x7e0 [ 1218.368935][T25920] __shmem_file_setup.part.0+0x7e/0x2b0 [ 1218.374507][T25920] shmem_file_setup+0x66/0x90 [ 1218.379204][T25920] __x64_sys_memfd_create+0x2a2/0x470 [ 1218.384609][T25920] ? memfd_fcntl+0x18c0/0x18c0 [ 1218.389384][T25920] ? do_syscall_64+0x26/0x760 [ 1218.394076][T25920] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1218.399379][T25920] ? trace_hardirqs_on+0x67/0x240 [ 1218.404418][T25920] do_syscall_64+0xfa/0x760 [ 1218.409043][T25920] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1218.414934][T25920] RIP: 0033:0x459a59 [ 1218.418825][T25920] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1218.438436][T25920] RSP: 002b:00007f1508709a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 13:28:00 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x3, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:00 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046205, 0x0) [ 1218.446864][T25920] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000459a59 [ 1218.454847][T25920] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004be9b7 [ 1218.462821][T25920] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 1218.462837][T25920] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f150870a6d4 [ 1218.478763][T25920] R13: 00000000004c8ea1 R14: 00000000004e0448 R15: 0000000000000003 [ 1218.508612][T25919] block nbd2: shutting down sockets 13:28:00 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1274, 0xffffffffffffffff) [ 1218.534364][T25935] binder: 25934:25935 ioctl 40046205 0 returned -22 [ 1218.558499][ T1530] block nbd5: Receive control failed (result -22) [ 1218.568958][T25933] block nbd5: shutting down sockets 13:28:00 executing program 0 (fault-call:0 fault-nth:2): syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:00 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046207, 0x0) 13:28:00 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x7, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1218.655628][ T1530] block nbd5: Receive control failed (result -22) [ 1218.672235][T25933] block nbd5: shutting down sockets 13:28:00 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1276, 0xffffffffffffffff) [ 1218.809949][ T1530] block nbd2: Receive control failed (result -22) [ 1218.819909][T25956] FAULT_INJECTION: forcing a failure. [ 1218.819909][T25956] name failslab, interval 1, probability 0, space 0, times 0 [ 1218.834377][T25951] block nbd2: shutting down sockets [ 1218.853825][T25956] CPU: 1 PID: 25956 Comm: syz-executor.0 Not tainted 5.4.0-rc3-next-20191018 #0 [ 1218.862900][T25956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1218.872965][T25956] Call Trace: [ 1218.876276][T25956] dump_stack+0x172/0x1f0 [ 1218.880634][T25956] should_fail.cold+0xa/0x15 [ 1218.885246][T25956] ? fault_create_debugfs_attr+0x180/0x180 [ 1218.891077][T25956] ? ___might_sleep+0x163/0x2c0 [ 1218.895953][T25956] __should_failslab+0x121/0x190 [ 1218.900950][T25956] should_failslab+0x9/0x14 [ 1218.905472][T25956] kmem_cache_alloc+0x2aa/0x710 [ 1218.910635][T25956] ? current_time+0x6b/0x110 [ 1218.915245][T25956] ? ktime_get_coarse_real_ts64+0xeb/0x2a0 [ 1218.921059][T25956] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1218.927322][T25956] ? timestamp_truncate+0x20f/0x2f0 [ 1218.932554][T25956] __d_alloc+0x2e/0x8c0 [ 1218.936738][T25956] d_alloc_pseudo+0x1e/0x70 [ 1218.941261][T25956] alloc_file_pseudo+0xe2/0x280 [ 1218.946131][T25956] ? alloc_file+0x4d0/0x4d0 [ 1218.950655][T25956] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 1218.956920][T25956] __shmem_file_setup.part.0+0x108/0x2b0 [ 1218.962623][T25956] shmem_file_setup+0x66/0x90 [ 1218.967322][T25956] __x64_sys_memfd_create+0x2a2/0x470 [ 1218.973048][T25956] ? memfd_fcntl+0x18c0/0x18c0 [ 1218.977832][T25956] ? do_syscall_64+0x26/0x760 [ 1218.982492][T25956] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1218.987771][T25956] ? trace_hardirqs_on+0x67/0x240 [ 1218.992794][T25956] do_syscall_64+0xfa/0x760 [ 1218.997362][T25956] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1219.003254][T25956] RIP: 0033:0x459a59 [ 1219.007141][T25956] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1219.029174][T25956] RSP: 002b:00007f1508709a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1219.037592][T25956] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000459a59 [ 1219.045557][T25956] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004be9b7 [ 1219.053521][T25956] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 13:28:00 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0, 0x8}], 0x1, 0x0, 0x0, 0x0) 13:28:00 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x4, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:00 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1277, 0xffffffffffffffff) 13:28:00 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x4004620c, 0x0) [ 1219.061495][T25956] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f150870a6d4 [ 1219.069465][T25956] R13: 00000000004c8ea1 R14: 00000000004e0448 R15: 0000000000000003 [ 1219.134706][ T1530] block nbd2: Receive control failed (result -22) [ 1219.142980][T25951] block nbd2: shutting down sockets 13:28:01 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1278, 0xffffffffffffffff) [ 1219.188467][T25972] binder: 25968:25972 ioctl 4004620c 0 returned -22 [ 1219.195588][ T1530] block nbd5: Receive control failed (result -22) 13:28:01 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046210, 0x0) [ 1219.231155][T25963] block nbd5: shutting down sockets 13:28:01 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x8, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1219.275784][T25978] binder: 25976:25978 ioctl 40046210 0 returned -22 13:28:01 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40049409, 0x0) 13:28:01 executing program 0 (fault-call:0 fault-nth:3): syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:01 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1279, 0xffffffffffffffff) [ 1219.419670][ T1530] block nbd2: Receive control failed (result -22) [ 1219.429438][T25983] block nbd2: shutting down sockets 13:28:01 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x5, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:01 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x4018620d, 0x0) [ 1219.542458][ T1530] block nbd2: Receive control failed (result -22) [ 1219.551470][T25983] block nbd2: shutting down sockets [ 1219.649806][ T1530] block nbd5: Receive control failed (result -22) [ 1219.663269][T26000] block nbd5: shutting down sockets [ 1219.698877][T26007] binder: 26005:26007 ioctl 4018620d 0 returned -22 [ 1219.775205][T26003] FAULT_INJECTION: forcing a failure. [ 1219.775205][T26003] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.788501][T26003] CPU: 1 PID: 26003 Comm: syz-executor.0 Not tainted 5.4.0-rc3-next-20191018 #0 [ 1219.797533][T26003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1219.797541][T26003] Call Trace: [ 1219.797566][T26003] dump_stack+0x172/0x1f0 [ 1219.797592][T26003] should_fail.cold+0xa/0x15 [ 1219.797613][T26003] ? fault_create_debugfs_attr+0x180/0x180 [ 1219.797634][T26003] ? ___might_sleep+0x163/0x2c0 [ 1219.797652][T26003] __should_failslab+0x121/0x190 [ 1219.797668][T26003] should_failslab+0x9/0x14 [ 1219.797680][T26003] kmem_cache_alloc+0x2aa/0x710 [ 1219.797693][T26003] ? rwlock_bug.part.0+0x90/0x90 [ 1219.797710][T26003] ? lock_downgrade+0x920/0x920 [ 1219.797728][T26003] __alloc_file+0x27/0x340 [ 1219.797744][T26003] alloc_empty_file+0x72/0x170 [ 1219.797761][T26003] alloc_file+0x5e/0x4d0 [ 1219.797777][T26003] alloc_file_pseudo+0x189/0x280 [ 1219.797796][T26003] ? alloc_file+0x4d0/0x4d0 [ 1219.825842][T26003] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 1219.825871][T26003] __shmem_file_setup.part.0+0x108/0x2b0 [ 1219.825890][T26003] shmem_file_setup+0x66/0x90 [ 1219.825907][T26003] __x64_sys_memfd_create+0x2a2/0x470 [ 1219.825922][T26003] ? memfd_fcntl+0x18c0/0x18c0 [ 1219.825935][T26003] ? do_syscall_64+0x26/0x760 [ 1219.825956][T26003] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1219.840277][ T1530] block nbd5: Receive control failed (result -22) [ 1219.845048][T26003] ? trace_hardirqs_on+0x67/0x240 [ 1219.845070][T26003] do_syscall_64+0xfa/0x760 [ 1219.845093][T26003] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1219.845103][T26003] RIP: 0033:0x459a59 [ 1219.845123][T26003] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1219.845130][T26003] RSP: 002b:00007f1508709a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 13:28:01 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 13:28:01 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x30, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:01 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x127a, 0xffffffffffffffff) 13:28:01 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x4020940d, 0x0) 13:28:01 executing program 0 (fault-call:0 fault-nth:4): syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1219.845143][T26003] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000459a59 [ 1219.845151][T26003] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004be9b7 [ 1219.845158][T26003] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 1219.845171][T26003] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f150870a6d4 [ 1219.845180][T26003] R13: 00000000004c8ea1 R14: 00000000004e0448 R15: 0000000000000003 [ 1219.854078][T26000] block nbd5: shutting down sockets 13:28:01 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x6, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1220.084108][T26020] FAULT_INJECTION: forcing a failure. [ 1220.084108][T26020] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.132995][ T1530] block nbd2: Receive control failed (result -22) [ 1220.150589][T26017] block nbd2: shutting down sockets [ 1220.185762][T26020] CPU: 1 PID: 26020 Comm: syz-executor.0 Not tainted 5.4.0-rc3-next-20191018 #0 [ 1220.194829][T26020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1220.204892][T26020] Call Trace: [ 1220.208292][T26020] dump_stack+0x172/0x1f0 [ 1220.212653][T26020] should_fail.cold+0xa/0x15 [ 1220.217294][T26020] ? fault_create_debugfs_attr+0x180/0x180 [ 1220.223132][T26020] ? ___might_sleep+0x163/0x2c0 [ 1220.223158][T26020] __should_failslab+0x121/0x190 [ 1220.223184][T26020] should_failslab+0x9/0x14 [ 1220.232955][T26020] kmem_cache_alloc+0x2aa/0x710 [ 1220.232975][T26020] ? kmem_cache_alloc+0x364/0x710 [ 1220.232992][T26020] security_file_alloc+0x39/0x170 [ 1220.233010][T26020] __alloc_file+0xde/0x340 [ 1220.257819][T26020] alloc_empty_file+0x72/0x170 [ 1220.262596][T26020] alloc_file+0x5e/0x4d0 [ 1220.266852][T26020] alloc_file_pseudo+0x189/0x280 [ 1220.271800][T26020] ? alloc_file+0x4d0/0x4d0 [ 1220.276315][T26020] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 1220.282572][T26020] __shmem_file_setup.part.0+0x108/0x2b0 [ 1220.288217][T26020] shmem_file_setup+0x66/0x90 [ 1220.292898][T26020] __x64_sys_memfd_create+0x2a2/0x470 [ 1220.298261][T26020] ? memfd_fcntl+0x18c0/0x18c0 [ 1220.298276][T26020] ? do_syscall_64+0x26/0x760 [ 1220.298290][T26020] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1220.298307][T26020] ? trace_hardirqs_on+0x67/0x240 [ 1220.318044][T26020] do_syscall_64+0xfa/0x760 [ 1220.322573][T26020] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1220.328472][T26020] RIP: 0033:0x459a59 13:28:02 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x800454d2, 0x0) 13:28:02 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x127b, 0xffffffffffffffff) [ 1220.332372][T26020] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1220.351979][T26020] RSP: 002b:00007f1508709a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1220.360405][T26020] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000459a59 [ 1220.368387][T26020] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004be9b7 [ 1220.376632][T26020] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 1220.379524][T26037] binder: 26035:26037 ioctl 800454d2 0 returned -22 [ 1220.384604][T26020] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f150870a6d4 [ 1220.384613][T26020] R13: 00000000004c8ea1 R14: 00000000004e0448 R15: 0000000000000003 [ 1220.420611][ T1530] block nbd5: Receive control failed (result -22) 13:28:02 executing program 0 (fault-call:0 fault-nth:5): syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1220.432565][T26028] block nbd5: shutting down sockets [ 1220.435158][T26017] block nbd2: shutting down sockets [ 1220.487433][T26028] block nbd5: shutting down sockets [ 1220.509935][T26044] FAULT_INJECTION: forcing a failure. [ 1220.509935][T26044] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.533054][T26044] CPU: 1 PID: 26044 Comm: syz-executor.0 Not tainted 5.4.0-rc3-next-20191018 #0 [ 1220.542122][T26044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1220.552190][T26044] Call Trace: [ 1220.555501][T26044] dump_stack+0x172/0x1f0 [ 1220.559852][T26044] should_fail.cold+0xa/0x15 [ 1220.564447][T26044] ? fault_create_debugfs_attr+0x180/0x180 [ 1220.570253][T26044] ? ___might_sleep+0x163/0x2c0 [ 1220.575134][T26044] __should_failslab+0x121/0x190 [ 1220.580098][T26044] should_failslab+0x9/0x14 [ 1220.584595][T26044] __kmalloc+0x2e0/0x770 [ 1220.588830][T26044] ? mark_held_locks+0xf0/0xf0 [ 1220.593580][T26044] ? stack_trace_save+0xac/0xe0 [ 1220.598419][T26044] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 1220.604122][T26044] tomoyo_realpath_from_path+0xcd/0x7b0 [ 1220.609660][T26044] ? tomoyo_path_perm+0x1cb/0x430 [ 1220.614669][T26044] tomoyo_path_perm+0x230/0x430 [ 1220.619621][T26044] ? tomoyo_path_perm+0x1cb/0x430 [ 1220.624650][T26044] ? tomoyo_check_open_permission+0x3e0/0x3e0 [ 1220.630743][T26044] ? rcu_read_lock_held+0x9c/0xb0 [ 1220.635768][T26044] ? rcu_read_lock_any_held+0xcd/0xf0 [ 1220.641120][T26044] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 1220.646403][T26044] tomoyo_path_truncate+0x1d/0x30 [ 1220.651408][T26044] security_path_truncate+0xf2/0x150 [ 1220.656676][T26044] do_sys_ftruncate+0x3d9/0x550 [ 1220.661532][T26044] __x64_sys_ftruncate+0x59/0x80 [ 1220.666485][T26044] do_syscall_64+0xfa/0x760 [ 1220.670986][T26044] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1220.676866][T26044] RIP: 0033:0x459a27 [ 1220.680759][T26044] Code: 24 29 d7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 dc e4 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 b8 4d 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1220.700467][T26044] RSP: 002b:00007f1508709a88 EFLAGS: 00000217 ORIG_RAX: 000000000000004d 13:28:02 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x80086301, 0x0) 13:28:02 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x60, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:02 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x127c, 0xffffffffffffffff) [ 1220.708871][T26044] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000459a27 [ 1220.716919][T26044] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000004 [ 1220.724878][T26044] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 1220.733204][T26044] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000000004 [ 1220.741256][T26044] R13: 00000000004c8ea1 R14: 00000000004e0448 R15: 0000000000000003 [ 1220.766914][T26044] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1220.832505][ T1530] block nbd2: Receive control failed (result -22) [ 1220.844604][T26046] block nbd2: shutting down sockets [ 1220.906623][T26055] binder: 26047:26055 ioctl 80086301 0 returned -22 13:28:02 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0, 0x0, 0x8}], 0x1, 0x0, 0x0, 0x0) 13:28:02 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x7, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:02 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0xc0045878, 0x0) 13:28:02 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x127d, 0xffffffffffffffff) 13:28:02 executing program 0 (fault-call:0 fault-nth:6): syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:02 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x7e, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1221.129079][ T1530] block nbd5: Receive control failed (result -22) [ 1221.143703][T26064] block nbd5: shutting down sockets [ 1221.212486][T26081] FAULT_INJECTION: forcing a failure. [ 1221.212486][T26081] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1221.225737][T26081] CPU: 0 PID: 26081 Comm: syz-executor.0 Not tainted 5.4.0-rc3-next-20191018 #0 [ 1221.234762][T26081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1221.244829][T26081] Call Trace: [ 1221.248154][T26081] dump_stack+0x172/0x1f0 [ 1221.252509][T26081] should_fail.cold+0xa/0x15 [ 1221.257129][T26081] ? fault_create_debugfs_attr+0x180/0x180 [ 1221.262950][T26081] ? is_bpf_text_address+0xac/0x160 [ 1221.268182][T26081] should_fail_alloc_page+0x50/0x60 [ 1221.273401][T26081] __alloc_pages_nodemask+0x1a1/0x910 [ 1221.278793][T26081] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1221.284528][T26081] ? __kasan_check_read+0x11/0x20 [ 1221.289588][T26081] ? fault_create_debugfs_attr+0x180/0x180 [ 1221.295408][T26081] cache_grow_begin+0x90/0xd00 [ 1221.300191][T26081] ? trace_hardirqs_off+0x62/0x240 [ 1221.305308][T26081] __kmalloc+0x6b2/0x770 [ 1221.309559][T26081] ? mark_held_locks+0xf0/0xf0 [ 1221.314332][T26081] ? stack_trace_save+0xac/0xe0 [ 1221.319197][T26081] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 1221.324937][T26081] tomoyo_realpath_from_path+0xcd/0x7b0 [ 1221.330493][T26081] ? tomoyo_path_perm+0x1cb/0x430 [ 1221.335552][T26081] tomoyo_path_perm+0x230/0x430 [ 1221.340406][T26081] ? tomoyo_path_perm+0x1cb/0x430 [ 1221.345467][T26081] ? tomoyo_check_open_permission+0x3e0/0x3e0 [ 1221.351582][T26081] ? rcu_read_lock_held+0x9c/0xb0 [ 1221.356642][T26081] ? rcu_read_lock_any_held+0xcd/0xf0 [ 1221.361525][T26086] binder: 26085:26086 ioctl c0046209 0 returned -22 [ 1221.362023][T26081] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 1221.373882][T26081] tomoyo_path_truncate+0x1d/0x30 [ 1221.378925][T26081] security_path_truncate+0xf2/0x150 [ 1221.384225][T26081] do_sys_ftruncate+0x3d9/0x550 [ 1221.389099][T26081] __x64_sys_ftruncate+0x59/0x80 [ 1221.394050][T26081] do_syscall_64+0xfa/0x760 [ 1221.398568][T26081] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1221.404482][T26081] RIP: 0033:0x459a27 13:28:03 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0xc0045878, 0x0) 13:28:03 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0xc0046209, 0x0) 13:28:03 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x127e, 0xffffffffffffffff) [ 1221.408399][T26081] Code: 24 29 d7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 dc e4 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 b8 4d 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1221.428009][T26081] RSP: 002b:00007f1508709a88 EFLAGS: 00000217 ORIG_RAX: 000000000000004d [ 1221.436430][T26081] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000459a27 [ 1221.444401][T26081] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000004 [ 1221.452377][T26081] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 13:28:03 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0xc018620b, 0x0) [ 1221.460353][T26081] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000000004 [ 1221.468331][T26081] R13: 00000000004c8ea1 R14: 00000000004e0448 R15: 0000000000000003 [ 1221.491239][ T1530] block nbd2: Receive control failed (result -22) [ 1221.501278][T26078] block nbd2: shutting down sockets [ 1221.539657][ T1530] block nbd5: Receive control failed (result -22) [ 1221.546207][T26068] block nbd5: shutting down sockets 13:28:03 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x127f, 0xffffffffffffffff) [ 1221.593255][ T1530] block nbd2: Receive control failed (result -22) [ 1221.603744][T26101] binder: 26099:26101 ioctl c018620b 0 returned -14 [ 1221.606943][T26078] block nbd2: shutting down sockets 13:28:03 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x8, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1221.806365][ T1530] block nbd5: Receive control failed (result -22) [ 1221.821365][T26108] block nbd5: shutting down sockets [ 1221.906879][T26108] block nbd5: shutting down sockets 13:28:03 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x2, 0x0, 0x0, 0x0) 13:28:03 executing program 0 (fault-call:0 fault-nth:7): syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:03 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0xc018620c, 0x0) 13:28:03 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x300, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:03 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x4c00, 0xffffffffffffffff) 13:28:03 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x30, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1222.006624][T26122] binder: 26119:26122 ioctl c018620c 0 returned -14 [ 1222.024409][ C1] net_ratelimit: 20 callbacks suppressed [ 1222.024417][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1222.034450][ T1530] block nbd2: Receive control failed (result -22) [ 1222.036017][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1222.044278][ T1530] block nbd5: Receive control failed (result -22) [ 1222.059834][T26123] block nbd5: shutting down sockets [ 1222.075641][T26124] block nbd2: shutting down sockets [ 1222.077332][T26131] FAULT_INJECTION: forcing a failure. [ 1222.077332][T26131] name failslab, interval 1, probability 0, space 0, times 0 [ 1222.130894][T26131] CPU: 1 PID: 26131 Comm: syz-executor.0 Not tainted 5.4.0-rc3-next-20191018 #0 [ 1222.139967][T26131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1222.150030][T26131] Call Trace: [ 1222.153339][T26131] dump_stack+0x172/0x1f0 [ 1222.157680][T26131] should_fail.cold+0xa/0x15 [ 1222.157701][T26131] ? fault_create_debugfs_attr+0x180/0x180 [ 1222.157722][T26131] ? ___might_sleep+0x163/0x2c0 [ 1222.168114][T26131] __should_failslab+0x121/0x190 [ 1222.168135][T26131] should_failslab+0x9/0x14 [ 1222.182396][T26131] __kmalloc+0x2e0/0x770 [ 1222.185157][T26123] block nbd5: shutting down sockets [ 1222.186650][T26131] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1222.198074][T26131] ? simple_dname+0xd1/0x1f0 [ 1222.202660][T26131] ? tomoyo_encode2.part.0+0xf5/0x400 [ 1222.208130][T26131] tomoyo_encode2.part.0+0xf5/0x400 [ 1222.213354][T26131] tomoyo_encode+0x2b/0x50 [ 1222.217788][T26131] tomoyo_realpath_from_path+0x1d3/0x7b0 [ 1222.223447][T26131] ? tomoyo_path_perm+0x1cb/0x430 [ 1222.228485][T26131] tomoyo_path_perm+0x230/0x430 [ 1222.233341][T26131] ? tomoyo_path_perm+0x1cb/0x430 [ 1222.238385][T26131] ? tomoyo_check_open_permission+0x3e0/0x3e0 [ 1222.244472][T26131] ? rcu_read_lock_held+0x9c/0xb0 [ 1222.249532][T26131] ? rcu_read_lock_any_held+0xcd/0xf0 [ 1222.254929][T26131] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 1222.260318][T26131] tomoyo_path_truncate+0x1d/0x30 [ 1222.265351][T26131] security_path_truncate+0xf2/0x150 [ 1222.270731][T26131] do_sys_ftruncate+0x3d9/0x550 [ 1222.275583][T26131] __x64_sys_ftruncate+0x59/0x80 13:28:03 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0xc0189436, 0x0) 13:28:04 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x4c01, 0xffffffffffffffff) 13:28:04 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0xc020660b, 0x0) [ 1222.275601][T26131] do_syscall_64+0xfa/0x760 [ 1222.275620][T26131] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1222.275631][T26131] RIP: 0033:0x459a27 [ 1222.275648][T26131] Code: 24 29 d7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 dc e4 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 b8 4d 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1222.319985][T26131] RSP: 002b:00007f1508709a88 EFLAGS: 00000217 ORIG_RAX: 000000000000004d [ 1222.320001][T26131] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000459a27 [ 1222.320009][T26131] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000004 [ 1222.320017][T26131] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 1222.320024][T26131] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000000004 [ 1222.320032][T26131] R13: 00000000004c8ea1 R14: 00000000004e0448 R15: 0000000000000003 [ 1222.328668][T26131] ERROR: Out of memory at tomoyo_realpath_from_path. 13:28:04 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0xc0306201, 0x0) 13:28:04 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x60, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:04 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x4c04, 0xffffffffffffffff) [ 1222.420730][ T1530] block nbd2: Receive control failed (result -22) [ 1222.424403][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1222.433266][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1222.454055][T26124] block nbd2: shutting down sockets [ 1222.552410][T26160] binder: 26156:26160 ioctl c0306201 0 returned -14 [ 1222.572916][ T1530] block nbd5: Receive control failed (result -22) [ 1222.619106][T26159] block nbd5: shutting down sockets [ 1222.740534][T26159] block nbd5: shutting down sockets [ 1222.834396][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1222.840241][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:28:04 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x300, 0x0, 0x0, 0x0) 13:28:04 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x4c05, 0xffffffffffffffff) 13:28:04 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x500, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:04 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x2) 13:28:04 executing program 0 (fault-call:0 fault-nth:8): syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:04 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x7e, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1223.050160][T26181] FAULT_INJECTION: forcing a failure. [ 1223.050160][T26181] name failslab, interval 1, probability 0, space 0, times 0 [ 1223.063820][T26181] CPU: 1 PID: 26181 Comm: syz-executor.0 Not tainted 5.4.0-rc3-next-20191018 #0 [ 1223.064899][ T1530] block nbd2: Receive control failed (result -22) [ 1223.072880][T26181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1223.072887][T26181] Call Trace: [ 1223.072911][T26181] dump_stack+0x172/0x1f0 [ 1223.072936][T26181] should_fail.cold+0xa/0x15 [ 1223.072961][T26181] ? fault_create_debugfs_attr+0x180/0x180 [ 1223.089666][T26181] ? ___might_sleep+0x163/0x2c0 [ 1223.089691][T26181] __should_failslab+0x121/0x190 [ 1223.089710][T26181] should_failslab+0x9/0x14 [ 1223.089723][T26181] kmem_cache_alloc+0x2aa/0x710 [ 1223.089737][T26181] ? do_sys_ftruncate+0x41e/0x550 [ 1223.089752][T26181] ? find_held_lock+0x35/0x130 [ 1223.089773][T26181] getname_flags+0xd6/0x5b0 [ 1223.118050][T26181] getname+0x1a/0x20 [ 1223.118066][T26181] do_sys_open+0x2c9/0x5d0 13:28:05 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x8) [ 1223.145720][T26170] block nbd2: shutting down sockets [ 1223.150118][T26181] ? filp_open+0x80/0x80 [ 1223.150139][T26181] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1223.150157][T26181] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1223.150174][T26181] ? do_syscall_64+0x26/0x760 [ 1223.176270][T26181] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1223.182348][T26181] ? do_syscall_64+0x26/0x760 [ 1223.187039][T26181] __x64_sys_open+0x7e/0xc0 [ 1223.191555][T26181] do_syscall_64+0xfa/0x760 [ 1223.196077][T26181] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1223.201965][T26181] RIP: 0033:0x413941 [ 1223.205845][T26181] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1223.225592][T26181] RSP: 002b:00007f1508709a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1223.234052][T26181] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000413941 [ 1223.242013][T26181] RDX: 00007f1508709b0a RSI: 0000000000000002 RDI: 00007f1508709b00 [ 1223.249975][T26181] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1223.257944][T26181] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 1223.265899][T26181] R13: 00000000004c8ea1 R14: 00000000004e0448 R15: 0000000000000003 [ 1223.274696][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1223.280486][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1223.294899][ T1530] block nbd5: Receive control failed (result -22) 13:28:05 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) [ 1223.303870][T26174] block nbd5: shutting down sockets 13:28:05 executing program 0 (fault-call:0 fault-nth:9): syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:05 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x3) [ 1223.352195][ T1530] block nbd2: Receive control failed (result -22) [ 1223.371495][T26170] block nbd2: shutting down sockets [ 1223.384397][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1223.390280][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:28:05 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5450, 0xffffffffffffffff) [ 1223.407127][ T1530] block nbd5: Receive control failed (result -22) [ 1223.416491][T26174] block nbd5: shutting down sockets [ 1223.522296][T26204] FAULT_INJECTION: forcing a failure. [ 1223.522296][T26204] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1223.535630][T26204] CPU: 0 PID: 26204 Comm: syz-executor.0 Not tainted 5.4.0-rc3-next-20191018 #0 [ 1223.544651][T26204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1223.554715][T26204] Call Trace: [ 1223.558026][T26204] dump_stack+0x172/0x1f0 [ 1223.562375][T26204] should_fail.cold+0xa/0x15 [ 1223.566986][T26204] ? fault_create_debugfs_attr+0x180/0x180 [ 1223.572806][T26204] ? __kasan_check_read+0x11/0x20 [ 1223.577847][T26204] ? __lock_acquire+0x16f2/0x4a00 [ 1223.582902][T26204] should_fail_alloc_page+0x50/0x60 [ 1223.588107][T26204] __alloc_pages_nodemask+0x1a1/0x910 [ 1223.588122][T26204] ? fs_reclaim_release+0xf/0x30 [ 1223.588137][T26204] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1223.588149][T26204] ? fs_reclaim_release+0xf/0x30 [ 1223.588166][T26204] ? do_truncate+0x187/0x220 [ 1223.588183][T26204] ? fault_create_debugfs_attr+0x180/0x180 [ 1223.588200][T26204] cache_grow_begin+0x90/0xd00 [ 1223.588218][T26204] ? trace_hardirqs_off+0x62/0x240 [ 1223.588234][T26204] kmem_cache_alloc+0x64e/0x710 [ 1223.588251][T26204] ? do_sys_ftruncate+0x41e/0x550 [ 1223.639806][T26204] getname_flags+0xd6/0x5b0 [ 1223.644330][T26204] getname+0x1a/0x20 [ 1223.648234][T26204] do_sys_open+0x2c9/0x5d0 [ 1223.652686][T26204] ? filp_open+0x80/0x80 [ 1223.656941][T26204] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1223.663177][T26204] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1223.668734][T26204] ? do_syscall_64+0x26/0x760 [ 1223.673423][T26204] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1223.679501][T26204] ? do_syscall_64+0x26/0x760 [ 1223.684185][T26204] __x64_sys_open+0x7e/0xc0 [ 1223.688697][T26204] do_syscall_64+0xfa/0x760 [ 1223.693295][T26204] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1223.699191][T26204] RIP: 0033:0x413941 [ 1223.703128][T26204] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 13:28:05 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5451, 0xffffffffffffffff) 13:28:05 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0xe0, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:05 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 13:28:05 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x600, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1223.722731][T26204] RSP: 002b:00007f1508709a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1223.731147][T26204] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000413941 [ 1223.739128][T26204] RDX: 00007f1508709b0a RSI: 0000000000000002 RDI: 00007f1508709b00 [ 1223.747110][T26204] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1223.755094][T26204] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 1223.763078][T26204] R13: 00000000004c8ea1 R14: 00000000004e0448 R15: 0000000000000003 [ 1223.822499][ T1530] block nbd5: Receive control failed (result -22) [ 1223.839097][T26206] block nbd5: shutting down sockets [ 1223.855440][ T1530] block nbd2: Receive control failed (result -22) 13:28:05 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x4) [ 1223.872668][T26210] block nbd2: shutting down sockets 13:28:05 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5460, 0xffffffffffffffff) [ 1223.942871][ T1530] block nbd5: Receive control failed (result -22) [ 1223.952673][T26206] block nbd5: shutting down sockets 13:28:05 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x700, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:06 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x8000000) 13:28:06 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5) 13:28:06 executing program 0 (fault-call:0 fault-nth:10): syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:06 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x300, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1224.174136][ T1530] block nbd2: Receive control failed (result -22) [ 1224.198249][T26235] block nbd2: shutting down sockets 13:28:06 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x6364, 0xffffffffffffffff) [ 1224.303157][ T1530] block nbd5: Receive control failed (result -22) [ 1224.325641][ T1530] block nbd2: Receive control failed (result -22) [ 1224.335222][T26251] FAULT_INJECTION: forcing a failure. [ 1224.335222][T26251] name failslab, interval 1, probability 0, space 0, times 0 [ 1224.345032][T26243] block nbd5: shutting down sockets [ 1224.348588][T26235] block nbd2: shutting down sockets [ 1224.417986][T26251] CPU: 1 PID: 26251 Comm: syz-executor.0 Not tainted 5.4.0-rc3-next-20191018 #0 [ 1224.427165][T26251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1224.437220][T26251] Call Trace: [ 1224.437248][T26251] dump_stack+0x172/0x1f0 [ 1224.444862][T26251] should_fail.cold+0xa/0x15 [ 1224.444878][T26251] ? is_bpf_text_address+0xce/0x160 [ 1224.444897][T26251] ? fault_create_debugfs_attr+0x180/0x180 [ 1224.444915][T26251] ? ___might_sleep+0x163/0x2c0 13:28:06 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x6) [ 1224.444934][T26251] __should_failslab+0x121/0x190 [ 1224.470264][T26251] should_failslab+0x9/0x14 [ 1224.474790][T26251] kmem_cache_alloc+0x2aa/0x710 [ 1224.479772][T26251] ? stack_trace_save+0xac/0xe0 [ 1224.484653][T26251] ? stack_trace_consume_entry+0x190/0x190 [ 1224.490476][T26251] __alloc_file+0x27/0x340 [ 1224.494907][T26251] alloc_empty_file+0x72/0x170 [ 1224.499681][T26251] path_openat+0xef/0x4710 [ 1224.504095][T26251] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1224.509908][T26251] ? kasan_slab_alloc+0xf/0x20 13:28:06 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x8912, 0xffffffffffffffff) [ 1224.514678][T26251] ? kmem_cache_alloc+0x121/0x710 [ 1224.519710][T26251] ? getname_flags+0xd6/0x5b0 [ 1224.524398][T26251] ? getname+0x1a/0x20 [ 1224.528472][T26251] ? do_sys_open+0x2c9/0x5d0 [ 1224.533059][T26251] ? __x64_sys_open+0x7e/0xc0 [ 1224.537732][T26251] ? __kasan_check_read+0x11/0x20 [ 1224.537747][T26251] ? mark_lock+0xc2/0x1220 [ 1224.537761][T26251] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1224.537788][T26251] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 1224.558100][T26251] ? __alloc_fd+0x487/0x620 [ 1224.562624][T26251] do_filp_open+0x1a1/0x280 [ 1224.567141][T26251] ? may_open_dev+0x100/0x100 [ 1224.571831][T26251] ? lock_downgrade+0x920/0x920 [ 1224.576689][T26251] ? rwlock_bug.part.0+0x90/0x90 [ 1224.581639][T26251] ? __kasan_check_read+0x11/0x20 [ 1224.586672][T26251] ? do_raw_spin_unlock+0x57/0x270 [ 1224.591796][T26251] ? _raw_spin_unlock+0x28/0x40 [ 1224.596651][T26251] ? __alloc_fd+0x487/0x620 [ 1224.601162][T26251] do_sys_open+0x3fe/0x5d0 [ 1224.605586][T26251] ? filp_open+0x80/0x80 [ 1224.610014][T26251] ? trace_hardirqs_on_thunk+0x1a/0x20 13:28:06 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x8933, 0xffffffffffffffff) [ 1224.615479][T26251] ? do_syscall_64+0x26/0x760 [ 1224.620163][T26251] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1224.634216][T26251] ? do_syscall_64+0x26/0x760 [ 1224.634237][T26251] __x64_sys_open+0x7e/0xc0 [ 1224.643406][T26251] do_syscall_64+0xfa/0x760 [ 1224.643430][T26251] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1224.643442][T26251] RIP: 0033:0x413941 13:28:06 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab01, 0xffffffffffffffff) [ 1224.643458][T26251] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1224.643467][T26251] RSP: 002b:00007f1508709a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1224.643485][T26251] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000413941 [ 1224.693717][T26251] RDX: 00007f1508709b0a RSI: 0000000000000002 RDI: 00007f1508709b00 [ 1224.701697][T26251] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1224.709676][T26251] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 13:28:06 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x800000000000000) 13:28:06 executing program 0 (fault-call:0 fault-nth:11): syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1224.717659][T26251] R13: 00000000004c8ea1 R14: 00000000004e0448 R15: 0000000000000003 13:28:06 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x2000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:06 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x7) 13:28:06 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x500, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:06 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab02, 0xffffffffffffffff) [ 1224.900921][T26284] FAULT_INJECTION: forcing a failure. [ 1224.900921][T26284] name failslab, interval 1, probability 0, space 0, times 0 [ 1224.972940][ T1530] block nbd2: Receive control failed (result -22) [ 1224.982966][T26281] block nbd2: shutting down sockets [ 1225.059449][T26284] CPU: 0 PID: 26284 Comm: syz-executor.0 Not tainted 5.4.0-rc3-next-20191018 #0 [ 1225.059851][ T1530] block nbd5: Receive control failed (result -22) [ 1225.068510][T26284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1225.068517][T26284] Call Trace: [ 1225.068541][T26284] dump_stack+0x172/0x1f0 [ 1225.068565][T26284] should_fail.cold+0xa/0x15 [ 1225.068586][T26284] ? fault_create_debugfs_attr+0x180/0x180 [ 1225.068608][T26284] ? ___might_sleep+0x163/0x2c0 13:28:06 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab03, 0xffffffffffffffff) [ 1225.068628][T26284] __should_failslab+0x121/0x190 [ 1225.068643][T26284] should_failslab+0x9/0x14 [ 1225.068654][T26284] kmem_cache_alloc+0x2aa/0x710 [ 1225.068669][T26284] ? kmem_cache_alloc+0x364/0x710 [ 1225.068687][T26284] security_file_alloc+0x39/0x170 [ 1225.068703][T26284] __alloc_file+0xde/0x340 [ 1225.068719][T26284] alloc_empty_file+0x72/0x170 [ 1225.068739][T26284] path_openat+0xef/0x4710 [ 1225.068750][T26284] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1225.068771][T26284] ? kasan_slab_alloc+0xf/0x20 13:28:07 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x8) [ 1225.085486][T26284] ? kmem_cache_alloc+0x121/0x710 [ 1225.085503][T26284] ? getname_flags+0xd6/0x5b0 [ 1225.085515][T26284] ? getname+0x1a/0x20 [ 1225.085528][T26284] ? do_sys_open+0x2c9/0x5d0 [ 1225.085540][T26284] ? __x64_sys_open+0x7e/0xc0 [ 1225.085556][T26284] ? __kasan_check_read+0x11/0x20 [ 1225.085570][T26284] ? mark_lock+0xc2/0x1220 [ 1225.085585][T26284] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1225.085607][T26284] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 1225.085625][T26284] ? __alloc_fd+0x487/0x620 [ 1225.085645][T26284] do_filp_open+0x1a1/0x280 [ 1225.113430][T26284] ? may_open_dev+0x100/0x100 [ 1225.113450][T26284] ? lock_downgrade+0x920/0x920 [ 1225.113464][T26284] ? rwlock_bug.part.0+0x90/0x90 [ 1225.113482][T26284] ? __kasan_check_read+0x11/0x20 [ 1225.113500][T26284] ? do_raw_spin_unlock+0x57/0x270 [ 1225.137314][T26284] ? _raw_spin_unlock+0x28/0x40 [ 1225.146463][T26284] ? __alloc_fd+0x487/0x620 [ 1225.146484][T26284] do_sys_open+0x3fe/0x5d0 [ 1225.146498][T26284] ? filp_open+0x80/0x80 [ 1225.146515][T26284] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1225.146531][T26284] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1225.146543][T26284] ? do_syscall_64+0x26/0x760 [ 1225.146559][T26284] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1225.146572][T26284] ? do_syscall_64+0x26/0x760 [ 1225.146589][T26284] __x64_sys_open+0x7e/0xc0 [ 1225.146603][T26284] do_syscall_64+0xfa/0x760 [ 1225.146622][T26284] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1225.173586][T26290] block nbd5: shutting down sockets [ 1225.175432][T26284] RIP: 0033:0x413941 [ 1225.175447][T26284] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1225.175454][T26284] RSP: 002b:00007f1508709a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1225.175467][T26284] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000413941 [ 1225.175474][T26284] RDX: 00007f1508709b0a RSI: 0000000000000002 RDI: 00007f1508709b00 [ 1225.175482][T26284] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1225.175490][T26284] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 1225.175498][T26284] R13: 00000000004c8ea1 R14: 00000000004e0448 R15: 0000000000000003 [ 1225.222117][ T1530] block nbd2: Receive control failed (result -22) [ 1225.384964][T26285] block nbd2: shutting down sockets 13:28:07 executing program 0 (fault-call:0 fault-nth:12): syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:07 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab04, 0xffffffffffffffff) [ 1225.420017][ T1530] block nbd5: Receive control failed (result -22) [ 1225.438838][T26290] block nbd5: shutting down sockets 13:28:07 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x300) 13:28:07 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x3000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:07 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 13:28:07 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x600, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:07 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab05, 0xffffffffffffffff) [ 1225.653503][ T1530] block nbd2: Receive control failed (result -22) [ 1225.653614][T26318] FAULT_INJECTION: forcing a failure. [ 1225.653614][T26318] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.675026][T26317] block nbd2: shutting down sockets 13:28:07 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x500) 13:28:07 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab06, 0xffffffffffffffff) [ 1225.770439][ T1530] block nbd5: Receive control failed (result -22) [ 1225.794839][T26328] block nbd5: shutting down sockets [ 1225.843202][T26318] CPU: 0 PID: 26318 Comm: syz-executor.0 Not tainted 5.4.0-rc3-next-20191018 #0 [ 1225.852270][T26318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1225.862332][T26318] Call Trace: [ 1225.865184][T26334] block nbd2: Could not allocate knbd recv work queue. [ 1225.865650][T26318] dump_stack+0x172/0x1f0 [ 1225.872670][T26334] block nbd2: shutting down sockets [ 1225.876828][T26318] should_fail.cold+0xa/0x15 [ 1225.876847][T26318] ? fault_create_debugfs_attr+0x180/0x180 [ 1225.876866][T26318] ? ___might_sleep+0x163/0x2c0 [ 1225.876886][T26318] __should_failslab+0x121/0x190 [ 1225.876903][T26318] should_failslab+0x9/0x14 [ 1225.876915][T26318] __kmalloc+0x2e0/0x770 [ 1225.876928][T26318] ? mark_held_locks+0xf0/0xf0 [ 1225.876942][T26318] ? __kasan_check_read+0x11/0x20 [ 1225.876955][T26318] ? mark_lock+0xc2/0x1220 [ 1225.876971][T26318] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 1225.876987][T26318] tomoyo_realpath_from_path+0xcd/0x7b0 [ 1225.877005][T26318] ? tomoyo_path_number_perm+0x193/0x520 [ 1225.902302][T26318] tomoyo_path_number_perm+0x1dd/0x520 [ 1225.915766][T26318] ? tomoyo_path_number_perm+0x193/0x520 [ 1225.953529][T26318] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1225.959382][T26318] ? __fget+0x37f/0x550 [ 1225.963586][T26318] ? ksys_dup3+0x3e0/0x3e0 [ 1225.968016][T26318] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1225.973581][T26318] tomoyo_file_ioctl+0x23/0x30 [ 1225.978353][T26318] security_file_ioctl+0x77/0xc0 [ 1225.983293][T26318] ksys_ioctl+0x57/0xd0 [ 1225.987461][T26318] __x64_sys_ioctl+0x73/0xb0 13:28:07 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab07, 0xffffffffffffffff) [ 1225.992064][T26318] do_syscall_64+0xfa/0x760 [ 1225.996603][T26318] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1226.002489][T26318] RIP: 0033:0x4598c7 [ 1226.006391][T26318] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1226.006399][T26318] RSP: 002b:00007f1508709a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1226.006411][T26318] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004598c7 13:28:07 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x600) [ 1226.006419][T26318] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1226.006426][T26318] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1226.006433][T26318] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 1226.006441][T26318] R13: 00000000004c8ea1 R14: 00000000004e0448 R15: 0000000000000003 [ 1226.015599][T26318] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1226.094839][T26347] block nbd5: Could not allocate knbd recv work queue. [ 1226.146765][T26347] block nbd5: shutting down sockets 13:28:08 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x3f00, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:08 executing program 0 (fault-call:0 fault-nth:13): syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:08 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab08, 0xffffffffffffffff) 13:28:08 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x700, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:08 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x700) [ 1226.321182][ T1530] block nbd2: Receive control failed (result -22) [ 1226.343094][T26361] block nbd2: shutting down sockets [ 1226.395336][T26370] block nbd4: NBD_DISCONNECT [ 1226.442403][T26361] block nbd2: shutting down sockets [ 1226.465543][ T1530] block nbd5: Receive control failed (result -22) [ 1226.476463][T26369] block nbd5: shutting down sockets [ 1226.513178][T26378] FAULT_INJECTION: forcing a failure. [ 1226.513178][T26378] name failslab, interval 1, probability 0, space 0, times 0 [ 1226.541823][T26378] CPU: 0 PID: 26378 Comm: syz-executor.0 Not tainted 5.4.0-rc3-next-20191018 #0 [ 1226.550898][T26378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1226.560963][T26378] Call Trace: [ 1226.564266][T26378] dump_stack+0x172/0x1f0 [ 1226.568611][T26378] should_fail.cold+0xa/0x15 [ 1226.568635][T26378] ? fault_create_debugfs_attr+0x180/0x180 [ 1226.568656][T26378] ? ___might_sleep+0x163/0x2c0 [ 1226.568676][T26378] __should_failslab+0x121/0x190 [ 1226.588927][T26378] should_failslab+0x9/0x14 [ 1226.593442][T26378] __kmalloc+0x2e0/0x770 [ 1226.597707][T26378] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1226.603961][T26378] ? d_absolute_path+0x11b/0x170 [ 1226.608916][T26378] ? __d_path+0x140/0x140 [ 1226.613522][T26378] ? tomoyo_encode2.part.0+0xf5/0x400 [ 1226.619106][T26378] tomoyo_encode2.part.0+0xf5/0x400 [ 1226.624435][T26378] tomoyo_encode+0x2b/0x50 [ 1226.629121][T26378] tomoyo_realpath_from_path+0x1d3/0x7b0 [ 1226.634869][T26378] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1226.642865][T26378] tomoyo_check_open_permission+0x2a3/0x3e0 [ 1226.648970][T26378] ? tomoyo_path_number_perm+0x520/0x520 [ 1226.654622][T26378] ? mark_lock+0xc2/0x1220 [ 1226.659073][T26378] ? lock_downgrade+0x920/0x920 [ 1226.663921][T26378] ? rwlock_bug.part.0+0x90/0x90 [ 1226.668852][T26378] tomoyo_file_open+0x106/0x150 [ 1226.673691][T26378] security_file_open+0x71/0x300 [ 1226.678708][T26378] do_dentry_open+0x37a/0x1380 [ 1226.683454][T26378] ? __kasan_check_read+0x11/0x20 [ 1226.688483][T26378] ? chown_common+0x5c0/0x5c0 [ 1226.693158][T26378] ? inode_permission+0xb4/0x520 [ 1226.698086][T26378] vfs_open+0xa0/0xd0 [ 1226.702090][T26378] path_openat+0x10e4/0x4710 [ 1226.706665][T26378] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1226.714161][T26378] ? kasan_slab_alloc+0xf/0x20 [ 1226.718912][T26378] ? kmem_cache_alloc+0x121/0x710 [ 1226.724035][T26378] ? getname_flags+0xd6/0x5b0 [ 1226.728901][T26378] ? getname+0x1a/0x20 [ 1226.733038][T26378] ? do_sys_open+0x2c9/0x5d0 [ 1226.737986][T26378] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 1226.743596][T26378] ? __alloc_fd+0x487/0x620 [ 1226.748672][T26378] do_filp_open+0x1a1/0x280 [ 1226.753183][T26378] ? may_open_dev+0x100/0x100 [ 1226.757885][T26378] ? __kasan_check_read+0x11/0x20 [ 1226.762916][T26378] ? do_raw_spin_unlock+0x57/0x270 [ 1226.768042][T26378] ? _raw_spin_unlock+0x28/0x40 [ 1226.773403][T26378] ? __alloc_fd+0x487/0x620 [ 1226.777927][T26378] do_sys_open+0x3fe/0x5d0 [ 1226.782347][T26378] ? filp_open+0x80/0x80 [ 1226.786583][T26378] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1226.792810][T26378] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1226.798263][T26378] ? do_syscall_64+0x26/0x760 [ 1226.802935][T26378] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1226.809003][T26378] ? do_syscall_64+0x26/0x760 [ 1226.813682][T26378] __x64_sys_open+0x7e/0xc0 [ 1226.818172][T26378] do_syscall_64+0xfa/0x760 [ 1226.822664][T26378] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1226.828552][T26378] RIP: 0033:0x413941 [ 1226.832450][T26378] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1226.852046][T26378] RSP: 002b:00007f1508709a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1226.860457][T26378] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000413941 [ 1226.868427][T26378] RDX: 00007f1508709b0a RSI: 0000000000000002 RDI: 00007f1508709b00 [ 1226.876397][T26378] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1226.884359][T26378] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 1226.892324][T26378] R13: 00000000004c8ea1 R14: 00000000004e0448 R15: 0000000000000003 13:28:08 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = semget(0x1, 0x1, 0x90) semctl$SEM_STAT(r3, 0x3, 0x12, &(0x7f0000000200)=""/169) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) ioctl$TIOCNOTTY(r4, 0x5422) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0xff91) 13:28:08 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab09, 0xffffffffffffffff) 13:28:08 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x3f00) 13:28:08 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x4000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1226.914758][T26378] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1226.968511][ T1530] block nbd5: Receive control failed (result -22) [ 1226.976670][T26369] block nbd5: shutting down sockets 13:28:08 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab0a, 0xffffffffffffffff) 13:28:08 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x4000) 13:28:08 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x2000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:08 executing program 0 (fault-call:0 fault-nth:14): syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:08 executing program 3: syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$tipc(0x1e, 0x2, 0x0) dup(r2) [ 1227.126529][ T1530] block nbd2: Receive control failed (result -22) [ 1227.146022][T26397] block nbd2: shutting down sockets [ 1227.270800][ T1530] block nbd2: Receive control failed (result -22) [ 1227.279545][T26397] block nbd2: shutting down sockets [ 1227.286454][T26415] FAULT_INJECTION: forcing a failure. [ 1227.286454][T26415] name failslab, interval 1, probability 0, space 0, times 0 13:28:09 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xff00, 0xffffffffffffffff) [ 1227.315355][ T1530] block nbd5: Receive control failed (result -22) 13:28:09 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x3593, 0x20200) fstat(r4, &(0x7f0000000140)) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") signalfd(r3, &(0x7f0000000000)={0x3}, 0x8) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 1227.342300][T26410] block nbd5: shutting down sockets 13:28:09 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0xff00) 13:28:09 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x5100, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1227.384398][ C1] net_ratelimit: 20 callbacks suppressed [ 1227.384407][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1227.390150][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1227.399638][T26410] block nbd5: shutting down sockets [ 1227.462537][T26415] CPU: 1 PID: 26415 Comm: syz-executor.0 Not tainted 5.4.0-rc3-next-20191018 #0 [ 1227.471595][T26415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1227.471602][T26415] Call Trace: [ 1227.471625][T26415] dump_stack+0x172/0x1f0 [ 1227.471651][T26415] should_fail.cold+0xa/0x15 [ 1227.471671][T26415] ? fault_create_debugfs_attr+0x180/0x180 [ 1227.471693][T26415] ? ___might_sleep+0x163/0x2c0 [ 1227.471713][T26415] __should_failslab+0x121/0x190 [ 1227.471730][T26415] should_failslab+0x9/0x14 [ 1227.471741][T26415] __kmalloc+0x2e0/0x770 [ 1227.471758][T26415] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1227.471771][T26415] ? d_absolute_path+0x11b/0x170 [ 1227.471785][T26415] ? __d_path+0x140/0x140 [ 1227.471799][T26415] ? tomoyo_encode2.part.0+0xf5/0x400 [ 1227.471817][T26415] tomoyo_encode2.part.0+0xf5/0x400 [ 1227.471836][T26415] tomoyo_encode+0x2b/0x50 [ 1227.471857][T26415] tomoyo_realpath_from_path+0x1d3/0x7b0 [ 1227.554369][T26415] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1227.554394][T26415] tomoyo_check_open_permission+0x2a3/0x3e0 [ 1227.554412][T26415] ? tomoyo_path_number_perm+0x520/0x520 [ 1227.572160][T26415] ? mark_lock+0xc2/0x1220 [ 1227.576599][T26415] ? lock_downgrade+0x920/0x920 [ 1227.576612][T26415] ? rwlock_bug.part.0+0x90/0x90 [ 1227.576635][T26415] tomoyo_file_open+0x106/0x150 [ 1227.586478][T26415] security_file_open+0x71/0x300 [ 1227.586501][T26415] do_dentry_open+0x37a/0x1380 [ 1227.586515][T26415] ? __kasan_check_read+0x11/0x20 [ 1227.586536][T26415] ? chown_common+0x5c0/0x5c0 [ 1227.586554][T26415] ? inode_permission+0xb4/0x520 [ 1227.606070][T26415] vfs_open+0xa0/0xd0 [ 1227.606090][T26415] path_openat+0x10e4/0x4710 [ 1227.606104][T26415] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1227.606116][T26415] ? kasan_slab_alloc+0xf/0x20 [ 1227.606131][T26415] ? kmem_cache_alloc+0x121/0x710 [ 1227.615729][T26415] ? getname_flags+0xd6/0x5b0 [ 1227.644467][T26415] ? getname+0x1a/0x20 [ 1227.648549][T26415] ? do_sys_open+0x2c9/0x5d0 [ 1227.653165][T26415] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 1227.658574][T26415] ? __alloc_fd+0x487/0x620 [ 1227.663093][T26415] do_filp_open+0x1a1/0x280 [ 1227.667605][T26415] ? may_open_dev+0x100/0x100 [ 1227.672300][T26415] ? __kasan_check_read+0x11/0x20 [ 1227.677427][T26415] ? do_raw_spin_unlock+0x57/0x270 [ 1227.682549][T26415] ? _raw_spin_unlock+0x28/0x40 [ 1227.684585][ T1530] block nbd2: Receive control failed (result -22) [ 1227.687400][T26415] ? __alloc_fd+0x487/0x620 [ 1227.687440][T26415] do_sys_open+0x3fe/0x5d0 [ 1227.698484][T26415] ? filp_open+0x80/0x80 [ 1227.698504][T26415] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1227.698523][T26415] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1227.698536][T26415] ? do_syscall_64+0x26/0x760 [ 1227.698558][T26415] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1227.707205][T26415] ? do_syscall_64+0x26/0x760 [ 1227.707227][T26415] __x64_sys_open+0x7e/0xc0 [ 1227.707245][T26415] do_syscall_64+0xfa/0x760 [ 1227.707266][T26415] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1227.707277][T26415] RIP: 0033:0x413941 13:28:09 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x3000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:09 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x2000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1294a0004}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h \x00\x00', @ANYRES16=r4, @ANYBLOB="020028bd7000fbdbdf251200000030000200080002001f000000080001000900000008003a000000000008000100f3c9000004000400080002000400000024000600040002000400020008000100ffffff7f04000200042172000400020004000200"], 0x68}}, 0x4040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x20, r8, 0x321, 0x400, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x902014}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2cc, r8, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x5c, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x425}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_BEARER={0xe0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @mcast2, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @loopback, 0x1ff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x8001}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff1a}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8b9e}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0x108, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x78}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7e38c872}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7e5a, @ipv4={[], [], @broadcast}, 0x6}}}}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd277}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x9b038b6c6e1edbd5}, 0x10000000) r9 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x401, 0x40) ioctl$sock_netrom_SIOCDELRT(r9, 0x890c, &(0x7f0000000080)={0x2, @default, @netrom={'nr', 0x0}, 0x40000, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1000, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null]}) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 1227.707290][T26415] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1227.707303][T26415] RSP: 002b:00007f1508709a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1227.728716][T26431] block nbd2: shutting down sockets [ 1227.729706][T26415] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000413941 [ 1227.794344][T26415] RDX: 00007f1508709b0a RSI: 0000000000000002 RDI: 00007f1508709b00 [ 1227.802326][T26415] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1227.810305][T26415] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 1227.818289][T26415] R13: 00000000004c8ea1 R14: 00000000004e0448 R15: 0000000000000003 [ 1227.822159][ T1530] block nbd5: Receive control failed (result -22) [ 1227.826444][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1227.838698][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:28:09 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x400454ca, 0xffffffffffffffff) [ 1227.864376][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1227.870204][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1227.911205][T26431] block nbd2: shutting down sockets [ 1227.922877][T26435] block nbd5: shutting down sockets 13:28:09 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x40049409, 0xffffffffffffffff) 13:28:09 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x1000000) [ 1227.961525][T26415] ERROR: Out of memory at tomoyo_realpath_from_path. 13:28:09 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x6000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:10 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:10 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'\xa9\xfc\x00'}, &(0x7f0000000000)="656fcd55e7b4c72e44eed9b651556d44e8", 0x11, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) keyctl$describe(0x6, r3, &(0x7f0000000200)=""/218, 0xda) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 13:28:10 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x4000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:10 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x40081271, 0xffffffffffffffff) 13:28:10 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x2000000) [ 1228.235819][ T1530] block nbd2: Receive control failed (result -22) [ 1228.255543][T26455] block nbd2: shutting down sockets [ 1228.264438][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1228.270248][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:28:10 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x40101283, 0xffffffffffffffff) [ 1228.355269][T26472] encrypted_key: insufficient parameters specified [ 1228.379604][ T1530] block nbd5: Receive control failed (result -22) [ 1228.398390][T26467] block nbd5: shutting down sockets 13:28:10 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x60ff, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:10 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x3000000) [ 1228.480710][ T1530] block nbd5: Receive control failed (result -22) [ 1228.496892][T26467] block nbd5: shutting down sockets 13:28:10 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x5100, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:10 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x401070c9, 0xffffffffffffffff) 13:28:10 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x4000000) 13:28:10 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='%so9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1228.662273][ T1530] block nbd2: Receive control failed (result -22) [ 1228.670832][T26490] block nbd2: shutting down sockets [ 1228.772148][ T1530] block nbd5: Receive control failed (result -22) [ 1228.780427][T23485] block nbd2: Receive control failed (result -22) [ 1228.790099][T26490] block nbd2: shutting down sockets [ 1228.803396][T26500] block nbd5: shutting down sockets 13:28:10 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x401070ca, 0xffffffffffffffff) [ 1228.824376][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1228.830349][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1228.958681][T23485] block nbd5: Receive control failed (result -22) [ 1228.975879][T26500] block nbd5: shutting down sockets 13:28:11 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x5000000) 13:28:11 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x7600, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:11 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x401070cd, 0xffffffffffffffff) 13:28:11 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x6000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:11 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") dup2(r3, r1) 13:28:11 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='\\so9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1229.235210][T23485] block nbd2: Receive control failed (result -22) [ 1229.245381][T26530] block nbd2: shutting down sockets [ 1229.250918][ T1530] block nbd5: Receive control failed (result -22) [ 1229.296021][T26531] block nbd5: shutting down sockets [ 1229.306758][T26530] block nbd2: shutting down sockets 13:28:11 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x401870c8, 0xffffffffffffffff) 13:28:11 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x6000000) 13:28:11 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x7e00, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:11 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x60ff, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:11 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x401870cb, 0xffffffffffffffff) 13:28:11 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='i#o9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1229.601028][ T1530] block nbd2: Receive control failed (result -22) [ 1229.610791][T26562] block nbd2: shutting down sockets [ 1229.633288][ T1530] block nbd5: Receive control failed (result -22) [ 1229.645531][T26566] block nbd5: shutting down sockets 13:28:11 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x7000000) [ 1229.691062][T26562] block nbd2: shutting down sockets [ 1229.729599][ T1530] block nbd5: Receive control failed (result -22) [ 1229.755340][T26566] block nbd5: shutting down sockets 13:28:11 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x401870cc, 0xffffffffffffffff) 13:28:11 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x9600, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:11 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x7600, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1229.986347][ T1530] block nbd5: Receive control failed (result -22) [ 1229.997661][T26592] block nbd5: shutting down sockets [ 1230.053720][ T1530] block nbd2: Receive control failed (result -22) [ 1230.067340][T26593] block nbd2: shutting down sockets 13:28:11 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='i%o9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:11 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x8000000) 13:28:11 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x4020940d, 0xffffffffffffffff) [ 1230.107881][ T1530] block nbd5: Receive control failed (result -22) [ 1230.120206][T26592] block nbd5: shutting down sockets [ 1230.149996][ T1530] block nbd2: Receive control failed (result -22) [ 1230.158491][T26593] block nbd2: shutting down sockets 13:28:12 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket(0x42000000015, 0x805, 0x0) getsockopt(r3, 0x3ff, 0x0, 0x0, &(0x7f0000000000)=0x54) r4 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x20, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) recvmmsg(r3, &(0x7f0000003980)=[{{&(0x7f0000000200)=@nl, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/2, 0x2}, {&(0x7f00000002c0)=""/53, 0x35}, {&(0x7f0000000300)=""/123, 0x7b}, {&(0x7f0000000380)}, {&(0x7f00000003c0)=""/3, 0x3}, {&(0x7f0000000400)=""/22, 0x16}, {&(0x7f0000000440)=""/51, 0x33}, {&(0x7f00000004c0)=""/188, 0xbc}, {&(0x7f00000006c0)=""/205, 0xcd}], 0x9, &(0x7f0000000580)=""/22, 0x16}, 0x80000000}, {{&(0x7f0000000880)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000000c00)=[{&(0x7f00000005c0)=""/41, 0x29}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000a00)=""/51, 0x33}, {&(0x7f0000000a40)=""/160, 0xa0}, {&(0x7f0000000b00)=""/245, 0xf5}], 0x6, &(0x7f0000000c80)=""/170, 0xaa}, 0x40}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/65, 0x41}, {&(0x7f0000001dc0)=""/31, 0x1f}, {&(0x7f0000001e00)=""/17, 0x11}, {&(0x7f0000001e40)=""/169, 0xa9}], 0x5}, 0x80}, {{&(0x7f0000001f80)=@isdn, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002000)=""/213, 0xd5}, {&(0x7f0000002100)=""/79, 0x4f}, {&(0x7f0000002180)=""/246, 0xf6}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000003280)=""/128, 0x80}, {&(0x7f0000003300)=""/167, 0xa7}], 0x6, &(0x7f0000003440)=""/7, 0x7}, 0x7fff}, {{&(0x7f0000003480)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000003700)=[{&(0x7f0000003500)=""/127, 0x7f}, {&(0x7f0000003580)=""/131, 0x83}, {&(0x7f0000003640)=""/142, 0x8e}], 0x3, &(0x7f0000003740)=""/215, 0xd7}, 0x3}, {{&(0x7f0000003840)=@nl=@unspec, 0x80, &(0x7f00000038c0), 0x0, &(0x7f0000003900)=""/93, 0x5d}, 0xf9}], 0x6, 0x100, &(0x7f0000003b00)={0x0, 0x1c9c380}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b040000", @ANYRES32=0x0], &(0x7f000095dffc)=0x42) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x82, &(0x7f0000000100)={r6}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000140)={0x5, 0x4, 0x206, 0x0, 0x1cb9, 0xffffffff, 0xf88c, 0x0, r6}, &(0x7f0000000180)=0x20) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) write$P9_RREMOVE(r9, &(0x7f0000000000)={0x7, 0x7b, 0x2}, 0x7) sendmmsg$inet6(r7, &(0x7f00000051c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0xc0}, 0x1c, 0x0}}], 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e21, 0x3ff, @empty, 0x6}, {0xa, 0x4e20, 0x6, @loopback, 0x8}, 0x1, [0x7ff, 0x20, 0x7000, 0x7, 0x2, 0xffff, 0x7fff, 0xa1]}, 0x5c) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 13:28:12 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x7e00, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:12 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x3f000000) 13:28:12 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0xff00, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:12 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x80041284, 0xffffffffffffffff) 13:28:12 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'U+', 0x3}, 0x28, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000000)={'hsr0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}}) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 1230.435617][ T1530] block nbd5: Receive control failed (result -22) [ 1230.486112][T26623] block nbd5: shutting down sockets 13:28:12 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='i*o9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1230.523357][ T1530] block nbd2: Receive control failed (result -22) [ 1230.541790][T26633] block nbd2: shutting down sockets 13:28:12 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x40000000) [ 1230.590044][T26623] block nbd5: shutting down sockets 13:28:12 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x80041285, 0xffffffffffffffff) [ 1230.621579][ T1530] block nbd2: Receive control failed (result -22) [ 1230.630158][T26633] block nbd2: shutting down sockets 13:28:12 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x9600, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:12 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x400000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:12 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0xfdfdffff) 13:28:12 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x800454d2, 0xffffffffffffffff) [ 1230.899051][ T1530] block nbd5: Receive control failed (result -22) [ 1230.913547][ T1530] block nbd2: Receive control failed (result -22) [ 1230.923751][T26660] block nbd2: shutting down sockets [ 1230.937375][T26663] block nbd5: shutting down sockets 13:28:12 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='i+o9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:12 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x80081270, 0xffffffffffffffff) [ 1231.022223][T26660] block nbd2: shutting down sockets [ 1231.048095][T26663] block nbd5: shutting down sockets 13:28:12 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0xff000000) 13:28:13 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x510000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:13 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0xe0ff, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:13 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x80081272, 0xffffffffffffffff) 13:28:13 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0xfffffdfd) 13:28:13 executing program 3: syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSTI(r1, 0x5412, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000040)={0x80000001, 0x9}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) [ 1231.338513][ T1530] block nbd2: Receive control failed (result -22) [ 1231.378036][T26694] block nbd2: shutting down sockets 13:28:13 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='i-o9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1231.460615][ T1530] block nbd2: Receive control failed (result -22) [ 1231.463675][T23485] block nbd5: Receive control failed (result -22) 13:28:13 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x80086301, 0xffffffffffffffff) [ 1231.501570][T26705] block nbd5: shutting down sockets [ 1231.504763][T26694] block nbd2: shutting down sockets 13:28:13 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x100000000000000) [ 1231.617661][T26705] block nbd5: shutting down sockets 13:28:13 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x10001) ppoll(&(0x7f00000001c0)=[{r0}], 0x0, 0x0, 0x0, 0x0) 13:28:13 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x70f000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:13 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0xff00, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:13 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='i.o9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:13 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xc0045878, 0xffffffffffffffff) 13:28:13 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x200000000000000) [ 1231.859960][T23485] block nbd2: Receive control failed (result -22) [ 1231.877091][T26738] block nbd2: shutting down sockets [ 1231.898104][T23485] block nbd5: Receive control failed (result -22) [ 1231.910364][T26743] block nbd5: shutting down sockets [ 1231.989552][T26738] block nbd2: shutting down sockets 13:28:13 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xc0045878, 0xffffffffffffffff) [ 1232.035092][T23485] block nbd5: Receive control failed (result -22) [ 1232.053699][T26743] block nbd5: shutting down sockets 13:28:14 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x300000000000000) 13:28:14 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0xffe0, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:14 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x718000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:14 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='i0o9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:14 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xc0101282, 0xffffffffffffffff) [ 1232.295138][T23485] block nbd5: Receive control failed (result -22) [ 1232.318768][T26770] block nbd5: shutting down sockets [ 1232.393079][T23485] block nbd2: Receive control failed (result -22) [ 1232.403039][T23485] block nbd5: Receive control failed (result -22) [ 1232.410861][T26774] block nbd2: shutting down sockets [ 1232.412927][T26770] block nbd5: shutting down sockets [ 1232.424400][ C1] net_ratelimit: 20 callbacks suppressed [ 1232.424408][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1232.435907][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1232.519455][T23485] block nbd2: Receive control failed (result -22) [ 1232.528229][T26774] block nbd2: shutting down sockets 13:28:14 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000300)={0x2ebe, 0x81, 0x2, 0x9, 0x9, [{0x8, 0xa0, 0x100000001, 0x0, 0x0, 0x286}, {0x4, 0x400000, 0x5, 0x0, 0x0, 0x401}, {0x8, 0x17a, 0x800, 0x0, 0x0, 0x80}, {0x3d, 0x80, 0x4}, {0xffffffffffffffff, 0x2, 0xff, 0x0, 0x0, 0x2000}, {0xfffffffffffffff7, 0x40, 0x7ff, 0x0, 0x0, 0x4}, {0x8, 0x10, 0xffffffff, 0x0, 0x0, 0x1008}, {0x8000, 0x10001, 0x0, 0x0, 0x0, 0x249}, {0x5, 0xfffffffffffff000, 0x4, 0x0, 0x0, 0x4}]}) r3 = fcntl$dupfd(r1, 0x0, r1) syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x9, 0x119000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) r4 = semget(0x3, 0x1, 0xa) semctl$GETPID(r4, 0x2, 0xb, &(0x7f0000000200)=""/243) 13:28:14 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x400000000000000) 13:28:14 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xc0189436, 0xffffffffffffffff) 13:28:14 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x400000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:14 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x760000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:14 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iXo9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1232.774815][T23485] block nbd2: Receive control failed (result -22) [ 1232.819699][T26807] block nbd2: shutting down sockets 13:28:14 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x500000000000000) 13:28:14 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xc020660b, 0xffffffffffffffff) [ 1232.843748][T23485] block nbd5: Receive control failed (result -22) [ 1232.855568][T26806] block nbd5: shutting down sockets [ 1232.913440][T23485] block nbd5: Receive control failed (result -22) [ 1232.926195][T26807] block nbd2: shutting down sockets [ 1232.944915][T26806] block nbd5: shutting down sockets [ 1232.984414][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1232.990282][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:28:14 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x510000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:14 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x807100, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:14 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xc0481273, 0xffffffffffffffff) 13:28:14 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x600000000000000) [ 1233.234438][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1233.240535][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1233.263884][T23485] block nbd2: Receive control failed (result -22) [ 1233.281645][T26840] block nbd2: shutting down sockets [ 1233.300438][T23485] block nbd5: Receive control failed (result -22) [ 1233.316928][T26840] block nbd2: shutting down sockets [ 1233.387411][T26842] block nbd5: shutting down sockets [ 1233.492267][T23485] block nbd5: Receive control failed (result -22) [ 1233.505968][T26842] block nbd5: shutting down sockets 13:28:15 executing program 3: r0 = socket(0x42000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x0, 0x0, &(0x7f0000000000)) r1 = accept4$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14, 0x80000) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000200)="f9e0727e2fc2564695616baae92c19bfb9cec707960cfe51b3321e98e6390b096bbbcbc6eaa1d59f1d7973fb39d915860b4e99790dfdfd034edf09b34a0adc928ff20300fcc76b42ec3dd7441b62899331289b58d70085992b08a839e9605be6f3d55cfb44c575b9682d9090afaf1d", 0x6f}, {&(0x7f0000000280)="e6d0728c44fb97c65f17bf677768c8537b36105892c5da55ff90a34552e71164a03a0cec3d00f5393172ee2ce915ccaaf6d7caa8047e2786c1a6f29f1c6c901e0107de58e42fb2e7c2a27390ec42f9b76b3f388a7d276cfd92f7b341a89137ceeeabd9f6afcddd055dcad5927b7fb7ce8834097c2372b5e5c583358ef485754a32d9ce80c84b02f68448623958bc90ee7481b02a29a2438f92639870ce04b0e7c38a09e61f56bb5b4dd859a8503f96c332f61f3a5de4fac4d2d63072424a066aec7d2c9cd463749af6fe3aaf636418e344c7404e0d54cd6e398cf9ccb94bd6ecb9579d591e85", 0xe6}, {&(0x7f0000000180)="dce8b4d700a5326ac3a0e027c607403b3b2a930187a0dadea7951a97d752d9f581df1998", 0x24}, {&(0x7f0000000380)="a1cb2125d2868765ec6eb8bcc351b47164cb32b7fcfc0853a58df57d587cfc99c3e4aec99c82a1cdd1db5cdc", 0x2c}], 0x82d268ffd1c93162) r2 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5b9, 0x800) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000080)={0x9, 0x1, 0x56, 0x4, 0x9}, 0xc) r5 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) [ 1233.624431][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1233.630303][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:28:15 executing program 4: r0 = socket(0x42000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x0, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r2 = accept4(r1, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0xfe797a12a47e1c1d) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f00000000c0)={r2, 0x6}) r3 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x200400) ioctl$NBD_SET_SOCK(r3, 0xab00, 0xffffffffffffffff) 13:28:15 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='i\\o9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:15 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x960000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:15 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x700000000000000) 13:28:15 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x70f000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1233.781945][T23485] block nbd2: Receive control failed (result -22) [ 1233.791141][T26871] block nbd2: shutting down sockets [ 1233.805050][T23485] block nbd5: Receive control failed (result -22) [ 1233.817351][T26873] block nbd5: shutting down sockets 13:28:15 executing program 4: syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x200400) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) r0 = socket(0x42000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x0, 0x0, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x42000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x0, 0x0, &(0x7f0000000000)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000040)={r4}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000000c0)={0x3, 0x2, 0x4, 0x2080000, {0x77359400}, {0x2, 0x0, 0xff, 0x6, 0x6, 0x3f, "4a7ead11"}, 0x6, 0x3, @userptr=0x1, 0x4}) bind$rose(r0, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) 13:28:15 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x800000000000000) [ 1233.936573][T23485] block nbd5: Receive control failed (result -22) [ 1233.944886][T23485] block nbd2: Receive control failed (result -22) [ 1233.953270][T26871] block nbd2: shutting down sockets [ 1233.965812][T26873] block nbd5: shutting down sockets 13:28:15 executing program 4: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1b, &(0x7f0000000000)='eth0(bdev&wlan0selinuxeth0\x00', 0xffffffffffffffff}, 0x17) ioprio_set$pid(0x1, r0, 0x401) socket$kcm(0x29, 0x5, 0x0) 13:28:15 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='ico9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:15 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0xf07000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1234.024461][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1234.030335][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:28:15 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x718000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1234.278558][T23485] block nbd5: Receive control failed (result -22) [ 1234.297819][T26912] block nbd5: shutting down sockets [ 1234.303827][T23485] block nbd2: Receive control failed (result -22) [ 1234.314813][T26913] block nbd2: shutting down sockets [ 1234.373562][T23485] block nbd2: Receive control failed (result -22) [ 1234.382053][T23485] block nbd5: Receive control failed (result -22) [ 1234.385547][T26913] block nbd2: shutting down sockets [ 1234.400163][T26912] block nbd5: shutting down sockets 13:28:16 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 13:28:16 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x3f00000000000000) 13:28:16 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) socket$alg(0x26, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x42000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x0, 0x0, &(0x7f0000000000)) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) 13:28:16 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='ido9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:16 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x760000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:16 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x1000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1234.756595][T26943] block nbd4: shutting down sockets [ 1234.765517][T23485] block nbd2: Receive control failed (result -22) [ 1234.775537][T26946] block nbd2: shutting down sockets [ 1234.797673][T23485] block nbd5: Receive control failed (result -22) [ 1234.822317][T26945] block nbd5: shutting down sockets [ 1234.822764][T26946] block nbd2: shutting down sockets 13:28:16 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000000)=0x3) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 13:28:16 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x4000000000000000) 13:28:16 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x2000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1234.891771][T23485] block nbd5: Receive control failed (result -22) [ 1234.905201][T26945] block nbd5: shutting down sockets 13:28:16 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iio9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:16 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x807100, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:16 executing program 4: syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x80100, 0x0) write$char_usb(r3, &(0x7f0000000100)="6586b77d14cc90554913dd137eb72bad7166536cc7401bd5cf58c42f5e8d716c3fbe6e50f4e99b453496f5a5f11176699ce516bb378dc1ea9983dd9ba8cdf294ccefb5254faad3ba40aa16", 0x4b) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x100, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) [ 1235.065129][T23485] block nbd2: Receive control failed (result -22) [ 1235.089419][T26973] block nbd2: shutting down sockets [ 1235.189773][T23485] block nbd2: Receive control failed (result -22) [ 1235.191284][T26976] block nbd2: shutting down sockets [ 1235.318513][T23485] block nbd5: Receive control failed (result -22) [ 1235.328551][T26986] block nbd5: shutting down sockets 13:28:17 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) modify_ldt$read(0x0, &(0x7f0000000000)=""/21, 0x15) 13:28:17 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0xfdfdffff00000000) 13:28:17 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x3000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:17 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x20, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x82, &(0x7f0000000100)={r4}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={r4, 0x800}, 0x8) 13:28:17 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x960000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:17 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='ilo9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1235.730952][T23485] block nbd2: Receive control failed (result -22) [ 1235.740568][T27013] block nbd2: shutting down sockets [ 1235.773266][T23485] block nbd5: Receive control failed (result -22) [ 1235.787789][T27016] block nbd5: shutting down sockets 13:28:17 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0xff00000000000000) [ 1235.836767][T27013] block nbd2: shutting down sockets 13:28:17 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='ioo9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1235.877384][T23485] block nbd5: Receive control failed (result -22) [ 1235.894204][T27016] block nbd5: shutting down sockets 13:28:17 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x4000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:17 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0xf07000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1236.074602][T23485] block nbd2: Receive control failed (result -22) [ 1236.086208][T27045] block nbd2: shutting down sockets 13:28:18 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x400) r2 = socket(0x42000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000000)=0x7f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 1236.167785][T23485] block nbd2: Receive control failed (result -22) [ 1236.175990][T23485] block nbd5: Receive control failed (result -22) [ 1236.186795][T27045] block nbd2: shutting down sockets [ 1236.197057][T27054] block nbd5: shutting down sockets 13:28:18 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='ipo9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:18 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x1000000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:18 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x5000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:18 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iuo9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:18 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x80002, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0xd) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x2, 0x32}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x5}}, 0xe8) r4 = socket(0x42000000015, 0x805, 0x0) getsockopt(r4, 0x114, 0x0, 0x0, &(0x7f0000000000)) sendto$x25(r4, &(0x7f00000000c0)="c3aa6849bcb766c0840a15938f916115f2f4acf383e2e1fef0e2d79299ba4086b09fb906e241ec1cbc4a65ca516f7e9135bc53fdd44fb78de1f6670ba3359484b79e99e50fd7819454bac04c52eb578e76f653da95cb4c9924de8c757d75a8d5134e314a828c6c08d00b7d258b599624babd873bc34e54d82f53a3cfd8388006cfb2dcfb5c21850030a03691b2b30c6cd7ad49", 0x93, 0x80, &(0x7f0000000200)={0x9, @remote={[], 0x1}}, 0x12) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x14) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000000)={@local, r3}, 0x14) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, &(0x7f0000000280)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null}) 13:28:18 executing program 1: r0 = epoll_create1(0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)={0x5, 0x1, 0x4, 0x1, {0x77359400}, {0x36ccf469c092cc17, 0x8, 0x7, 0x7c, 0x32, 0x1, "bd0f6ff9"}, 0x4, 0xc3eac3d36666de8d, @planes=&(0x7f00000000c0)={0x6667, 0x4, @mem_offset=0xffffffff, 0x7ff}, 0x4}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='auxv\x00') ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x9) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000380)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 13:28:18 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_G_AUDOUT(r3, 0x80345631, &(0x7f0000000000)) r4 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 1236.733490][T23485] block nbd2: Receive control failed (result -22) [ 1236.743957][T27087] block nbd2: shutting down sockets [ 1236.788014][T23485] block nbd5: Receive control failed (result -22) [ 1236.796986][T27085] block nbd5: shutting down sockets 13:28:18 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) epoll_create1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000080)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 1236.842362][T23485] block nbd2: Receive control failed (result -22) [ 1236.855016][T27087] block nbd2: shutting down sockets 13:28:18 executing program 4: r0 = socket(0x42000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x0, 0x0, &(0x7f0000000000)) write$nbd(r0, &(0x7f0000000080)={0x67446698, 0x0, 0x2, 0x3, 0x4, "7e1c002c3d9b9268f7abe904605f678615913bddb3cd01ae0249c7f9b561e275cbd1d4fb54bedefdca6811c1c37e8b9664dcec09486a84cffe0e26855fef4b5e34e62228ae742a825af3a204250ad088399b5532"}, 0x64) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000200)={0x2, 0x0, 0x2080, {0x5000, 0x3000, 0x1}, [], "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", "427ca797bd316ba7677a4aa7b774c784a084b0ea8001843161ce88fa29470d587fa2d3a9b2108a2e108d63bb5a973a3d935daf1d339d921cc5e4b687fccb87e9e9d43609e9b887805d3689902be0e3aedd1ed30e4a55fd7ba02df068ea96e6398606a5d4fcef42b0af62f51c7789428227bbd23150fe0fb3cc7aaa20cceafd6520cf1dfa0afe625d99d7298e926f3f0d3a609dc811a5b312415c8c96678c5418c0f627ffe7639f67ee4182165f5b101632118c4bc840b1e934afaf86f2167cfcd83f85a2b3f4afed36910e869a9a97073ed5e4589b235ae92486e3dfa593bced75a4188955c2539f53488e0a4d71e80688738ee9fa7fc8a8d5e07f6587901791c5a39c386a381270f6842a6d612cc0277554ad879117075114dfdbcf7539a647d7d40c2826fdadaa42c85477eb8c9d47922898c4e9135e68d2bf477090e2470d92948053bc2ac0c2d3807a208f78bf9f3bdec4a25b96fc9e02316e395dd46e56fd13b8dbe366c2d2c42b177bcec318452406fdb0d74891757c0ab0e82f46155a6ce312733830a52c19fc44664e69c0b105829ab675058896d21d148d511c5b33656bc4592012213554cd392a7a0096b237bd81b55de26d55115c3feb65e2e50a00aeb75be2bbfaf42df7501b9f6e080c3c2514af5c06e56c837c2ed0b997a834794db2d45eb1b477ea2efb47e0f1f9b2d3cf84baa4f3a7288f48dd15c54b8a797e87a4c8bc538ef00eac5c35df0aeb2933cf8a46c48c433a83d8b5510129249c0967cdbe7c3c1c51a5338d9fdfcbe4c1d096e28205c560299f1b1e51015e906600ef8c1ef289d564b1920ab59994efb920b76079e4eb022395c089c0a16f5a021ce37681d3c73e64194dd925ae25580fdaadfe38dc689823a14d2541c2dc1b97e8f7afb0c16177a102e0c60a806984a9b71b004510ca4d6a11cf844132d552aa863b8c846ffd86e6cc5cae406e34cb3851397a0faf1d8dc263453623c0613a1cb9dd917ea4a0931db80779b674a7640dc6d3df085af26ec66fd7171d069dd329dc5a1f1eaebf647f43ad0ac13ff9a4e3951715c37a12c4f6d477c462d3350ab9a8fbce6b1e445a9569125e3d70d561bc8b0bd26c096d3dc3a0be324f4c5b06c369b8713d3b747a79cb925f4fec99316371edc069e2d62540d8891332329bb95a66e92038445965b3712e266cc2e96418da8fd9879ebb32aa4431f79245b126b55dbdf0cab1f75bf9a7c02eebec6297d056c96a0799db195244f51c4e5e556c30e3e6d625368a12dbebf6c411cd5f23adbf80bb99c31fca4961495056edc777173d376ebd6fd08c20eb8cef13baf1758e894adee71a6b9b88183a950b15dc8ac94c0a145d7571f052ed7bc005e6d9a75e23b78e68c63615102868efa8fd8a01d0f0d8461738ff1e87c3b33e6686c64ed9ab761094243756369d583b5cde9b2c0a4f597136d69b4818c40da13e636ae842772ab12c4e8c996cf2a9fec41f56df626b4366b52803616abaf1d9d2bd556843e87d68ce4421e1fef6fa6218e794cdabb024c21f1a964d106ed3d1f4242c4d8c29eaa4c52bec81f4fc4f43ebb74c63e2a07e5895db2cac4156a167d69d31da5984e704b557f531ded15d112f1511fea0382487e743b62dbf86d195fb1a43163dc7c669dbea97b3b2f70a47c66f5ec6239d4c9fae2398847bdb6cffeaebdd8198ce9db052a872f322e1744c918314f39271ffcbb1af58cfb5d5f16043316eec65764a43f1c50e94929f12bc83e102708f56d3674fca3ed718f0ee736f128233b9ebf11e57e285692f5747f5703cd870d41537fa7f91aa1e22924b98a990a9d47e43c9682054635eab5efa3162a09d87a21f09a856cde1aa51736b5f726c8463a5354a4bc0a797cad041d20ee06f917f449e079b178da8a124ab01bca1128c7863c2c6e83c31df8d21883336a4292fe5f688f855c2098681eb065b8db4c11909efed73eb610218ef4cff89f0b332a3f54312f5243f2ad16ffc7031acfec94674708ef88d69bd69f605489a04c896d39d7c27e7feae344f4b24e01d7609b0d377a0b376d43d6a5542c9add3fe449b1192de55bf68624a036b9be20f6039f31ae54a5bdc06658dc8ab13aaf23fbe999d9fcf4c4c6f797bd8e97f8864248ae204b03010126c2a6f9488386241456137899971f05aae8e286fa654bb475bb061b267f91ef31f15eb2d33365d2856ae861b7320885826de9145b64b261eff173b47fbaa59ad726f8ce3f1d2ba63145dfd6e54547e7c6283c0c51f8d847f3895a7bd6b2bbaae9cc04ee3df3e7ce65d9a3d3e96c7bc33fdbed87af8512f2a729a0f11715d203924a34fa3f27394041fac0aa07b7532542814656482aa3ed95bae089ae7dec07bc369610bd065f7d24a939297f224945018a8000b7a65d9198f28f4e45fc667cbad2a9ab644477424092d5614b6171f0b0caf6a1697996a14aa9b76766b17c55975c0577be13df8f43f754af1ba1d6ee3c34a1bba8832e53fed5901b0db6696b6285a102e8be089cf2b93e8a9284e7db0c08fc3f31064a4612b303eb821680fa1ad57001c9188c808d8dec45544d8f9eaa5cf6dbbe30927bd6c871c7281e96bcc49ecec25d7565ee3a1e01aacd7527ec1fd3cae63fbe2c02ed327df312740469cd3440929f576d47aef746e17928063b52e2e6a6c0672891590ee4411bdda90255451223625564b608c123796b39066c990f285f9f566dff4778c316d46b0bf7e15d0ab2f35c47c4cb9cb3f88de85e55c925111022f7b67b3745c1f0bfab4eb7c8c49878e2d039810beb858d9dae8bebc8eb7b11ca14ba201d8ca466003a48a0a6c0ec8596396235ac7dc3f6bba7e0dea999f92c778526ea5f208bcbe614816fc4d81b412c0d1cde907842d9f2d034e94645daa5c536bfeffd9dc675f49dbc451ed2be505bcbd37a3a6c742d19676287703f75a6cb774972941cbf8aa9f9fb40050329719cf8efb677b0525bb42cd36db45c5c4d5a560ba826d84e5cbdde864ebec6cd1369c5e23068f0ab079a2179af52bfbb4b07db0be302a5126d511b17482ca1a5c9da3639ae0c3160ab7324632b603e596d8814c754b78c75a33410d3ed8391cd577ccb0c9f35174fa85c2c52c2202d595cbbcba43b5e16088aab39934821ce135f040ac62c44eb29bb6d2b7e8e83b64c47fdf5c2d0aaacecac937fa22e360de5ba38f354fc2aee26bc1d535f8b21ed2734a04a16f7f08d07727497bf9d053faaa622c6f25b83885a0aee3f6992ea44e8c2f779aeb5c12fb688c6694cefbbfff14eea3c78f082d30f01d7769e6d00157417c9e27d1e13f1c3daee85cd09d375b723ca9b068d69e8cbdb3c80e83784a6ced204bb4cde9c17db50121d8835f3556f34fb62e2fe616562e0d195a98257baf60e19a40bf4f36cdc2d2e1b1b9474c2c18453846b8960eefa66bad0b9c195137d53fa6cb210668df888ba19d127ca3ef0b6e2ee030172c93743185bfcf3b15e780d1598dde9c1a31a621c5086200670bfe8b419135332a4f781a2b164e63b1874e3c62c9c1f2b293c3589162dc3c3a5e9bead62bbcb91de2657e5a9dc4b2d6e6d8500a6e29c74edf50b27295b40e83ca01a90f81ee294a485856ad2fd88c2265fcdade94239a1458909a62cf7325782cdcb93210aaa9146ad5427525515db2701bb53946c868d37490f3c1027353dfc9b1a513c28199be7f88f82cf546693cc922eb8e18565bdf5a4b1ffbdf0ad0f9ff7eaef1189ed56dee1de2056f6de8bde0b247bbb52e09c27db678e9deab855060b41d9fd1e36616789e59490929bc3ea698d0bad06ffa620799460b620bec4ce951a4cda2329d0c8e9bcb59d878584167c5b0cee9629d9b125e5119e9aabba8e61d1c307c936da6cbaa483960fd8dfc1bbc7c3b00c1608551248acc9f98197d0d25f19ffdaa8509bc4bf59fc319df22d1361c364b7735817716a68c9876fdcfac5da400d3627b3c486412789fb7b6e31895be645236cf8ad2f30bf0e1b2f46d58563d874158724caf0f63514bb8ae8a3dacbc165f1b5578df340c3d9709b13b0d14abeb8908774a3f366629bab592255314b54682418a6936a6d17326c69a64e72c4e5ab4d08fe07f082f15940eaf1f852ef648dc74b0d1d67b8376d36b2de8d1cf560e4bbe5c39b39a2de1cfafaddd92dd534470b32383542686b519a66117b1e3428022a70e861fba62548edb56583a099c599b8bf41bc190bca3dd37aeae35b67cdffed078f4c91f78abb10f256b08c7b85cf0cbca3a699e8bfaf2a849b91461f5c3f496cf502bbcd29568b9ea50534dccbcc00312659248ed92b140bcce2d3f65fc6762a3c8f5a89c665bd38be54f7eb731de6f7dace26a2a1bda9f1fc1e2a3d74f9a86611f02ed1e223e45637cbc94b80749340b060f08a0c52d88f20c252782e7d3193838dd5d8eaa014adf98135e1e19145156569af1a8fbddc8385c27fd233735ac8bd3c28c53004bb2e80060c20ae37e4ee5e7711a6bfe88ba86dcfb3f6106f286891ba719f1a9c8311e9d0386099cd7b391d0caa65c2f54238f768e37f016c60a72a20b4c537cfc83e32b399c725ad67d8668d23eb6415f5fd456d7e8fab5f771f9e338a4952c11c5f48e617c72310e0792f6aa42095757375f862026668a4056e243d9c3e79523afe6f052e41bc533eef8d7ea72c735a15505d4a2f71b6eef5e0fa1005da1c50b0a822494de0e4f5f04feb52646c28611177b71036bae34c54b1648562aa48b19689b3a7e5fdfd711fa0bb2448dbabdbb57c371a1ad33b5b1ce3dc85205a764df0daac343425ecd5e089aaf4e84e92620ff198bf5b85ff27c8f8d9fbbad6947b393ac50f1e561766d04365ec6ce7d35b2402040569d494b3bf19b95f7d46bb6b73744c388b756c02148fe684fb45688b27a6d2cb2ae7292a44ffdd10731d017e4e648e28a447e73575174a848dcc0794297e7cb5788f7262b655e067101534b4f0f7e5a84cd30d729a743cf5fbc1b69983eaec65db78bbdef6a414691d723d8070414f164746ad73d63d9366a6079013b85c798d394653d6c417518914cc75510f7ae3fdd3e50b6f9e479d131bd017efdb9b9b7db10bd0c1fd8f8c8d59ff2739537828439bbc89eff8f8680e6e22597336221b09b7322d36de14b376e17232277a5a816be6d6af4b9c433cf103f9859a49cdcd803a93fc53002d09057eaea44f9abe5690aacea3d62f93c6f0ae6c944e7d3558ef4c835fbfccf24394ce4f0bc7a16bcdcd40fa5927f47f7ab9d979a993ea9446aeb0b9f29da5980dcc5de5e58d39112818ad1c886e4fba598c3af2daddf1c4370e0ad7bb31fe22436359cdd0b2c2b97488d626b7675104dcf20dc00dc05d6eb799ae6d4235db2c3eae95065e39ab6dcb14d66546370813b0ceced0778fc967aa229548a31e1af05e483bddc75841fb0013445ef3cbbf3aa4857478d26b4e54d8527d8f34828f3c8b176c6e91244f2481a344d42cc14b2cea30adef649aaf4bda2aa9f4509f5e2d25f44ce7748471a537495b63855c266b835aa354cc4777d7a4b0edadb5952c965332db205a36327c070b711f89eca2eb8f6d71970fb5c751ce8d5b8e0af897941929aae71e2ac820dd3edd49f46f6088168c606a2ac143e875e8a08c55660bd1049b045fb79a7e96d87ac49d8fd317509cf60af047e58ec1d0739e9c44416719a61462df7e0418b6d34554123e9b85541ea05b2d1904c4c6bede6d6ada76710a645a48c93b7134a9a7331f0a7f66b5b1b139f3fd9175d07e28e60bff9f8b26e52433dbc04eb5f"}) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20702, 0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000040)) 13:28:18 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='ixo9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1236.905235][T23485] block nbd5: Receive control failed (result -22) [ 1236.915067][T27085] block nbd5: shutting down sockets 13:28:18 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x6000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:18 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x2000000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:18 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binPer#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 13:28:19 executing program 4: syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r0 = socket(0x42000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x0, 0x0, &(0x7f0000000000)) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6, 0x8ea976f42fd4ce92) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) pipe(&(0x7f0000000080)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x42000000015, 0x805, 0x0) getsockopt(r6, 0x114, 0x0, 0x0, &(0x7f0000000000)) r7 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x20, 0x0) close(r7) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x82, &(0x7f0000000100)={r9}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={r9, 0x5, 0x7}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000000280)=ANY=[@ANYRES32=r10, @ANYBLOB="52000000f991732dcde5ffb6afe7160978e700632d61bdfb856f301ef97835e82f1f5dea3ac89a28128d223215c1690604446dde7ed20c3d458c91d11258e2d412d10abb8aef"], &(0x7f0000000300)=0x5a) r11 = perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0xeb, 0xee, 0x45, 0x3f, 0x0, 0x8001, 0x20293, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x75c9efc9c9b4437b, @perf_config_ext={0x26, 0x100000000}, 0x200, 0x5, 0xd6, 0x7a04931bc9e45fa0, 0x9, 0x5, 0xcd5}, 0xffffffffffffffff, 0xd, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x4) r12 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) ioctl$NBD_SET_SOCK(r12, 0xab00, r0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = fcntl$dupfd(r13, 0x0, r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r14, 0x5386, &(0x7f0000000180)) [ 1237.208367][T23485] block nbd2: Receive control failed (result -22) [ 1237.218027][T27127] block nbd2: shutting down sockets 13:28:19 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x400) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-control\x00', 0x1, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x359040) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000180)=@v1={0x0, @adiantum, 0x4, "18d3cb08878cbbfc"}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$ION_IOC_HEAP_QUERY(r5, 0xc0184908, &(0x7f0000000240)={0x34, 0x0, &(0x7f0000000200)}) r6 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_S_FBUF(r6, 0x4030560b, &(0x7f0000000100)={0x104, 0x41, &(0x7f0000000040)="396171954a49680285d58704a70c320d1c2c8e577745e79b10e96c73b95531137c773dd744015c8cf95e3b256fdd22fde455ff1e26037dd4828afdd1eb025106c6efbc04ac4034596a50b81ec789918f8e9fc04a1e58c168dbb78c428b6407f2a88a7d4271aa3d882817d0249e7ad3287bb35460c4b90e7cb04c6eae2fc8a07c6a338a267864c703160ed10e814471cadc7f64", {0x516e, 0x8, 0x50313459, 0x1, 0x4, 0x6, 0xa, 0x7f}}) [ 1237.253523][T23485] block nbd5: Receive control failed (result -22) [ 1237.275083][T27122] block nbd5: shutting down sockets 13:28:19 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f00000051c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0xc0}, 0x1c, 0x0}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x80002, 0x0) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0xd) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1, 0x8b14570151ee72f9}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}}, 0xe8) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr="e2499996f6f0a2036b621b8e491df9cd", r5}, 0x14) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 1237.395137][T23485] block nbd2: Receive control failed (result -22) [ 1237.404053][T27127] block nbd2: shutting down sockets [ 1237.412592][T23485] block nbd5: Receive control failed (result -22) [ 1237.422700][T27122] block nbd5: shutting down sockets 13:28:19 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x7000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:19 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='is%9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000080)={0x3, 0x3782b2a9b1de7d50, 0xffffff3c}) r2 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = socket(0x42000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000000)="b2424c8864ae37eb3c59702e2d2e5e17", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") fcntl$dupfd(r4, 0x0, r5) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) 13:28:19 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x3000000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:19 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000000)={'syzkaller1\x00', 0x5}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 13:28:19 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x424043) syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x101400) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x400) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) r3 = socket(0x42000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x0, 0x0, &(0x7f0000000000)) r4 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x20, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x82, &(0x7f0000000100)={r6}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000200)={r6, @in6={{0xa, 0x4e22, 0xfffffff9, @mcast1, 0x3f}}}, &(0x7f0000000180)=0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000002c0)={r7, 0x3f, 0xff2e, 0x0, 0x9, 0x8}, 0x14) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x1) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000040)=""/112) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r9, 0xc0045540, &(0x7f0000000100)=0x3ff) [ 1237.744955][T23485] block nbd2: Receive control failed (result -22) [ 1237.750859][ T1530] block nbd5: Receive control failed (result -22) [ 1237.760903][T27161] block nbd2: shutting down sockets [ 1237.784389][ C1] net_ratelimit: 20 callbacks suppressed [ 1237.784396][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1237.790128][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1237.803522][T27163] block nbd5: shutting down sockets 13:28:19 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x4000000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1237.911849][ T1530] block nbd2: Receive control failed (result -22) [ 1237.925932][T27161] block nbd2: shutting down sockets 13:28:19 executing program 1: r0 = epoll_create1(0x40000) gettid() r1 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) 13:28:19 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x8000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:19 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='is\\9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1238.129948][ T1530] block nbd5: Receive control failed (result -22) [ 1238.142003][T27195] block nbd5: shutting down sockets [ 1238.184406][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1238.190293][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1238.251490][ T1530] block nbd2: Receive control failed (result -22) [ 1238.263944][T27203] block nbd2: shutting down sockets [ 1238.272389][ T1530] block nbd5: Receive control failed (result -22) [ 1238.274402][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1238.284898][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1238.323981][T27195] block nbd5: shutting down sockets [ 1238.347318][T27203] block nbd2: shutting down sockets 13:28:20 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso8660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:20 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) r3 = socket(0x42000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x0, 0x0, &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x50, r5, 0x31, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2={0xff, 0x3}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc400e204}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x101}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xd82dbf83e1504c07}, 0x814) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 13:28:20 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x5000000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:20 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x20000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1238.548582][T27222] IPVS: Error connecting to the multicast addr [ 1238.602575][ T1530] block nbd2: Receive control failed (result -22) [ 1238.612820][T27226] block nbd2: shutting down sockets [ 1238.631092][ T1530] block nbd5: Receive control failed (result -22) [ 1238.633335][T27222] IPVS: Error connecting to the multicast addr 13:28:20 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso:660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1238.660690][T27224] block nbd5: shutting down sockets [ 1238.664400][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1238.671798][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1238.681939][ T1530] block nbd2: Receive control failed (result -22) [ 1238.691109][T27226] block nbd2: shutting down sockets 13:28:20 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) fchdir(r0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x80, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) 13:28:20 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x40, 0x3d9200) ioctl$TIOCSIG(r2, 0x40045436, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f00000000c0)={0x8, {{0x2, 0x4e23, @local}}, 0x1, 0x4, [{{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x290) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 1238.792545][ T1530] block nbd5: Receive control failed (result -22) [ 1238.802362][T27224] block nbd5: shutting down sockets 13:28:20 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x30000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:20 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x6000000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:20 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x20002) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1239.044244][ T1530] block nbd2: Receive control failed (result -22) [ 1239.063714][T27251] block nbd2: shutting down sockets [ 1239.091336][ T1530] block nbd5: Receive control failed (result -22) [ 1239.103925][T27257] block nbd5: shutting down sockets 13:28:21 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso;660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1239.204728][ T1530] block nbd2: Receive control failed (result -22) [ 1239.213823][T27251] block nbd2: shutting down sockets [ 1239.224412][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1239.230314][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:28:21 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/btrfs-control\x00', 0x80000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='trusted.overlay.upper\x00', &(0x7f00000008c0)={0x0, 0xfb, 0x107, 0x4, 0x8, "f281df3de29f67b771cea5c6be5bb7cd", "8b2fd3465fb775e165bad7b9f3237508bdabd72e462786716416c576f4da8dbb85254c2531d1a6a33a1d1e770e1a20dd09b276005f7b2148d335e17ba0c99106999068aad2c230c3d7b3c1563f382aef4222f57bf16f67c045e3a122f18a9b17604ffe5d214d726edb5413b655538ef24b80f886701908da3f618d2b06485def23001fa3afa20e9aea3480201d8da928e42149a404e53ac6022bc9ed7e7469346f934d0f20c9c23673524505eccaf4634bb58d80c2f7664f947388090a313831709431c2f9db20f347bb74e7ce92ed0f2724490d07c642b16d8a61e5f9e5809d986d77af7b5b69ce90448c37cf689c504aef"}, 0x107, 0x0) ioctl$SIOCRSSCAUSE(r3, 0x89e1, &(0x7f00000004c0)) r4 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r5, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0xfffeffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040004}, 0x1840) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x90}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="34000200448f3edc9d0cc3f6d7f25f39d12c735032452094d141e53fcab87d74ee4e98786ae3033459466e903b246b59e2df", @ANYRES16=r5, @ANYBLOB="04002bbd7000ffdbdf25010000000000000001410000001800170000000b000000056574683a726f736530000000"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) r6 = socket(0x4, 0x805, 0x0) getsockopt(r6, 0x114, 0x0, 0x0, &(0x7f0000000000)) sendmsg$TIPC_NL_LINK_RESET_STATS(r6, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x88d92422af457b9}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="2aec060210f43106f12c4a58276bcb0e297fe6656f38a4539c008f86175d0173641c4dc1e9124606d400eccbd7c0a0908a0ff57e8e73f8f0df151397422d55264228", @ANYRES16=0x0, @ANYBLOB="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"], 0x1f0}, 0x1, 0x0, 0x0, 0x881}, 0x8000) r7 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x80400) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40100800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x30, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x4107, 0x0, {0x14, 0x18, {0x3, @bearer=@l2={'eth', 0x3a, 'nlmon0\x00'}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000020}, 0x30044054) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r9, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") getsockopt$inet_mreqn(r9, 0x0, 0x24, &(0x7f00000005c0)={@loopback, @local, 0x0}, &(0x7f0000000600)=0xc) setsockopt$inet_mreqn(r8, 0x0, 0x24, &(0x7f0000000a00)={@dev={0xac, 0x14, 0x14, 0x24}, @loopback, r10}, 0xc) r11 = openat$cgroup_ro(r4, &(0x7f0000000580)='cpuacct.stat\x00', 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r11, 0x40044900, 0x8) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dlm-monitor\x00', 0x400000, 0x0) ioctl$VIDIOC_G_CTRL(r7, 0xc008561b, &(0x7f0000000a40)={0x3, 0x9}) 13:28:21 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000000)) 13:28:21 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x3f000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1239.268501][ T1530] block nbd5: Receive control failed (result -22) [ 1239.292635][T27257] block nbd5: shutting down sockets 13:28:21 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x7000000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1239.475836][ T1530] block nbd2: Receive control failed (result -22) [ 1239.486002][T27280] block nbd2: shutting down sockets 13:28:21 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x7, 0x800) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000100)={0x1000, 0x5, 0x404, 0x186, &(0x7f0000000200)=[{}, {}, {}, {}, {}]}) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket(0x42000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x0, 0x0, &(0x7f0000000000)) recvfrom$unix(r2, &(0x7f0000000000)=""/3, 0x3, 0x40000003, &(0x7f0000000040)=@file={0xdf8c62121ce9eca7, './file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) [ 1239.585076][ T1530] block nbd2: Receive control failed (result -22) [ 1239.594181][T27280] block nbd2: shutting down sockets 13:28:21 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso\\660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1239.644916][ T1530] block nbd5: Receive control failed (result -22) [ 1239.677812][T27292] block nbd5: shutting down sockets 13:28:21 executing program 1: r0 = epoll_create1(0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) r3 = socket(0x42000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x0, 0x0, &(0x7f0000000000)) ioctl$SIOCNRDECOBS(r3, 0x89e2) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace$cont(0x4207, r4, 0x8, 0x807100) flistxattr(r0, &(0x7f0000000140)=""/121, 0x79) move_pages(r4, 0x6, &(0x7f0000000000)=[&(0x7f0000fef000/0xf000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil], &(0x7f00000000c0)=[0x3800, 0x48000, 0x0, 0xffffffff, 0x10000, 0x800, 0x7, 0x1, 0x317, 0x9], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x4) 13:28:21 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000)="23025fb17965d2a3a5e53efc78b87e3e0e5102de17171e30ed442074e15745db343278fe967426e49ce44813a46e6274e977d69a51620d5c31f7a0749ff4118ae8e4d8d41ded0d8b2bf3b6d4d03cb78dd5c56176c1741730929c61304135f36035ca9467ddf9d3138f0ec05563fb2c76f46448d1ec175b6e9957c5b862a2bf7cbf9a46cef0eaf95f4654843924654449fa8c1a1123482aa01df15fc3499bf75c57d854021653848bcdd51b6046eeb651203f", 0xb2, r1}, 0x68) r2 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x8, 0x80) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) r3 = socket(0x42000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x0, 0x0, &(0x7f0000000000)) sendmsg$can_raw(r3, &(0x7f0000000280)={&(0x7f0000000180), 0x10, &(0x7f0000000240)={&(0x7f0000000200)=@can={{0x4, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "18898affac0846c7"}, 0x10}, 0x1, 0x0, 0x0, 0x40440c3}, 0x1) 13:28:21 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x40000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1239.789846][ T1530] block nbd5: Receive control failed (result -22) [ 1239.799237][T27292] block nbd5: shutting down sockets 13:28:21 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x8000000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1239.975829][ T1530] block nbd2: Receive control failed (result -22) [ 1239.995329][T27341] block nbd2: shutting down sockets 13:28:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'L-', 0x10000}, 0x28, 0x2) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) 13:28:21 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 1240.094257][ T1530] block nbd2: Receive control failed (result -22) [ 1240.103651][T27341] block nbd2: shutting down sockets 13:28:22 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9\x0260\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1240.171534][ T1530] block nbd5: Receive control failed (result -22) [ 1240.204801][T27427] block nbd5: shutting down sockets 13:28:22 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x60000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:22 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x10901) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x1, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x2) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_DO_IT(r4, 0xab03) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x180, 0x40) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x7) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xa) 13:28:22 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) [ 1240.328899][T27427] block nbd5: shutting down sockets [ 1240.429264][ T1530] block nbd2: Receive control failed (result -22) [ 1240.439413][T27446] block nbd2: shutting down sockets 13:28:22 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) r3 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=0x60) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000140)={'ip6tnl0\x00', 0x7}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 13:28:22 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x20000000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1240.558947][ T1530] block nbd2: Receive control failed (result -22) [ 1240.567939][T27446] block nbd2: shutting down sockets 13:28:22 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x7e000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:22 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9\"60\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1240.789735][ T1530] block nbd5: Receive control failed (result -22) [ 1240.800604][T27467] block nbd5: shutting down sockets [ 1240.833739][ T1530] block nbd2: Receive control failed (result -22) [ 1240.859311][T27472] block nbd2: shutting down sockets [ 1240.861168][T27467] block nbd5: shutting down sockets 13:28:22 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$TIOCMSET(r2, 0x5418, &(0x7f00000000c0)=0x8) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$cgroup_ro(r5, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0) 13:28:22 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x30000000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1240.971826][ T1530] block nbd2: Receive control failed (result -22) [ 1240.997256][T27472] block nbd2: shutting down sockets 13:28:23 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9$60\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:23 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0xf0ffffff, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1241.245816][ T1530] block nbd5: Receive control failed (result -22) [ 1241.270419][T27493] block nbd5: shutting down sockets [ 1241.295149][ T1530] block nbd2: Receive control failed (result -22) [ 1241.306887][T27500] block nbd2: shutting down sockets 13:28:23 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = epoll_create1(0x0) fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x1}) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x2000000}) r5 = epoll_create1(0x0) fcntl$lock(r5, 0x7, &(0x7f0000000000)={0x1}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0xc0505350, &(0x7f00000000c0)={{0x3, 0x3}, {0x7, 0x9}, 0x6, 0x0, 0x6}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r8 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x100000001, 0x9401552d1f445c5c) r9 = accept(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000001c0)=0x80) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000280)={r9, 0xffffffffffffffff, 0x7ff, 0x4a, &(0x7f0000000200)="e3e7e69192a8cb71ffb7c7b7a3c68d687fc4a37dd08db86f93f1c488773bd7b6aa34de6262779bc09573c6916ea3e879fd5e51caf6e67eb861e6dabdda066220118ad152bf1f41502aaa", 0x5, 0x8, 0x6, 0x3, 0xff01, 0x0, 0x3, 'syz1\x00'}) [ 1241.387117][T27500] block nbd2: shutting down sockets 13:28:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/\x01\x00\x81\x00nbd\'\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000080)='./file0/bus\x00', r6, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp6\x00') fstat(r7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r8, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) fstat(r9, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r8, r10) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000040)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000140)=0xe8) r12 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp6\x00') fstat(r12, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r13, 0x0) r14 = socket$vsock_stream(0x28, 0x1, 0x0) fstat(r14, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r13, r15) r16 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r19 = getuid() r20 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp6\x00') fstat(r20, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r21, 0x0) r22 = socket$vsock_stream(0x28, 0x1, 0x0) fstat(r22, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r21, r23) write$FUSE_DIRENTPLUS(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="3003000000000000060000000000000003000000000000000200000000000000fda900000000000090b1000000000000040000008000000004000000000000000000000001000000950000000000000034b70000000000000600000000000000b600000000000000f9ffffff000001000b0000007d02000000000080", @ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="fbffffff010000000000000005000000000000002f0000000000000005000000faffffff2c65746831000000040000000000000002000000000000000200000000000000ff0f000000000000010000009e000000040000000000000091000000000000000300000000000000a309000000000000810000000000000002000000000000000b0b00007f000000090000000000008072060000", @ANYRES32=r11, @ANYRES32=r13, @ANYBLOB="09000000ffffff7f00000000030000000000000009000000000000001400000000000000406d696d655f74797065707070306d643573756d000000000300000000000000020000000000000001000000000000000200000000000000ff7fffff0700000003000000000000003ea4000000000000aa0000000000000005000000000000000800000000000000001000000000000002000000f1000000040000000101000008000000", @ANYRES32=r17, @ANYRES32=0xee01, @ANYBLOB="04000000ff070000000000000600000000000000080000820000000000000000000000010000000000000000020000000000000004000000000000003300000000000000ff7f00000500000003000000000000000700000000000000f7ffffffffffffff460000000000000008000000000000000100010000000000170d000006000000010b0000000000f003000000", @ANYRES32=r18, @ANYRES32, @ANYBLOB="0100010003000000000000000100000000000000ff7f00000000000000000000ff0100000600000000000000000000000000000010000000000000000b0000000000000022d100003f00000000000000000000001f0000000000000006000000000000000000000000800000050000000000000080000000000000006bfa000000800000ffffffff0500000009000000", @ANYRES32=r19, @ANYRES32=r23, @ANYBLOB="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"], 0x330) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000000)={0x1, "f95e31f60890d78902a3b9db48452898df4249c3f27c82edf53a624197dffa7d"}) [ 1241.415476][ T1530] block nbd5: Receive control failed (result -22) [ 1241.423617][T27494] block nbd5: shutting down sockets 13:28:23 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x40000000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:23 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0xf6ffffff, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:23 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9&60\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1241.678391][ T1530] block nbd2: Receive control failed (result -22) [ 1241.697475][T27520] block nbd2: shutting down sockets 13:28:23 executing program 1: r0 = epoll_create1(0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = socket(0x42000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x0, 0x0, &(0x7f0000000000)) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x402, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x43]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 1241.745080][ T1530] block nbd5: Receive control failed (result -22) [ 1241.767939][T27521] block nbd5: shutting down sockets 13:28:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f0000000000)={0x2, 0x1, @raw_data=[0x9, 0x28c000, 0x8, 0x7fffffff, 0x8, 0xfffffffa, 0x7, 0x2, 0x200800, 0xf206, 0x6, 0xf7d, 0x9, 0x100, 0x7f, 0x2]}) [ 1241.820756][ T1530] block nbd2: Receive control failed (result -22) [ 1241.851022][T27520] block nbd2: shutting down sockets 13:28:23 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f00000000c0)={0x1, 0x80, 0x0, 0x7, 0x21f, 0x4}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 1241.897062][ T1530] block nbd5: Receive control failed (result -22) [ 1241.906510][T27521] block nbd5: shutting down sockets 13:28:23 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0xff000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KDSETLED(r1, 0x4b32, 0x7) r2 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x6, 0x440) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4e20, 0x0, @local, 0xeef}}, 0x7, 0x0, 0x4, 0x10001, 0x70}, 0x98) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) listen(r3, 0x6) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") accept(r5, &(0x7f0000000500)=@ll, &(0x7f0000000580)=0x80) r6 = socket(0x42000000015, 0x805, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000007bb90000000000000001000000000000e9000000000000007f00000000000000000000000000000000000000000000000000000000000000020900000600000002000000000000001f00000000000000200000000000000002000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009300"/576]) getsockopt(r6, 0x114, 0x0, 0x0, &(0x7f0000000000)) clone3(&(0x7f0000000480)={0x40500900, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=0x0, 0x7, 0x0, &(0x7f0000000380)=""/1, 0x1, &(0x7f00000003c0)=""/159}, 0x40) syz_open_procfs$namespace(r8, &(0x7f00000004c0)='ns/pid_for_children\x00') getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @loopback}}}, &(0x7f0000000180)=0x84) r9 = syz_open_dev$usbfs(&(0x7f00000005c0)='/dev/bus/usb/00#/00#\x00', 0x9, 0x400) ioctl$USBDEVFS_DROP_PRIVILEGES(r9, 0x4004551e, &(0x7f0000000600)=0x6) 13:28:23 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x60000000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:24 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 13:28:24 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9(60\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1242.135141][ T1530] block nbd2: Receive control failed (result -22) [ 1242.161712][T27552] block nbd2: shutting down sockets 13:28:24 executing program 4: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) [ 1242.315024][ T1530] block nbd2: Receive control failed (result -22) [ 1242.323313][T27552] block nbd2: shutting down sockets [ 1242.323827][ T1530] block nbd5: Receive control failed (result -22) [ 1242.348634][T27559] block nbd5: shutting down sockets 13:28:24 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x1, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f00000000c0)={0x800, 0x6, 0x5, @empty, 'nr0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 13:28:24 executing program 4: syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsetxattr$security_selinux(r1, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:init_exec_t:s0\x00', 0x21, 0x1) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) 13:28:24 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0xff600000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1242.462260][ T1530] block nbd5: Receive control failed (result -22) [ 1242.486292][T27559] block nbd5: shutting down sockets 13:28:24 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x7e000000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:24 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9*60\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1242.608679][ T1530] block nbd2: Receive control failed (result -22) [ 1242.634990][T27585] block nbd2: shutting down sockets 13:28:24 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)={0x10}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) r3 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x9, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f00000000c0)={0xfffffffb}, 0x4) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 13:28:24 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x63cbfb3993c5d23) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1242.743768][ T1530] block nbd2: Receive control failed (result -22) [ 1242.756116][T27585] block nbd2: shutting down sockets [ 1242.810352][ T1530] block nbd5: Receive control failed (result -22) [ 1242.823612][T27594] block nbd5: shutting down sockets [ 1242.824458][ C1] net_ratelimit: 20 callbacks suppressed [ 1242.824466][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1242.840662][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:28:24 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0xfffffff0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:24 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.swap.current\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'vxcan1\x00', 0xa00}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='children\x00') ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000380)={0x10}) r4 = epoll_create1(0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$FUSE_DEV_IOC_CLONE(r6, 0x8004e500, &(0x7f0000000100)=r8) r9 = gettid() ptrace$setopts(0x4206, r9, 0x0, 0x0) ptrace$cont(0x4207, r9, 0x8, 0x807100) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r9, r11, 0x0, 0x7, &(0x7f00000001c0)=')wlan0\x00', 0xffffffffffffffff}, 0x30) ptrace$getregset(0x4204, r9, 0x4, &(0x7f0000000280)={&(0x7f0000000240)=""/26, 0xffffffffffffff74}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 1242.933649][ T1530] block nbd5: Receive control failed (result -22) [ 1242.944100][T27594] block nbd5: shutting down sockets 13:28:24 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9,60\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:24 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0xa6347b2e7bcf2949) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) r5 = request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='/dev/nbd#\x00', r1) keyctl$link(0x8, 0x0, r5) r6 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x20, 0x0) close(r6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PPPIOCSNPMODE(r9, 0x4008744b, &(0x7f0000000200)={0x0, 0xafbca64233826de1}) r10 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x20, 0x0) close(r10) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r10, 0x84, 0x82, &(0x7f0000000100)={r12}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000100)={r12, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x82, &(0x7f0000000100)={r13}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r13, 0x50, 0x1f}, 0xc) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 13:28:24 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0xe0ffffff, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1243.130168][ T1530] block nbd2: Receive control failed (result -22) [ 1243.140491][T27618] block nbd2: shutting down sockets [ 1243.161113][T27626] encrypted_key: insufficient parameters specified 13:28:25 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{}, "f6fc08beac2cd030", "dbf2e4cdb9efbed726db234776c28459c8da0b107804c1697b34a54194485463", "1039defb", "b819ef87306c851a"}, 0x38) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) [ 1243.250187][ T1530] block nbd2: Receive control failed (result -22) [ 1243.258339][T27618] block nbd2: shutting down sockets 13:28:25 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt(r1, 0xe0, 0xffffffe0, &(0x7f0000000040)="34c7fec9d8200bec7beb0f6f11073e839bc7d1c8753156092da8020aef8d5a99aebbd052c8b44a99ced396fc8b482a039dac31bbb87ef7d560b7614adb796888ce9af12cf08704ebef5d7cff7edec0c3268424088cff47b62a36e41cef8987834ab7c8767e99d1bfb231777962b34e93a28e40d780dfb0dc8614186ccdfa30b7e06a0fbf4c0ca32f4286feb7808fb6a65c", 0x91) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1243.321519][ T1530] block nbd5: Receive control failed (result -22) [ 1243.340626][T27633] block nbd5: shutting down sockets [ 1243.384399][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1243.390301][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:28:25 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0xfffffff6, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:25 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9.60\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1243.429983][ T1530] block nbd5: Receive control failed (result -22) [ 1243.455506][T27633] block nbd5: shutting down sockets 13:28:25 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0xf0ffffff, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:25 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000000c0)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x8002000}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r3 = shmget$private(0x0, 0x2000, 0x2c001810, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) [ 1243.625627][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1243.631563][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1243.652232][ T1530] block nbd2: Receive control failed (result -22) [ 1243.670170][T27654] block nbd2: shutting down sockets 13:28:25 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x10000) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 13:28:25 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_FREE_BUFS(r4, 0x4010641a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[0x8, 0x6]}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 1243.819332][ T1530] block nbd2: Receive control failed (result -22) [ 1243.828362][T27654] block nbd2: shutting down sockets [ 1243.852154][ T1530] block nbd5: Receive control failed (result -22) [ 1243.862200][T27663] block nbd5: shutting down sockets 13:28:25 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={r2}, &(0x7f0000000100)=0x8) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 13:28:25 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x400000000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:25 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9060\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:25 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0xf6ffffff, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1244.024391][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1244.030487][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:28:25 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000000)={0x1, 0x5, 0x195}) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f00000000c0)={0x10000000}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 13:28:26 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x8402) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000080)) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0xfffffffffffffff5, 0x5}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000040)=0x3) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) [ 1244.106399][ T1530] block nbd2: Receive control failed (result -22) [ 1244.132111][T27690] block nbd2: shutting down sockets [ 1244.223904][ T1530] block nbd5: Receive control failed (result -22) [ 1244.272041][T27696] block nbd5: shutting down sockets [ 1244.285137][ T1530] block nbd2: Receive control failed (result -22) [ 1244.295084][T27690] block nbd2: shutting down sockets 13:28:26 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @aes128, 0x2, "b7cd84f77735b7cf"}) 13:28:26 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x510000000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:26 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0xcb883) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r3 = dup2(r1, r2) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000040)="d3e84506ba22f538a1b3edc4a98388c3383916be9661c3e59228e7f3b9d02c604a195c07c25e73cb148505970257030918a92a1e2ba45f5be671a4d95c7e525099ec4595882b2bc63c7a5190fe43b35ec864e0c73b5c067a676c0b32e445759f59776729a09e36f1e054d45a6d8ebb821b3e448d76f4c17467d9dbd55470f6999dbe5ef39a") [ 1244.415023][ T1530] block nbd5: Receive control failed (result -22) [ 1244.424397][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1244.430267][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1244.437732][T27696] block nbd5: shutting down sockets 13:28:26 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9260\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:26 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0xff000000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1244.593915][ T1530] block nbd2: Receive control failed (result -22) [ 1244.622039][T27719] block nbd2: shutting down sockets 13:28:26 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='Vdev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 13:28:26 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000000)={'HL\x00'}, &(0x7f00000000c0)=0x1e) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)) r4 = socket(0x42000000015, 0x805, 0x0) getsockopt(r4, 0x114, 0x0, 0x0, &(0x7f0000000000)) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r5, 0x20, 0x70bd27, 0x25dfdbff, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0xe6}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20009004}, 0x40040) r6 = socket(0x42000000015, 0x805, 0x0) getsockopt(r6, 0x114, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet_dccp_int(r6, 0x21, 0x1, &(0x7f0000000140)=0x9, 0x4) lsetxattr$trusted_overlay_opaque(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x1) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") ioctl$FITRIM(r7, 0xc0185879, &(0x7f0000000100)={0x50000000, 0x80, 0xfffffffffffffeff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r9, 0xc1205531, &(0x7f0000000380)={0x0, 0x8001, 0xc16, 0x7ff, [], [], [], 0x6, 0x9, 0x100, 0x5, "cda56383662156a7767cd17a317f3559"}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 1244.751642][ T1530] block nbd2: Receive control failed (result -22) [ 1244.764849][T27719] block nbd2: shutting down sockets [ 1244.770785][ T1530] block nbd5: Receive control failed (result -22) [ 1244.784807][T27735] block nbd5: shutting down sockets 13:28:26 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x60ffffffffff, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:26 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9460\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1244.914227][ T1530] block nbd5: Receive control failed (result -22) [ 1244.924206][T27735] block nbd5: shutting down sockets 13:28:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) 13:28:26 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0xff600000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1245.068528][ T1530] block nbd2: Receive control failed (result -22) [ 1245.094494][T27757] block nbd2: shutting down sockets [ 1245.232903][ T1530] block nbd2: Receive control failed (result -22) [ 1245.246441][T27757] block nbd2: shutting down sockets 13:28:27 executing program 1: r0 = epoll_create1(0x0) socketpair(0x5, 0x5, 0x8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)=0x2341, 0x4) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) r3 = timerfd_create(0x0, 0xc0000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000380)={0xd000400c}) r4 = epoll_create1(0x0) r5 = socket(0x42000000015, 0x805, 0x0) getsockopt(r5, 0x114, 0x0, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ACQUIRE(r7, 0x6430) [ 1245.298541][ T1530] block nbd5: Receive control failed (result -22) [ 1245.309505][T27767] block nbd5: shutting down sockets 13:28:27 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x760000000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1245.425082][ T1530] block nbd5: Receive control failed (result -22) [ 1245.442028][T27767] block nbd5: shutting down sockets 13:28:27 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9560\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:27 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000040)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)) [ 1245.624459][ T1530] block nbd2: Receive control failed (result -22) [ 1245.636258][T27788] block nbd2: shutting down sockets 13:28:27 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0xffffffe0, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1245.746507][ T1530] block nbd2: Receive control failed (result -22) [ 1245.756524][T27788] block nbd2: shutting down sockets [ 1245.772529][ T1530] block nbd5: Receive control failed (result -22) 13:28:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r2 = dup2(r0, r1) write$UHID_DESTROY(r2, &(0x7f00000000c0), 0x4) r3 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400201) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) waitid$P_PIDFD(0x3, r7, 0x0, 0x2, &(0x7f0000000000)) [ 1245.809686][T27802] block nbd5: shutting down sockets 13:28:27 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9760\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1245.887735][T27802] block nbd5: shutting down sockets 13:28:27 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x7fffffffefff, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:27 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080), 0x0, 0x1802) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 13:28:27 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0xfffffff0, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:27 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0)='\xe53)\xa1\x95\xd8\x9e\xc53\x00', 0x0, 0x840) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x1ff, 0x400) ioctl$RTC_UIE_OFF(r1, 0x7004) modify_ldt$read(0x0, &(0x7f0000000000)=""/149, 0x95) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1246.079929][ T1530] block nbd2: Receive control failed (result -22) [ 1246.089834][T27821] block nbd2: shutting down sockets 13:28:28 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) r3 = socket(0x42000000015, 0x3, 0x1) getsockopt(r3, 0x114, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000000)=0x4, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 1246.186264][ T1530] block nbd2: Receive control failed (result -22) [ 1246.207370][T27821] block nbd2: shutting down sockets 13:28:28 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9860\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1246.294096][ T1530] block nbd5: Receive control failed (result -22) [ 1246.313280][T27832] block nbd5: shutting down sockets 13:28:28 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x960000000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:28 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x200, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000000c0)="3d9163bd000000000000008299a8832c", 0x10) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x300050) ptrace$cont(0x4207, r2, 0x8, 0x807100) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000040)={0x6}) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 13:28:28 executing program 1: r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) r4 = epoll_create1(0x0) r5 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000380)) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) [ 1246.448754][ T1530] block nbd5: Receive control failed (result -22) [ 1246.465515][T27832] block nbd5: shutting down sockets [ 1246.539237][ T1530] block nbd2: Receive control failed (result -22) [ 1246.548656][T27850] block nbd2: shutting down sockets 13:28:28 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0xfffffff6, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:28 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, r1}]) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x4, r3, &(0x7f0000000080)="1288e208b9aa3e600446a7a4fb08d64b1478f37ccf1d59047053a4fd35881d2fbe406e0184cc812cb8db80b76ba2de909af48e8881e1c832be75fcc78f2136aeb62530bf686cee7ae717c94824c353c23e83bbca4436e92ac581d957a53929d95147a30566e394c98ca2ae9825fabaf14a4284b45d7e5889b437bbd1125b7a5824b4ba94018d4ca2693ee72d5447a866b40a8dc740acc0b8b3b51e91a31957766af8bcca06c4dc970c2f6698150cf8", 0xaf, 0x9}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x7ff, 0xffffffffffffffff, &(0x7f0000000200)="45ef342a5ceb8b034376665e449abe63b146dd08dd8158c8d44301c5a4177821ddffeab074ab48727ab5f89687b7dc975635418ab220dfaefd48052620958e4cb2be0f95a20d63779fba8a7845909b3f50703e4f0191f3a066f45014126ace96425b28440ba026079845e2945eeb533a9c505a5c54a15affecce7b68ab116d1eab56f9094267e8e001d9e3659da9dcd9114219ccd2345ea0c32ae0430e97cf645f11c2142a49e26c0cf0738f27ad878f73cc3ff90ec1e680c5206a593100056bbc8e24c322a2e792bb83e3", 0xcb, 0x10001}]) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r4 = socket(0x42000000015, 0x805, 0x0) getsockopt(r4, 0x114, 0x0, 0x0, &(0x7f0000000000)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r6, 0x4018aebd, &(0x7f0000000000)) ioctl$KVM_ASSIGN_DEV_IRQ(r6, 0x4040ae70, &(0x7f0000000340)={0x6, 0xce, 0xd2, 0x108}) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000380)={0x2, 0xfd9d19f6, 0x2, 0xffff2c5f}) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000000)={'bridge_slave_0\x00', {0x2, 0x4e24, @remote}}) [ 1246.657843][ T1530] block nbd2: Receive control failed (result -22) [ 1246.666913][T27850] block nbd2: shutting down sockets 13:28:28 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x1000000000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1246.770574][ T1530] block nbd5: Receive control failed (result -22) [ 1246.782247][T27868] block nbd5: shutting down sockets 13:28:28 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9;60\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:28 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 1246.913980][ T1530] block nbd2: Receive control failed (result -22) [ 1246.923778][T27879] block nbd2: shutting down sockets [ 1246.961252][ T1530] block nbd5: Receive control failed (result -22) [ 1246.971341][T27868] block nbd5: shutting down sockets 13:28:28 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000080)=""/3) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000000c0)={0x6, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000140)={0x80000001, r4}) 13:28:28 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x400000000000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1247.077067][T27879] block nbd2: shutting down sockets 13:28:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000100)) syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x4}, &(0x7f0000000080)={0x8}, 0x0, 0x0) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000380)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000040)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$MON_IOCG_STATS(r6, 0x80089203, &(0x7f0000000140)) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x60400, 0x0) ioctl$VIDIOC_S_FREQUENCY(r7, 0x402c5639, &(0x7f00000001c0)={0x2, 0xe, 0x6}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 13:28:29 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x80710000000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:29 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 13:28:29 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9\\60\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1247.278952][ T1530] block nbd5: Receive control failed (result -22) [ 1247.295092][T27901] block nbd5: shutting down sockets 13:28:29 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x4e23, 0x6, @empty, 0x6}, {0xa, 0x4e22, 0x10000, @mcast2, 0x4}, 0x6, [0x3, 0x5, 0xa03, 0x1f, 0x1ff, 0x401, 0x2, 0x2]}, 0x5c) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f00000000c0)={0x5, 0x17, 0x4, 0x2000000, {}, {0x3, 0xc, 0x7, 0x8, 0x5e, 0x3, "aa4c418f"}, 0xffffffeb, 0x0, @userptr=0x3, 0xfffffe7f}) [ 1247.345155][ T1530] block nbd2: Receive control failed (result -22) [ 1247.355780][T27912] block nbd2: shutting down sockets 13:28:29 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x510000000000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:29 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2, 0x0) [ 1247.485438][ T1530] block nbd2: Receive control failed (result -22) [ 1247.494855][T27912] block nbd2: shutting down sockets 13:28:29 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000380)) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f00000000c0)) [ 1247.567843][ T1530] block nbd5: Receive control failed (result -22) [ 1247.585489][T27929] block nbd5: shutting down sockets 13:28:29 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso96\x020\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:29 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0xf0700000000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1247.682072][ T1530] block nbd5: Receive control failed (result -22) [ 1247.691475][T27929] block nbd5: shutting down sockets [ 1247.878210][ T1530] block nbd2: Receive control failed (result -22) [ 1247.887873][T27948] block nbd2: shutting down sockets 13:28:29 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xffffffff, 0x8002) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000380)=""/202) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x2000) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) socket$rds(0x15, 0x5, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt(r2, 0xfffffffb, 0x0, &(0x7f00000002c0)=""/149, &(0x7f00000000c0)=0x95) 13:28:29 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000000)=0x4) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000040)) socket$can_raw(0x1d, 0x3, 0x1) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = socket$inet6(0xa, 0x3, 0x1) r8 = accept4$rose(0xffffffffffffffff, &(0x7f0000001600)=@short={0xb, @dev, @rose}, &(0x7f0000001640)=0x1c, 0x101c00) connect$rose(r8, &(0x7f0000001700)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r9, &(0x7f00000051c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0xc0}, 0x1c, 0x0}}], 0x2, 0x0) getsockopt$inet6_mreq(r9, 0x29, 0x1c, &(0x7f0000001680)={@ipv4={[], [], @remote}, 0x0}, &(0x7f00000016c0)=0x14) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r11, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") getsockopt$inet_mreqn(r11, 0x0, 0x23, &(0x7f0000003940)={@multicast2, @local, 0x0}, &(0x7f0000003980)=0xc) sendmmsg$inet(r7, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000100)="9e9a84bc95bb73444406c4ebbc73089ace88c0487fb77d7e205fb2bcc984b6bbe970bf1c9f3dcbafb1733f8044685aca4a15f557d3ec7ea910519c6d754b051b1ad4da8b439e6dd7711dd0e2868c3e3f04ceaa86b69f04a2ea9ab9b8514ba6929ec3e28eab7e9cad3f38a7e8a40a381c1e3a9732512c0bc8cc2518ed4e1f269bfe3a191dc2a9d377e723515d51542deaf9c2085fb62c84e472f8cb4d85c3834d9f82aeab8b709486dae39611edf5477fb97e12f54aa64b663da6f257c24e3873aa260a5c8651100748852c82a870f2fbbff745cd98e75fdf494fe26a9da2e08531ed9fda", 0xe4}, {&(0x7f0000000200)="708be6", 0x3}, {&(0x7f0000000240)="e059ee71e6d54cb88c7a285297ccbbdab48db2ce3b89cc61f64455539bb6fefb9aacaa83d4758ac1d67df5c3c8d1", 0x2e}, {&(0x7f0000000280)="61f13b2c9387631c82e6ef197e85f20703c8febd7aa39c154966b4e131966d7e5ec58c87f37c34b7fb34aba8319560d62f77d060d0773b7850a6edbe848f6aec5621496d48cc5b4c3f9a95ca2b96ab71960dd3c3d26b14998acd2ef3895931010f6cd677b447a13d46b0bec5877bc3a97a705f17f6419d2465f1d614f3bed78a606448833dc2424f656f375c5517a23183ff049973af99a9c997287d3ab0194baa8091beb17d60e7705d46e17de1095564036cf4efd8bf791134464e575979b3c1b0fc6a32f3af001c", 0xc9}, {&(0x7f00000003c0)="c7705fc0ab879352a32554fd22745de294226e6c17dd3ba2ad46528a05e5749bae4a347ad775918f8b4c5b18c8138ef655e79f26ef280a8babe9650adfea2349aad2857c69e7787f352160615465b7ad0cbad299a8c919caa0ac43ffe9ef19910267057424734f78fa46f2b0ad0bac7cd13c16a1bace12551d6632aebd94acb1a94103738724a909b5c883d9ca60f94887f41b612c7f7e92df72a8e0483c406e73cdc18ccc5a82cbce88331fe656025a32fdc7c9c594443aa339e00bfbd60ea7f67a4b16c96533f20af46146f24f09f015a66249c422c3e7271f2e365709cfd066deba5268c8bb28f002a96baf3c825fcecc002ff1633d8612b18193f0f85797aca9ada79dbb7205cae82033e48f452ac54c33e30e4a0a42fd2f95e984fc57f4f38118b5ebd15c4e98f8ed9df0438c66f270996ded819b9beb129d6b1f1099ba79fd589222af1f4f5844d1c5e9293a05b3477466019ad4185969d263d1e04cdc8a3b9b2c8819afef175838bd273b87e64ddc1c9327f2aed9455b3d360600a6627bcdd7c24c3da387e0de3cafa4805c7e24040a6464c2503c9119e406bfba7977cd79fb1f2a2b3cf8357b87f146fd1d7204e14b1f5258e17548023f2f5392ff33ef92d3f74096f414b1deb230b1e89493376167a13712d27bbf6540a1e1881a3486c018f85797e696533cb9b80385fc592998e0cabe3e406f70923fef1b6e020ada92757a9f517a33c7b0d6e684c70c4b5684330e0ce63eb0c80c3885a21ceb9b42687eb7e212e37df297d85f81ad7a92a50dcdc2367d8f0dcbf8e05efa37250947fcc6fd7059768b73ab8baea0665ff114f2b11a421f1951420744ee1248a10175120820ed95ed783dae67f4d82fc3e1fff8a7b30ac4bc5d3669e23ea39bd635308256f308b8813a25a173054994f6fc4a1bf3c6ea56c94f7145e91c9ac7c90750a980734cdd42865ef27b396c77688632a013a4e843f5dca5797a70e1608e20d90a557092a1d1dbbc3ab3ed3a000fd17006348ec553eb117be48d70c55e9a3ed43ad4efc5e01c8843423e0b01dbd0a129a2224578d629c508fb1c02f443f47027eb24ac2540090ef7a4b126461ec83507a15b3a0ee48b1e6da7bbd1bc926e03c6a19afc7340d849a42a532bd4ac0c0042a4b242daa6fa0b9d20cd3068517de070605f358bf1a6801075638f9b7d96f3d6482cb860aedf883cf43f7ca7f8fd0c9ac29a4ed5b524e439633b297d5873674da9f5166af8d8eaa7d398ecf12f24b66318ad9385671254562306d3812f02c9a6caef4475a4536d4dc20d9316e34f70faa2ad15750aa62193430bd245d4cd7d4fc50f820e21f59cf031554d1ab954f2c1cecd9bbe97320c35dd36a2ac6946dbfdf59d7d62417a1637f970b9ede1628a9e47c880cb69daccf0b79432f021dcbe42df9f39b2161daea12849fec67b539e1a24c14c70b5ce5f418fed62ff12b5f851730b760506b6511137d305b84552b8c8da989cd003f83dfc20d86dba5126a5642d42d10f46bc98aee5cb34b3eee193c05b9d09dac03c4d4756d8d0b664aaa779512a1e73cb6016124f657efd9d8770864bc2cb09dbe2a73813dac343b4435490cdd0a6351366edf172e8de4568f4b5d0cc61d8294e76ca82803219996cc1c9c430dae3101575de4c3682010aa6394ac66cc8609deb2fc719d871adf975d46362abbcf0348f5be929d7311d1be7d5438f57e5fd17fb9a334a57252e7cdd9a53ea6982d8607af56875181cda3e839e765d54e9a635e47ca0b8abfeba4ee4ddada6910eb3d795b84c12d9d32ef9b9292d68c253eb16f49c7ca01d62b5752e01863e2dc9a990669173d9bc00cfc28d328f02a7e39e18d6e2728cc5240e05c716c2befc685eefbc1473218a909dcc548ffbdf391c08b22cceffdaedf1cc1083900b36e3a016df048545496358cd14aad5d2929dfe4f5f7dda58bac476ab9dc6d28e12e186d1b095f94f4ff4e49756b1b80af52aca44e60d5d0a17449dbd8b52693659820e3b7f245913ea4fb19b6a174d3229236666d5b7968553afc61d7ea19a0f92f224290f7d736cbb585419a5f7816e25fcfa91a55973954c6500ae768e4f23ec856e50f6efe64106e344175da094fd6b98fc083f72ce4b8c7ceb9e09404d45414d985e4b8952c963c53f159d9d54d84f53a784bd7eb64b8f1dac1902c63678f27844620d0c908cadf66a7c6ec921c2550cc98741c273c751105ead3808693084a02446e093ed1a6cfc7e12ef6852b409877d34c7ca89042bb6bc80bfa812d2da7e72ce1ecfdb702824ebb7486321ab2ff72f11cbae63c7d537c657e0c9a226459d14035615cfec8f8eca2ff0ef7f9a69ab7d57d4a8d2f67027619fe97c571d3837fcda8aa2a50cf0e27950ac6de62a91f78ce8fbbb71a16ac31f670015bec6845341d93136cda9d5b92ec4ba0612205b55be2e04f125ac7f961c97cde94b123bf6a32fa50b466507354446176a431ff04d5e989f6cba68c239fcdd831f69582e467c0d1db4501a810f7df645438b13b109ae36497a506ba2d472388b7200b7830c44dc141968e022c13ac700d809c6d0d8755c5ea73fdbe4d324e659091d0c2bd7e42902362be8df6eea9c30d77fc7846d465a2a5c33a6c56bb7ccf6cd15f846183b55c97f169bdeffe4b63ae8d67b942e6a89c3bb4c7b8d8ada61e549e960d8f8a0c0775d223c83d50789e51358a5cd293c2cda39885bb1b49cd0f607b13d97d20a6d13e91cf48100c52df3797736565440ae0759a280f9e1af89d33c781c0d320d6cec8101bb04c3903311d5e7516382a3a0570b8e886d4b64cb8a8d952402e1266ec3fe4074a1642e724985f3413c063b8a3d02165da9a4f2cf9880a09da1fe89ddbcf980a4b873d567f5d152937b94ac51c4b33aa4ca482cfc98e0521d06d632bdb3bce70cc4f6ed18300de026b47d9ee93688aeb545236fb15550fcf64c3e296c4c44e946be28ea8287ee0789a428df249cd082b865cb0cf3dd7e1cc1151ccb91e37d26966b0480556a4ba5654cee9cf8d480cba6b88a18e77c7161c9f3d89077965447f971f706492a060c3e6da280e282ea24744de2833f914f43dd45f26f1cbfc853f4582fc68c3949bbbbc51406d1379cee48aa3d8185d6064b52b5c9235f7ee2c9cba5e598f7edf5e7a8133d43d91b5049d6f2cb1a71fdb4fc2def7886fab626f81e16387a55ba0927fed08038fb1796f5b09c020318efa0a22b7838e0c62ce30e074023f59e3d7eaa32952ee785992e9aeb67d7dbd57cb397d6e6bd6ede87925c0f5ef80ce702aa01ad72c50437aed86967a3e18ebb017c1f1c1d57ad44f57dedb6ea8969871b996fec44aad7c9d806adac80bb066ea2f14635cf2136fdd9edeb04c7e3c151366892cecac353140c34e9c86bde3d0bc76b02297290cab0113c61ed68f35119bf863831a16934ee1fd52f2bcc95de60524812381652cc8219aed303e3377fb3171117c74a8c4c9a78f36e19600ffcbd594e4102d3006ad0514e38cc478ff3bc6eac81df801f52e71aca5d57557f467e41d655c0a1b4fdbb363e8dccacf95400845659ca572ba460343f82a9d3b309715c6b47bfd0daed4ce4348a76b16230f79267d7f980b9e7e71fcf6308e8f0adc9dab59ab865a39ad4079ae99faef80becab6405fb598a5ec5ea161bca5bc2c4977497cf038e9933c835ef4d0acbd153d841f4bd5c2258e1ea470cdb965bdd590107bc3611ebcd8793c259aa651f5522fb3ff484c2ca7c73fbb01392b54cf4df5931898698a4fc8106d1f340adbf58f66d18a891b6a7107a0138c0f1a711d8a4a769bb7d8470cbd58133081cee54b618654e5ad1b760f57668539c6739ceef2a5c3233d22ce4161e30179f89da1de0646608ffb48df070f83e511cf5f0576076702dcf7574b81197e93b61c3ce4e5cc971854d15c262219780a55bb2daaf2f39e650c7339fbcc64764298834dad9993f42ba18270cd3d7ac25e9d27c35b432e707fddeba8cc2a41866c9e99a09ed81e79abec25eaef5a87cb6255070dc6ac96909a1a792f573df8515ece2353203d6177ea09c969f83c7954b5e2ba0ea0dcfea4378e3203695031e0ecd55131bba507b9680b2efcb3fd35321c15d44123dfb2a9fafd6cb6b80385afb8e0d22f0ae58dbe2043237f95da9342fdf3b5be38e4e14f8e938c4af0d54546f7e2577dc317a5fbf40d8a7c12f4794ae87e1b49ca95a25ba57948fa1d997f34f553ea02f1c904161c5c4029df0372b2b640068f4b85aec2cd20a29261dbb200a7ab30a5de4a87935f7660017dded00b6be6b8d90642dbc1bb998852b142fa4b02f795f95112ee250f8678f7e2b0861c05797a194ead6579891fc1afa0d3da8fe73219fc4c4a7ef55b37ebe3aac158b32312740ef8834ff28711482ff62f264b3f4b31d1cd5bfc9ee5ffa71e9201740ba546e8b08e50c4774eae85b667a7113797fe9a1514c3dc77cab50dca0ef7cea3edd315efc0b6819564c1b6a546edaa75abbabfcf20a48e7d604b4d124f6defe4511a9d87db272ef507ad336c6939172691f2d4527b5e22655eda694e707ef3e9b7b59bcd2b98a7c677c76ea938fb7da56073146d4f1cc5665aedb575a1e4c92a462e7f4ec23fcea73eb4c5da69a713efc1ea4ae284dafc705d464c0d03797bc59cb6c5a1b35884fe3f174ea71e3b26e33bfda59e1477c920b758b4fe6218b97f74c96b22e853c8b1584cb9474944a387960e172be754e3d5f9845890b6a067cfa1a6811f6243a181d2529f3764c43fec694f5f58f4c51a6847686d7e521f973090fa78ecc4b0fa51ab6929a2db0687c6942894965a2244e028c11f52f3e2796fc4cfc1f55843444c45a65dc9f4507e3b427773a4c7df302d819aac960fdeb90cdaa2b8767bb7451897d96a945037cf4ea2746dcdb53caf190ec1073ba8d28dcd095bf1753f6a0269f390ddc29ea26fd0cf18f7477233521fd196b422966e2d89cb44c4483cf1c6c053c7a47d792784720b185d8a345ffdeefa62245bb50cea11e387a883d7662a7b13d9913ce258b073a7f42498b9694488fbc993619b87761f5147377033c6c36eaa0052c287d14daed36edc5cebfc79e50d9866884acc0759d7ac8d62b19617b0f6ac16ca7c78b10f6ad24c6f59f9e700f832641d0644cfabd3121855abc086d601cfbb1ec14c5aaa2836e3d9ffa2e609e814511c6361129d401e31d333bf9bddffea70c026de625091eebc1e3fd7389f843189f88b4d03a14db6867c3817d1c73ec9baa2c53619e8480c7475c278562b183ef80ca5c43364859b34ec1e79b3fdb794877ee2ba1a25cba36106390be1cd1ef15aecba6d565db3d508b80df3d8c6e1884bfb1040e3c9347b13e4eccb7f271ba0e9e3db591be59ca89028a15354f59c2dce9d84cc238c04b7da13e209db79558d1811bbe642783933b15021613fcc506a62cc5d093ce68275b4768d092d2e5c6f75f4a750fb83dd52ad9e9caa93a8a9c372d02f6ebbc944228f024dbe16650732b92a33f83e4dc630740fb7eee8162846d972483d27fb9988b03ccd74f14e3eb6ce1d277acbcf738359cc3dc8543e46915baa6106f8a89b673a292827859562488b37708e9e03f722fe2e51e1690af22368fecccb397ce09d1f7b315270292fac481cb25c66aad2c0e93936ccd9f18441e1c3033d9ad79d2a218f0e6359dcced6e77b615c19eee59d98c9597d5827736ccb5f3d389898c53789c0974e115a519e1e5bc9c94dbe6bece18fac31e4070086353a2b9aa7ce59fa665565506c53c6a369677", 0x1000}, {&(0x7f00000013c0)="cd7f62d097de463df0a234fb6c42bc70191308b338383810163048d093a7a92f82b56bdf17853c970e5f0dcef2c3bc3069c2adcd1fe8a998e1ade2f27dd09709f50ecb6667868292a4e986fab72f47be641fac93d690c77e3efcba874f9ce4c8942c0f8e3f390e39b4e918955ee65299f2e4fe045b8a7bd61d6bd19a6666850c04528c9ebbf4fd88c31790307a0219e08e6438", 0x93}, {&(0x7f0000001480)="8f2613d56407f338c670c9ef8e2bb3bc83871f8eabb09590d068ee1c69ae8dc1cc6b215e55e453425caeae5cefd654eaa3159c73f970e59d3acabcda1abd8a0921cec690d65569c30d9d65f5bb3c1d8691550241c30d381d3b195cae062b408026d0c45f882eb0e6f0f3d598ee684cf294e23e84e224c218a2864d0490c66155fb172d06", 0x84}], 0x7, &(0x7f00000039c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7fff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @loopback, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @multicast1, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfe}}], 0x88}}, {{&(0x7f0000003a80)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000003c00)=[{&(0x7f0000003ac0)="83075fdb8c903184e7d97fa177fd666b027caeb3cfbcafea9b3f2fd215793792761545d8fea149", 0x27}, {&(0x7f0000003b00)="d3f83634855a86f7111d73e9cd46ada33f14f76b30f3b61fe51462465222b34bf8aec6be81baa808e3ea77cda0c25704e5d9f4338130d45f7a83095ac87b4b7afb52287649a0844edb383a04c2feb1172d439dfa37daca72d5fb745fc9fd106e9eb85d1ce2692aec84caa482c3825f4b5c0f6b174ff9e1c354e0af9b0446272950fd6f2b58da912b4b6eac91cb2210bb36d1518c44c25c82db5a6f7b1f4b4764822914a5e782f405f867b232badfe9677db920ad33754c6c58f796d5740b1b1e5e8a0739c2f5e4205323a9231de1700ca4fe11ae44801da9922cf635a0", 0xdd}], 0x2, &(0x7f0000003c40)=[@ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x30}}], 0x2, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) connect$inet6(r7, &(0x7f00000015c0)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, [], 0x25}, 0x4}, 0x1c) write$FUSE_GETXATTR(r6, &(0x7f00000000c0)={0x18, 0x0, 0x3, {0x804f}}, 0x18) 13:28:29 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x60ffffffffff, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:29 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r4 = socket(0x42000000015, 0x805, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) getsockopt(r4, 0x114, 0x0, 0x0, &(0x7f0000000000)) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000080)=0x1, &(0x7f0000000140)=0x1) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x100) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 1247.968559][T27948] block nbd2: shutting down sockets 13:28:29 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xd7a5bde802c620d9, 0x4) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000140)='#/trustedcgroup\x00', 0x0, r0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r5 = fcntl$dupfd(r4, 0x406, 0xffffffffffffffff) r6 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xbc7, 0x222001) accept4$rose(r6, &(0x7f0000000080)=@short={0xb, @dev, @rose, 0x1, @netrom}, &(0x7f00000000c0)=0x1c, 0x800) ioctl$BLKSECDISCARD(r5, 0x127d, &(0x7f0000000000)=0x10001) [ 1248.021683][ T1530] block nbd5: Receive control failed (result -22) [ 1248.032456][T27966] block nbd5: shutting down sockets 13:28:29 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x100000000000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:29 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso96\"0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1248.135433][T27966] block nbd5: shutting down sockets 13:28:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000000)) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000380)) r4 = epoll_create1(0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000040)) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{}]}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) [ 1248.184380][ C1] net_ratelimit: 20 callbacks suppressed [ 1248.184388][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1248.195982][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:28:30 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x760000000000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1248.284106][ T1530] block nbd2: Receive control failed (result -22) [ 1248.295879][T27982] block nbd2: shutting down sockets 13:28:30 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0xb, 0x1, 0x7, 0x8800}) 13:28:30 executing program 1: r0 = epoll_create1(0x80000) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 1248.432224][ T1530] block nbd2: Receive control failed (result -22) [ 1248.441073][T27982] block nbd2: shutting down sockets [ 1248.515266][ T1530] block nbd5: Receive control failed (result -22) [ 1248.554515][T27999] block nbd5: shutting down sockets 13:28:30 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso96$0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1248.584436][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1248.590278][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1248.664401][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1248.670285][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:28:30 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000140)={0xd, 0x5, {0x53, 0x1ff, 0x6, {0x0, 0x1}, {0xfff9, 0xff00}, @cond=[{0xff, 0x7, 0xfff8, 0x3, 0x8, 0xc3}, {0x8001, 0x7ff, 0x8000, 0x8000, 0x643, 0x3}]}, {0x2, 0x1ff, 0x7, {0x6, 0x7}, {0x3, 0x200}, @period={0x59, 0xff38, 0x0, 0x3, 0x9, {0x8, 0xf801, 0x5, 0x200}, 0x1, &(0x7f0000000080)=[0x5]}}}) write$P9_RXATTRWALK(r2, &(0x7f0000000000)={0xf, 0x1f, 0x2, 0xbbb}, 0xf) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_GET_DEBUGREGS(r6, 0x8080aea1, &(0x7f0000000200)) 13:28:30 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso96&0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:30 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x200000000000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:30 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x18202) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_JPEGCOMP(r2, 0x408c563e, &(0x7f0000000000)={0x401, 0x8, 0x31, "701dca20156a4b8ed84511f4f8407c4cbdf01514c693d238cb0d183b7028df460aea82ebfd6d03adce1d6a55cbbcc82df945b19454e68e7b6b0e4816", 0x1a, "123404d53ff308f851b1b4a240f56031c191dc6126fd033a8808c3c8e28bff4b41414c259173f66a3f59acbbe68dc5ef0da8b885c3a0224e3bcd5bc2", 0x8}) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 13:28:30 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x7fffffffefff, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:30 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) epoll_create1(0x0) r2 = dup(0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f00000000c0)={0x1000, 0x44, 0x3, 0x8, 0x12, 0x20, 0x1, 0x7f, 0x3ff, 0x8}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0x4}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_G_FREQUENCY(r6, 0xc02c5638, &(0x7f0000000040)={0x7fff, 0x3, 0xb7}) 13:28:30 executing program 4: syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) [ 1249.044951][ T1530] block nbd2: Receive control failed (result -22) [ 1249.053867][ T1530] block nbd5: Receive control failed (result -22) [ 1249.062327][T28028] block nbd2: shutting down sockets [ 1249.067788][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1249.067846][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1249.070009][T28031] block nbd5: shutting down sockets 13:28:31 executing program 1: r0 = epoll_create1(0x80000) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)={0x40000002}) r2 = socket(0x42000000015, 0x805, 0x0) r3 = socket(0x42000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x0, 0x0, &(0x7f0000000000)) bind$vsock_dgram(r3, &(0x7f00000001c0)={0x28, 0x0, 0xdecc91fb6e7c5de4, @reserved}, 0x10) getsockopt(r2, 0x114, 0x0, 0x0, &(0x7f0000000000)) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f0000000000)={0xa, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 13:28:31 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 1249.175248][ T1530] block nbd5: Receive control failed (result -22) [ 1249.183554][ T1530] block nbd2: Receive control failed (result -22) [ 1249.193509][T28031] block nbd5: shutting down sockets [ 1249.200625][T28028] block nbd2: shutting down sockets 13:28:31 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso96(0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:31 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x300000000000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:31 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x960000000000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:31 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = socket(0x42000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x0, 0x0, &(0x7f0000000000)) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) ioctl$IMCLEAR_L2(r2, 0x80044946, &(0x7f0000000000)=0x82) [ 1249.475448][ T1530] block nbd5: Receive control failed (result -22) [ 1249.484452][ T1530] block nbd2: Receive control failed (result -22) [ 1249.501252][T28065] block nbd2: shutting down sockets [ 1249.503856][T28064] block nbd5: shutting down sockets 13:28:31 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace$cont(0x7, r4, 0x4, 0x807102) fcntl$lock(r3, 0x5, &(0x7f0000000000)={0x2, 0xada040f1001288a8, 0x3ff, 0x1f, r4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socket$inet_dccp(0x2, 0x6, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") ioctl(r7, 0x81, &(0x7f0000000100)="0800b5055e0bcfe87b0071") r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rfkill\x00', 0x100, 0x0) r11 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000240)={0x1001}) r12 = socket$inet6(0xa, 0x2, 0x0) r13 = socket(0x10, 0x80002, 0x0) connect$netlink(r13, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0xa) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r14}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1, 0x8b14570151ee72f9}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}}, 0xe8) r15 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000080)='./file0/bus\x00', r16, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@loopback, @in6=@rand_addr="a656e6715b2e8180144c80d931a83842", 0x4e20, 0x418, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x33, r14, r16}, {0x81, 0x2, 0x2, 0x6, 0xb8, 0x7f, 0x9, 0x7870}, {0x4, 0x4, 0x7, 0xfff}, 0x3, 0x6e6bbb, 0x1, 0x2, 0x1}, {{@in=@multicast2, 0x4d5, 0x2b}, 0x9afa15de12bf63e4, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3503, 0x1, 0x2, 0x4, 0x6, 0xffffffff, 0x3ff}}, 0xe8) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 13:28:31 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xfff, 0x240000) write$P9_RCREATE(r1, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0x64, 0x1, 0x7}, 0x7f}}, 0x18) [ 1249.614566][ T1530] block nbd5: Receive control failed (result -22) [ 1249.624411][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1249.625422][T28064] block nbd5: shutting down sockets [ 1249.630324][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:28:31 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x400000000000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:31 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso96*0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:31 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f00000003c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000100), r6, 0x2}}, 0x18) mount(&(0x7f0000000400)=@nullb='/dev/nullb0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='mqueue\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x28) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 13:28:31 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x1000000000000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:31 executing program 4: stat(&(0x7f00000024c0)='./file0\x00', &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x7, &(0x7f0000002400)=[{&(0x7f0000000080)="56790a69310dfa7569fa6383c12d7bcf1cdf715956b3dc7fa741deff2d4562cf98f045b07ddb06ccb77b26718f3ef2e4d36f8e10819799cdb48b37ed147ccecce8d031379eab293ced4b98ae0dc08db7e6e9755dd92ad1b5a73edad7d50bf18e57d342e7a2dbdf7e2c967b09abae6ecf77cf7a46297b9386d88ef630353bb394f683ca271f81deed03c5b944", 0x8c, 0x31595dcb}, {&(0x7f0000000200)="79f76097da879d191e7a988f5eee3b7a55a5813bc0bc0357ee0d17bfbc29be15d8cacf29411528d130ed743f71160d642f78e6e0d155f8b26206b74ec2375e3e81af559f19459079b774461590bd71268a3c67b5de9b8342a694d6d5a377e877b2376f19dce4495d796a42564c9f69826b782726e766177ed77273eecbdee5038d6d149173b4a70af4a87ba0c6867c7dd798b81c57ea7a6328aa22912fae7d55", 0xa0}, {&(0x7f0000000140)="ce0a299e9a680b1578aaae1bc12c9fb3935543c6339a624a02bd20a48059e5a1f7dd01b82e13115833725167dc6c8ffa7553d8dc2ab2d81be26ab0ff8f4ac700164e2a48a5e07144577ff6abcd47c7701d4167f7514c2ea28c02cf0b464de11fee7b1eb23ac3d47ef15a67dd77", 0x6d, 0x2}, {&(0x7f00000002c0)="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", 0x1000, 0x9}, {&(0x7f00000012c0)="b151473c830db8f061d15faa8aa5155e7b5da37a77c0bbf826f2efd666f8229525dd708e95fffd10c59b4a8ceb4d4d0606a977c8e42dacc8c5ce23718b0433fb996fed88ba74fc28adc41a4bab96ec4bf743d7d55f4ef85685d6f4bcad6594971ea9acc73d91dd12893cf34a809e73e4511ea1798244f0f44d5c396cbf6bfbb371b82089df4b88ce0cf192f54c8a2c55812b8967fa062f4f8c7b0238442a336c5a00c9a81425664afc6290e6e4276e", 0xaf, 0x5}, {&(0x7f0000001380)="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", 0x1000, 0x101}, {&(0x7f0000002380)="8bc97e994333053c0a87040236e0598cc71e857a014e9c8157b13dc4d827e7577b108562b44c4dc4e03014e672af49eb94e10bd2d6a7bd159c67c00fc888938ab5f74a5174952dfbaca9c5bc09b468520c2003e01d", 0x55, 0x5}], 0x1c09291, &(0x7f0000002580)={[{@statfs_quantum={'statfs_quantum'}}, {@acl='acl'}], [{@subj_user={'subj_user', 0x3d, '\x95em1-'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@context={'context', 0x3d, 'root'}}, {@context={'context', 0x3d, 'staff_u'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@euid_eq={'euid', 0x3d, r0}}, {@fsmagic={'fsmagic', 0x3d, 0xb8}}, {@audit='audit'}]}) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) [ 1249.951471][ T1530] block nbd2: Receive control failed (result -22) [ 1249.971768][ T1530] block nbd5: Receive control failed (result -22) [ 1249.980682][T28092] block nbd2: shutting down sockets [ 1249.985236][T28100] block nbd5: shutting down sockets [ 1250.068028][T28100] block nbd5: shutting down sockets [ 1250.086223][ T1530] block nbd2: Receive control failed (result -22) [ 1250.105199][T28092] block nbd2: shutting down sockets 13:28:32 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r1 = userfaultfd(0x180000) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000000)={0x5, 0x2, 0x3, 0x3}) 13:28:32 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso96,0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:32 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 13:28:32 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x80710000000000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:32 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x500000000000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:32 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) keyctl$session_to_parent(0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f0000000000)=r6) [ 1250.314572][ T1530] block nbd5: Receive control failed (result -22) [ 1250.346267][T28135] block nbd5: shutting down sockets 13:28:32 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L+', 0x81}, 0x28, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1250.447734][T28135] block nbd5: shutting down sockets 13:28:32 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso96.0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1250.479528][ T1530] block nbd2: Receive control failed (result -22) [ 1250.489239][T28145] block nbd2: shutting down sockets 13:28:32 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x401, 0x0) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x200, 0x7d, 0xdb, 0x5}, {0x5c, 0x0, 0x57, 0x8000}, {0x4, 0x9, 0xca, 0x7}, {0x4, 0x0, 0x2}]}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_GET_FPU(r5, 0x81a0ae8c, &(0x7f0000000140)) 13:28:32 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0xf0700000000000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1250.584165][ T1530] block nbd2: Receive control failed (result -22) [ 1250.599436][T28145] block nbd2: shutting down sockets 13:28:32 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4ec, 0x10000) r1 = open(&(0x7f0000000180)='./file0\x00', 0x10000, 0x40) r2 = socket(0x42000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x0, 0x0, &(0x7f0000000000)) connect$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x2, 0x2, 0x276, {0x2, 0x4e22, @broadcast}}, 0xffffff4b) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000200)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000240)=0x79f) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="6e19b6d26705dbe16b412f4fbc8c06678294f8bf40b14b9f85daa24df424027a4936ed5651475ebf5a196d027baeb41bffcf7521f70ee2aba0ad167b1585a1d7b6eb6de27a7431c48a56aef2929d1d00619c54686d3ea85d0c6884d4904ca73b304f6d9763425c2e91103c9465c29e709bd674a5b4b2f4a11e7620dc75193e667bd1cb55", 0x84}], 0x1, 0x34) [ 1250.728669][ T1530] block nbd5: Receive control failed (result -22) [ 1250.745765][T28165] block nbd5: shutting down sockets 13:28:32 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x600000000000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1250.832567][ T1530] block nbd5: Receive control failed (result -22) [ 1250.844907][T28165] block nbd5: shutting down sockets [ 1250.977567][ T1530] block nbd2: Receive control failed (result -22) [ 1250.989227][T28182] block nbd2: shutting down sockets [ 1251.040876][ T1530] block nbd2: Receive control failed (result -22) [ 1251.049866][T28182] block nbd2: shutting down sockets 13:28:32 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x100000000000000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:32 executing program 1: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000380)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 13:28:32 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9600\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:32 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x26002) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000051c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0xc0}, 0x1c, 0x0}}], 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000100)="de785fde256b4e1265e5315c8da38f7449ed81052d8c386dd31d9a40b1e0361902b6bb264f8df269b8c07e23935990d004f021ad367e5d8b1b2536b3c9be7c56b03560f450b4d0173b2ec34a115e95a6cfbc53d020c4a065ce3ed7", 0x5b, 0x80, &(0x7f0000000180)={0xa, 0x4e21, 0x9, @remote, 0xe6c7}, 0x1c) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) io_setup(0x9, &(0x7f0000000000)=0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x800, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f00000002c0)=0x10) r4 = dup(0xffffffffffffffff) io_cancel(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0xb6, r4, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x6, 0x7, 0x0, 0x3}, &(0x7f00000000c0)) 13:28:33 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x42000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x0, 0x0, &(0x7f0000000000)) r3 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x20, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x82, &(0x7f0000000100)={r5}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000380)={0xfba4, 0x9, 0x1, 0xffffffc5, 0x1, 0x7fffffff, 0x8, 0x5, r5}, &(0x7f00000003c0)=0x20) r6 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$MON_IOCQ_URB_LEN(r6, 0x9201) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = socket(0x42000000015, 0x805, 0x0) getsockopt(r9, 0x114, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e20, @rand_addr=0x68}, @in6={0xa, 0x4e21, 0x7, @ipv4={[], [], @multicast1}, 0x1}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e24, 0x8, @local}], 0x68) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000080)={0xb1f9, 0x3ff, 0x12, &(0x7f0000000000)="b47a9b5f482ba2265c3c89970c84d56ef7ef"}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)="84f92bf0c928c8aa23de1e53d2f34f3e4e8624e5ad718de53fb09dcb27bcc09bfede7ff0408efbc32ea22f01eb736b7466c9cbd7f19743e17b44203dada325d7c403f32eaa1499f7ecbb44f3a933227984e943f2b6e0087c0d43ec81cab3d35203111dd43e3c618d00fd546d80df55c4548c3054074199b8ce2ed4b1ebb600081d3832e38b426d4d2ef36a1bdd520f47170106eed82247b17085df488c256e1afb560bbc58e205edaa99618cb74f50010f950d497c29f6ebb3ab11db91fe72c5ec7a6b4ed0574185ca91d49db6ba3b199be68678a26fc1fe68f13ba8", 0xdc}, 0x68) mkdir(&(0x7f0000000340)='./file0\x00', 0x817c1f1503871cbd) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) r10 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x10001, 0x10000) ioctl$DRM_IOCTL_GET_CTX(r10, 0xc0086423, &(0x7f0000000300)={0x0, 0x1}) 13:28:33 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x700000000000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1251.292529][ T1530] block nbd5: Receive control failed (result -22) [ 1251.302313][T28195] block nbd5: shutting down sockets 13:28:33 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0xc200, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x7) r3 = epoll_create1(0x0) r4 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_INFO(r4, 0x3, 0x0) shmctl$IPC_INFO(r4, 0x3, &(0x7f00000000c0)=""/168) r5 = gettid() r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000080)='./file0/bus\x00', r7, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={r5, r7, r9}, 0xc) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 1251.335183][ T1530] block nbd2: Receive control failed (result -22) [ 1251.346906][T28210] block nbd2: shutting down sockets 13:28:33 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9620\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1251.421095][ T1530] block nbd5: Receive control failed (result -22) [ 1251.455074][T28195] block nbd5: shutting down sockets 13:28:33 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x4, 0x4}}, 0x10) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000080)={[0x7, 0x4, 0x39e3, 0xfffffffffffffffb, 0x3, 0x6, 0x4, 0x23d, 0x10000, 0x1ff, 0x6, 0x1010, 0x8, 0x2, 0x6, 0x28], 0x10000, 0x800}) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) 13:28:33 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000080)={0x16, 0x4, 0x1}) [ 1251.471032][ T1530] block nbd2: Receive control failed (result -22) [ 1251.480496][T28210] block nbd2: shutting down sockets 13:28:33 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xe0002002}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x2710, 0x1, 0xf000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 13:28:33 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x200000000000000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:33 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x800000000000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:33 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r3 = dup3(0xffffffffffffffff, r2, 0x100000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000000c0)={r4, 0x8}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@remote}]}]}, 0x24}}, 0x0) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 1251.773757][ T1530] block nbd5: Receive control failed (result -22) [ 1251.783277][ T1530] block nbd2: Receive control failed (result -22) [ 1251.803929][T28244] block nbd2: shutting down sockets [ 1251.813427][T28245] block nbd5: shutting down sockets 13:28:33 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x20, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") dup(r2) close(r1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x82, &(0x7f0000000100)={r4}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={r4, 0x9}, &(0x7f0000000140)=0x8) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000000)="abcd41e83cc6c0bde9e28dbb756e83d8ecd49093ab1b338642b0b2dfce7441d0c70ac6e1e746b2338f687ff351b5f6abe4bbc1e5583c486b62cdb6595ab74f9a1118dfaa2e82fdefd3e1abaa7ed34c9ab97ed0637b691cb499c91c6bd8edc93fd585a7e10571b99a13c8360eb9d043f78ea71df877c5154ad988ef88262f0784a356d61a9251a066a0ce4ab7ff4667aaf7f68b5467ca8afd8c41229f99dcad57fabb70eaa86e10ed3c4b9092938b11ff3505c68f1b749491a3fb0e4df467d749c9097ccc16ba3d018ef5927da5a50ad2fc3fa4097803cd5fa14179775bce19fa816a24716abd113cb85d520f6b148c97d3739525b2605bd2006a0dd68421d971") 13:28:33 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9640\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:33 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 1251.906509][ T1530] block nbd2: Receive control failed (result -22) [ 1251.915005][T28244] block nbd2: shutting down sockets [ 1251.923592][T28245] block nbd5: shutting down sockets 13:28:33 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x2000000000000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:33 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x300000000000000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:33 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) sendto$inet6(r2, &(0x7f00000000c0)="d1a7061c47344bb5ae68bb677e02e479a9e112676bd41590600fc45bf3256136b5ffe85a876cbf5d61c1e7d98f9b13252c66643d7d64e11ada6f82778ec260b3e5e6eb1d0e4ab9563d30281a55c48e9d67810580fd4a06b16f83e74e530c0ca35e896afc3163d23bc7af18305ca7d62bb72b44e780cf91a065b9bb9478d9e153e60e7526b0b478b81af4ea2a5164920c22a0c0ffabd9aa253c669d46c5afb55d2657526e03", 0xa5, 0x8, &(0x7f0000000000)={0xa, 0x4e22, 0xb253, @empty, 0xffffffc0}, 0x1c) prctl$PR_GET_TSC(0x19, &(0x7f0000000080)) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 1252.163233][ T1530] block nbd5: Receive control failed (result -22) [ 1252.174692][T28279] block nbd5: shutting down sockets 13:28:34 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9650\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1252.222080][ T1530] block nbd2: Receive control failed (result -22) [ 1252.231287][T28283] block nbd2: shutting down sockets [ 1252.287185][T28279] block nbd5: shutting down sockets 13:28:34 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='\xd2-\x00\x00\x00\x00\x00\x00der#\x00', 0x0, 0xc69d71cb7c0c36c9) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000080)={'lapb0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 13:28:34 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x3000000000000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:34 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x400000000000000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:34 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1, 0x400000) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000200)={0x8, 0x8001, 0x9}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f00000000c0)={0x4, 0xfffe, 0x20, 0x4}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000380)={0x883f6f2f61b955d5}) r5 = epoll_create1(0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000001c0)={0x1}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r6 = socket(0x42000000015, 0x805, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000180)=0x100, 0x4) getsockopt(r6, 0x114, 0x0, 0x0, &(0x7f0000000000)) bind$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x2710, @reserved}, 0x10) [ 1252.496349][ T1530] block nbd5: Receive control failed (result -22) [ 1252.527890][ T1530] block nbd2: Receive control failed (result -22) [ 1252.539910][T28301] block nbd5: shutting down sockets [ 1252.546208][T28303] block nbd2: shutting down sockets [ 1252.609581][T28301] block nbd5: shutting down sockets [ 1252.629625][ T1530] block nbd2: Receive control failed (result -22) [ 1252.639502][T28303] block nbd2: shutting down sockets 13:28:34 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) 13:28:34 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DISCONNECT(r0, 0xab08) 13:28:34 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9670\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$caif_seqpacket(0x25, 0x5, 0x2) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000080)='!bdev\x00', 0x0, r1) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) r3 = epoll_create1(0x0) r4 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x1802) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000380)) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) 13:28:34 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x500000000000000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:34 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x3f00000000000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1252.920766][T28334] block nbd5: shutting down sockets [ 1252.930466][ T1530] block nbd2: Receive control failed (result -22) [ 1252.946376][T28336] block nbd2: shutting down sockets [ 1252.985765][T28349] block nbd4: NBD_DISCONNECT 13:28:34 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) r3 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x200, 0x400000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x2001}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r4 = socket(0x42000000015, 0x805, 0x0) getsockopt(r4, 0x114, 0x0, 0x0, &(0x7f0000000000)) [ 1253.007951][T28350] block nbd4: NBD_DISCONNECT 13:28:34 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9680\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1253.058777][ T1530] block nbd2: Receive control failed (result -22) [ 1253.074839][T28336] block nbd2: shutting down sockets [ 1253.090844][ T1530] block nbd5: Receive control failed (result -22) [ 1253.098876][T28335] block nbd5: shutting down sockets 13:28:35 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) timerfd_create(0x4, 0x80000) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xffffffff00000001, 0xbe1f1038ba7a4af3) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") setsockopt$sock_void(r2, 0x1, 0x48, 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/159) 13:28:35 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x600000000000000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:35 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x4000000000000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1253.224774][ C1] net_ratelimit: 21 callbacks suppressed [ 1253.224784][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1253.230685][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:28:35 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7, &(0x7f0000000140)="0880b5055e0bcfe87b0071") r4 = fcntl$getown(r3, 0x9) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0xc) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") ioctl$void(r1, 0xc0045878) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) write$P9_RRENAME(r9, &(0x7f0000000180)={0x7, 0x15, 0x4b4}, 0x7) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r10, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") kcmp$KCMP_EPOLL_TFD(r4, r6, 0x7, r7, &(0x7f0000000100)={r2, r10, 0x1}) [ 1253.353888][ T1530] block nbd5: Receive control failed (result -22) [ 1253.391994][T28368] block nbd5: shutting down sockets [ 1253.432781][ T1530] block nbd2: Receive control failed (result -22) [ 1253.443245][T28371] block nbd2: shutting down sockets [ 1253.504071][ T1530] block nbd5: Receive control failed (result -22) [ 1253.513967][T28368] block nbd5: shutting down sockets [ 1253.536467][ T1530] block nbd2: Receive control failed (result -22) [ 1253.545258][T28371] block nbd2: shutting down sockets 13:28:35 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso96;0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:35 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) mq_open(&(0x7f0000000000)='/dev/nbd#\x00', 0x800, 0x4, &(0x7f0000000040)={0x2, 0xffffffffffffffff, 0xfff, 0x4, 0x7, 0x3, 0x8000000000000000, 0x3}) 13:28:35 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bind$nfc_llcp(r3, &(0x7f0000000180)={0x27, 0x0, 0x8, 0x1, 0x4, 0x0, "759bd7de7a5cc8bae0c39b9c0206416db9f5286183abfaf1e39a23b76a1adf3ff94a29b1d18c0d412688c24b7bfc7719317b356e83ec0c62645f83430a5ea6"}, 0x60) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 13:28:35 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x6000000000000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:35 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x700000000000000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:35 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fanotify_init(0x2, 0x1000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='\x8a2\x10\x00\x00\x00\x00\x00m\xce\x00', 0x987aaf8dc11a7731, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r8) ioctl$SIOCGETLINKNAME(r4, 0x89e0, &(0x7f0000000140)={0x4, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000000)) r9 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ppoll(&(0x7f0000000200)=[{r0}], 0x193, 0x0, 0x0, 0x0) [ 1253.782488][ T1530] block nbd5: Receive control failed (result -22) [ 1253.784393][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1253.796570][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:28:35 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='\x00\x1b\x01\x00\x00\x00\x00\x00\x00\xf2', 0x0, 0x159c80) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) 13:28:35 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 1253.839478][T28396] block nbd5: shutting down sockets [ 1253.845103][ T1530] block nbd2: Receive control failed (result -22) [ 1253.857415][T28399] block nbd2: shutting down sockets 13:28:35 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso96\\0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:35 executing program 3: setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000000)=0x3f, 0x4) r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x4001fb) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 1253.916547][T28396] block nbd5: shutting down sockets [ 1253.976464][ T1530] block nbd2: Receive control failed (result -22) [ 1253.984992][T28399] block nbd2: shutting down sockets [ 1254.024393][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1254.030354][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:28:35 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x800000000000000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:35 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x20000, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f00000000c0)=""/4, 0x4, 0x5, &(0x7f0000000140)={r1, r2+10000000}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10002, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) r4 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x9, 0x20401) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) 13:28:35 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x7e00000000000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:36 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace$cont(0x4207, r4, 0x8, 0x807100) ptrace$cont(0x4207, r4, 0x8, 0x807100) ptrace$peek(0x3, r3, &(0x7f0000000100)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xa0000008}) [ 1254.224209][ T1530] block nbd5: Receive control failed (result -22) [ 1254.265229][T28437] block nbd5: shutting down sockets [ 1254.283095][ T1530] block nbd2: Receive control failed (result -22) 13:28:36 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso966\x02\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1254.315162][T28442] block nbd2: shutting down sockets 13:28:36 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x400341) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = socket(0x42000000015, 0x805, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") getsockopt(r2, 0x114, 0x0, 0x0, &(0x7f0000000000)=0x6) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000000), 0x4) [ 1254.344965][T28437] block nbd5: shutting down sockets 13:28:36 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x2000000000000000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1254.424387][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1254.430212][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1254.432585][ T1530] block nbd2: Receive control failed (result -22) [ 1254.445499][T28442] block nbd2: shutting down sockets 13:28:36 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) pipe(0x0) ioctl$CAPI_GET_ERRCODE(0xffffffffffffffff, 0x80024321, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000180)) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe2(0x0, 0x80800) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x3, 0x1, 0x80000000, 0x6, 0x80, 0xcf8f, 0x1, 0x5d, 0x4, 0x5, 0x8, 0x6, 0xfffffffffffffff9, 0x9, 0x3], 0x100000, 0x440}) ftruncate(r4, 0x200004) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0xffffffffffffffff, 0x14) lremovexattr(&(0x7f0000000040)='./bus/file0\x00', &(0x7f0000000100)=@random={'osx.', '\x00'}) sendfile(r2, r4, 0x0, 0x80001d00c0d0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000200)="bacb9c7495c2f8e40afd132ad5eeacdaf1efb29c276860c86539cb887699d34194f04da775b88a1fc9a554b222499a24b257cf6a86799d948fdf8402b412d21dfba261dc4748b624c563de530985573676916dcc153daded409cdf805fac39640bbba1a2d804bf2ec12cfcb6077f0fbff75d6bd1dbd82e948122caf2d42afc432b9884e7d21d21d33793d3d2328fb4734173e1c9350a68a56af8856266b442b66f8f18b8941d07abf469d6487b342daed348c62bd142f4", 0xb7}, {&(0x7f0000000140)="0b1cd9d50f9038fdc3fd05829975b134e36348c4002913ea53f8c76a71cf912935dc1e8e4e400442e00092ce9f20833b4975577b220b4802b3b1cf25cf066061e7b4971c21cf7d7f1823d81bfa93f69ee73cecb518bcb3bab9025904e1", 0xfffffffffffffe00}, {&(0x7f00000002c0)="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", 0xfa}], 0x3) mknod$loop(&(0x7f0000000400)='\x00', 0x1, 0x1) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000500)) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x6) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000100)) 13:28:36 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0xf0ffffff00000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1254.644578][ T1530] block nbd5: Receive control failed (result -22) [ 1254.654446][T28468] block nbd5: shutting down sockets 13:28:36 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso966\x14\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:36 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = socket(0x42000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x0, 0x0, &(0x7f0000000000)) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000080)='./file0/bus\x00', r4, 0x0) r5 = getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)=0x0) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r9, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r10 = gettid() ptrace$setopts(0x4206, r10, 0x0, 0x0) ptrace$cont(0x4207, r10, 0x8, 0x807100) r11 = perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x2, 0x3, 0x80, 0x61, 0x0, 0xac, 0x80000, 0x39bf523f1c26e4d6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3ff, 0x0, @perf_config_ext={0x9, 0x40}, 0x11182, 0xffffffffffffffe0, 0xfffffffa, 0x5, 0x8b40, 0x9, 0xfff}, r10, 0xa, 0xffffffffffffffff, 0x12) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r12, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000780)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000007c0)=0x0) r15 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r15, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000000800)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000900)=0xe8) r17 = getegid() r18 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r18, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r19 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r19, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r20 = fsopen(&(0x7f0000000940)='openpromfs\x00', 0x2) r21 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r21, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r22 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r22, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r23 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r23, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r24 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r24, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r25 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r25, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r26 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r26, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r27 = socket$inet6_udplite(0xa, 0x2, 0x88) r28 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r28, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r29 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r29, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r30 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r30, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r31 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r31, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r32 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r32, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") lstat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00)={0x0}, &(0x7f0000000b40)=0xc) r36 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r36, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") fstat(r36, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) r38 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp6\x00') fstat(r38, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r39, 0x0) r40 = socket$vsock_stream(0x28, 0x1, 0x0) fstat(r40, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r39, r41) sendmmsg$unix(r2, &(0x7f0000000d80)=[{&(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000440)="fb04dbc606a3aa5af60e", 0xa}, {&(0x7f0000000480)="40c275e565de04de430a948ec832dc45c3388937b84f09a3bcee29f50010bcf66e948ca6b2684224130798ae067526d9868810b8284eca09e5d65fc26d2cd639c0cbef169dc1eeda74c838ac620729afa11819bec48452097d577f9bb31ff0dd7ab14948c8c490f7e9e11286eca4fa68308d2e2f7c01c24c8dd2f6f374e2a71e7ea0cd617eb161a685cba6e9cf2a00aec6561fc54fac6e3e1a37fbcfc4c8e49681fa2a208436428a2cc75aec297e2102d568d6ab8bb5c2ac162c43d471b852362d0551b7ffd6a590004b81d891e7d47287945c6c2da2a85b0531243b145f4532aecfd0fa044f21e68398025665a80d0e612917cfcae8dc", 0xf7}], 0x2, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xee00, r7}}}, @rights={{0x1c, 0x1, 0x1, [r8, r9, r11]}}, @rights={{0x20, 0x1, 0x1, [r12, r1, r13, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r14, r16, r17}}}, @rights={{0x24, 0x1, 0x1, [r18, r1, r19, r20, r0]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r0, r21, r1, r22, r23, r1, r24, r25]}}, @rights={{0x30, 0x1, 0x1, [r26, r27, r28, r29, r30, r31, r32, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r33, r34}}}, @cred={{0x1c, 0x1, 0x2, {r35, r37, r41}}}], 0x170, 0x1}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r42 = epoll_create1(0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x80, &(0x7f0000000140)={[{@mode={'mode', 0x3d, 0x8}}, {@mode={'mode'}}, {@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x9}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/proc/thread-self/attr/current\x00'}}, {@audit='audit'}, {@dont_measure='dont_measure'}]}) epoll_ctl$EPOLL_CTL_ADD(r42, 0x1, r0, &(0x7f0000000040)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r43 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x80200, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r43, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x28000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x401, 0xd680, 0x11d, 0x20, 0x90]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6ce}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 1254.741244][ T1530] block nbd2: Receive control failed (result -22) [ 1254.763412][T28478] block nbd2: shutting down sockets [ 1254.804427][ T1530] block nbd5: Receive control failed (result -22) [ 1254.813161][T28468] block nbd5: shutting down sockets [ 1254.824399][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1254.830250][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:28:36 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) getsockopt$inet_dccp_int(r0, 0x21, 0x4, &(0x7f00000000c0), &(0x7f0000000140)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]}) [ 1254.875279][ T1530] block nbd2: Receive control failed (result -22) [ 1254.883876][T28478] block nbd2: shutting down sockets 13:28:36 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x3000000000000000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:36 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@null, @default, @bcast, @null, @null, @null, @null, @default]}, &(0x7f0000000080)=0x48, 0x40800) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) keyctl$negate(0xd, r2, 0x1, r3) accept4(r1, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0xffffffffffffffe2, 0x400) 13:28:36 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0xf6ffffff00000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1255.137367][ T1530] block nbd5: Receive control failed (result -22) [ 1255.178325][T28574] encrypted_key: insufficient parameters specified [ 1255.180082][T28508] block nbd5: shutting down sockets [ 1255.192429][ T1530] block nbd2: Receive control failed (result -22) [ 1255.206343][T28517] block nbd2: shutting down sockets 13:28:37 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso966\x1b\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1255.254971][T28616] encrypted_key: insufficient parameters specified 13:28:37 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") fsetxattr$security_evm(r2, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@sha1={0x1, "c0f9476e2d3a42e73cd6c1219b149dde1fd0bde1"}, 0x15, 0x81aa02b30cece9a1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 13:28:37 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev?nbd#\x00', 0x0, 0x181400) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1255.296029][T28517] block nbd2: shutting down sockets [ 1255.310724][ T1530] block nbd5: Receive control failed (result -22) [ 1255.320480][T28508] block nbd5: shutting down sockets 13:28:37 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0xff00000000000000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:37 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x4000000000000000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:37 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = socket(0x42000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x0, 0x0, &(0x7f0000000000)) getsockopt$packet_buf(r1, 0x107, 0x1, &(0x7f0000000000)=""/137, &(0x7f00000000c0)=0x89) 13:28:37 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) r3 = accept4$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x10, 0x80000) ioctl$sock_ifreq(r3, 0x53, &(0x7f0000000140)={'hsr0\x00', @ifru_settings={0xff, 0xffffffff, @raw_hdlc=&(0x7f0000000100)={0xc72, 0xff}}}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 1255.640428][ T1530] block nbd5: Receive control failed (result -22) [ 1255.662538][T28637] block nbd5: shutting down sockets 13:28:37 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f00000000c0)='./file0\x00', 0xb) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 1255.684693][ T1530] block nbd2: Receive control failed (result -22) [ 1255.696126][T28641] block nbd2: shutting down sockets [ 1255.767073][T28637] block nbd5: shutting down sockets [ 1255.785051][ T1530] block nbd2: Receive control failed (result -22) [ 1255.794972][T28641] block nbd2: shutting down sockets 13:28:37 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 13:28:37 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso966\"\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:37 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='\x83\x00\x80\xff\xff\xff\xff\xff\xff\xff', 0x0, 0x70a45) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 13:28:37 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x6000000000000000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:37 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0xffefffffff7f0000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:37 executing program 4: syz_open_dev$ndb(&(0x7f00000001c0)='/deh/nbd#\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x8, 0x8200) r3 = gettid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000140)={0x2, 0x9, 0x80000000, 0x1d}, 0x10) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace$cont(0x4207, r3, 0x8, 0x807100) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000200)={{0x5, 0x3, 0x80000001, 0x0, '\x00', 0x6}, 0x0, 0x200, 0xa9, r3, 0x1, 0x80, 'syz0\x00', &(0x7f0000000100)=['/deh/nbd#\x00'], 0xa, [], [0x3, 0x7, 0xa155, 0x7]}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000380)='trusted.overlay.nlink\x00', &(0x7f00000003c0)={'L-', 0x2}, 0x28, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = msgget(0x1, 0xa0) getresuid(&(0x7f0000000180), &(0x7f0000000400)=0x0, &(0x7f0000000440)) r7 = getegid() getresuid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0) r9 = getegid() r10 = socket(0x42000000015, 0x805, 0x0) getsockopt(r10, 0x114, 0x0, 0x0, &(0x7f0000000000)) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r10) r11 = gettid() ptrace$setopts(0x4206, r11, 0x0, 0x0) ptrace$cont(0x4207, r11, 0x8, 0x807100) r12 = gettid() ptrace$setopts(0x4206, r12, 0x0, 0x0) ptrace$cont(0x4207, r12, 0x8, 0x807100) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000540)={{0x7ff, r6, r7, r8, r9, 0x10, 0x3}, 0x7, 0x2, 0x4, 0x0, 0x8, 0x0, r11, r12}) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0x0, 0x3}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000000)) [ 1256.027050][ T1530] block nbd5: Receive control failed (result -22) [ 1256.046550][T28673] block nbd5: shutting down sockets 13:28:37 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso966$\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1256.148594][ T1530] block nbd5: Receive control failed (result -22) [ 1256.157465][T28673] block nbd5: shutting down sockets [ 1256.163021][ T1530] block nbd2: Receive control failed (result -22) 13:28:38 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x1002) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f00000000c0)={'security\x00'}, &(0x7f0000000140)=0x54) [ 1256.193509][T28681] block nbd2: shutting down sockets 13:28:38 executing program 4: r0 = getegid() r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp6\x00') fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) fstat(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r2, r3) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r0, r2, r4) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303}, "57e40417d4009b4d", "2d9dbb06f991110e82b8e75f3582a903778a1898a6a0a497e5047012689c3dd4", "d5c41e3d", "849602a0a00203d2"}, 0x38) r5 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, 0xffffffffffffffff) [ 1256.289189][T28681] block nbd2: shutting down sockets 13:28:38 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x7e00000000000000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:38 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0xffffffffff600000, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:38 executing program 4: set_tid_address(&(0x7f0000000040)) r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi2\xb0\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1256.484545][ T1530] block nbd5: Receive control failed (result -22) [ 1256.537436][T28708] block nbd5: shutting down sockets [ 1256.583631][ T1530] block nbd2: Receive control failed (result -22) [ 1256.599040][T28714] block nbd2: shutting down sockets [ 1256.678695][T28708] block nbd5: shutting down sockets [ 1256.693203][ T1530] block nbd2: Receive control failed (result -22) [ 1256.703787][T28714] block nbd2: shutting down sockets 13:28:38 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 13:28:38 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8000, 0x8000) r3 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x20, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x82, &(0x7f0000000100)={r5}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)={r5, 0xb6, "5308fc54d7e9ee0e467180986e98c95ab86061f4f6c9003bcd529372ce42c9d137f557f14462467d0fcb1a92b7bfbc75d03bd7a5b352e1f96a3be0feb9850d829a5d9fecd873176458d611364ba328337ce6177aced4d7ffe272292c5ccbfd68da9761e7eb8f7f7f60936221fa255e5a3959ed7d04f85fb576d8b631c236a88f59334e85c1bd3336ef24a22fbf4ac69eac531aef3591dba000f30c65b64a18099e33fb58ca1cb6ef7ebb6da1f8f02de9ec5998ddee37"}, &(0x7f0000000180)=0xbe) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000001c0)={r6, 0x1}, &(0x7f0000000200)=0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 13:28:38 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso966%\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:38 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7, 0x4000) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 13:28:38 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:38 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0xe0ffffffffffffff, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1256.925337][ T1530] block nbd2: Receive control failed (result -22) [ 1256.935831][T28734] block nbd2: shutting down sockets 13:28:38 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x10000) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1256.987797][ T1530] block nbd5: Receive control failed (result -22) [ 1257.007808][T28744] block nbd5: shutting down sockets [ 1257.080046][T28744] block nbd5: shutting down sockets 13:28:38 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x3) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:39 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000140)={@empty, @broadcast}, &(0x7f0000000180)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f0000000000)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x2, 0x20140) renameat(r5, &(0x7f0000000200)='./file0\x00', r6, &(0x7f0000000280)='./file0\x00') ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 13:28:39 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso966&\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:39 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0xf0ffffff00000000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1257.291192][ T1530] block nbd5: Receive control failed (result -22) [ 1257.328774][T28763] block nbd5: shutting down sockets [ 1257.378605][ T1530] block nbd2: Receive control failed (result -22) [ 1257.395507][T28768] block nbd2: shutting down sockets [ 1257.400189][T28763] block nbd5: shutting down sockets 13:28:39 executing program 4: syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xfffffffffffffffe, 0x418840) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") recvmsg(r1, &(0x7f0000000380)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/248, 0x6a}, {&(0x7f0000000200)}], 0x2, &(0x7f0000000280)=""/193, 0xc1}, 0x41) openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) delete_module(&(0x7f0000000200)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x1d9e5beef17eb3e2) ioctl$sock_netdev_private(r0, 0x89fd, &(0x7f0000000440)="c0b4490914fdc4ad58f5bbe5b05a4fe93a28e0b150130c05418011752f515712ce985e265f4be20dd95d3c483151f9fee0857c0352769074860f3bd8d2f96bcc05a54ee8bf9b0e835938fbd1b9fc594ed0a2b141ed021afde1d0d70ed1444064b62fa151007c539550a7e1e2dcc528e650b8290aa3c95c01a78536a3b773d73026c52c8af9df0e5c4ae6baf63185c79953d5273541ab522240e6c82be2a45cbab2cad66f64c2dee2f5d9adb38e89667fd3cbc6b060f2d2e8f1ec1ebf04efe074fd97deb29f9600c5e58dd0523ea80e6b0934c3f0cc4c77338152842f81b902187aca89aafc3d16132b562a063c2959c08e995e668224e026efde8d6f") r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x280000, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000540)={'raw\x00', 0xc3, "a05ea635aa95cdd2162219eb3cf6358f8ea49609898a4ec6ea0227c53e9e6daa107c87b908bf279e41c1d87fa44ecf3a74cbc2abe02fcb6354cecef6888d256480074388b0426b8daf7d9756af9b12e8f53499c8deb14632d79b07b2bd4b1d9f498816b3081cc0aaed6b361eb5a768f79cd56812076c95a4ba996a1b1f20c561e4fbf0279552c9c68dfd3eb44311e586b4e82b36df01086491d020f1b52a708ffd95f6bb3e6e57af84826604ed9ae2a3dc093723d6c0c13e7c04a7a7af22f3dfa73996"}, &(0x7f0000000640)=0xe7) [ 1257.482774][ T1530] block nbd2: Receive control failed (result -22) [ 1257.496553][T28768] block nbd2: shutting down sockets 13:28:39 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso966(\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:39 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0xf6ffffff00000000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:39 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x4) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:39 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="b894f26140e22321202e2f66696c6530202f6465762f6e62642300202f64f3001128626423000affbb0068d91b4bd27ffaf807c2718a6013c3b66960c8fe7605000000d244576e900166297dab35ede42b47f26551df47de376bb485f45eee764638f40138e0dd20e868cb94397734e9a9d1b4300f0a086aaa98f5903d0f50044e0aa3c13060d646471b2ee3205241dad58cf9613c9dd536f93e9812422be375c391f3c561ebed0e800d6cfc50286fd5620afee0c2e4fe62ba82ecd1ce2118b9eb7381aef5efc82a92606307c969c61acef27db4cf8f30901c39cd9dee3322d0ee89dc722d158d32df1b38b97e049368a0802f4253"], 0xeb) 13:28:39 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x42000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x0, 0x0, &(0x7f0000000000)) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace$cont(0x4207, r4, 0x8, 0x807100) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000080)=0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8008010}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="680500003f00010028bd7000fedbdf25030000000800400007000000bc0062003562e79f9f2b7178ed60f49c55a7e4c0dcd87bdca2ddb065099c66a917a28e31fc18bb94f72c4369b60549be1a23827b14b5e0e5320e2568209cecd9be0b342c2347621d0c8066403f72b7be926af16b95a4bbadc39ccece234422b26979769577a123f64c0e9e85e0c56670d4e8298bcb6994d91ac405efa82045b3df88cce05c1b293adab5b2d7af6f076a17a48e262e19c551a382189beaba6b56d124dfe61609d27a4d6a9df2236d41343e75b4b5bad8ebb2830900000bff3100e3b9e463310d552d0ab9ba8607674fd4a1f8550edb950499cb3d1e6ce3c81c911f3bbbfdf50e51bfedae8f14d27d4caa2e5910a7da9a1cd25e985feb82eb8063465d067bfc06c15486f2b20aacd33fa216dbb6bbc97fd0fabc051ebb486a3c7d6c0ba1c3e738b961712841f76e5543c6271deeccecd9792c2988cd644d5eec946ce4159663fd3b89332c79acedd850cdaf1f5087b6ce3c542907b041abb503c7e8bd78c22c40b68a1cfb188317e04f3aeedf7d20b785245925e311d9ed1f2523da80e175d0c543bfa7688094b26937c4d186a3748e7c730bce4e15440c959fb58907eea07ff309a50b7b44e8b3df0ee568619b30ffe7a374679311034833457256d44ba863942e59658a86a7b73f06e276e23668a708db15fe30c12cc4215234e11e292c3b55b6e657c3c2c82b90d4ccf5f38aab8e59a48c6213f014cc49b51ab06d3c2045c6d4efc95adaa28a9604ea1092fe05226397e73567bd303534a3bfcbfb5e7b292dad63cc2b82b097aa29accfc0cee213ee78c4368be54000007500ac1e010154005700827ca32a7997e1fd7828cdad5bd84186e5012b476184343fb3dc7f95dc69c544522d74dedaa82c28ee72bb8dc24a1643015e73c4f72c3c55fd8664b0d2bc3c256a5b3e7b86b25a3b7c9d2e399e379e0008003900", @ANYRES32=r4, @ANYBLOB="bb146b78b35fed7e85beab585839004b9970e6bd5437e75dfd2bf6f2f585ca631bd20c1fe6fdf5d12f61a56ae73375ed1170e46c08006c00", @ANYRES32=r5, @ANYBLOB="b2da5328aaafd0b5cea4b695f11245d8b96d15c820904bdb67525058e1c2e87f19afd43fa64037d83f2aa06b52d725fac631232097a43d4de031fb10ba3bd03231867d04ae74b51f9e2d724e22450ab778f07fb46e4910f1573afd03ea0ceff412971cbaa9eece88331ae719c7de6036af69eff977ae0c96df620f61f9702241e87f488d5b230bf46ec290dfe33359e1392b20ae57d65c951b13644e6c4d65c964c6f898b6fdc789be452779fc05d09734357dc62db89ebba60580d679ee3002627169f72358778ef3bb46c234592beaa61143915f8dd6b3419d137ca7246cabf6000000"], 0x568}, 0x1, 0x0, 0x0, 0x8000}, 0x800) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000180), 0x2) r6 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 13:28:39 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') lseek(r2, 0x84, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 1257.944444][ T1530] block nbd5: Receive control failed (result -22) [ 1257.971355][T28903] block nbd5: shutting down sockets 13:28:39 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 1258.005173][ T1530] block nbd2: Receive control failed (result -22) [ 1258.021302][T28905] block nbd2: shutting down sockets [ 1258.056422][ T1530] block nbd5: Receive control failed (result -22) [ 1258.077154][T28903] block nbd5: shutting down sockets [ 1258.138762][ T1530] block nbd2: Receive control failed (result -22) [ 1258.147180][T28905] block nbd2: shutting down sockets 13:28:40 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso966*\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:40 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0xff00000000000000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:40 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0xc0000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r3 = socket(0x42000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x0, 0x0, &(0x7f0000000000)) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r3, 0x800443d3, &(0x7f0000000180)={{0xb8, 0x0, 0x7, 0x0, 0x6, 0x2}, 0xff, 0xb2, 0x3f}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0x2000}) 13:28:40 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x5) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:40 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r2, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0xfffeffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040004}, 0x1840) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r3, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0xfffeffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040004}, 0x1840) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000001}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0xb62020f9ea07efbf, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x17}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x42000000017, 0x805, 0x0) getsockopt(r6, 0x114, 0x0, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=0x0, &(0x7f0000000080)=0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={r7, @in6={{0xa, 0x4e24, 0x0, @local, 0x1ff}}, 0x6, 0x800, 0x6, 0x4, 0xe4}, 0x98) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$TUNSETVNETHDRSZ(r9, 0x400454d8, &(0x7f00000002c0)=0x6) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000000)={0x33, 0x6, 0x0, {0x3, 0x3, 0xa, 0x0, '/dev/nbd#\x00'}}, 0x33) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1258.310652][ T1530] block nbd5: Receive control failed (result -22) [ 1258.323074][T28936] block nbd5: shutting down sockets [ 1258.429493][ T1530] block nbd5: Receive control failed (result -22) [ 1258.439916][T28936] block nbd5: shutting down sockets 13:28:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) epoll_pwait(r1, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0x6, &(0x7f00000000c0)={0x5}, 0x8) r2 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x44102) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000100)=0x6, 0x4) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) [ 1258.480170][ T1530] block nbd2: Receive control failed (result -22) [ 1258.507977][T28944] block nbd2: shutting down sockets 13:28:40 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0xffefffffff7f0000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:40 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso966,\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1258.584457][ C1] net_ratelimit: 20 callbacks suppressed [ 1258.584466][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1258.596011][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1258.605372][T28944] block nbd2: shutting down sockets 13:28:40 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = socket(0x42000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x50, r4, 0x31, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2={0xff, 0x3}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x150}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r4, 0x610, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x209}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff8000}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000802}, 0x845) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000180)) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 1258.760872][ T1530] block nbd5: Receive control failed (result -22) [ 1258.763931][T28971] IPVS: Error connecting to the multicast addr [ 1258.780224][T28966] block nbd5: shutting down sockets 13:28:40 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x6) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:40 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000000)=""/58, &(0x7f0000000080)=0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 13:28:40 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x42000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x0, 0x0, &(0x7f0000000000)) bind$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @reserved}, 0x10) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='\x05\x00\x00\x00io\x00', 0x241002, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000040)=0x8, 0x4) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1258.891092][T28966] block nbd5: shutting down sockets [ 1258.929594][ T1530] block nbd2: Receive control failed (result -22) [ 1258.941683][T28979] block nbd2: shutting down sockets 13:28:40 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0xffffffffff600000, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:40 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso966.\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1258.984410][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1258.990246][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:28:40 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) 13:28:40 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000)) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1259.064459][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1259.070286][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1259.086668][T28995] block nbd2: Could not allocate knbd recv work queue. [ 1259.101960][ T1530] block nbd5: Receive control failed (result -22) [ 1259.136022][T28996] block nbd5: shutting down sockets [ 1259.155326][T28995] block nbd2: shutting down sockets [ 1259.226351][T28996] block nbd5: shutting down sockets 13:28:41 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x7) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:41 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x121000, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000200)={0x80000000, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e22, @multicast1}}}, 0x108) r2 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x7, 0x20002) ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f00000000c0)={0x0, @bt={0x1, 0xfffffffc, 0x189fb21a89d5db68, 0x81160527e937b409, 0x5, 0x3, 0xfffffffb, 0x556, 0x9716, 0x800, 0xff, 0x9, 0x53, 0x5, 0x5, 0x2}}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='udio\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r3, 0x40045730, &(0x7f0000000040)=0x5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x4000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_QUERYSTD(r7, 0x8008563f, &(0x7f00000003c0)=0x0) ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f0000000400)=r8) r9 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_ADD_MAP(r9, 0xc0286415, &(0x7f0000000340)={&(0x7f0000ffa000/0x3000)=nil, 0x553d, 0x5, 0x84, &(0x7f0000ffb000/0x2000)=nil, 0x5}) 13:28:41 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0xffffffffffffffe0, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:41 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 1259.407392][ T1530] block nbd2: Receive control failed (result -22) [ 1259.423990][T29016] block nbd2: shutting down sockets [ 1259.464428][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1259.470322][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:28:41 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso966/\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1259.518552][ T1530] block nbd5: Receive control failed (result -22) [ 1259.539707][T29023] block nbd5: shutting down sockets [ 1259.556578][T29016] block nbd2: shutting down sockets [ 1259.592333][T29023] block nbd5: shutting down sockets 13:28:41 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:41 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f00000051c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0xc0}, 0x1c, 0x0}}], 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000200)={0x7fffffff, {{0xa, 0x4e21, 0x7fffffff, @empty, 0xaf6f}}}, 0x88) r3 = fcntl$dupfd(r1, 0x0, r1) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0xd35b6269b089b2d6, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r4, 0x4018ae51, &(0x7f0000000080)={0x20, 0x17a, 0xe6}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 13:28:41 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\x00') ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 13:28:41 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000000)={{0xf54e2974a6587fb, 0x0, @reserved="53483e284f90265997b6368e73534ff38a8b74ce85c09c365efcce2c56be987b"}}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") fcntl$setstatus(r3, 0x4, 0x2000) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 13:28:41 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x2) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1259.814457][ T1530] block nbd2: Receive control failed (result -22) [ 1259.839667][T29045] block nbd2: shutting down sockets 13:28:41 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9661\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:41 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0)='\x00\x00\x00\x00\x00b\xef\x15\x1c\x00', 0x0, 0x240042) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = socket(0x42000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x0, 0x0, &(0x7f0000000000)) r2 = socket(0x42000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x0, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x3, 0x3ff}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r3, 0x6}, 0x8) [ 1259.942469][ T1530] block nbd2: Receive control failed (result -22) [ 1259.951380][T29045] block nbd2: shutting down sockets [ 1259.957495][ T1530] block nbd5: Receive control failed (result -22) [ 1259.978025][T29057] block nbd5: shutting down sockets [ 1260.024471][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1260.030335][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:28:41 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x90003004}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 13:28:41 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x30) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1260.073406][ T1530] block nbd5: Receive control failed (result -22) [ 1260.084858][T29057] block nbd5: shutting down sockets 13:28:42 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x3) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:42 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000400)) semctl$SEM_STAT(r1, 0x0, 0x12, &(0x7f0000000000)=""/124) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1260.237810][ T1530] block nbd2: Receive control failed (result -22) [ 1260.247829][T29082] block nbd2: shutting down sockets 13:28:42 executing program 1: r0 = epoll_create1(0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200000, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f00000000c0)={0x39, 0x73, 0x4, 0xffffffff}, 0x10) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000380)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) [ 1260.340627][ T1530] block nbd5: Receive control failed (result -22) [ 1260.358833][ T1530] block nbd2: Receive control failed (result -22) [ 1260.368994][T29082] block nbd2: shutting down sockets [ 1260.387169][T29090] block nbd5: shutting down sockets 13:28:42 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x8, 0x10000) write$P9_RXATTRWALK(r1, &(0x7f0000000200)={0xf, 0x1f, 0x1, 0x80}, 0xf) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x403280, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x200, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') setsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000004c0)=0x2, 0x4) sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4010}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r6, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400202) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="000000000000000700000000000000000000000000380000005acd0700fa75a268204abc4569d137c4eac4d51c194e9f99fb1a760db3a3bf980f524c011da0d70fb0b10fff56a6e526e4ec017017beed3b"], &(0x7f0000000300)=0x5c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) r11 = socket$inet_tcp(0x2, 0x1, 0x0) fchdir(r11) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$VT_RESIZE(r10, 0x5609, &(0x7f0000000240)={0x6, 0xa765, 0x2}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r4, 0xc010641d, &(0x7f0000000140)={r12, &(0x7f0000000100)=""/34}) 13:28:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3, 0x800) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000200)={0x4, {{0x2, 0x4e24, @local}}}, 0x88) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) r4 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x723f740e377f01cb, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGSKNS(r6, 0x894c, &(0x7f0000000140)=0x2) r7 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r4}], 0x1, 0x0, 0x0, 0x0) 13:28:42 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) time(&(0x7f0000000000)) 13:28:42 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9662\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:42 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x60) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:42 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x4) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00b31283000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000800010063627100300402000404060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180001003f000000000000000000000000000000000000001000050022000000000000007f000000"], 0x45c}}, 0x0) write(r0, &(0x7f0000000340)="52a68c524f5e2f0854e7f53d2b8235ecde7edd35c7cf4409ee6e53ead9705150cc5ed83a242b3cb5d84c343719d1d09c4082ab1301298b437bcef8922917fb30367fdec019b7a01f798a57343bf399e34998907748fde7af039f2ce3baa1cf832c7d3a780f3535256462a907800db9baab6bd7ef672b67722be29655fb7ae45386b0f124b3", 0x85) r4 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) fsetxattr$security_capability(r4, &(0x7f0000000140)='security.capability\x00', &(0x7f0000000300)=@v3={0x3000000, [{0x1ff, 0xffff}, {0x7, 0x9}], r6}, 0x18, 0x2) [ 1260.851834][ T1530] block nbd2: Receive control failed (result -22) [ 1260.874067][T29121] block nbd2: shutting down sockets [ 1260.923195][ T1530] block nbd5: Receive control failed (result -22) [ 1260.963062][T29128] block nbd5: shutting down sockets [ 1260.984713][ T1530] block nbd2: Receive control failed (result -22) [ 1260.993883][T29121] block nbd2: shutting down sockets 13:28:42 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) r3 = socket(0x42000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x0, 0x0, &(0x7f0000000000)) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 1261.056344][ T1530] block nbd5: Receive control failed (result -22) [ 1261.068711][T29128] block nbd5: shutting down sockets 13:28:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") accept(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x101}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000200)={r2, 0xce, "373446c52545772dcf155e08965f1ad1fcf08729a80f173908d39bfa924a0e7cc3d265b6033993332b96e45067ae56f54990ca06878cc53fc6b47333d91a618c2c1dc77bc64d133f8bd0f9159cdce1cac19d9bf135b4451c1c6bb40daf1f090b9228588cee5b6aa113df725c772de8f7d45f5554339e1e1afc47ef5f66acf95badb33e2ecffc0cec0f3498ce240754e2d1a6ee4592d3bc78f262f5a3c9c1d619834b2a621abb65d5ab12ec74d936b625ba380bd70517e9cb8fe865bceb512187215250d8a953182a26be0cda21db"}, &(0x7f0000000140)=0xd6) r3 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, 0xffffffffffffffff) 13:28:43 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x7e) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:43 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x5) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:43 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9664\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1261.279722][ T1530] block nbd2: Receive control failed (result -22) [ 1261.290777][T29153] block nbd2: shutting down sockets [ 1261.378766][ T1530] block nbd2: Receive control failed (result -22) [ 1261.388666][T29153] block nbd2: shutting down sockets [ 1261.406643][ T1530] block nbd5: Receive control failed (result -22) [ 1261.425425][T29159] block nbd5: shutting down sockets 13:28:43 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") readv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/43, 0x2b}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000000040)=""/120, 0x78}, {&(0x7f00000000c0)=""/8, 0x8}], 0x4) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 13:28:43 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x300) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:43 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x7) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 1261.555266][ T1530] block nbd5: Receive control failed (result -22) [ 1261.566403][T29159] block nbd5: shutting down sockets 13:28:43 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9666\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1261.689343][ T1530] block nbd2: Receive control failed (result -22) [ 1261.710619][T29184] block nbd2: shutting down sockets 13:28:43 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x6) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1261.784579][ T1530] block nbd2: Receive control failed (result -22) [ 1261.793669][T29184] block nbd2: shutting down sockets 13:28:43 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x500) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1261.992687][ T1530] block nbd5: Receive control failed (result -22) [ 1262.008820][T29198] block nbd5: shutting down sockets 13:28:43 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9668\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:43 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000380)={0x50006000}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000040)) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r7 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x200, 0x101) ioctl$SIOCRSACCEPT(r7, 0x89e3) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2000, 0x0) fsetxattr$trusted_overlay_nlink(r8, &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'U-', 0x4}, 0x28, 0x0) [ 1262.110736][ T1530] block nbd2: Receive control failed (result -22) [ 1262.120132][T29205] block nbd2: shutting down sockets [ 1262.151824][ T1530] block nbd5: Receive control failed (result -22) [ 1262.165105][T29198] block nbd5: shutting down sockets 13:28:44 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x600) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:44 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x7) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:44 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000000)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000380)) r6 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SG_IO(r6, 0x2285, &(0x7f00000002c0)={0x53, 0xffffffffffffffff, 0xbc, 0x9, @buffer={0x0, 0x0, &(0x7f0000000140)}, &(0x7f0000000180)="277b0352374b8190c6e2917933aca7d5b16003bb16b79f94fd3aa9494865edfda7258ac76b686838ac6f67c910248715d40a25ad77dfec28163bc6cca8b67c662992d91e213e6ddfa8ec8cd3f0bf2ba0fbb9afa5921260b06be4b19031c6fff31ceec307fca34621c672c130b51addd601e2a1d682f98fe6b26f8c8e8fb08df8287b48b50c6b8d93de08cff8d1141e615bc7bda3914c4a79aba38a671b00664f75f935b7c9f81b3b8c00c224633f41f0df683828587f8249e18a041f", &(0x7f0000000240)=""/30, 0x401, 0x8000, 0x2, &(0x7f0000000280)}) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 13:28:44 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso966;\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:44 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='\x17\x00', 0x0, 0x200000) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1262.471232][ T1530] block nbd2: Receive control failed (result -22) [ 1262.485225][T29224] block nbd2: shutting down sockets [ 1262.585684][ T1530] block nbd5: Receive control failed (result -22) [ 1262.622141][T29230] block nbd5: shutting down sockets [ 1262.628141][ T1530] block nbd2: Receive control failed (result -22) 13:28:44 executing program 1: setrlimit(0x9, &(0x7f0000000000)={0x7, 0xfffffffffffffffb}) r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 1262.637814][T29224] block nbd2: shutting down sockets 13:28:44 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x302080) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) pipe(&(0x7f0000000000)) 13:28:44 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x700) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1262.739839][ T1530] block nbd5: Receive control failed (result -22) [ 1262.755171][T29230] block nbd5: shutting down sockets 13:28:44 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x8) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:44 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000180)="5ec5be100358c42009f071931d980e0edec89ebadb2b914bd79d3e2b3540c5cab7395f5461acd9f91e7a1120468d7bf882365e5d1dd39cf760bd36559c752f7188aab72da5c4c47df78ff935d3e9579d28a9ad01c81483cbcf23ed2e0de3dd1156d0259e4cf69b9b4dd61898f2085b55d564d8a26a8a1775cc513fdaa88106bc1709034926db09bed50a189dc066b099d0c503cd6201945fbab05065b0c520c15efb04d9017fb7c5e7", 0xa9, 0x5}, {&(0x7f0000000240)="b23ebc5d9e", 0x5, 0xfff}, {&(0x7f0000000280)="8d7467bb964fddba6db005f069d4b7e8b196503d92a299bef94e4384c9a774ee51a7e2c22aabf3f81777036b07b96061331086a4176ed2fbe55c86", 0x3b, 0x3}], 0x3000400, &(0x7f0000000340)=ANY=[@ANYBLOB="71756965742c6d8979a94d885f4d69756e633d4250524d5f43a56e78917c9a"]) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000380)={0x8}) r3 = epoll_create1(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x42000000015, 0x805, 0x0) getsockopt(r6, 0x114, 0x0, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={0x0, 0x800}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000480)={r7, 0x401, 0x0, 0x3f814087, 0x2, 0x8}, 0x14) write$apparmor_exec(r5, &(0x7f00000003c0)={'exec ', 'measure'}, 0xc) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x3) 13:28:44 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso966\\\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:44 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) [ 1262.950700][ T1530] block nbd2: Receive control failed (result -22) [ 1262.975252][T29253] block nbd2: shutting down sockets 13:28:44 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") fchdir(r3) r4 = socket(0x42000000015, 0x805, 0x0) getsockopt(r4, 0x114, 0x0, 0x0, &(0x7f0000000000)) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) r6 = syz_open_dev$adsp(&(0x7f0000001340)='/dev/adsp#\x00', 0xffffffff80000001, 0x20002) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000013c0)='nbd\x00') r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x12, r8, 0x0) ioctl$int_in(r8, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x8, 0x2, 0x12, r8, 0x0) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x12, r9, 0x0) ioctl$int_in(r9, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x8, 0x2, 0x12, r9, 0x0) r10 = dup2(r8, r9) r11 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x12, r11, 0x0) ioctl$int_in(r11, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x8, 0x2, 0x12, r11, 0x0) r12 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x12, r12, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x8, 0x2, 0x12, r12, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000014c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x8007321}, 0xc, &(0x7f0000001480)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000326bd7000fedbdf25020000000c00080001000000000000003c00070008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08fd67bb90e9bc", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002000280000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000055) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r7, 0xee822969a9795262, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000005) r13 = socket(0x42000000015, 0x805, 0x0) getsockopt(r13, 0x114, 0x0, 0x0, &(0x7f0000000000)) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x282028}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x30, r7, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x80028c6}, 0x100) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) r14 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r14, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={r14, 0x0, 0xa28, 0x10001, 0x81}) [ 1263.121501][T29270] FAT-fs (loop1): Unrecognized mount option "m‰y©Mˆ_Miunc=BPRM_C¥nx‘|š" or missing value [ 1263.161184][ T1530] block nbd5: Receive control failed (result -22) 13:28:45 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x8}) r3 = socket(0x42000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000140)=0x7, 0x4) r4 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x20, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0xeb54bd5f0b41aaed, 0x805, 0x2) getsockopt(r6, 0x114, 0xffffffff, 0x0, &(0x7f0000000000)) setsockopt$netrom_NETROM_IDLE(r6, 0x103, 0x7, &(0x7f00000000c0)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f000095dffc)=0x42) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x82, &(0x7f0000000100)={r7}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r7, 0x9}, &(0x7f0000000180)=0x8) 13:28:45 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x2000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1263.189771][T29268] block nbd5: shutting down sockets 13:28:45 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r2, 0x0, 0x1, 0x7, 0xfffffffffffffffa}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000200)={0x0, @reserved}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 13:28:45 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso966(\x04', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1263.302367][ T1530] block nbd5: Receive control failed (result -22) [ 1263.312132][T29268] block nbd5: shutting down sockets [ 1263.358329][ T1530] block nbd2: Receive control failed (result -22) [ 1263.372406][T29288] block nbd2: shutting down sockets 13:28:45 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000000)={'nr0\x00', {0x2, 0x4e24, @rand_addr=0x4}}) 13:28:45 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x30) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:45 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000380)) epoll_create1(0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 1263.493215][ T1530] block nbd2: Receive control failed (result -22) [ 1263.502615][T29288] block nbd2: shutting down sockets 13:28:45 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x3000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1263.624465][ C1] net_ratelimit: 20 callbacks suppressed [ 1263.624475][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1263.636043][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:28:45 executing program 1: r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0xd68f8e7ea711a6f4, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r2, &(0x7f00000000c0)="9b2d8db3a7608ac351cb551a65f65f26a70d4e962632dcbad79e29d8ad6f06fc379568d6f62ca9178ac57d3a2a274f1e9a37c0d6ca22760a1e79c39600ddb8c956e030e9841ac0d937bce9ca7017d24ccc9e4f9328ba4b38fae9525ac2a3f558586274e7a952a588fe94aacc0684ada1342cd9b437775d24e5064ec9f5286796cf8980fdc45e2ba46d3fd8401a5cb1552383446c9dfa30747e862a53", &(0x7f0000000180)=""/223, 0x7492a4abcd1fde01}, 0x20) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000380)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) [ 1263.680824][ T1530] block nbd5: Receive control failed (result -22) [ 1263.697277][T29307] block nbd5: shutting down sockets 13:28:45 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='\x00\x02e\xbc-\xf3\x7fd#@', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1263.790871][ T1530] block nbd2: Receive control failed (result -22) [ 1263.795238][T23485] block nbd5: Receive control failed (result -22) [ 1263.815083][T29307] block nbd5: shutting down sockets [ 1263.863845][T29323] block nbd2: shutting down sockets 13:28:45 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso966)\x04', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:45 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x60) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:45 executing program 1: r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x3f, 0x0, 0x4, 0xf, 0x3, "b8349ce773eb36e9c391e87c92b6d0a05c6250a92728d6b2ce1a1fd8c700d96cbec28d882685f1b55ce57c0f6a444e45785291fe6e3f4ffe8ee217861f302542", "e9ba49aafa29229a111a21e98bd56295b5b252c41af5e7757965ef2dafca02aa03c3f182716805497aec0930e51d1500a859b2a4c857d0e508c6d753264eb407", "b6d4d22961158d7d603b665586b39c0ae3647843e849e8170ffdf63359a329d3", [0x2, 0x5]}) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000380)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) r5 = semget(0x0, 0x4, 0xa4) r6 = geteuid() r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp6\x00') fstat(r7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r8, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) fstat(r9, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r8, r10) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000080)='./file0/bus\x00', r12, 0x0) r13 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp6\x00') fstat(r13, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r14, 0x0) r15 = socket$vsock_stream(0x28, 0x1, 0x0) fstat(r15, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r14, r16) semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f00000001c0)={{0x6, r6, r10, r12, r14, 0x2, 0x8736}, 0x1, 0x3, 0x7}) 13:28:45 executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000cd47b86d060000130000002c00", @ANYRES16=r0, @ANYBLOB="00002bbd7000fedbdf25070000001800020014000100fe8000000000000000000000000000aa100001000c00070008000000080000000c0001000800080006000000080005000100000008000400090000000800050007000000"], 0x60}, 0x1, 0x0, 0x0, 0x40000040}, 0x484) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) [ 1264.113669][T23485] block nbd5: Receive control failed (result -22) [ 1264.145692][T29341] block nbd5: shutting down sockets [ 1264.184401][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1264.190258][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1264.241345][T23485] block nbd5: Receive control failed (result -22) [ 1264.251152][T29341] block nbd5: shutting down sockets 13:28:46 executing program 3: syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ppoll(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) 13:28:46 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x3f00) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:46 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='\x00\x00\x04\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'ip6gre0\x00', 0x200}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='\x03\x00\x00\x00\x00\x00\b\x00', 0x440, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000380)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x80, 0x0) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f00000001c0)={0x9, @raw_data="4d1c72eba7f8084c9782c084fc0a05135dff4717dcfa961f67f48da8141b2eb047e242d1a446fad51991ea3bde744d05b8aca50535101ae9da12a9cd39ddaae0cb9067049a828ca81c3d5c913a528d05ab9db4eb2e23931db960f847362ceeb7a14aa13fbe434461148e293baf4c82d0fdf84bb4e835f15e02312697b82680385273dcaa5ac23bd9aefc1bc7f55a626f6a431d732971359cb09b051425777e00bef41d2bf05f352723374f8f374a27a629727b4ea4b2a812decc5e2e338c23b88b4e0230ff185a76"}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$P9_RCLUNK(r6, &(0x7f0000000140)={0x7, 0x79, 0x1}, 0x7) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f00000002c0)) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f00000000c0)={'hsr0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}}) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 13:28:46 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/\xe4Pv/\xfe\xcbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 13:28:46 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso966*\x04', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:46 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x7e) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1264.424386][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1264.430256][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1264.472613][T23485] block nbd2: Receive control failed (result -22) [ 1264.481995][T29371] block nbd2: shutting down sockets 13:28:46 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) clone3(&(0x7f0000000180)={0x40200, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0, 0x6, 0x0, &(0x7f00000000c0)=""/90, 0x5a, &(0x7f0000000140)=""/30}, 0x40) fcntl$setown(r0, 0x8, r1) 13:28:46 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 1264.570298][T23485] block nbd5: Receive control failed (result -22) [ 1264.588268][T29375] block nbd5: shutting down sockets [ 1264.596231][T23485] block nbd2: Receive control failed (result -22) [ 1264.611089][T29371] block nbd2: shutting down sockets 13:28:46 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x4000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:46 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso966P\x04', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:46 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0xe0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:46 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40, 0x0) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f00000000c0)) r4 = socket(0x42000000015, 0x805, 0x0) getsockopt(r4, 0x114, 0x0, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0xc0406618, &(0x7f0000000140)={{0x2, 0x0, @identifier="00642587e4945ae7b9416b5cd8ce4988"}}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000100)={0x200, 0x2, 0x0, 0x1}, 0x6) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 1264.824382][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1264.830245][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1264.882389][T23485] block nbd2: Receive control failed (result -22) [ 1264.893892][T29404] block nbd2: shutting down sockets [ 1264.973305][T23485] block nbd5: Receive control failed (result -22) [ 1264.990051][T29408] block nbd5: shutting down sockets [ 1265.002231][T23485] block nbd2: Receive control failed (result -22) [ 1265.011593][T29404] block nbd2: shutting down sockets [ 1265.105838][T29408] block nbd5: shutting down sockets [ 1265.224396][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1265.230224][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:28:47 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'ipddp0\x00', &(0x7f0000000200)=@ethtool_regs={0x4, 0xffffffff, 0xc0, "41a8e0faadd74ff49691b5c4c79f5ffbcc1c9d6211b1ee7a5c29d79d43bb321c994a82956d2e69e3b0960d1feaaf41d95c4028847641cf7f0a5c2f896bdc2aa4daae5c02b9c58fe3df7324db64f3632bd119e8ecf4be3e25a987a3b5dc9ba88de632ba1a4423555fa0c3e3d03f2078b54f935dfa3680c8804d99aa17986f57f42edfbfcfa2bbc5abde8718db68cdf060bdd0c9f67b60e424fe5c6f8eb97388348dc11ef0f709500c53b8d02579158c16105f9aeab06c648d605e9c02eb1f559f"}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 13:28:47 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = socket(0x42000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x0, 0x0, &(0x7f0000000000)) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0xc, 0x0, 0x7, 0x63, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_sa2={0x2, 0x13, 0xc2, 0x0, 0x0, 0x70bd26}, @sadb_x_filter={0x5, 0x1a, @in=@broadcast, @in=@loopback, 0x11, 0x4, 0x1e71b6b6488550cc}, @sadb_x_nat_t_type={0x1, 0x14, 0x5}, @sadb_key={0x1f, 0x0, 0x778, 0x0, "7d681415c4a1916335378e7a0775f3a3b2b3b3905a4d9b707c257bd16a63718480beaa686ef37acff7fb345a21b1884a259a44ccfc5ee1b21aea3f6c6576aa0f3c8fd629b71a926f6b39150af239323014d9544592359e26a5313fcad6e1cd08548cb8c57fc56d4195f72153c0084c27391f435ce5fcf2994bd4a182ae0571c5ae0c1b2faa440e589aae5c0d301446b214bb768339733763cd708c96c33efb072710551c081b34318079f73985a3333f25b84ccedc4fd6bf3e63d8522d3b34dcbf74293d95f9edc4dfbfc94ad56a2fb1c7e3cca10f41a2e8faee7e21d44038ff5eb96dd2aa9430a3069bb94842e89d"}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}, @sadb_key={0x20, 0x9, 0x7b8, 0x0, "192ce316753dd7e31a3dd8af027d466c8ae18d53ef6f469f93dc07a22503d6ce114e8d9eea23ce7e93b28889a05b435d35d274d3618abac89926522c55ef54f49a8dcae357469dfd86cea5a544577aa7811e2246c1d94f831a790c96a57abee856c66c1615fd5b8b0f7fa8236d76d6ba43d6d21d66b618919c25c58eb5b9c4fb64cfcee3f820eb2bb345f1b4999ebb7215021dbf5c8529441986fec9ff24491f2a07776a7fb6cc2b505027ee9fa72aef0c762b108d9cc87c3fdebbd3c1019a3fa15534235fc8bdbe8bee25f8b54bdb4a585d03d45bdf6e1e098e7169184ebcf9239445a2321e3d1453ffe609928bac3bdda47393f63b8c"}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in6=@mcast1, 0x11, 0x84f21577db6c2217, 0x10}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xfff}, @in6={0xa, 0x4e20, 0x5, @ipv4={[], [], @remote}, 0x5}}, @sadb_lifetime={0x4, 0x2, 0x800, 0xfff, 0x4, 0xffff}, @sadb_x_policy={0x8, 0x12, 0x1, 0x2, 0x0, 0x6e6bbe, 0x3, {0x6, 0x6c, 0x20, 0x9, 0x0, 0x100, 0x0, @in=@multicast1, @in=@multicast1}}]}, 0x318}}, 0x40015) 13:28:47 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) epoll_create1(0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f00000000c0)=@ethernet={0x6, @local}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)="04ba0f4dd3186e5df033f4ac76ae04518cdd7a6c9d6612f1d39a5376d1654fd2041662f378f45814b36fc1bf1f60e153328e4926b76c36399a838c636fe89fe58e64969fd69d2e030e3dfd6f5d0a964a9412e945e56b5b14ebe468ce7f8173fce7633029e90170a0d672ed1fb270c76aa3ae2fb3ca23f15ee7da12e0ebb385e98a8f431f2c128789fbc7baf4b80c4be864d35f7903082ee06d0b4b35cbeeccc587c89f2f0c51141cf2dc26805bb7310868a92a191c", 0xb5}, {&(0x7f0000000200)="bab8cdc67be8795a6c7f56b891ebd3983473112616a9c45ddb489f764b40f5e531e73aeca998ca3244ff3ea9365ac0e36082a5605130d58d5a76a068a6db8577e4d8c38a9c8b2c090be8e4e182f9fab9f120bcf59dedc7e2d5d30354926839e9ac61dfad619dac4410100fad21669e244de70f529ed07a1046fdd1b5478685308c4638c02d5ea9", 0x87}, {&(0x7f00000002c0)="b2dd2369858b1192fa7e50e39571440476bff9e9a517989ac77a51243aa6d96204b7756362f7e9f220623beb360a24b4433a27", 0x33}, {&(0x7f0000000300)="23eb51caef032ab8df738178e95e4892eac256d586c985", 0x17}, {&(0x7f00000003c0)="6ebdcff3da118320827c9a0574bd6b913734387ae9a23da8ae74df0aa24b5e6c71590bb8299150b76e8e640d1c226d35ad16c8bbabea2946658b587a60088e528da7462591f63466868d1f81c16a78521a0ba5b9d3e4531357a9ae2303cbab2db44eb6c8762f8d78c73c6262cfb829ae8f91647c726078b518670c45bfb2c28d1de687b4ab1cdf12a76d7a4bce0829421e6430cbc89744d135617bbe91554abe982a7ddb2a11efde46e86b108c8c122055e9bce3dbf97040b9f11be74e2f7281776b7bc566c9883c165678f8999a2b545149d86746964a8d463d295676c68353cea21e875436913d68f1c88abe3a2086a8bb2f7fe66186e4", 0xf8}, {&(0x7f0000000340)="d1565d46289938e42097e3167726c6bd25af13eb8e97455afef7e94e818fdf87304f09cf55d61da0948f", 0x2a}], 0x6, &(0x7f0000000540)=[{0xb0, 0x1aa, 0x1, "e8773ab91a92c43c26513ede64eb98d171bab9cdaf8cbdee5a3f9a6a69253dd7cc1d14d39a40f09f4823977ae88a934a5dc19fcbe5680bb3f822f4936b376254c8ab9616042c18457b935086a02c311946afd25a4cdf90f139bd173fa9a950c8b86aa525b1f97e7fbddff946f1d6548968ce853dbe8b94943f9718409ee703b388fbc5425bbfd234cb567c48f15a175663fa64757e58e94431b44340db"}], 0xb0}}, {{&(0x7f0000000600)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x10008}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000680)="a21ea19006c1429b0438f23cef42b4b072a8bfa5d8cfd47d9891f906bda269aba97510f676a95397f418614e912f00168f8316fbe104c2d7286bd40d4b80038b79c6a608b1182c5d2b3ef2c9bd2c08937ceb5508c62429e456335215d1d5834c05551a12ad1bc4655ce3078e41ad94df32ad406bf4440e28d5b7750c0498fd76d8e99e13282e39c547f705a46879c95c352079415d2f10b6d96c0f6a906642002d727dd0d40eb18e2e7ebfc0", 0xac}, {&(0x7f0000000740)="518145177f583fd8a921fc6bd45e23780a040dd6286b02fd119c0409d71f96fb6c4b035bd1a1fae7f9c8969244ec7838a2d374ea9bd89b3cfab4e8353deaae0f925e6a91b2ac00114804b18d94d8af7aa996c42d8bb6676c2ae5466fbd7ecb32ce9c81", 0x63}, {&(0x7f00000007c0)="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", 0xfb}], 0x3, &(0x7f0000000900)=[{0xa0, 0x6, 0x7f, "bd6331c0fba23cb535d261ad8aa13a2edd80557fb72d08b2781b477c03c9f702611c791741a9ae4ab15df2f14e5d394a698e8b58722ef9d10260ed7d2a7fe9807857bf47355914d7dba070eed6efaded8612d80570950716131824868b2d629d16dc7272f28a246abff0b3390d7ce955350144af1e24b5fcbd83cc39d813b024a098a48712e437d96002"}, {0x90, 0x119, 0x5, "bebe6a6dfd04da8b265d2896862adf7c46ead418ce802d8e31280f39b69d4fdb949b28eb7eb55c06cd20e6a996a298b77d28faac327eab8bc9444046b184f14159add6eb3f8b6b87eea41d04aad738eac48b9ced6ae7eb8ebab872967c343acffc8ea294cab704a2c81bb2086581fe3eee0f820ef5478846ced5"}, {0xe0, 0x112, 0x1f, "64a59a02d9dd02516af0575369026660508467b1d98a60cbae2bc341bbf74f62ea87cafdd8e2e02ebb170fda9b24b748d0abfbf6b1b81cf9bc48424da7e385002e4ce7a90d5b0e397489c631b20b062d2189080e3595d1fc69d9e161cd122d075a5e6006f27fb652cb98d3559f3e5739bd4265ace9e94257c73c584ebb9e5713e9149886a07191ae4c7bad5739f1997dd2658418ca8ef902a6c04c19b5ac6ab9fc7a7770cd8c6769d96fceba2f3fe3aa42eeb36547b8a6140264c2f95dbe20080b0b8aad160aa7247c8c82"}, {0x18, 0x579165b56482439c, 0xf4c, "fa77fe39146ad766"}, {0x108, 0x130, 0x8197, "fed4fa0ab3dda853bdb851a1a0d5bd3cc8975ca8909b2aa2819d7e3e981b42e8dcb68fd12e338e3494acacc8adb16ffdf5aeeb76911ccce2c0c95e4c0af6b0c89d0c32dea426f70eedb7806f1b4dbab8eb7f03ddb5e6adb8ed22d8eadc64b82bb6cfe32b264eaa2453ff1096b24a13aa8290ac7e6f20f8a8bc99515c0d42ab3ec7cd27a29e44b6e8c14f2c6141019efd956c26973fc701c0044574278369b4bc10b56d4d09be035d92e7b5e16a6c75984a7083749c1df30af660c6028dab18f89483b7edc2b0e41b02638ae8504b9b1449f9d2bdc086a85599912564c05c9e3b4bec5052ac4d40064f55cfab1ea890b6f2ce90cdba41f909"}, {0xc8, 0x114, 0xff, "55d7ca4cad71a3700d9bc15420f8802c895e697297feff0326921616ea9f839b33fc2318469ea22915d005077479a4fab91ac248ed074228fde8806c8b9743b62d96be94fd72d2c4ce09359fd8201a28262d6cc5e42bdf5630da501cae74b481a91a8c48bbc7ffda3c4655107f20d1498b76d211d62d8a71626075d6ec3d87fbe05aa7c3a6957c328bc959ba1862f2deeb6fefb1de7307485bfe4ae14a3d4fab976e13e96a11a18260f7f37bedc3c1747a2b470b6cc8"}], 0x3f8}}, {{&(0x7f0000000d00)=@pppoe={0x18, 0x0, {0x1, @empty, 'irlan0\x00'}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000d80)="7d555943ec4d34c20e2680f24ac7ec4dcc3f1887f463049729d1aa9b40dc3a02b6130dd84c9284dee9d07eb2c51e1ae3c9adc468dcd0a87afa86b6bc707a5ca4b55bda6595235c51906098c67eb2f5294a841000834e7db6a035956af420ae08a727a21e98f83f46f65013ee50516b916b3d86d9ff7e72b2b8649080ca5d296ae815d1796a2cc237bf7aad23498fd7ded5cda5023473d22acd06cf80297e35cd7f2bed1718b40a1d451dd3bc0de63a0698f57e2e32c70ff2007d19ab67bd83f63822d25e6a85d8b41917ad3c688c04e187293c92f7c74b419604e37edd685ee3", 0xe0}, {&(0x7f0000000e80)="b635604e1b05924527010b42fb7de71923aa4ad1ee", 0x15}], 0x2, &(0x7f0000000f00)=[{0xb8, 0x101, 0x401, "95f2d1759e38ed6246eebf00970bba74d76153dc68b499f44e8fcdde161d60899cd7f0d36b9f865061861fc7cae802ffd2e7a7d4dc45acd3fc4e35225db34d531c16177ac0b3d1405e326174d2fa19da49144045b3c9e13ddd7a952025497c203b7727ddea03854512c903c5dd69854892f24491193ea52017af14ce3dcbcd0e3f6cfa5d990fe2ab1b6adedc3aa67cd9788d9745f9d0bb3347ec708ffa222df3ffb42c704118"}, {0x48, 0x112, 0x8, "a6504140ec02ac88631c69fb85a3ab6b09ab1b3f62986e00acf320a33fe902c98ee2afd64139db5ec9b0905fdb6a17e17467c370a8620947"}, {0xf8, 0x14, 0x5, "c90b1d37c43c2aa3ca1c1a795e953626c896eec19046c76b066ea1764c793845cd6995d1b819bbaf6dac52c2d0438e4628a13da98d18bf615bb035334504bcd5b028d3c17e1343b8acc3744c13efe0480d295ad9227b7957cad005990d93cdd19db1beb48ba5611f2fdbe87094338f7bb62f091d931d14884e144a0c22c21ec73d88fb25d6dc1270ee63326271f757385989eac5747dab0d744709c623b6ce146b8661774443725d03cd69d9255dc3acc6e47dcbfc701248a0e494354a976462c630255f9530dbfc42fe2ff66430903d6e3ef3a1a242fa04155e246e3c9c0abfc2d9"}, {0xa0, 0x108, 0x9, "d220d111b933965593934e3d42af7a36439a2798d6c7e10115ffe76fc759ec98db2d731ccfa313b6f36ef1b2bc1d989309fcf3a9bfce1094eeb14d43ba87b92489e1c44aaff0be0d4a1182fbaf4257a54e21f6a50bc5d3bf434d1faf76b6c7796c06c818aca5badba2bd8d899aab3671638bebc56c592bcaa1435ffd60c2d70eaccbba34e39f7eb522b01b93063c3c"}, {0xc0, 0x0, 0x9, "3b7511eaeb3bdf8d62a4179e0e1beda0c41570c04bda364d3c030b55d71fe8d130f861905e2040e46a9f54cab8c3ec163e8c374ce2a91ed927a5e9a45f13ec21ba8f69db5bbc12349ae9a7d8fa292573996145d4f073887e6e365e86ee076fe00dc81354ca1eccd6acec6bdd43c69dff408a4524c71f4f89a3db0458a5a4254fb5c0423df6dcea785cc2a5d1cad9240518b71f16189b2d84dedafb7feb0c0e3b96195dbb6839d8f5a2"}], 0x358}}, {{&(0x7f0000001280)=@in={0x2, 0x4e20, @local}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001300)="5f811ee8b528646f1605c84eb12a3e5b1ec3ba", 0x13}], 0x1, &(0x7f0000001380)=[{0x48, 0x118, 0x0, "e36af6054588aaa41409cca7895481b42ee972920d4acd9fd70f5046f19924cab4579770d21ec7e6c90d7fda430fcaadae4befba0b96"}, {0x68, 0x10, 0xfffffff7, "71d8e40d5ec916964a2d662ff99b6129fbc966296bb30eb60751137e44684d366d6820bc77dcad55ddd4f3c1f33001aa08a3b3e87e7f31fbd871a3fdd00538e388c57837616bdfb6c8bf484b62851bed81101c1beed59aea"}, {0x110, 0x117, 0xc2, "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"}, {0x40, 0x1, 0x4, "90419f489c948f3a581bc6a5b81f0d1f9510c4cfc70132009385750d3882fbedf456d3a361472fa5c295fa"}, {0xe8, 0x110, 0x1, "5300429ff57a81ce204288a2b577c84b84a8b4be2ab6ac8b3b2c1cfbd004ca727a3161efd4c6a5251b1acbdf6025f170f92fd72999578fee75ea8a8457d5f47f54b3ad00149db6348e89c63e7896b1d7f523a28be9615bef2e4fa896a7aa58d1583ce40f06bd0dcb10443a523b6038340e3a48b2f59eec1538b2a2dc9b4174756886208de7264ba88410e570048ca8298ec6339b8e7e0918edb49f4829a4393630b03db2dce3b8d4a07290dfba77a8029d0211c12e646ff4a3fdd70dee1bc93b2638566f1b8445f110284d9003945db1dc"}, {0x78, 0xff, 0x8, "6ff88fd5b604b44cb134c81b828d12cf13c6116ed86bb41a7e12b671e5a926f9bef98eb72b26bf66072d74b002b3681e6a7cab5cdee16f1c317590649941ee9810adc5d40ba332a5a03c3dec164cbd50be11089b201651a4a26222a1c819e64b2c"}], 0x360}}, {{&(0x7f0000001700)=@in6={0xa, 0x4e21, 0x3, @loopback, 0xfe77}, 0x80, &(0x7f0000003880)=[{&(0x7f0000001780)="1b786aa03ec63ad635c494ffcf9499982f6585f95cab58e24c3c6b263259693356cd16815a2cf53a51f39ca61b63091857b4affb3c3a00386cba30c3c8a0b0c27fbcd4d5a849286bfa2fe31f2f34c1894460", 0x52}, {&(0x7f0000001800)}, {&(0x7f0000001840)="07043beeac0e7db5a2ef2ff4ff6ef751630f7910a85f74c8ebb315a2123ddbd9ab47aa53d5317087a2a897ba472ce255840d68f374f16f3273327ce395d611f89f2aa9105626f99ee06420dd8bb032882acbfba3e28bf38c855c2ae5e32fc3dc0b743711d4b7d55772204ad0519e32bfabf150ac7703b4caa37b6d7ed9aff562689bdd8ac066e1f60b246c536083e1d09c5217e42918705b24c407daa1008cc16f7bcb0ad14f2f4c39af0e5c9b882f3369a13a75d2cd57c6725e000d55b68e865add78522a854125d45b8181c96076ca5c7d9d5bfaf8ff8f4f7099f5e1801d663380cbc64073f2f88d423e3353122e808d1f6831d86556e4500882134d3efaff611dd16e089190b0b8930899e40c44a3f043e84bf4691b49c5e62a82305fa72c609d572b05464c8a009e55f23d54b150413268373bfc7d190cb38d08bfd3d40be44a410482f3fa882028d1c40c3a1048294f675ced39dece3f53f5ff98035834252cdcbcd247fae730823338d3fff9fe0244cba72d59fdc7689b6ddbd3e6fce39c612d2a9de18cfc55f5dcdd776984ac671ce78fbf898263831ef37f1972f1b93c516d96f7e08a56054abdc5d430b7b8e82ee1d33846003100a2ce78d847e40e14d8bd6bea6231f10761f611ba1b8a99298d82198e6772577192ac4092d2fc96e1ad2140be1d9ac8a835bbc5de42a76a8c7bbc1fbb988ccffff24d5706b428ce7763fcbb07cfb7725cbba9c1d988142fc3f51ca103a12abf153d8d65453def90df5c6a1aa45d9d7116db6784ae259af820fd44738e0f5ea43eb099922c3e8d1e0b72f530d8ebbefcd5e1883551e73fce3ac7697039437c3fe8226633b0ded2174c643d136a6aef80be6e47f46e9054bc449e3d841b4710e69a45244675afd8a546ac98a1d99ee09f6fff56b407b53c80f10555a21c0c13002ed1d871b3896124d6112d3db5b92862c8a4fc7f2f4bfa1c8437f55021ea6d0fb22f30a1f5970cc32c1f40b58a0d9e73514b7220170a0690ff6585346f9f2dd56c75dfd0c0b07df33407184380705d7e7cdde50dc374a399e9f9924b592f78be8caf105dc56a0416e558868e6feae4c67f0e4fe8e036e7916fb2d9ce885f952ad05dc8ff78670e6f0d3c48472744c7fe1b97bf56c6bb084b0d7db86513a3edece2afd14904cc8cce79ebc384e68108ece67de4eda45bbe1a3d74a3cd952ecf0f0558f4d6744ce6a0ec0c367202c9f334d3f1bc4b40f481c35b35af317d85b3b467e8f1785415bdb5599bca43cb68d11084f038629a27ff19d7aee3d39d56b8ed52fd081588dcc120cb3209d795179533280096e4abc4d18b733d6d1a77948767b6bea395828780204861f4c7971cd29d92e66804a0ef960f08f8c76e0e87d4060ebf26460613eea2f22d902215fc9b82cb48525739455ce50f1c97d8cd02d3e19c6f5cfe7fb42ddfeb568f892be3857d094975e48e7c22ec45c72cbed46f1be5684d86272fc444fc6a2c1dc431b9519d8bc66e821a020138fc9055d7ae999c3890c7d75229c351eaf92fbd7682ad6b95229e74af8cac361949360b7f1c735108df33d5eaa1cd2a367e392fab9c4da02ccaaf1ace5e897baa9609ad3a142c880972605701882f846120c550548f1af7ca90cf6c9f9dee0eddb29e0f59532a0c0fc11e8365a027460b8ccddebbbe5c538eceda3259fcc7abfce834a3421a12577d568f3347c37edb1eefb050d885671445d6feb31225d743c4bf86e6100fa7026de3b72cddb37894dcbba099a00cef26430665742efc4293dfa747cfac2f29fcca54a3ba06e09b6932f63d5a4d91f5649c8599ef8b4a7ad0b217e0a6b07499f338ad3aea6a7c9a404f0c857db6cb72e26d30db6d9d3236554362ef618d635e8fbd126b972f3398f6354015d3d5470c17181575d49ac6cc5d3be38b7a17a5fb6cf84532fc391a90c21c71d0c47b690139d0162e1cb520895e99e85708b70b3277718992ae92356cf889e6de50d47edb2aa4a031b71ebc907b92ded82a64f87c07da796119716c2abc88c97623f5db5b17f28ca50b28c05f42837f309a74ea8d6c58e6c3b0a7a6e26898091fa7a50b0e472b6f12da733b444136549fe1cd5e381b7c2dc7760728e28c9d6089c9b178e0b8875e1b19c705b3926c8b9f7337f6c5dd79410e7afc0bbe635f11b11f65c4c45d25caea8865cab226dd706357d2e1195c1b5b292e7113ca9a19130ba83ecc4736851f153e8a5a12aa4848d3f48b3ea078f12d572274b121d94770f2127789ffe05a0665c2d075907d0551d7eda1d81beeb4887274544ff4ab48917215a5fa2b787541bb178ab63d7d08e39d8e99ea85e6a21e9c564c796486c9c6061c39715ccf0337f815c99537a5f4193bb5ff6e1b14bb6b7884e0e10e7a74c19c4eac1164122978ee11a51ea24306bfd5f540682c63f625618fadf5ea95c0bdaedb37c28bba360701910f30228cfea1b759bbd19418ba8bc71463a3c0a662fba4f371e85503ac4b9a6713f636c03f3c70e31cdc84f079a5e181b9ee4bbe1e39695b32944a53ac54736876c4b6bb4b94b4f33a781c42b3b4fd324be3a6d1168dc03cdc39f65e33190e3b5449578f599ffa1cb7e5cfb4193c4bf3f203eeef65e8e273017b65e47f56a1851fb74500808f409f42a186c935fec06ca36cdfc27442ac247f963db7734d77febece20a7c3293823893eee6425af2c269425f78c898d60545a0bcdf3167e8c3a8882cfa8e8b828938097011ae26ece2749628b6ce50aed11fc0c85332a3140124aad3e495eff3bb3f4a87d5c585c74272b36e0bfb5d783505f41a2fd79254217b03754847d18c566e7693afc43c9b693c77c28ab73ddf28cd896fc39b9ec43e5d0f31e53853a2608ebeeef307c0d650cd33eb3bf89b55f65be77f3777d1eb109411831cf3d4ed4de46c000a23a6f051a0e592d4fc46b3b5aff48bf47b2c68f716e9025dc25b56f8e9a1555728cfa8f166337d6f5f0e368ab94989d5713355613f8a5955b7a055c196ac658de258ed19d90dd1aa41231aea66407feac931f8726375592bc32d89a7e0598f358139c7ce911896939bbcfd176f0d07573833beeb780a7cf3fd45d82ec92fa84bf206ea000eba95b1618dbcba01d7f785b2048309f9dd9e091bebdf78ee917fa39bc9ca594623f5887dbd015e1ae1f20f39d1474ffde68b3e9a253651d3be428441b167b8e9015bd1d4b8335fed843393d343bdf8029fe211dc4ae92f2faf3abb7a5317024c7df6e92142189d31a4f0119a86a1e0a2a7682ba7e5fab9fcdebdbea9ddfae5fff2caef28cec2a0ba0d17a37aa3b01144a31e52bf07bc4f62b946179d379daf2142e3687d8caa8e077ef1801be2761a30c9af7153160c68587198917fdf4b60f014463b494e4608eaeb419043299f6476247986638c725e81e8049b1609152d309dd27a949f31476b7fcf7267121d7d0326918c2d9b5eb895cc0858fb0ce2ee0ba6e963528b7d18368f7df0416c1f3bfb730aadca6597b0e41a349ad5ae0b5d30c7c9c54d46be1762526cf6d87339a636382e61cb013f49e209c8446a3c93a0824d5f53d7703a7c02909d73fc2a850041160bda6d67317b596d95d1bab036328e2b56b0727b1c08ffe7f27d5e8e544bbd10628cc9250d57e7b98ab59761d924a410b35379102af0ae070e8540fdff65f9653b12b0b51531175dacebd0061cfc89173dc5809e3089c8d27cd1a65165fabe63282bbc2fed294cf6720950e233335e1c05981cb90c685fd7b910636aefef8283313a10369c3a64eaf57537438b305a08f965dd173212431dec7fc78f002c0642fba4c5eb982ae8c0c6e832101373b08085f09a642607f21fa1798c406e1278550ca113a84d03c49c0d60492e75f849cd2d4bc0e54ffdf15404fddcde206ec299e38cf2c6ee9e70f197fe20a031dacecccbba1eb828ae46f961007819181baaff315ca9af9f03abbadc8f7ad62a83cae6d76d682a11434340f357e63dca30002c2462ac41f40aaa7f8b9e3718e7aa6fa2a8d049da731849e9b8b496dea1d71b2f4f4d88af71febee09b4046a8b6e87745470fcaf40502b55ae1803f9e0e1f8c7b390a0079bd5028f38df724bd63a268a54c596dd4bd1ede4d081c8002d2e5dab637ad7e076309470d8652ee5e40dfe24d625a08e2e756478c8e6028f754cfe3686bb87d9966a4db992589a7652e217ef9ab79316079af99ea40d2dab83a444d5ff1e90696cc7e899aa11148d7b16e36be9055ef69b137ff062c5099d892fc1cc35380c84333d1e605ef2b06e1fb510ca504782c240e5a1e3063ff004e2d45016058f9556d60be6a5f425c0d5af713b2946293e816b7c58329ab2deb9a022606c58491d2ffdaf55d77ebc905f18b0af7d9e161a95a69565d1766640170cf1de28e0463e179246522022e22e13a8f24147a7326bdc32b748f4c64876acbb8f7fe732fb4670c6f5e705b3cac3065d09c4ae33bab852c82bd482b60ec85890910b2db32158e7b3ca4d858f2af7e693776f68e09b0bda90811104592c750edc44a451d60231f2e140ea3f4786e6635e3edd7213dfc46be132f77486adbdb0d6fdc84a71567a91e99c6961be3a1c50deb886042f81e9212ff1c4642ab148c38c733e177f8a08c7b942612e48b63941518fd05062920a80a5586ffc275b6aa070df1940859da63c44ee72ad528a61f13b1ddc59750e35d7b7552de0bc8deac7b7d7f78cf35763c352a8c519089e44c61825bf32411557712fddc496275b8a726505da4eb56d42897f8da57e5058704434b9deaae48231c0a277b5e8302963c09462a2355d71cd64cc6c73f6bcbef5d955f73eec5e087de884fb2af63a322d9faa5d0b86f45e7ed79272d2cc3c9a7f56d2368b35bbb7bfff193768e911d998e2030429645db82502f97b701ab85e97007c63b8f8c2d2b271420d9599574a7fc64557069002b4e76040e3c23054f8f994ebfd881d0f0734c663d7803ae2863a497e3c63ea7e06616051c3629dca58972dd18a98153d2018363c1dbb2a144a45af8e50c6570cea6ca0eaf2110154c2d1bc8388ceb4f818b4aed63e8c17bb7f35e49680f3dc770678a29fa0efd8f2d01a65dd9b43e191524dffd6d19828df123ccdf5d9f1f46b4e998baf4d3d2388d8c9aa2776d02a963830826f2071abbe415d531884cfe43a79d907cc881caa0df1ff1332cf8ce85e9bf339e1259e0da89b7796fbb56496367b387b98dad2a8b3ca91465059daaa9d0ff3246cf74448337cb18c48b05e6c7bf9cf51466b588acb40ec40d4454cd196c89458ba426f36622f0b5390fc4aeaf3094279662a1249631a50ddd009063a4bbb06b08b1466793e1c518925f72a3b3f67efe890b05c1064d96dcdc1eea543858ae1f1e162c8bcc93f66737175dc6e186e12fa76275c02b0fbaea4ee6cc2d936d0554dd3e26798af1273a7ba4cd2400b72aa9e4a409f4a51d8cf149c1c85225d6127a8946405198a3a94a7d81cb2c26c991a07413800e1de18538d5cc52a538775ce3fe41e4a657ff2793a8940b755c83c747571e1cec4351f329870f5de45f27051915df969d837f7b8b6ea2a5b8040c25f45e1a63fa7aced628fbbbae7a5ac8eed68585d70fa033d3cf74c2aa79018e09973b2117694a1a3c0e545265b43eeadba71c8fb5388b32f0080a3777aa943632d61c42d392bf45708604acee8a9f371f2c77491204c7b90bafb3bdb90fa98ca9299235de1a213be7223bfb12ce5f3fe67081ff89a6ee9fcbb71d2eb5202fbaa8cdb6d517c801a6140e3d72a6d9f40cbdf55", 0x1000}, {&(0x7f0000002840)="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", 0x1000}, {&(0x7f0000003840)="6db1ca39aedec3a667107169b4f5f9afc25e6869b7c3e99cae7a974bbe561f1405afd8573fe32b", 0x27}], 0x5, &(0x7f0000003900)=[{0xf8, 0x323, 0xfffff801, "bbc4af3e8b7af0d606c8923b0d54615257f41abedddadfa0b15ebeeb4ddf9a5b1f03e731d37a956d3a096a11352c19eb2f523f520b6ea6a3a7afedbadd758969e90e913650aef773d422ea80ae8bdbcdf92e6936b178b8f2f7fdab2ebeeed994ac4750c0c6f7b3e16064a3ebbf8292e439d2608ac5450f43570ff079c00d585fa2226ea4bceffaaec43219a4186c14ab5d52ce85089176a0ba8b4e209b8746095350d41084e4987bd71f9734f1cc62b4dcda1295ec5da6e18c5091a7f77849a2022541a0af3cd14396b40269c81d6e9cae12600fb3c1c7f6e6115ab1330207c210d3fe9e"}, {0x70, 0x103, 0x141, "818fdc6b07f212074fbe6ba598d8d4dbf15e2e01aa0199a052018e6dc2a121085a86bf27c336d8b7f9f30671a5071ebc9da8f79a743f2a038d9e35187c739b9d61568d271cfcc64b1580c2333d11131d2f71d5b03e640a16e96dcf52a3"}, {0x48, 0x111, 0x5, "ddcd6c44684dd14b21e10327dd657bf1882e7a13a4c35d4eda0bb9e32c53c51215e9fc0a5dcd14139148878e3e9dea75e34d3e2dd8ffc1"}, {0x80, 0x109, 0x1f, "934f4b96b9638d978fcb29af4c528251fb76032d889aeff0bf9b1dbe794e00d46edab1412791f45c06a31f3b316fb53d7d6aac5e8585e5b1451229e9ab589c5d922db3eba0d84791f0d4f0bd6251b835f6143e8a3c71b83bce97d3e358fa9358cecb8cb716d906cedd7a12e219a3"}], 0x230}}], 0x5, 0x80) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x220800, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x8800001a}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 13:28:47 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x5100) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:47 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso966\xf5%', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:47 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x300) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1265.429311][T23485] block nbd2: Receive control failed (result -22) [ 1265.439687][T23485] block nbd5: Receive control failed (result -22) [ 1265.456155][T29440] block nbd5: shutting down sockets [ 1265.464064][T29442] block nbd2: shutting down sockets 13:28:47 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x80000) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 13:28:47 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = socket(0x42000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x0, 0x0, &(0x7f0000000000)) r3 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x20, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x82, &(0x7f0000000100)={r5}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000000c0)={r5, @in6={{0xa, 0x4e24, 0x3, @mcast2, 0x7f}}, [0x7f, 0x8, 0x3, 0x1c, 0xfffffffffffffffe, 0x5, 0x12, 0x1, 0x0, 0x8, 0x3, 0x0, 0xffff, 0x800, 0x4c3e]}, &(0x7f0000000000)=0x100) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 1265.548245][T23485] block nbd5: Receive control failed (result -22) [ 1265.563762][T23485] block nbd2: Receive control failed (result -22) [ 1265.575516][T29440] block nbd5: shutting down sockets [ 1265.597059][T29442] block nbd2: shutting down sockets 13:28:47 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso966 &', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:47 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x500) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:47 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x6000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:47 executing program 4: r0 = accept(0xffffffffffffffff, &(0x7f0000000680)=@isdn, &(0x7f0000000700)=0x80) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000740), 0x4) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x8000) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) [ 1265.815889][T23485] block nbd2: Receive control failed (result -22) [ 1265.836059][T29475] block nbd2: shutting down sockets [ 1265.890308][T23485] block nbd5: Receive control failed (result -22) [ 1265.906339][T29477] block nbd5: shutting down sockets [ 1265.936967][T23485] block nbd2: Receive control failed (result -22) [ 1265.948052][T29475] block nbd2: shutting down sockets [ 1265.985205][T23485] block nbd5: Receive control failed (result -22) [ 1265.995287][T29477] block nbd5: shutting down sockets 13:28:48 executing program 3: syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/userio\x00', 0x800, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x44}, {r2, 0x200}, {r5, 0x402}, {r2, 0x1ca9890223526632}, {r3, 0x2}, {r3, 0x40}], 0x24b, 0x0, 0x0, 0x137) 13:28:48 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x60ff) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:48 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x101000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000002c0)={0x0, {{0x2, 0x4e22, @empty}}}, 0x84) syz_mount_image$minix(&(0x7f0000000140)='minix\x00', &(0x7f0000000180)='./file0\x00', 0xff, 0x2, &(0x7f0000001380)=[{&(0x7f0000000200)="c7f153de1c59cdb78142890a49bb54ea30c5ec6b129bf86c5ca0d3d49c9a81dc157ecdb1ca55f777cd52aff8c90d02f268f6837263b5cf97b4a16bc70cccd2bad828c26a65055340b95077b93d3db8542f9a74ba8ccacaca5b835643638c28ed8ff3e225595a78b4d199b9a4e79befffe8c7e244cc349bdc107c11170044325ba2bbd406ec6a6bf9eb1230400563ccdb9fb6cefa606d46ec3374f430c1c062674c0d23a059948fd92be22bb25c5ae9", 0xaf, 0x218000000000}, {&(0x7f0000000380)="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", 0x1000, 0x7fec}], 0x2008, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x3082}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f00000000c0)={0x8000, 0x0, 0x40}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) getsockopt$inet6_opts(r4, 0x29, 0x1, 0x0, &(0x7f0000000100)) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x1fa) ftruncate(0xffffffffffffffff, 0x208200) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000040)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)=r5) 13:28:48 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso966\xff\xff', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:48 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x600) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:48 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r5 = fcntl$dupfd(r3, 0x0, r4) r6 = socket(0x42000000015, 0x805, 0x0) getsockopt(r6, 0x114, 0x0, 0x0, &(0x7f0000000000)) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1300000c}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x1f4, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5a79}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x20}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA={0xd4, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x77}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x53}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb3}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000000)=r0) [ 1266.402842][T23485] block nbd5: Receive control failed (result -22) [ 1266.422687][T29507] block nbd5: shutting down sockets [ 1266.432050][T23485] block nbd2: Receive control failed (result -22) [ 1266.441764][T29510] block nbd2: shutting down sockets [ 1266.488369][T29507] block nbd5: shutting down sockets [ 1266.538093][T23485] block nbd2: Receive control failed (result -22) [ 1266.549662][T29510] block nbd2: shutting down sockets 13:28:48 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x700) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:48 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace$cont(0x4207, r3, 0x8, 0x807100) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace$cont(0x4207, r4, 0x8, 0x807100) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x5, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r5, &(0x7f0000000000)={r7, r8, 0xff}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 13:28:48 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x801, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 13:28:48 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x7600) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:48 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x02', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1266.855024][T23485] block nbd5: Receive control failed (result -22) [ 1266.858605][ T1530] block nbd2: Receive control failed (result -22) [ 1266.883883][T29642] block nbd2: shutting down sockets 13:28:48 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_CROP(r2, 0xc038563b, &(0x7f0000000000)={0x1, 0x0, {0x6a9, 0xff, 0x3, 0x8}}) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 1266.926006][T29641] block nbd5: shutting down sockets 13:28:48 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x80000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) [ 1266.983186][ T1530] block nbd2: Receive control failed (result -22) [ 1266.995367][T29642] block nbd2: shutting down sockets 13:28:48 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x2000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:48 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x03', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:49 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x40, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f00000000c0)={0x1, 0x9}) prctl$PR_SET_DUMPABLE(0x4, 0x52898e4e59b85e0) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000004f008701a4e22b73787a9165213b00ee7d5f1952d9ff56bf2829e5615a40aa43f3410efe1ef9d5bdb6e1563c307fd3a6db6e0093f75d0ddcd1d52df5626abfd51b62a313deaf43358fe5929539fbfdcf84c9b3b63d134d22abee01ef7173a8e22f83b277969c0018571842"], 0x55) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0xfffffffffffffffe) 13:28:49 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x7e00) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1267.217236][ T1530] block nbd5: Receive control failed (result -22) [ 1267.228283][T29672] block nbd5: shutting down sockets [ 1267.347843][ T1530] block nbd5: Receive control failed (result -22) [ 1267.357000][T29672] block nbd5: shutting down sockets [ 1267.395181][ T1530] block nbd2: Receive control failed (result -22) [ 1267.405452][T29683] block nbd2: shutting down sockets 13:28:49 executing program 3: syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10, 0x800) ppoll(&(0x7f00000001c0), 0x2000009f, 0x0, 0x0, 0x0) 13:28:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/71) r2 = syz_open_dev$vcsn(&(0x7f0000001c80)='/dev/vcs#\x00', 0x8, 0x121000) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000001cc0)={0x0, 0x0, 0xe25, 0x7f}) r3 = epoll_create1(0x0) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000380)) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000040)) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x81, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r7, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0xfffeffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040004}, 0x1840) sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r7, 0x3465f7d0da11ec71, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x5}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4c084) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) 13:28:49 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}) r3 = socket(0x42000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x0, 0x0, &(0x7f0000000000)) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r4) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000140)=0x3) 13:28:49 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x3000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1267.525048][ T1530] block nbd2: Receive control failed (result -22) [ 1267.533587][T29683] block nbd2: shutting down sockets 13:28:49 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f00000000c0)={0x7, 0x5, 0x1, 'queue1\x00', 0xffffffff}) 13:28:49 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x04', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:49 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x9600) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40800, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000002c0)=0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000180), 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) keyctl$unlink(0x7, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fallocate(r0, 0x0, 0x0, 0x1000f4) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) [ 1267.682943][ T1530] block nbd5: Receive control failed (result -22) [ 1267.694444][T29706] block nbd5: shutting down sockets 13:28:49 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7, 0x82400) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x8000}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f00000000c0)={r2, 0x7ff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000140)=[0x20, 0x1, 0x9, 0x3, 0x7f], 0x5, 0x7, 0xed1, 0x1, 0xa63, 0x5, {0xc653, 0x601, 0x2, 0x6, 0x9, 0x31cd, 0x7, 0x1000, 0x7, 0x100, 0x8, 0x1, 0xdd34, 0x80000000, "46095169c5464eed228d881f915363bdcc4a044bbef8a1562d642300c5c7b883"}}) r6 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ppoll(&(0x7f00000001c0), 0x20000000000001d0, 0x0, 0x0, 0xfffffe9b) [ 1267.773009][T29706] block nbd5: shutting down sockets 13:28:49 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000000)) 13:28:49 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) epoll_create1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) r3 = accept4(r2, 0x0, &(0x7f00000002c0), 0x1000) getsockopt$llc_int(r3, 0x10c, 0x9, &(0x7f0000000300), &(0x7f0000000100)=0xfffffe7a) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0xe80, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x10}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0x4fc1e83374210d3f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x3, r6, 0x34, 0x0, @in6={0xa, 0x4e21, 0x6, @mcast2, 0x40}}}, 0xa0) [ 1267.886698][ T1530] block nbd2: Receive control failed (result -22) [ 1267.896882][T29719] block nbd2: shutting down sockets 13:28:49 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x4000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$rds(0x15, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsmount(0xffffffffffffffff, 0x0, 0x12) [ 1268.017042][ T1530] block nbd2: Receive control failed (result -22) [ 1268.033790][T29719] block nbd2: shutting down sockets 13:28:49 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x05', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:50 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0xff00) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1268.125063][ T1530] block nbd5: Receive control failed (result -22) [ 1268.150463][T29743] block nbd5: shutting down sockets 13:28:50 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") sendmsg$inet(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)="1a547b22515a1f1fb1385a9ff0ab2703595a321d6087a08b6cdf766e8ec47786c2f6656222607b46912e9442211be92adfcd8c3644bef8c44e0d5078e7d33e2d72ca794d91ea888850570cce823df08188beb3d0c2d02f147127adf89a4fd6af6e353ae895e20fb51570a90fd20d65ac9848adf17b95cc10f83b9cb0920ee87986abd9f6c1c62afebdc91c267f565cabdab3506e0e2e7c6b9784", 0x9a}, {&(0x7f00000001c0)="198e6668ec3e5d83705abcd22e5bdae9500e4493fcf40f944ced978e0063086bd8b9cfbd5250429f28610e41e9cda411ef5ff7f84d4de6002f5e617e425b4ff08c093a27331e3e33befcbae386cfee6d58bdb2268e17f176b20e28766076ab1aae27fbcf34bde1255439da691eda07", 0x6f}, {&(0x7f0000000240)="4bf02dbea5f5523acb170b4269b345ed94f821cc26a31c8d9d1083d181290b6f24294271cb58a76a6934471013642b208224ec441cec145afb04d4ee7846c6ccf165e7be9a8e25053b9bdab807ce5e6adeb2e81f04885d425a87f3dec523ff22fb06e6740c0b3f139fb1587419965d102ac621a400ca6de4e8a976b386473d626ebb684e", 0x84}, {&(0x7f00000003c0)="3776286fdbc921fb91b313540e44f1fc1b9d8a120fb7733013f902b71fb0db35a7b2b3df653c84454272f9bad9ec20741a518b9023925167174bfcb1eecce325d06e04b15d481a8328bb99792e6a8a7cf3c522d67f29d6cdba1ea1818ca07262b2a13413b3e757617d6fe1b694fd85d3fefb7334ffc1c89f16550ffb96736673b93b6e81ff40793f75fb2e7001dcda13bd75d057f26b9a5f4a59f637912d", 0x9e}, {&(0x7f0000000300)="3af824dae88c3e24d95391191d03a261a4ce15db23bceb7af9a84140e8e317c06c6f05b9e5628f61e746e1090ff5ae45b674f67aa9b2f561c439e406808c28e8af3afd616c899b85e4f16b49966d8686a4ce469a95347f88eff85258e8bec33232f6f9ef9a59856bd43835b5e024462688ce343e5e06127d1a72c725d114", 0x7e}, {&(0x7f0000000480)="c4380aa90749df812e3ca0b492ebeabc225def3849e9f1dbbba7ab5481ec85138d2841b6a03ae19ef6d6a8af930e238e3820d8dc9f762f036fe9e83c9807e88a49bdaeee426434220adfde0f10cc1f85d090ee9c3865a6116cd6c6284a726a8dfbd73d6a99816fd3a8603d369bc882fb243c261130d8376d487c57010c38753bb82ca6e3f7a399728d1475c5", 0x8c}, {&(0x7f0000000540)="62c0c71248404af14b686b8390cf12cbd80544c0f5d1e3e7492d6523663d1cf22a8b490cafa4e6db52150487fe622f795dc1b65f2deea08a5ae6060ba99c1ac6f9330c7f8b78f8bfae276337a13ed7f0bbebde59ffc15502acdb3c6f44fd19bf3607e57236612677d1bcf6d044062981c262873b0dbc71f12f0291ccae2e577b9780a2fd2ea82945e668a248acf4a58b9c15977685955914b8fc5fa776c265d52f8a40ae88f303a89c074510664dcb844bfe13e9fad8302a42", 0xb9}], 0x7, &(0x7f0000000680)=[@ip_ttl={{0x14, 0x0, 0x2, 0x250}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x30}, 0x20000000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8000, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x111802, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) 13:28:50 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') [ 1268.233125][ T1530] block nbd5: Receive control failed (result -22) [ 1268.246451][T29743] block nbd5: shutting down sockets [ 1268.333744][ T1530] block nbd2: Receive control failed (result -22) [ 1268.343064][T29766] block nbd2: shutting down sockets 13:28:50 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x5100) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:50 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x06', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1268.430704][ T1530] block nbd2: Receive control failed (result -22) [ 1268.434220][T29776] Failed to access avail idx at 0000000036bf248c [ 1268.470744][T29766] block nbd2: shutting down sockets 13:28:50 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) connect$netlink(r3, &(0x7f0000000100)=@unspec, 0xc) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000000)) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") tee(r1, r6, 0x5, 0xc) [ 1268.506723][ T1530] block nbd5: Receive control failed (result -22) [ 1268.538886][T29780] block nbd5: shutting down sockets 13:28:50 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x400000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1268.692983][ T1530] block nbd5: Receive control failed (result -22) [ 1268.703103][T29780] block nbd5: shutting down sockets [ 1268.767513][ T1530] block nbd2: Receive control failed (result -22) [ 1268.779605][T29798] block nbd2: shutting down sockets 13:28:50 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') 13:28:50 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x6000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1268.857675][ T1530] block nbd2: Receive control failed (result -22) [ 1268.866517][T29798] block nbd2: shutting down sockets 13:28:50 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x200002, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x101000, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000180)='/dev/input/mice\x00', &(0x7f0000000200)=',vmnet0GPL\x00', 0x0) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket(0x42000000015, 0x805, 0x0) getsockopt(r6, 0x114, 0x0, 0x0, &(0x7f0000000000)) getsockopt$llc_int(r6, 0x10c, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x8000) ioctl(r5, 0x1000008912, &(0x7f0000000240)="0800af2d45c831e17ab507eefba83468466765a0250a88ebe9cfe87b0071") r7 = fcntl$dupfd(r2, 0x406, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000280)=ANY=[@ANYBLOB="fa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009b73de94000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300"/254]) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 13:28:50 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000000)='*$\x00', 0x0, r4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 13:28:50 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\a', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:50 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x510000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1268.984386][ C1] net_ratelimit: 20 callbacks suppressed [ 1268.984396][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1268.995979][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1269.006246][ T1530] block nbd5: Receive control failed (result -22) [ 1269.024227][T29814] block nbd5: shutting down sockets [ 1269.089546][T29814] block nbd5: shutting down sockets [ 1269.142855][ T1530] block nbd2: Receive control failed (result -22) [ 1269.151849][T29825] block nbd2: shutting down sockets [ 1269.157465][T29820] Failed to access avail idx at 0000000036bf248c 13:28:51 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x60ff) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1269.214434][ T1530] block nbd2: Receive control failed (result -22) [ 1269.223227][T29825] block nbd2: shutting down sockets 13:28:51 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 1269.293744][ T1530] block nbd5: Receive control failed (result -22) [ 1269.329721][T29842] block nbd5: shutting down sockets 13:28:51 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x70f000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:51 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') [ 1269.384485][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1269.390310][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:28:51 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\b', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:51 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0x200b}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 1269.445388][T29842] block nbd5: shutting down sockets [ 1269.464452][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1269.470287][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:28:51 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x7600) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1269.562564][ T1530] block nbd2: Receive control failed (result -22) [ 1269.579082][T29852] block nbd2: shutting down sockets [ 1269.627616][ T1530] block nbd2: Receive control failed (result -22) [ 1269.656976][T29852] block nbd2: shutting down sockets 13:28:51 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x718000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1269.720594][T29864] Failed to access avail idx at 0000000036bf248c [ 1269.739687][ T1530] block nbd5: Receive control failed (result -22) [ 1269.756773][T29870] block nbd5: shutting down sockets [ 1269.828436][T29870] block nbd5: shutting down sockets [ 1269.864388][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1269.870046][ T1530] block nbd2: Receive control failed (result -22) [ 1269.870200][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1269.893737][T29881] block nbd2: shutting down sockets [ 1270.005219][ T1530] block nbd2: Receive control failed (result -22) [ 1270.013689][T29881] block nbd2: shutting down sockets 13:28:51 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket(0x42000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x3, 0x0, &(0x7f0000000000)=0xffffffffffffffcc) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000080)={{&(0x7f0000000200)=""/175, 0xaf}, &(0x7f0000000000), 0x9}, 0x20) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x496023, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x81, &(0x7f00000002c0)=""/129}]}) r4 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 13:28:51 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') 13:28:51 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x7e00) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x18) 13:28:51 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\t', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:52 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x760000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:52 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000283000/0x3000)=nil, 0x3000, 0x200000e, 0x11, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4040, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) [ 1270.186470][ T1530] block nbd5: Receive control failed (result -22) [ 1270.219687][T29898] block nbd5: shutting down sockets [ 1270.287393][T29913] Failed to access avail idx at 0000000036bf248c [ 1270.309250][ T1530] block nbd2: Receive control failed (result -22) [ 1270.318914][T29917] block nbd2: shutting down sockets [ 1270.325710][ T1530] block nbd5: Receive control failed (result -22) [ 1270.345720][T29898] block nbd5: shutting down sockets 13:28:52 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\n', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:52 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') 13:28:52 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x9600) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1270.424405][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1270.430383][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1270.436648][ T1530] block nbd2: Receive control failed (result -22) [ 1270.463033][T29917] block nbd2: shutting down sockets 13:28:52 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x807100) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1270.603609][ T1530] block nbd5: Receive control failed (result -22) [ 1270.620295][T29932] block nbd5: shutting down sockets 13:28:52 executing program 1: mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x0, 0x0, 0xffff) ptrace$getenv(0x4201, 0x0, 0x9f73, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) setresuid(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r2 = getpgid(0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(r2, 0x0, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) write$sndseq(0xffffffffffffffff, &(0x7f0000000100)=[{0x40081, 0x5, 0x0, 0x0, @time, {}, {}, @time}], 0x30) write$sndseq(0xffffffffffffffff, &(0x7f0000000100), 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000100)=[{0x0, 0x5, 0x0, 0x0, @time, {}, {}, @time}], 0x30) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80c81, 0x0) write$sndseq(r3, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) write$sndseq(r4, &(0x7f0000000100)=[{0x40081, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x30) write$sndseq(0xffffffffffffffff, &(0x7f0000000100)=[{0x40081, 0x5, 0x0, 0x0, @time, {}, {}, @time}], 0x30) write$sndseq(0xffffffffffffffff, &(0x7f0000000100)=[{0x40081, 0x6, 0x0, 0x0, @time, {}, {}, @time}], 0x30) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f00000007c0)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x4) sendfile(r0, r1, 0x0, 0x20000102000007) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000100)={@empty, 0x2c}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000240)={0x8001003, 0x1, 0x1}) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000700)={'ip_vti0\x00', 0x0}) bind$packet(r6, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @random="ecee8b1483f4"}, 0x14) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) [ 1270.745062][ T1530] block nbd2: Receive control failed (result -22) [ 1270.761636][T29949] block nbd2: shutting down sockets [ 1270.792035][ T1530] block nbd5: Receive control failed (result -22) [ 1270.800309][T29932] block nbd5: shutting down sockets [ 1270.826852][T29949] block nbd2: shutting down sockets 13:28:52 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f00000000c0)=""/24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x88000, 0x0) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000140)={0x7fffffff, 0x5, 0xfd32, 0x10000, {}, {0x5, 0x0, 0x3, 0x80, 0x0, 0x8, "90c73fdb"}, 0x4, 0x4, @offset, 0x4}) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000000)={0x98, 0x6, 0xe0, &(0x7f0000000200)="ee5952ef63a4259e7aec44cf863bf3fce71c4f9a0063010946241938caadddc90d512cdd2a287fe9ae68d24287011504bcabb57ae0e4af5ce2eaefae7ea7d68f9d5495e0a4bc878244dd37be7be88312736e99aa4b1885c5e6f85660010c5c8a60ad2ce0d325af14a48d694ff458b5a9df2420fdf2d686329d3c19dae73bd98b311ed9db249c1241701d3e738e08eb99bea683a4a8c74c25975066705498cf25294b6e97f5f2d144b003294d869a7d88daeb9b196168ae2c33db0c9c1aa3f7a0cf7308cf284f5f6d307c9d3994610a4fad9fcb81e89cf4d73404c8f209895ce8"}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") getsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f0000000300)={@dev, @local}, &(0x7f0000000340)=0xffffffffffffff78) 13:28:52 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660#', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:52 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') 13:28:52 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0xe0ff) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:52 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x960000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:53 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1271.120787][ T1530] block nbd5: Receive control failed (result -22) [ 1271.138215][T29967] block nbd5: shutting down sockets [ 1271.203772][ T1530] block nbd2: Receive control failed (result -22) [ 1271.216434][T29972] block nbd2: shutting down sockets [ 1271.234915][ T1530] block nbd5: Receive control failed (result -22) [ 1271.245517][T29967] block nbd5: shutting down sockets 13:28:53 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:53 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0xff00) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:53 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') [ 1271.301932][ T1530] block nbd2: Receive control failed (result -22) [ 1271.310765][T29972] block nbd2: shutting down sockets 13:28:53 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='/group.\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xde\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xff\xff\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00\xbe\xdc\xcbzg\x95\x18\x11\xa6\xf0\xba\x1e\xcb\xaf\xa1\x87\xd6bFU_\xeb\xb0\xe3^\n\x1a7\xc0\xa3\xc2\x1a\x9d\xf0\x94\xa3\xb7\x17Vk\xe1\r\x18\xba\n\x84\xf65\vH\xcbu\x13\xcb&\x1e.(\xb6Cc\xd8\xac]\xf4\xfa\xe2CWv\x03\x92?\xf83\x8aN\xc6\x8b\xec\xc1\x88/\xb1\x0f\xeb\aW\xe2\xdc)\x92\xd0\x10\xac\xee\xf6\xa4\xf4Q\xf9-\xa9)\x8cX\x96\x12\xfahz\xcbn\xb3\x92\x03\xfc\x0f\xa7Ew\xacJ:\x04\xf3\x98\x0ev#', 0x2761, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x200000000005, 0x0) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000040)=r0, 0xfff4) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r1, 0x0, 0x0) 13:28:53 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0xf07000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1271.495415][ T1530] block nbd5: Receive control failed (result -22) [ 1271.514094][T30099] block nbd5: shutting down sockets 13:28:53 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1271.619828][ T1530] block nbd2: Receive control failed (result -22) [ 1271.628674][T30111] block nbd2: shutting down sockets [ 1271.647359][ T1530] block nbd5: Receive control failed (result -22) [ 1271.671410][T30099] block nbd5: shutting down sockets [ 1271.713969][ T1530] block nbd2: Receive control failed (result -22) [ 1271.722440][T30111] block nbd2: shutting down sockets 13:28:53 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getpeername(r0, &(0x7f0000000140)=@un=@abs, &(0x7f0000000200)=0x80) times(&(0x7f0000000000)) r1 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000280)={0x0, 0xecd, 0x0, [], &(0x7f0000000240)=0x8}) 13:28:53 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') 13:28:53 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x1000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:53 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0xffe0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:53 executing program 1: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x8000, &(0x7f00000000c0)=ANY=[@ANYBLOB='d']) 13:28:53 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1272.053955][ T1530] block nbd5: Receive control failed (result -22) [ 1272.085225][T30135] block nbd5: shutting down sockets [ 1272.118804][ T1530] block nbd2: Receive control failed (result -22) [ 1272.128348][T30132] block nbd2: shutting down sockets 13:28:54 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x47}, 0x3c) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r3, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f00000002c0)=[{&(0x7f0000001580)="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", 0x101d0}], 0x1}, 0x0) 13:28:54 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') [ 1272.212474][ T1530] block nbd5: Receive control failed (result -22) [ 1272.233889][T30135] block nbd5: shutting down sockets [ 1272.263446][ T1530] block nbd2: Receive control failed (result -22) [ 1272.272574][T30132] block nbd2: shutting down sockets 13:28:54 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x400000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:54 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x2000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:54 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x47}, 0x3c) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r3, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f00000002c0)=[{&(0x7f0000001580)="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", 0x101d0}], 0x1}, 0x0) [ 1272.549109][ T1530] block nbd5: Receive control failed (result -22) [ 1272.565218][ T1530] block nbd2: Receive control failed (result -22) [ 1272.575001][T30170] block nbd5: shutting down sockets [ 1272.585763][T30173] block nbd2: shutting down sockets 13:28:54 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') [ 1272.669230][T30173] block nbd2: shutting down sockets [ 1272.689566][ T1530] block nbd5: Receive control failed (result -22) [ 1272.699217][T30170] block nbd5: shutting down sockets 13:28:54 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000000)=[{r0, 0x80}], 0x1, 0x0, 0x0, 0x0) 13:28:54 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:54 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x3000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:54 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x510000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:54 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x47}, 0x3c) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r3, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f00000002c0)=[{&(0x7f0000001580)="276c5bd6f0db828036f59b152925d176a9e51a4722f8fd829657ff48969c3c5f309ceaf42e7b242b7fe4fa128061aec9827004000c31fd9e31cb1c79990c2b89045ea4dc3ad63a775c80850ea10827e8a40a6c8b5fa7cc514639bb99f13c6a3d0825a738a1a53433042c75230d368c95f8a0b5562b58ecf50fd78e5def7375cd62fb5728535bf371b2ffc7d8058398075e1d0a7a4451395c39f79c26b7287cebd130de7737e77714686b9d67d87a3cf8da02cc70fdc99c1a7c916ae542b9d5baaf1f9daa4fb845fd5d5cad2073a61ce51c345150f84b3900997296d55c7d394af17b01d445465ef377508a1a29a5d6b03b0da22c973f22814fb2a802d50fb1f051e7d95d53d598a0599ec79cd27123fa1d13b7996609d4548e81ef7b1e8de8f32593ef46c3081ab55929a3c1cb1fa28a485518391a76b7b80d5941aa42222cb6f25be29ebc938af75971ffffdd4dea114ac37f38e69cb670020a7448d99b7b5e3d09bcf2625c94d6599182ce9edb0bbfea111dae3b1c9d6cd3162ce0aaebcdcf22a8d29dca0d04ebf5944168f398c500915579070586dff7a2ec6d345d1f69a8c749740aea0dbb2d30c9f7e3afd498a886c906fe09a83322d8e94b3ebe288ec1601e6a16122fa44191b6b3f5315eb0b35cb628540438919b906502eeb7cacc7d15753e456b056e6145ab65ac7c01253f3c5663495a74a0598feed07436a72d3ee1185d0fbcf89e8c5d449e0216cab8110efe923be24366dffc65bb386e7f015bb40b6fd9abbf7180b217f88d99f168c113f3ff187c202e2ae32a0238e43af612678a44a3d8373b6dc6bf820f8bf73e6411c51152f51993c66effe25c6e72a3127da6996f13691ded659e1f9d6eab1124435750dfeb60de2b2d59d9196bda3a3c5cd5054b2960481d50ce28ac4159b54f3f26a9decfc8ab36b6110eda741e21c95e3631b3de40fd3c7828fb0e3c85070eb233d4d4b1b75e0167ec62e81f1a12a0cd2e02a7a43edb384e4d0d59744bbe86611575966efe25b4191f14a368a72c13aeb4de7caff7a9439b583d08714fd22a9b1ff08297a562a859e2d21dd4f8ecf6701bcd9a30d28909c52c56a8ef739f0841ae895ad858121b1ec82ae1bbec856730aba8e2f42841c33caa862fdf8b651d90055b6725e5bf0af348ec550ad23c5a3c15c7455fdb13a57a6e452bdebbeb32200ab7dce3fab98b206ec2571e3de8904bea2265288dbaec64359cb5cd926dc025343fff78e7bdab6f541a3d2b569f37b8339d14e706163854d01ba5380d648391740e1fc2e118557692796acf6e0fa8ab21c5657259bf05a8b510eb285f306c8cdd6e185094b0ff46ec71d5a9b8e344176f263730468db893eaba00c32bdafdb1ebdc3ec441abaf4e7b2db744411ae02f33b340a373ea1a485b88073c2da7bd6828bbe4028fef4c30088c9b28daf899741029da8f52d2927250c582f16ca173c0761ad74364f562f3106a15d17d34ff27abc49b8a7d9aa3d2d2bd5c406c9fe21e59ffad1a85c3d1283f983efaab087a92ce4bc66c934605b658f56857301278b09f5e22ba0034a3944ae27bd20cf9cd4a7d1973d4818716d0bf71d922d74ef68ede2604a98f6db652206e0a34ceed21cb950eebbee9686fc368e2b42f9417b22ab84c1a341630f962560900e02f20cc0ed618e657fe4ede15f9a105620dd2206dbd74ba7f061f2d058a127f5ecb72ad12264d81816d82169d668adf80bbdd279c684e11980f72ba126d0326dbfe6736d2b737069e0c5efb7e76276f10fa915907d91282084fa9a12c5636fd265ef705f49adc9924ffcc68742b17c9212fe8abcc49e4db91ee543a7fd438e59d030d6fa1c31ebe151f9c44af0069df608f0395159c41339aaf31b4c3e67526036c7f4d96fdd5afa5c4c85f2a6648098dccd6a49a8250e26bce3ca0e78976c961432783947e3a8ff5430af9cfebf3d2ee72153b7bd4d7f2cce79da6defba02cc5a73f7fa137c01a2cea52a961d9504d959aec7e2627fc33d07ef45bb8afbded876bee54c7f2feacf548bbab68a782e7bbcb6140d6c6b3fbe1108a6f4dd750c0424a9e1e0b8f239c4739f28463a23fe011cb8c98e25126c5693f19f16ab8a4b6351ff2955a397c3618ae47c78b2d123c334082f9aae0d7f9e7b761d58ef7e1f6dd20a23c7bcc3e84dbc75551573c425e5d56ca84e263b22c2ed5ff1255e500c1810574ff1af28114221fa6e72439d5fc117700bf5a7e01e2ffc0cfeabfddb8ae217a7033c9c8dce5a685ca7a0f4ceeb153ab2ae77652e1d73e9510f868b70270e386664ab4c45ddf353e61aef1ac0c673502b7e7faae557df3eaa5fd0a3a00c54f23723ce6406f616f678b6f789c57e09864895dd8a1e5da9ff0bc7be9f9174af99e157e4c71ed69c71783abb3ad18141d99e49ef32614b8ac29eb50f64b2355f4b599acbdf039877d68275a2ebeb0729791412dfd3194cc2cb4f045a4d2ac74afffec582df03ce4afd2aedc594c6cd34a4cd21d4ea653b04d49a8aa1e942df36b530c90d0c2c62ef8369677ce2ffd4304b0410ff9ef86be8afbf55adc6abca02acf03dcab2fe5339ab0eb9d79dfc4817c5e2c10676904192395d9b8552760b0fa79add2769284a0ef5ebc4d61e64dc9a8b2d4770cdb4be4345026f6d04549140f4bb01e8252eb06d70afd84247f8023a0cc31329499a0efcd8a79e0832992a96b437258ab186c6a9c8f2e55fe7319605453b888d928730a11a11b4f56eec25b4c18b2205aad508a9f6850e6e23103a517cf43af019d54593803b76a3529777a58441d781d2eb509fcb723ba3be91d12c809f0148095e2066e1b0f0656ceeb751ad610e265bd4bc1b67f5e521ef420420e9b7e137f29240d63a42d678c1739f33f39a09a0f4c5249f808f41152a07ce9bfcc94e35683bea83f82a5e34e1fef3f8ea2cf4c9f1c8ccef87d7f58fc1b4ace6cb667e62ed1f54f72b3a156551d96f9a16ff4864ae3a01dc86b5c65e6676493f07d7257b34d8c6c5851334a4542dd2bea4aef4f444b5f26ac89a27e3313a4a66bdad09382357f1adbd61d526a2541022814cc4b2515aec30f74729d1a5826a3206c02ccd6adfb6c2b6c7aee33b7213bdbc5878151b50d1a8fdc1b2b9b44a01606770028723c848e1faf60b89de5a2e72b7d19f7745f7c89989ab2a8174291ad7d0f2b172672aba9f4a1b42df53baf6d353b45d755eff7526efa8a87a2aeaf84d9a434e8844a98eab172fa474b353f19e1231aca846d93eb24e650e015a42c578d23d794c02304ff72e358ea5c75f6709e587951d3900b3b1066ddd4a2fe9186d0cfcfcc7e33e9b882e8c2242ba990face580f94d66bb6a5212190fba3c1f1e046738c422d9e94ed6671157af9145bcfe7fd0d431a7a7c84a3eec802794286e2dc2b59e93fcb09ea22a1e47ee8f0b3cf756fb67bc3676819cbc67396322ea6be61552533b52a2fd258e82dc7c57a09211cce3e785f5b4deacae7b9dcd48080c9edb03d935c9c9a426bb6d3ec71e559af61b796827b5e425c991d3485381e0842b35cb0ad91154f4a13117b35d2a9ebfcf0ef68d73093dd483923f7b3a00e9c04c0eec31effc9f908f38949e1766409fc9c8cc48f95d4d537520159dd794edb56e824d31c67d9c7cbefdb51860a8d1f859baa9bf5c2752d00b6969e94d47a88be798f6df9e6b5977a56206c33a38e74ac5de0b23489c9f5a037e13ae0194beb9f954c6b8ebefa78194a4e891c12ddb43019e60d9b8e7fe78df65a83671b76fd1a9c7be064c6d822bb0749d2162168821484ab78f906cb990167a2f9e19a33be2086dd55e54cb8b6dbcd6d1cc9b4c828472d55db6f175547f73db54d142f290ef99e8e26f2c6ebc7a53bfe31fe1eb2ac6a13dd0081debcc346cc0d3407ff158bc48a314a18b7fa781e32b66f9eaa792031567fa8d5c33fd85ebf85af958ef84c0c69f2bc3f842bff08b4b3112a6ac24a78c9476f15d40de489e50fb5e426167a10739db436cb1a63f5e7b3baf7c21c3506d3021c487ce4625f66a18468c89c3a9c94c7c1c2676e1f21a26bc393cf83e7bdf9bf66c2e9dd080574e1a80fe152124e5191c9367f22b4a712322986165964ccc2b016f0fc52e69d009a2f9fc13f344153f17bcebf937f59714f44dfdc11e69c7216cdb4f4d2143222e41d7415b3ef52e45477f62def841cea29c6258a2a2d8c7895712c51025ed7fd5d68bf8aa5a96fbbba98090dac42ad69522f47288af9f6f7acd2406c42706a940300ab41a59488966dc63f4ce8a6e6e7b18c1cf7b3e5013441ad0d7f201343e4a64da2cd513782877cb35d00f2113147ec4d7410971968daa76b1b9ad115c9ef6e8fe6abeb8b372806dbccb26f504f3fb8fb26c97fc6dcc7091f2f940e76fc121b39f215cb5ee96383b0ad5dcb2f7671e1d75612b3992a8bfd9ef25545b75845991f64a26c87a8abbdde668be3e6fb8ebdc31e73eb4eafda15215e0b545907a86c0fa3d5f1af4cf096cd7ec9c31dd57851203a2ce0c4cfecefe63e43ec9335f00fe3195965d0602bdf0fb36a8b4c6a538f18c002895f4d33968901c0228fbbfd250ae07075c9c3d8e3233027ca1ba82586797b9c3fd5c256c9562789f4393908ecba4bbd26a49672d71098198efe77b3661a2114c3b919330e67cd0ae6e90d88e1922750b6d36bde8926f9c635fbe0b1016f016af69965d762ebcab348ea4fe695007c9e1f91b8f7019a3206627751c8216dae9857569f152888ba8876b51d5d73bffb3c5544500e1121d72a0d2ca9b382bae36c36fdb5680b5973ec3529eefc2077654f5ec0021d473c221d544d6c0b56c48926ece451f01bd3b2746f6ccb0a44a2e934eefbc24c8f4ced796e4941bb6363d2bf0af8834e0dde49632c228477fcbae8d6667c5996aeb14eac620e35a1b3a3b29c4122c91f92a2f9917291c04cfb9ef91215d8b0dffccd082474c9a2ee26ab2139d4428c74efd41f820d671b4255253abad18028b4d19715ba084eaa884dcc975da4c316ac3f8c056a2dc1215bd1db2fd504169e6dab0494bc8e02d4374f061c517d424b0050b678fb240df83d19c0f9a71465541f706cf976f6f653a216dc290698158864c941067577cc0b54c8ccae532de0ec0ddc67d4a22f5c9dcee990b7ae21567991bb1fa1f83d51114f00248735a3b884311b695a65fe6671db499588fd69c79baa8962d6f4331e3dda9b3d7075b2240d58cbe88521c4bfab84066a6b69fbcbc3cb6cbf", 0x101d0}], 0x1}, 0x0) 13:28:54 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') [ 1273.037319][ T1530] block nbd2: Receive control failed (result -22) [ 1273.047653][T30199] block nbd2: shutting down sockets [ 1273.054028][ T1530] block nbd5: Receive control failed (result -22) [ 1273.071745][T30197] block nbd5: shutting down sockets 13:28:55 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x47}, 0x3c) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r3, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f00000002c0)=[{&(0x7f0000001580)="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", 0x101d0}], 0x1}, 0x0) [ 1273.139668][ T1530] block nbd2: Receive control failed (result -22) [ 1273.148972][T30199] block nbd2: shutting down sockets [ 1273.191817][ T1530] block nbd5: Receive control failed (result -22) [ 1273.201341][T30197] block nbd5: shutting down sockets 13:28:55 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x4000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:55 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x70f000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:55 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') [ 1273.383015][ T1530] block nbd2: Receive control failed (result -22) [ 1273.397802][T30226] block nbd2: shutting down sockets 13:28:55 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x47}, 0x3c) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r3, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f00000002c0)=[{&(0x7f0000001580)="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", 0x101d0}], 0x1}, 0x0) 13:28:55 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1273.475879][ T1530] block nbd2: Receive control failed (result -22) [ 1273.487862][T30226] block nbd2: shutting down sockets [ 1273.525945][ T1530] block nbd5: Receive control failed (result -22) [ 1273.536147][T30229] block nbd5: shutting down sockets [ 1273.675157][ T1530] block nbd5: Receive control failed (result -22) [ 1273.692900][T30229] block nbd5: shutting down sockets 13:28:55 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r3 = fcntl$dupfd(r1, 0x0, r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x3, 0x20000) r6 = socket(0x42000000015, 0x805, 0x0) getsockopt(r6, 0x114, 0x0, 0x0, &(0x7f0000000000)) getsockopt$bt_sco_SCO_CONNINFO(r6, 0x11, 0x2, &(0x7f0000000280)=""/145, &(0x7f0000000340)=0x91) ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f0000000200)=""/123) fallocate(0xffffffffffffffff, 0x40, 0x0, 0xfffffffffffffffb) r7 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0xf502) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x6, 0x1}, 0x1f3, 0x45, &(0x7f0000000000)={0x5, 0x2, 0x1, 0x0, 0xfff}, 0x8, 0x7, 0x3ff, 0x0, 0x0, 0x1f, &(0x7f0000000080)="17f629590dd63451109d71308fd5d83205dd9846f84083874f205d5d2dac2ebe1c245ff0122be8e19e3f8811ac2b4af85b00a7300130ad56c7f5a10883916d1844f7df45603b57d50b83f6b5192620e4634e6902622ab3641a4c90d41a6a53873caf7400aa615fabf9e9a4187fd85fa9beb490dd149d3350412871783e05a9"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 13:28:55 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x718000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:55 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x5000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:55 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') 13:28:55 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x47}, 0x3c) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r3, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f00000002c0)=[{&(0x7f0000001580)="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", 0x101d0}], 0x1}, 0x0) 13:28:55 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660 ', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1274.024378][ C1] net_ratelimit: 20 callbacks suppressed [ 1274.024388][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1274.035933][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:28:55 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x47}, 0x3c) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r3, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f00000002c0)=[{&(0x7f0000001580)="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", 0x101d0}], 0x1}, 0x0) [ 1274.075083][ T1530] block nbd2: Receive control failed (result -22) [ 1274.083984][T30255] block nbd2: shutting down sockets [ 1274.090453][ T1530] block nbd5: Receive control failed (result -22) [ 1274.102731][T30260] block nbd5: shutting down sockets 13:28:56 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') [ 1274.179879][T30260] block nbd5: shutting down sockets 13:28:56 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x6000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:56 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x10', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:56 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x760000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:56 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000040)={{0xff}}) [ 1274.448344][ T1530] block nbd2: Receive control failed (result -22) [ 1274.458234][T30290] block nbd2: shutting down sockets [ 1274.543678][ T1530] block nbd2: Receive control failed (result -22) [ 1274.551913][T30290] block nbd2: shutting down sockets [ 1274.584442][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1274.590401][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1274.599284][ T1530] block nbd5: Receive control failed (result -22) [ 1274.618691][T30299] block nbd5: shutting down sockets [ 1274.690301][ T1530] block nbd5: Receive control failed (result -22) [ 1274.705830][T30299] block nbd5: shutting down sockets 13:28:56 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x42000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0xffffffff, 0x0, &(0x7f0000000000)) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000080)='./file0/bus\x00', r5, 0x0) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000000)={0x3, @bcast, r5}) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 13:28:56 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') 13:28:56 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc, 0x80, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f00000015c0)=""/240, 0xf0, 0x8004000000000000}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000180)}, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a1, &(0x7f0000000680)='&@[\x00') 13:28:56 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x7000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:56 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:56 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x807100) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1274.824385][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1274.830219][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1274.977331][ T1530] block nbd5: Receive control failed (result -22) [ 1274.985301][T23485] block nbd2: Receive control failed (result -22) [ 1274.995110][T30323] block nbd2: shutting down sockets [ 1275.001286][T30324] block nbd5: shutting down sockets 13:28:56 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x8000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1275.105892][T30324] block nbd5: shutting down sockets 13:28:57 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') 13:28:57 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:57 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x960000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000040)={0x9880000000000000}) [ 1275.224385][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1275.230213][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1275.238995][ T1530] block nbd2: Receive control failed (result -22) [ 1275.256215][T30346] block nbd2: shutting down sockets [ 1275.325207][ T1530] block nbd2: Receive control failed (result -22) [ 1275.354827][T30346] block nbd2: shutting down sockets [ 1275.420336][ T1530] block nbd5: Receive control failed (result -22) [ 1275.438532][T30357] block nbd5: shutting down sockets 13:28:57 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x20000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1275.620809][T30357] block nbd5: shutting down sockets [ 1275.626327][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1275.626387][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1275.733866][ T1530] block nbd2: Receive control failed (result -22) [ 1275.745548][T30375] block nbd2: shutting down sockets 13:28:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0xde, 0x430000) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000200)={0x0, @reserved}) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) setpriority(0x0, r2, 0x100000001) r3 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000180)={'gretap0\x00', 0x8000}) r6 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) 13:28:57 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socket$kcm(0x29, 0x0, 0x0) close(r0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x47, 0x0, r2}, 0x3c) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r4, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f00000002c0)=[{&(0x7f0000001580)="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", 0x101d0}], 0x1}, 0x0) 13:28:57 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') 13:28:57 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:57 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0xf07000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1275.845174][ T1530] block nbd2: Receive control failed (result -22) [ 1275.874713][T30375] block nbd2: shutting down sockets 13:28:57 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x30000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1276.036738][ T1530] block nbd5: Receive control failed (result -22) [ 1276.055202][T30395] block nbd5: shutting down sockets 13:28:57 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socket$kcm(0x29, 0x0, 0x0) close(r0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x47, 0x0, r2}, 0x3c) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r4, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f00000002c0)=[{&(0x7f0000001580)="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", 0x101d0}], 0x1}, 0x0) 13:28:58 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') [ 1276.177692][ T1530] block nbd5: Receive control failed (result -22) [ 1276.186937][T30395] block nbd5: shutting down sockets [ 1276.229881][ T1530] block nbd2: Receive control failed (result -22) [ 1276.245068][T30405] block nbd2: shutting down sockets 13:28:58 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:58 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x1000000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1276.336093][ T1530] block nbd2: Receive control failed (result -22) [ 1276.345022][T30405] block nbd2: shutting down sockets 13:28:58 executing program 1: fsmount(0xffffffffffffffff, 0x0, 0x12) 13:28:58 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x3f000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1276.429841][ T1530] block nbd5: Receive control failed (result -22) [ 1276.447234][T30419] block nbd5: shutting down sockets [ 1276.540126][T30419] block nbd5: shutting down sockets [ 1276.641862][ T1530] block nbd2: Receive control failed (result -22) [ 1276.652546][T30435] block nbd2: shutting down sockets 13:28:58 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000080)={{0x4, 0x20}, 0x1, 0x10001, 0xc72, {0x2}, 0xfe, 0x1a4000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 13:28:58 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') 13:28:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f00000001c0)) 13:28:58 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x0f', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:58 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') 13:28:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f00000001c0)) 13:28:59 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x2000000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1277.148531][ T1530] block nbd2: Receive control failed (result -22) [ 1277.157322][T30435] block nbd2: shutting down sockets 13:28:59 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:59 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x40000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1277.348862][ T1530] block nbd5: Receive control failed (result -22) [ 1277.379629][T30474] block nbd5: shutting down sockets 13:28:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f00000001c0)) 13:28:59 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') [ 1277.478811][T30474] block nbd5: shutting down sockets [ 1277.505444][ T1530] block nbd2: Receive control failed (result -22) [ 1277.515441][T30480] block nbd2: shutting down sockets [ 1277.590774][T30480] block nbd2: shutting down sockets 13:28:59 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x3000000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1277.781695][ T1530] block nbd5: Receive control failed (result -22) [ 1277.799509][T30500] block nbd5: shutting down sockets 13:28:59 executing program 3: ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000080)) r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000000)={0x1, 0x0, 0x4, {0xfffff801, 0x20, 0x7fff, 0x8}}) 13:28:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f00000001c0)) 13:28:59 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x60000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:28:59 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x97', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:28:59 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') [ 1277.954502][T30500] block nbd5: shutting down sockets [ 1278.019131][ T1530] block nbd2: Receive control failed (result -22) [ 1278.031722][T30508] block nbd2: shutting down sockets 13:28:59 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x4000000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f00000001c0)) [ 1278.185139][ T1530] block nbd2: Receive control failed (result -22) [ 1278.202528][T30508] block nbd2: shutting down sockets [ 1278.248560][ T1530] block nbd5: Receive control failed (result -22) [ 1278.272516][T30530] block nbd5: shutting down sockets 13:29:00 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') 13:29:00 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x7e000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f00000001c0)) 13:29:00 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1278.397856][T30530] block nbd5: shutting down sockets 13:29:00 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x5000000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1278.607399][T30552] Failed to access avail idx at 0000000036bf248c [ 1278.615796][ T1530] block nbd2: Receive control failed (result -22) [ 1278.635108][T30544] block nbd2: shutting down sockets [ 1278.721612][ T1530] block nbd5: Receive control failed (result -22) [ 1278.726726][T30544] block nbd2: shutting down sockets [ 1278.753785][T30556] block nbd5: shutting down sockets [ 1278.808139][T30556] block nbd5: shutting down sockets 13:29:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f00000001c0)) 13:29:00 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') 13:29:00 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f00000000c0)={0x0, 0x1ff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x3, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") readv(r3, &(0x7f0000000040)=[{&(0x7f0000000200)=""/80, 0x50}], 0x1) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ACQUIRE(r6, 0x6430) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 13:29:00 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0xf0ffffff) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:00 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x6000000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1278.934838][ T1530] block nbd2: Receive control failed (result -22) [ 1278.943789][T30572] block nbd2: shutting down sockets 13:29:00 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1279.048824][ T1530] block nbd2: Receive control failed (result -22) [ 1279.065313][T30572] block nbd2: shutting down sockets 13:29:00 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') 13:29:01 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f00000001c0)) [ 1279.215708][ T1530] block nbd5: Receive control failed (result -22) 13:29:01 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0xf6ffffff) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1279.256203][T30584] block nbd5: shutting down sockets [ 1279.338210][ T1530] block nbd5: Receive control failed (result -22) [ 1279.354715][T30584] block nbd5: shutting down sockets 13:29:01 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f00000001c0)) 13:29:01 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x7000000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1279.384391][ C1] net_ratelimit: 20 callbacks suppressed [ 1279.384400][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1279.395931][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:29:01 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') [ 1279.442299][ T1530] block nbd2: Receive control failed (result -22) 13:29:01 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1279.502036][T30603] block nbd2: shutting down sockets 13:29:01 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f00000001c0)) [ 1279.605119][ T1530] block nbd5: Receive control failed (result -22) [ 1279.643302][T30610] block nbd5: shutting down sockets [ 1279.784428][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1279.790249][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1279.864452][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1279.870322][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:29:01 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 13:29:01 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0xff000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:01 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f00000001c0)) 13:29:01 executing program 4: ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)={0x0, r0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') 13:29:01 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x8000000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:01 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1280.007974][ T1530] block nbd5: Receive control failed (result -22) [ 1280.027147][T30637] block nbd5: shutting down sockets [ 1280.044613][ T1530] block nbd2: Receive control failed (result -22) [ 1280.063170][T30636] block nbd2: shutting down sockets 13:29:02 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f00000001c0)) 13:29:02 executing program 4: ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)={0x0, r0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') [ 1280.117685][T30637] block nbd5: shutting down sockets [ 1280.133701][ T1530] block nbd2: Receive control failed (result -22) [ 1280.142704][T30636] block nbd2: shutting down sockets 13:29:02 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0xff600000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:02 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x20000000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:02 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f00000001c0)) [ 1280.264406][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1280.270287][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:29:02 executing program 4: ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)={0x0, r0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') [ 1280.459459][ T1530] block nbd2: Receive control failed (result -22) [ 1280.463441][T23485] block nbd5: Receive control failed (result -22) [ 1280.480763][T30668] block nbd5: shutting down sockets [ 1280.518190][T30667] block nbd2: shutting down sockets [ 1280.641708][T23485] block nbd5: Receive control failed (result -22) [ 1280.656028][T30668] block nbd5: shutting down sockets [ 1280.824408][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1280.830317][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:29:02 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4047d5f446dde8d5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @in6={0xa, 0x4e21, 0xfff, @mcast1, 0x40}}}, 0x90) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socket$caif_stream(0x25, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0xc0a, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) 13:29:02 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:29:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f00000001c0)) 13:29:02 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') 13:29:02 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0xfffffff0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:02 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x30000000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f00000001c0)) [ 1281.081135][T23485] block nbd5: Receive control failed (result -22) [ 1281.089658][T23485] block nbd2: Receive control failed (result -22) [ 1281.098950][T30702] block nbd2: shutting down sockets [ 1281.108137][T30700] block nbd5: shutting down sockets 13:29:03 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') 13:29:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f00000001c0)) [ 1281.225535][T30702] block nbd2: shutting down sockets 13:29:03 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1281.255219][T23485] block nbd5: Receive control failed (result -22) [ 1281.265094][T30700] block nbd5: shutting down sockets 13:29:03 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x40000000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:03 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0xfffffff6) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1281.503296][T23485] block nbd2: Receive control failed (result -22) [ 1281.512274][T30732] block nbd2: shutting down sockets [ 1281.555177][T23485] block nbd5: Receive control failed (result -22) [ 1281.573375][T30734] block nbd5: shutting down sockets [ 1281.650263][T23485] block nbd2: Receive control failed (result -22) [ 1281.650834][ T1530] block nbd5: Receive control failed (result -22) [ 1281.674969][T30734] block nbd5: shutting down sockets [ 1281.680756][T30732] block nbd2: shutting down sockets 13:29:03 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f00000001c0)) 13:29:03 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') 13:29:03 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:29:03 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x60000000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:03 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r4 = fsopen(&(0x7f00000000c0)='f2fs\x00', 0x1) fcntl$dupfd(r2, 0x80c, r4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x140080, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 13:29:03 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x400000000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:03 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f00000001c0)) [ 1282.122055][ T1530] block nbd5: Receive control failed (result -22) [ 1282.130923][ T1530] block nbd2: Receive control failed (result -22) 13:29:04 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') [ 1282.168540][T30771] block nbd2: shutting down sockets [ 1282.175267][T30767] block nbd5: shutting down sockets 13:29:04 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1282.247592][ T1530] block nbd5: Receive control failed (result -22) [ 1282.256576][ T1530] block nbd2: Receive control failed (result -22) [ 1282.259587][T30767] block nbd5: shutting down sockets [ 1282.289287][T30774] block nbd2: shutting down sockets 13:29:04 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f00000001c0)) 13:29:04 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x7e000000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:04 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x510000000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:04 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') 13:29:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f00000001c0)) [ 1282.512947][ T1530] block nbd5: Receive control failed (result -22) [ 1282.524915][T30796] block nbd5: shutting down sockets [ 1282.567835][ T1530] block nbd2: Receive control failed (result -22) [ 1282.587155][T30801] block nbd2: shutting down sockets [ 1282.612458][ T1530] block nbd5: Receive control failed (result -22) [ 1282.621416][T30796] block nbd5: shutting down sockets 13:29:04 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0xe0ffffff) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:04 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1282.723671][ T1530] block nbd2: Receive control failed (result -22) [ 1282.741792][T30801] block nbd2: shutting down sockets 13:29:04 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000040)=""/115, &(0x7f00000000c0)=0x73) openat$cgroup_ro(r2, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 13:29:04 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') 13:29:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f00000001c0)) 13:29:04 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x60ffffffffff) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1282.889152][ T1530] block nbd5: Receive control failed (result -22) [ 1282.900041][T30818] block nbd5: shutting down sockets [ 1282.997047][ T1530] block nbd5: Receive control failed (result -22) [ 1283.011042][T30818] block nbd5: shutting down sockets [ 1283.023237][ T1530] block nbd2: Receive control failed (result -22) [ 1283.035377][T30829] block nbd2: shutting down sockets 13:29:04 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0xf0ffffff) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f00000001c0)) 13:29:05 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') [ 1283.174087][ T1530] block nbd2: Receive control failed (result -22) [ 1283.182856][T30829] block nbd2: shutting down sockets 13:29:05 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x760000000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1283.266359][ T1530] block nbd5: Receive control failed (result -22) [ 1283.281260][T30845] block nbd5: shutting down sockets 13:29:05 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:29:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f00000001c0)) [ 1283.415159][T30845] block nbd5: shutting down sockets [ 1283.474204][ T1530] block nbd2: Receive control failed (result -22) [ 1283.489875][T30857] block nbd2: shutting down sockets 13:29:05 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0xf6ffffff) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:05 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') [ 1283.567866][T30857] block nbd2: shutting down sockets [ 1283.724283][ T1530] block nbd5: Receive control failed (result -22) [ 1283.741798][T30873] block nbd5: shutting down sockets [ 1283.796505][T30873] block nbd5: shutting down sockets 13:29:05 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0xe69826ac201f21f5, 0x0) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 13:29:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f00000001c0)) 13:29:05 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x7fffffffefff) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:05 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:29:05 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0xff000000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:05 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') [ 1284.005555][ T1530] block nbd2: Receive control failed (result -22) [ 1284.022455][T30889] block nbd2: shutting down sockets [ 1284.072398][ T1530] block nbd5: Receive control failed (result -22) [ 1284.105879][T30892] block nbd5: shutting down sockets 13:29:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f00000001c0)) 13:29:06 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') [ 1284.136444][ T1530] block nbd2: Receive control failed (result -22) [ 1284.144889][T30889] block nbd2: shutting down sockets 13:29:06 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0xff600000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:06 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x960000000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:06 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1284.392988][ T1530] block nbd5: Receive control failed (result -22) [ 1284.415339][T30919] block nbd5: shutting down sockets [ 1284.424236][ T1530] block nbd2: Receive control failed (result -22) [ 1284.424400][ C1] net_ratelimit: 20 callbacks suppressed [ 1284.424407][ C1] protocol 88fb is buggy, dev hsr_slave_0 13:29:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, 0x0) [ 1284.442343][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1284.451013][T30921] block nbd2: shutting down sockets [ 1284.491817][T30919] block nbd5: shutting down sockets [ 1284.565261][ T1530] block nbd2: Receive control failed (result -22) [ 1284.573287][T30921] block nbd2: shutting down sockets 13:29:06 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x20000, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f00000000c0)=0x3) r1 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x42000000015, 0x805, 0x0) getsockopt(r5, 0x114, 0x0, 0x0, &(0x7f0000000000)) ioctl$SIOCX25GCAUSEDIAG(r5, 0x89e6, &(0x7f0000000000)={0xd6, 0xf5}) ppoll(&(0x7f00000001c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) open_by_handle_at(r3, &(0x7f0000000200)={0x1008, 0xfffffffd, "e38d00f5188fb5c89e0b8698a0c51900b6ca0c6db5b8d87866b43cabbf9e90c9409de78b63b54d2bc8f2aa383d5b81cdfaf4c3a45c0239c3d19683533c44fbb165a45b57534dc33c134c342354789d9f1c12dff53a4c447cbe3c37e9d757b1a560fc641e53b6ea326a957224a8f193182d94cc891b80144fdf3c715f9a5c4050bb476d8115b9af53cbb9bf627f80db3029270e054d4b8005d8162d1a6a11cc968cbd056483ac4dea35c101216c9324275bf8e157e07550f763c85e6a61f4253f71acf3d30fc9a1cedf9540e921a1c87d4652b2a09a3550841303fd4871abe03c9e4870e7ddb2f4f28b4051f05ba8eecd4eb5977a536fa7b3f6aa87b11d202a4872fbd1df7fd9f40d41efa1f657e0d9abf9f5e0eed7a60bf5995e6082cc4354169c82887db3eb76671fbaa65986d94659619c891278cce4a7aacc64e231319a22276b19eff207148455c76f5c53137b8ce0208aff5a25ecb209ccaa007f1459d6621e78f43e8290aa2f539aad4057c8f62ec45064fa404f5fef2c0b6c39b2301d0353fba8ee3d24460fba5c2b23421944a71e5304095cc6ec40cf30b9aa026f61291be1a85a56ce6fe564a6c33b886647eb220ef614facfb9fe1668c1c294d68f1455d44737b122e18a5d8a8171c67ceac5edbd37d73368cf81222534d95851beff80e08dac76304ddf52697441e02063303e0bf685c6a4592bb5dc0efaef00374133050bc2a850227ec85373d480bc45f1eb9cdab78ceada24c8c9e5300201d43204ffbf7a8fc0dbd00d73c6b9f25eeff94df9af5fa24e575232f16bd55a3cf5871ba93fb46feb3191fdf90f408f0b2fe286712a60e9b7ffb17d3ff1bbaff75f19e115a38f10ed8abd90654bc598140fa16f8c2dad17fbf75e6bfe5a4bd12009941650b319476c17519a6448c8bb7f2b12c6f858aa2701f6dc930d996f1ef47fe80276a752cd99da3874f3843248a28b7309101bf49ed28dac1c4d7e1aed2dc743504162adff2c394e703b11b255ad0324e1dfefc74c00011efcbd25deb1163731326fd3f1868733894085a4b5b4887be50e852dd92c7b08640d6cd3850e76ac2136a28fa2d2b0da1a2dd749a21f175b30228ae68013a0b4eadc33b467f9c02df2e5beaba3595ac97065b1ea86f97f4727e5a49af5cb13d4dfcd55e471992ffc376934d7625394d997a4234d13c3278aaa1f95fdaf5b23e1dc18af16306ad77d2bb365f10355f6f8ef527497d2955af154facfec4a9a0687e91d12318e19afb19129ed4018247f1ab205c48533922b82a51d29c87ffeee16e4b67c957a62dea7962cb6ea60bfac57bd4cf061adebabd59f7301d0cc3f80a2a7e37472998b1e04a9ecfd4f9e854901e047c98ed5e3e35c8b93b43ba2fc5e1c655add74c4e373b0562089cd2deb920fbc7b28e168f8f6be5585377930b872c703b9fa30a72416b196c6b6e083a89c606c0bd0a85beb5562cf2f2cb789728baff083ee99dd78ae2bb1046ac197a3f52a12755ea47ae3e4851baf1d95df0b28dbeb959a8a42d8b87fc8077350112519f326484197c592fd603b4360ba9e06adc08f73b31d3c13fb69bdb02a58a5007ea1aa308b8397edb0c969c78d1c7dee2f1bc1b837a499d36a8df554b94a7b0b75d6945ce4cc23ed08a9ff8bd94ce2677bd14da4709adf6f87b29d4f5dde386b307f14ddc5bc248692c02d085717d417be5dd4fc3dab10a44ac5b6b41791e1baca3d320c2e3a0bae9bbf73361aab66997da76ddfa11560f5ec7773db46ce820f13b0b6caa3a530430e86774f7834f52fe16ea3ca1497005c77dec0cb2c8947c993ab3bf63e2c7949b08abaa7e2ab7f5635497dba89ea9589b298b21091d9b6b5abda202c94a1ef8a7bd30c90f4310d97a51327cf9b3d56911b16b88b830e1b663fb11c713a4f3fcb539d8e4e344d7c8c2e7e00931bc7a53c3e1e96ddd2038c4ee0c7ed66bc553c536f2b8c4897ab6c45b4697edde5f37d571ba2ae27733175d8b79f8173a2be9e191b917399eeae158fdf55a4e941556553e9401334623ba07740137570f1845d07fa32d2324c0d395b4c0d97c4f4f627fc04bd7493fa5b6ccb10adaf49930f416b959ebf85a1612be741b35b453dbd54ba5f2de9607632d0e5b42fac3264d5a78b7791959ca4c6cd7126f86633601d080eeba5b32e3ad8f3a1869ebb932bc183ab311652c29cf9c8c76b3a8eb069d7b8974e5a76b8f68131c858169046495ecd79e53e2b674c34d615d11135fda15884623bd2f4965e221d9fa7628e4fb003364c4f719bf005b3c78e2d426b16a1e174557dea64452eb8f519ed9a89d03c77b2fa9e0e4ec3955c7518fed14adbff9aceeb7f2130f6092f4f6170c6dedd815fd761dd3752cbbd523d9eb4a3351bfde5965698e398e6e900d42f82069de68006e763b3248473ee00414d37cf87298d2e985870b8e3fc8bf10db7fcf63d23478be3d8c56d8502b078499be6d266e7ee2de3abf98af279cf1d6da1bed50f3f1161aa5c645eb8c3ad589a4bb701d31dcc43442f3e15e0f37adc31fef03ad52cf085a49bcf18ad0a450ef0b2fe5b9bf83f3c65ce70e7cb6a537eb492059e46bcea75865357c29090645d1bae6fc5f5325caa54baf158197235cf43eac588dcd8a3d19c93e9b3216cca5351ff0e4b2ca3e7b060ae2b103dc87a4c7c5b396939a9431a2b24df379147f0ad0f2a626a5513bbd1006592511fe09d4b1221f31efddf7cee2449be8cb2252717c7f57598967a1bd8f1f37796c2d6dad9b97d4fd0146f6b3db1e9f42731cd33668d02ad829ab9ad25422681490256777b4f22142436437ec9820884fc007ba8f737c2207ad42217c5e3fe7b7495f8342650003b684509a58c46fe3d6c23e128e5ac4cf663bf509577b4949d77921bfe4dcfda5f2c71c5a2294b3f6210472d01b4377d0b88fec9221881a85943aca865b1d90160aea42f0880a7fb6c306d6dcc7f66f54660e484793e30e680412306c33442cfde1cf759070336cc4b87f5be38034069e22cbb3cf6acdf87389ce15b45bef4d89ec9df58656a5c92c57ed3dac24214e895c81aa381fbb2797e56f088c821766740f2b19e72884be5a3beb86b157361e432281b9e370151601cb222114745b76e5704e7467e512441641386c889a267e6c0bbe6b651e0932ed4586c6086297f7a9d3753d6306020e135cf0d98b3ec944ef45fff35de4cb4012ab4f309aaf859a889ff585682ee26c136cd3f524a71c404a4708343ee3ce3dfe2d5530de1fd142f53944a3f567dda68b921ea811b409a07aae655fef33b82bcf7460dd31f0f6c347449ab465506f04716de465c20ae4dc0d3c695925ceb2ca1855faa3c8b392124cb55a0f5e5249b94453904d05f5d80f9d0b13ac39d4b3374e12c7b709a6a0131a4b758abc19a47afa0e6a626693670f33339c21e94ca38cd7a90e8275876d51987dc850518074e0a3b0ee654e6e3d0e62d35240d48c6423c3ebd31ee3a585d266c0e00bf70d3943a133e1fed649944c5ba84a7cff7deff5051a2db001406fda150f96429d17c04736666a05d0e9554e1e5f24a0ea831c6b33254b0aae3c50d876cf13e7c240396738ddcd91a2171edce401f79732e73e19e57f9a41a2c03ee14d4b9e0ef80a026d70614a387746fffc2b1ed4df86599a45bb2bc7862fc6b62af2be02ad4c8754306b9f7c1b6ca56d18caf486bc30b38056bbbabd67a8270af882818cf3b1fa3ea690da941d222378618888aa5366c9ab8390bd854031d2f38df264177ddede88b958529597c24d2e70db9a3817bc34343a1f24c8e0bd84337d0a1d869cb9f3cc6a5fde7feb4a7be6c1b7a6b60fe4449eecf4c5e15aa8828b2ae02258f2b117f938ec4337b6af17bc23f53274bf76b4f5bccd7f59a65ab5971e28f99dd0c395471c4ce257c9e4329ef93696a9de62584f683c956ee687e84fc94d49790bc97f3176972eabfc51e44a940af8890767d7663b326afed2160d8e045d22765f8c553b546b1ddc12dbc93eaaecfbb7031cf13cefa30727529b0f3ea9cf904c37e58857ad92bbf542b4e90b9560f2a1608217d776dbbac016bae23ff5a8c079eeeb132fa3b39fbfe21eb477453f8ac5bbe780282cd3f61b623cf3666d9acd2cafcb34602715af6597043b836e2c57c406b186fa482db93fd798c90065c5665e9d782b38b597f38a8aeba25030a96376ac6b7ccdd4b05a82489eec8e337711b614623dfdd3308512f7407082283603de92c7744f375bb3fa316d4f2ac67f7acd20d91b3fefbb27d1c049b1b4ca41c52b871d77221eb55b74cd4141942776fee70b6ee748e3192b0abd44c4f6a2acaf9a5d983da305527a3d8fa1d7c6b164fb047004a11b177f1469d52baa49e9aca7af65dd7c4a307e88dded634ba343ba834e541aed4873460d0cf83be04d5cf8f43136caf1e39ac2ddb6a37f15c1726484ea73b0bb7f1044a95c722dc9cf23f79067acc6293d15134dd162a25da5b490dd89bdb5e9eda89e2e2e82b92cff918c6facb309557a1b52dd35856dba66761c3ef5108e05c765e799c49c7d05d1db5a4c228f50f881f460456b22b1e69ae2b2266738969a136ebf5467a46c174e06bc21651cde1db19e80b5d544ca33fe849c4d71ad61502da799f15bcc8e9bb00650a78289550d454f1484089f447d3ecee7c861d58ae9e181fd2546bf3938035bde3d0edb4ffdc43db90a75a33fdfffd6d4f5924b7581768f589a20dc975e0bbbe3d9ba7b350a5de886c8bac48ab2b872d34a78730b14889712c642b21ff244d9ea6461b0ac6a457508a4f384e07bb99aa671f00aa60c788ab96eca0887c9b9dc7aed9c424b26f6b17b438b627fabde2c567dffe401f17d9832ff60bd2be10892b047d0a6bef2c990afc570c991e7c6cf21d8a7824b50f30cd7481ffa7e695fc768cd9f7728658ca310a7a08f8ebcfb8aabd43b0da2809c4584203789e7293bda7d77d24eb8cec6f754cac694a7d284d8c3e8d120513e34d74de64cd9705da22adc605423346ba84b50d9c8e4859f01856cbf44faa49db2dd42af1ef431a4add8226e74cd4248cea1dc7f7dd5abc76b8a6d844161094dc0f4c2cbf1c623c20825dab38869cfb4c8c24342cb9e1bc2248b36b0fa839664fa1900688904764f8d0a47fec195fa3d234df287939403b429bbd8c16fc097e54d6e9013524859d72e564a30cf98384901caf4e6ee7be05e8b1ec78f6d90f3663e65c5e518a70cc9857ac405e3cd504c31ec2100dcc3f8df24c325fe9bfb83f7761f9daccdaca9ef44cfb3630f72842eebb5ea8dfb9f103febb45c43315032a775c14c6d19ce595de0f32b03810126df95bf936582d9e79cdddca7f7359838a6676515835d7fb1a7640148709bda85cb5987b4737baa93d6c3be59c170d238fbc18fe5256645ea676a5bd18f3ea5f336822322bdd1c0eadc87500e99971b6765a77df64423d9ece9ce27bbd2a11f7ecadc51aaa800cc0a224694634c60e9b9fd6c62b39f1f5a29dbc88532c93a5f90eba41e9d1907dd71b50e64c2b9c44c7fdbcf10733946dccc170ff7e8d7acafce6c23066915c6921849bdf34bec7c4529aed86a5525c385c9fc1a7ef871fa92ab414ec53e80a9a369b54c68b54c78fee1e8e344b273c2fcc64da91f2787af4855c96c7eb48131ae286379eb31b36db57efcb9a524a4868368ca1c66a1e8958c772958f114d7df897a277a37611af78302a477c8aef422bebae03f9e1488ade49b0237072a864cef67886695e9f002d73b78d820dfd46dea13e3ae3c8bf948a947b59ee22785a"}, 0x400) 13:29:06 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') 13:29:06 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x1000000000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:06 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0xffffffe0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, 0x0) 13:29:06 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1284.971477][ T1530] block nbd5: Receive control failed (result -22) [ 1284.981752][T30946] block nbd5: shutting down sockets [ 1284.987132][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1284.987191][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1284.999644][ T1530] block nbd2: Receive control failed (result -22) [ 1285.009029][T30947] block nbd2: shutting down sockets 13:29:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, 0x0) [ 1285.096035][ T1530] block nbd2: Receive control failed (result -22) [ 1285.105826][T30947] block nbd2: shutting down sockets 13:29:07 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') [ 1285.152026][ T1530] block nbd5: Receive control failed (result -22) [ 1285.167285][T30946] block nbd5: shutting down sockets 13:29:07 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x80710000000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:07 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1285.224407][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1285.230263][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:29:07 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0xfffffff0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$rds(0x15, 0x5, 0x0) r2 = dup2(r0, r1) syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='nodiscard', @ANYBLOB=',soackfsroot=,smackfshat=']) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1285.385208][ T1530] block nbd2: Receive control failed (result -22) [ 1285.396072][T30981] block nbd2: shutting down sockets [ 1285.447416][T30981] block nbd2: shutting down sockets [ 1285.523749][ T1530] block nbd5: Receive control failed (result -22) [ 1285.539767][T30985] block nbd5: shutting down sockets [ 1285.555336][T30994] XFS (loop1): unknown mount option [soackfsroot=]. [ 1285.622070][ T1530] block nbd5: Receive control failed (result -22) [ 1285.629025][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1285.629081][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1285.644707][T30985] block nbd5: shutting down sockets 13:29:07 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200000, 0x0) r4 = fcntl$dupfd(r1, 0x14da6ad24468b92b, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 13:29:07 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') 13:29:07 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0xf0700000000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:07 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0xfffffff6) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:07 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x47}, 0x3c) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) [ 1285.878564][ T1530] block nbd2: Receive control failed (result -22) [ 1285.891200][ T1530] block nbd5: Receive control failed (result -22) [ 1285.907160][T31009] block nbd2: shutting down sockets [ 1285.916749][T31010] block nbd5: shutting down sockets sendmsg$tipc(r3, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f00000002c0)=[{&(0x7f0000001580)="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", 0x101d0}], 0x1}, 0x0) 13:29:07 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\xff', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1286.010469][T31010] block nbd5: shutting down sockets [ 1286.021564][ T1530] block nbd2: Receive control failed (result -22) [ 1286.028497][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1286.028547][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1286.045676][T31009] block nbd2: shutting down sockets 13:29:07 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') 13:29:07 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x47}, 0x3c) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r3, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f00000002c0)=[{&(0x7f0000001580)="276c5bd6f0db828036f59b152925d176a9e51a4722f8fd829657ff48969c3c5f309ceaf42e7b242b7fe4fa128061aec9827004000c31fd9e31cb1c79990c2b89045ea4dc3ad63a775c80850ea10827e8a40a6c8b5fa7cc514639bb99f13c6a3d0825a738a1a53433042c75230d368c95f8a0b5562b58ecf50fd78e5def7375cd62fb5728535bf371b2ffc7d8058398075e1d0a7a4451395c39f79c26b7287cebd130de7737e77714686b9d67d87a3cf8da02cc70fdc99c1a7c916ae542b9d5baaf1f9daa4fb845fd5d5cad2073a61ce51c345150f84b3900997296d55c7d394af17b01d445465ef377508a1a29a5d6b03b0da22c973f22814fb2a802d50fb1f051e7d95d53d598a0599ec79cd27123fa1d13b7996609d4548e81ef7b1e8de8f32593ef46c3081ab55929a3c1cb1fa28a485518391a76b7b80d5941aa42222cb6f25be29ebc938af75971ffffdd4dea114ac37f38e69cb670020a7448d99b7b5e3d09bcf2625c94d6599182ce9edb0bbfea111dae3b1c9d6cd3162ce0aaebcdcf22a8d29dca0d04ebf5944168f398c500915579070586dff7a2ec6d345d1f69a8c749740aea0dbb2d30c9f7e3afd498a886c906fe09a83322d8e94b3ebe288ec1601e6a16122fa44191b6b3f5315eb0b35cb628540438919b906502eeb7cacc7d15753e456b056e6145ab65ac7c01253f3c5663495a74a0598feed07436a72d3ee1185d0fbcf89e8c5d449e0216cab8110efe923be24366dffc65bb386e7f015bb40b6fd9abbf7180b217f88d99f168c113f3ff187c202e2ae32a0238e43af612678a44a3d8373b6dc6bf820f8bf73e6411c51152f51993c66effe25c6e72a3127da6996f13691ded659e1f9d6eab1124435750dfeb60de2b2d59d9196bda3a3c5cd5054b2960481d50ce28ac4159b54f3f26a9decfc8ab36b6110eda741e21c95e3631b3de40fd3c7828fb0e3c85070eb233d4d4b1b75e0167ec62e81f1a12a0cd2e02a7a43edb384e4d0d59744bbe86611575966efe25b4191f14a368a72c13aeb4de7caff7a9439b583d08714fd22a9b1ff08297a562a859e2d21dd4f8ecf6701bcd9a30d28909c52c56a8ef739f0841ae895ad858121b1ec82ae1bbec856730aba8e2f42841c33caa862fdf8b651d90055b6725e5bf0af348ec550ad23c5a3c15c7455fdb13a57a6e452bdebbeb32200ab7dce3fab98b206ec2571e3de8904bea2265288dbaec64359cb5cd926dc025343fff78e7bdab6f541a3d2b569f37b8339d14e706163854d01ba5380d648391740e1fc2e118557692796acf6e0fa8ab21c5657259bf05a8b510eb285f306c8cdd6e185094b0ff46ec71d5a9b8e344176f263730468db893eaba00c32bdafdb1ebdc3ec441abaf4e7b2db744411ae02f33b340a373ea1a485b88073c2da7bd6828bbe4028fef4c30088c9b28daf899741029da8f52d2927250c582f16ca173c0761ad74364f562f3106a15d17d34ff27abc49b8a7d9aa3d2d2bd5c406c9fe21e59ffad1a85c3d1283f983efaab087a92ce4bc66c934605b658f56857301278b09f5e22ba0034a3944ae27bd20cf9cd4a7d1973d4818716d0bf71d922d74ef68ede2604a98f6db652206e0a34ceed21cb950eebbee9686fc368e2b42f9417b22ab84c1a341630f962560900e02f20cc0ed618e657fe4ede15f9a105620dd2206dbd74ba7f061f2d058a127f5ecb72ad12264d81816d82169d668adf80bbdd279c684e11980f72ba126d0326dbfe6736d2b737069e0c5efb7e76276f10fa915907d91282084fa9a12c5636fd265ef705f49adc9924ffcc68742b17c9212fe8abcc49e4db91ee543a7fd438e59d030d6fa1c31ebe151f9c44af0069df608f0395159c41339aaf31b4c3e67526036c7f4d96fdd5afa5c4c85f2a6648098dccd6a49a8250e26bce3ca0e78976c961432783947e3a8ff5430af9cfebf3d2ee72153b7bd4d7f2cce79da6defba02cc5a73f7fa137c01a2cea52a961d9504d959aec7e2627fc33d07ef45bb8afbded876bee54c7f2feacf548bbab68a782e7bbcb6140d6c6b3fbe1108a6f4dd750c0424a9e1e0b8f239c4739f28463a23fe011cb8c98e25126c5693f19f16ab8a4b6351ff2955a397c3618ae47c78b2d123c334082f9aae0d7f9e7b761d58ef7e1f6dd20a23c7bcc3e84dbc75551573c425e5d56ca84e263b22c2ed5ff1255e500c1810574ff1af28114221fa6e72439d5fc117700bf5a7e01e2ffc0cfeabfddb8ae217a7033c9c8dce5a685ca7a0f4ceeb153ab2ae77652e1d73e9510f868b70270e386664ab4c45ddf353e61aef1ac0c673502b7e7faae557df3eaa5fd0a3a00c54f23723ce6406f616f678b6f789c57e09864895dd8a1e5da9ff0bc7be9f9174af99e157e4c71ed69c71783abb3ad18141d99e49ef32614b8ac29eb50f64b2355f4b599acbdf039877d68275a2ebeb0729791412dfd3194cc2cb4f045a4d2ac74afffec582df03ce4afd2aedc594c6cd34a4cd21d4ea653b04d49a8aa1e942df36b530c90d0c2c62ef8369677ce2ffd4304b0410ff9ef86be8afbf55adc6abca02acf03dcab2fe5339ab0eb9d79dfc4817c5e2c10676904192395d9b8552760b0fa79add2769284a0ef5ebc4d61e64dc9a8b2d4770cdb4be4345026f6d04549140f4bb01e8252eb06d70afd84247f8023a0cc31329499a0efcd8a79e0832992a96b437258ab186c6a9c8f2e55fe7319605453b888d928730a11a11b4f56eec25b4c18b2205aad508a9f6850e6e23103a517cf43af019d54593803b76a3529777a58441d781d2eb509fcb723ba3be91d12c809f0148095e2066e1b0f0656ceeb751ad610e265bd4bc1b67f5e521ef420420e9b7e137f29240d63a42d678c1739f33f39a09a0f4c5249f808f41152a07ce9bfcc94e35683bea83f82a5e34e1fef3f8ea2cf4c9f1c8ccef87d7f58fc1b4ace6cb667e62ed1f54f72b3a156551d96f9a16ff4864ae3a01dc86b5c65e6676493f07d7257b34d8c6c5851334a4542dd2bea4aef4f444b5f26ac89a27e3313a4a66bdad09382357f1adbd61d526a2541022814cc4b2515aec30f74729d1a5826a3206c02ccd6adfb6c2b6c7aee33b7213bdbc5878151b50d1a8fdc1b2b9b44a01606770028723c848e1faf60b89de5a2e72b7d19f7745f7c89989ab2a8174291ad7d0f2b172672aba9f4a1b42df53baf6d353b45d755eff7526efa8a87a2aeaf84d9a434e8844a98eab172fa474b353f19e1231aca846d93eb24e650e015a42c578d23d794c02304ff72e358ea5c75f6709e587951d3900b3b1066ddd4a2fe9186d0cfcfcc7e33e9b882e8c2242ba990face580f94d66bb6a5212190fba3c1f1e046738c422d9e94ed6671157af9145bcfe7fd0d431a7a7c84a3eec802794286e2dc2b59e93fcb09ea22a1e47ee8f0b3cf756fb67bc3676819cbc67396322ea6be61552533b52a2fd258e82dc7c57a09211cce3e785f5b4deacae7b9dcd48080c9edb03d935c9c9a426bb6d3ec71e559af61b796827b5e425c991d3485381e0842b35cb0ad91154f4a13117b35d2a9ebfcf0ef68d73093dd483923f7b3a00e9c04c0eec31effc9f908f38949e1766409fc9c8cc48f95d4d537520159dd794edb56e824d31c67d9c7cbefdb51860a8d1f859baa9bf5c2752d00b6969e94d47a88be798f6df9e6b5977a56206c33a38e74ac5de0b23489c9f5a037e13ae0194beb9f954c6b8ebefa78194a4e891c12ddb43019e60d9b8e7fe78df65a83671b76fd1a9c7be064c6d822bb0749d2162168821484ab78f906cb990167a2f9e19a33be2086dd55e54cb8b6dbcd6d1cc9b4c828472d55db6f175547f73db54d142f290ef99e8e26f2c6ebc7a53bfe31fe1eb2ac6a13dd0081debcc346cc0d3407ff158bc48a314a18b7fa781e32b66f9eaa792031567fa8d5c33fd85ebf85af958ef84c0c69f2bc3f842bff08b4b3112a6ac24a78c9476f15d40de489e50fb5e426167a10739db436cb1a63f5e7b3baf7c21c3506d3021c487ce4625f66a18468c89c3a9c94c7c1c2676e1f21a26bc393cf83e7bdf9bf66c2e9dd080574e1a80fe152124e5191c9367f22b4a712322986165964ccc2b016f0fc52e69d009a2f9fc13f344153f17bcebf937f59714f44dfdc11e69c7216cdb4f4d2143222e41d7415b3ef52e45477f62def841cea29c6258a2a2d8c7895712c51025ed7fd5d68bf8aa5a96fbbba98090dac42ad69522f47288af9f6f7acd2406c42706a940300ab41a59488966dc63f4ce8a6e6e7b18c1cf7b3e5013441ad0d7f201343e4a64da2cd513782877cb35d00f2113147ec4d7410971968daa76b1b9ad115c9ef6e8fe6abeb8b372806dbccb26f504f3fb8fb26c97fc6dcc7091f2f940e76fc121b39f215cb5ee96383b0ad5dcb2f7671e1d75612b3992a8bfd9ef25545b75845991f64a26c87a8abbdde668be3e6fb8ebdc31e73eb4eafda15215e0b545907a86c0fa3d5f1af4cf096cd7ec9c31dd57851203a2ce0c4cfecefe63e43ec9335f00fe3195965d0602bdf0fb36a8b4c6a538f18c002895f4d33968901c0228fbbfd250ae07075c9c3d8e3233027ca1ba82586797b9c3fd5c256c9562789f4393908ecba4bbd26a49672d71098198efe77b3661a2114c3b919330e67cd0ae6e90d88e1922750b6d36bde8926f9c635fbe0b1016f016af69965d762ebcab348ea4fe695007c9e1f91b8f7019a3206627751c8216dae9857569f152888ba8876b51d5d73bffb3c5544500e1121d72a0d2ca9b382bae36c36fdb5680b5973ec3529eefc2077654f5ec0021d473c221d544d6c0b56c48926ece451f01bd3b2746f6ccb0a44a2e934eefbc24c8f4ced796e4941bb6363d2bf0af8834e0dde49632c228477fcbae8d6667c5996aeb14eac620e35a1b3a3b29c4122c91f92a2f9917291c04cfb9ef91215d8b0dffccd082474c9a2ee26ab2139d4428c74efd41f820d671b4255253abad18028b4d19715ba084eaa884dcc975da4c316ac3f8c056a2dc1215bd1db2fd504169e6dab0494bc8e02d4374f061c517d424b0050b678fb240df83d19c0f9a71465541f706cf976f6f653a216dc290698158864c941067577cc0b54c8ccae532de0ec0ddc67d4a22f5c9dcee990b7ae21567991bb1fa1f83d51114f00248735a3b884311b695a65fe6671db499588fd69c79baa8962d6f4331e3dda9b3d7075b2240d58cbe88521c4bfab84066a6b69fbcbc3cb6cbf", 0x101d0}], 0x1}, 0x0) 13:29:08 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x400000000000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:08 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x100000000000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:08 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:29:08 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x47}, 0x3c) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r3, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f00000002c0)=[{&(0x7f0000001580)="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", 0x101d0}], 0x1}, 0x0) [ 1286.335654][ T1530] block nbd5: Receive control failed (result -22) [ 1286.356425][T31046] block nbd5: shutting down sockets [ 1286.380606][ T1530] block nbd2: Receive control failed (result -22) [ 1286.397436][T31049] block nbd2: shutting down sockets [ 1286.421525][T31046] block nbd5: shutting down sockets [ 1286.447428][ T1530] block nbd2: Receive control failed (result -22) [ 1286.458065][T31049] block nbd2: shutting down sockets 13:29:08 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x510000000000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:08 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') 13:29:08 executing program 1: syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) 13:29:08 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x200000000000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:08 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0, 0x8020}], 0x1, 0x0, 0x0, 0xad5fdcabf13a1144) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0xe) 13:29:08 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\xff', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1286.806894][ T1530] block nbd5: Receive control failed (result -22) [ 1286.819892][ T1530] block nbd2: Receive control failed (result -22) [ 1286.829376][T31074] block nbd2: shutting down sockets 13:29:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x404c057, 0x0, 0x0) [ 1286.867572][T31076] block nbd5: shutting down sockets [ 1286.910573][ T1530] block nbd2: Receive control failed (result -22) [ 1286.919285][T31074] block nbd2: shutting down sockets 13:29:08 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x0, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') 13:29:08 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x60ffffffffff) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:08 executing program 1: sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000017c0)}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\n\xea:\x01\x00\x00\x03', @ifru_flags}) 13:29:08 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\xff', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:29:08 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x300000000000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1287.128167][ T1530] block nbd5: Receive control failed (result -22) [ 1287.146625][T31102] block nbd5: shutting down sockets [ 1287.250977][ T1530] block nbd2: Receive control failed (result -22) [ 1287.265163][T31114] block nbd2: shutting down sockets 13:29:09 executing program 1: semctl$IPC_SET(0x0, 0x0, 0x11, &(0x7f0000001200)={{0x0, 0xffffffffffffffff}}) 13:29:09 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x760000000000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:09 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x0, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') [ 1287.337256][ T1530] block nbd2: Receive control failed (result -22) [ 1287.354072][T31114] block nbd2: shutting down sockets 13:29:09 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x400000000000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1287.540491][ T1530] block nbd5: Receive control failed (result -22) [ 1287.560363][T31140] block nbd5: shutting down sockets 13:29:09 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000200)={0x3f, 0xdea4, 0x1, {0x3, @sliced={0xff, [0x1, 0x5, 0x800, 0x20, 0x8, 0x2, 0x40, 0x81, 0x4, 0xfff9, 0xffa7, 0x101, 0x40, 0xfff9, 0x8, 0x6, 0xfffe, 0x9, 0xa0, 0x1, 0x6, 0x3, 0x8, 0x1, 0x5, 0x0, 0x40, 0xec, 0xa41, 0x9, 0x7, 0xfff9, 0x0, 0x3f, 0x7, 0x0, 0xfff9, 0x0, 0x8001, 0x1, 0x1000, 0xdd77, 0x7, 0x400, 0x1, 0x6, 0x400, 0x1000], 0x8000}}}) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 13:29:09 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\xff', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:29:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000200)="0f01c30f01c90f01c4c744240000000000c74424022d380000c7442406000000000f01142403d80f01c266b821018ee00f090f08650f79bcef0f01df", 0xfffffdf6}], 0x1, 0x0, 0x0, 0xffffffffffffff8b) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:29:09 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x0, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') [ 1287.638476][T31140] block nbd5: shutting down sockets [ 1287.644466][ T1530] block nbd2: Receive control failed (result -22) [ 1287.654171][T31144] block nbd2: shutting down sockets [ 1287.717139][T31144] block nbd2: shutting down sockets 13:29:09 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x7fffffffefff) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:09 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x500000000000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:09 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x2) write$evdev(r1, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x2fe) ioctl$EVIOCGKEYCODE(r1, 0x80084504, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000500)=0x5, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x200000, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) r5 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000801, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r6 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0xbcf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7f641723}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) fcntl$dupfd(r0, 0x0, r6) dup2(r0, r6) [ 1287.895084][ T1530] block nbd5: Receive control failed (result -22) [ 1287.908642][T31167] block nbd5: shutting down sockets 13:29:09 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') 13:29:09 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1288.040386][ T1530] block nbd2: Receive control failed (result -22) [ 1288.050966][T31178] block nbd2: shutting down sockets 13:29:10 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x960000000000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1288.213555][ T1530] block nbd2: Receive control failed (result -22) [ 1288.221890][T31178] block nbd2: shutting down sockets [ 1288.238942][ T1530] block nbd5: Receive control failed (result -22) [ 1288.269289][T31197] block nbd5: shutting down sockets 13:29:10 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:29:10 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') [ 1288.336661][T31197] block nbd5: shutting down sockets 13:29:10 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace$cont(0x4207, r3, 0x8, 0x807100) mq_notify(r2, &(0x7f0000000000)={0x0, 0x3e, 0x1, @tid=r3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 13:29:10 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x600000000000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:10 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x1000000000000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:10 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') 13:29:10 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\xff', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1288.740990][ T1530] block nbd2: Receive control failed (result -22) [ 1288.752075][T31224] block nbd2: shutting down sockets [ 1288.802130][ T1530] block nbd5: Receive control failed (result -22) [ 1288.827629][T31224] block nbd2: shutting down sockets [ 1288.828514][T31226] block nbd5: shutting down sockets 13:29:10 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x700000000000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1288.903957][T31226] block nbd5: shutting down sockets 13:29:10 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') 13:29:10 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f00000001c0)) sendmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 13:29:10 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\xff', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:29:10 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x80710000000000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1289.077126][ T1530] block nbd2: Receive control failed (result -22) [ 1289.124994][T31350] block nbd2: shutting down sockets 13:29:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x3f}]]}}}]}, 0x40}}, 0x0) [ 1289.207194][ T1530] block nbd2: Receive control failed (result -22) [ 1289.215229][ T1530] block nbd5: Receive control failed (result -22) [ 1289.231759][T31350] block nbd2: shutting down sockets 13:29:11 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') [ 1289.260198][T31364] block nbd5: shutting down sockets [ 1289.317884][T31364] block nbd5: shutting down sockets [ 1289.380786][T31383] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 13:29:11 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0xf0700000000000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:11 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x800000000000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:11 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\xf9', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:29:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x3f}]]}}}]}, 0x40}}, 0x0) 13:29:11 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') 13:29:11 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x5) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket(0x42000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x0, 0x0, &(0x7f0000000000)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x90002802}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r4, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xac27fc041fa6566b}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4801}, 0x4c8d0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, &(0x7f0000000140)=0x4, 0x4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r9, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") statfs(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=""/74) ppoll(&(0x7f00000001c0)=[{r6, 0x5000}, {r7, 0x20}, {r8, 0x3d4d618e6a9678c2}, {r0, 0x10}, {r9, 0x4}], 0x1, 0x0, 0x0, 0xfffffffffffffece) [ 1289.762429][T31409] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 1289.781008][T23485] block nbd2: Receive control failed (result -22) [ 1289.787955][ C1] net_ratelimit: 20 callbacks suppressed [ 1289.787964][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1289.788019][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:29:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x3f}]]}}}]}, 0x40}}, 0x0) [ 1289.806484][ T1530] block nbd5: Receive control failed (result -22) [ 1289.816654][T31395] block nbd2: shutting down sockets [ 1289.817319][T31394] block nbd5: shutting down sockets 13:29:11 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') [ 1289.939970][T23485] block nbd5: Receive control failed (result -22) [ 1289.947807][T23485] block nbd2: Receive control failed (result -22) [ 1289.957143][T31403] block nbd2: shutting down sockets [ 1289.963235][T31394] block nbd5: shutting down sockets 13:29:11 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x7f', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:29:11 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x100000000000000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:11 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x2000000000000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1290.052659][T31426] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 13:29:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x3f}]]}}}]}, 0x40}}, 0x0) [ 1290.184405][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1290.190243][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:29:12 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') [ 1290.261770][T23485] block nbd5: Receive control failed (result -22) [ 1290.268678][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1290.268731][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1290.286372][T31431] block nbd5: shutting down sockets [ 1290.292350][T31446] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 1290.303307][T23485] block nbd2: Receive control failed (result -22) [ 1290.322048][T31437] block nbd2: shutting down sockets [ 1290.370148][T31431] block nbd5: shutting down sockets [ 1290.377437][T31437] block nbd2: shutting down sockets 13:29:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x3f}]]}}}]}, 0x40}}, 0x0) 13:29:12 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x200000000000000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:12 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x8c', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:29:12 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x3000000000000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1290.509334][T31459] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 1290.651304][T23485] block nbd2: Receive control failed (result -22) [ 1290.662140][T31464] block nbd2: shutting down sockets [ 1290.662146][T23485] block nbd5: Receive control failed (result -22) [ 1290.667537][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1290.667593][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:29:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x3f}]]}}}]}, 0x40}}, 0x0) 13:29:12 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000001540)='/dev/cec#\x00', 0x0, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x7, 0x100) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000001780)='/dev/null\x00', 0x400000, 0x0) recvfrom$llc(r2, &(0x7f00000017c0), 0x0, 0x60010141, &(0x7f0000001800)={0x1a, 0x2, 0x6, 0xf5, 0x0, 0x3f, @remote}, 0x10) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000180)=0x6, &(0x7f00000001c0)=0x4) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x8) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f0000001680)={0x80000000, 0x5, "b1088789749e44e0c3922027acb9859810586d9c75a121a8ec9b295ddbaccf9b", 0x7f, 0x2, 0x4, 0x2, 0x5, 0x4, 0x8000, 0x4, [0x1f, 0x8, 0x4, 0x3]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) accept$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xa) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r9, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") dup2(r8, r9) ioctl$DRM_IOCTL_ADD_BUFS(r4, 0xc0206416, &(0x7f0000000200)={0x52, 0x401, 0xfffffffc, 0x10003, 0x18, 0x1}) ioctl(r7, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") ppoll(&(0x7f0000000000)=[{r7, 0x5011}], 0x0, 0x0, 0x0, 0xffffffffffffff88) getsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, &(0x7f0000001600), &(0x7f0000001640)=0x4) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000100)) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001500)='/dev/vsock\x00', 0x8040, 0x0) connect$ax25(r10, &(0x7f0000001580)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) syz_mount_image$nfs4(&(0x7f0000000280)='nfs4\x00', &(0x7f00000002c0)='./file0\x00', 0x9, 0x4, &(0x7f0000001440)=[{&(0x7f0000000300)="66915e25f449207409aa6e9643d34104ab8e59f06a9e4fa4891270b65c54fd73561352889005dcc15ea6cc706c55574e8bb6e668dc990a2efc2e7ae849d6a1f9c3b3b587d4fcca791fd01fc80a851728ed07f0399a939853b947c6d2766ac7fee52c8b69990b61b703497e8e65773081eaa1d0d1f2857006a69b5ed46cdb47b364478404fd095762595444f7d04bca10db6c2d6362be84f1b414a37e21d01a30decfbe6614d64f7b0f33371d3c673ee4a3fc2eb5f450f83270870d101c66cfab017a210a37dc916e6bb53f8e2d8d7d7394f133ea5122ec44a7be721d2d5106d058cc065a0487e93663cdb3db3235e737b6383f6db59607f13cee1a1aed9df7b4540a136225097ce58bb6ae8227b77971a4eabd58ab0433b7d83f25bb5eae45502671dc687958228c52a892e41654f162ba72cb24898df1b398f003fa2af25c3a5780dde245d97abe260f39cf942837587bb0ee26be6cce4e1c6c60ea68ac2b7910bdc54bf6f46a81f2128b33d87289bdfa3cf52f2ea2fe14a1500864ea5ef0c6518e7e2a9930a7f6ca76bbcc0b6a63043b582e7ecc7bb74dcad464f5dc63ba981347c7946617db6e24ab5ea00147d73805f6b42b1583c46d2bc8c7db83151fd7f53e73baa3c0a2f5df089bd7dceff9930b322342f2622470e19767e2db2de32f4047e983f08113666507946410a7dca79fda115fe3bc6941dedd358073b370c916c8458edb022ce23a6bdfe45e20749edf8f51b81588c6c6baeddb121947c3cda79fe2aacdd807ef2b9252a8ec139a8f50d1032d5e0222a1ef9cd9330a6f28ccb48322140f9c9c7281f8508cf3f1f8c389e1c1e19c0ea5f48c5ad09b8b9e899dead9d6e370dee1d7f88b02a4beaab1d70869ae2fea4599f49462c8e888d5e5dfd14dc585350b645dbb6ec075b941ad7c7c37f65ac4a45ea325455f04a3ac6427b7f1df027b96f5d71ee99d6f7bf38ba8a004816128ff6b94b5ea7ed40ac946bc65905f4d37763ac8b7a9572c52b3970a79c50f653f14c748903edc08b323a35edb9036214b4ac47ec5258e372da53dbe9b6daa4b427573c87b0886b5342bd7bb765d4126363237797515fb72e8b19714c6447d39ded4349d6a487cfb4a2ecc7519009a8994a6f6327bf97c09a097ba57bedb8934ccba1daeae9eaf7ffaf3e4f35b572b08b44839866fa2780c69f2a7df05f3f0d7aa178ed8609c133e2aeba64dce9c44e6ea19f430aa3bddf852040f2e88a73281e7a496b9171d46615203fad749e5d227880cd2eb9c2646df3c79389f529c714f1326bffd4dbf68eb67167b05fc5a1a3b343e6385b35f14f32cda05dfd8a6179e6f49e511437fd4051ba66d9c66664f775692805da7411e5646948741f95ac08ef0358adc18c00e418b437ae998f7f0a996e60b91bf4b0ae7721627dfb6090f039c03988e53291a6b9ae73e5106630211621de49774d9a988fd0b64ddb12b8956a9faa062413cf07e8707898c5339fe20fa80c914a5051f58eb44c2d7a83c438cebb917d8c9e2dc573783c6fa9fa75f7ab5e02082b64203bf27d79a83cd6db70fc41e8a1764a523ecbfdabcbea74a81ccdad6f9c8444080715e9e8a85dc1f545a6fb1dfae1e864df63f15d2b7cd6b51ff59ef93c24b69c63275ed934ba94d12312aabaec188765a514f6546ec2374b081ecb09940f59e4c5bdc60d905e6be3bb74ad932efe084faa091b678efb9ae89887c5021de9c462392b0cd7e750514963abcef8614c06f2aa62c2c74588ebfe0f5995593464ad935c88238bff6218e52b44ef58a30d61e50ae94d63edfd0960c8b9a92dab677f098955f2690df5587c42b10ceb29a82f2aeb35144c8c96e1178c0cce4c3580c996942321f120252639f3e34c2c95952810dd27b8ea39d68de5d8ed7af38ddfd581909fd744262684af2a1ef28a99c8b3df737ebff9211e10f94ed41fc98ff2c5f170c9d57ee8202248460a00e746310c03bcba02b14a48676a8e80166e35ba89a8fee8efa6d9093579f1eb9769d4160fbe9c12559e0eea2d555c77963311d630082c344f6444be0144c5b987a88fadc08dc764782ada8a12ba526d03e0adc2bbd7c4ca5a1e40197eb2f712c120a38fbe3a87696aaa5c75bd83c1f478eda233b074f672064ccc6f5000ef41c5852e005b2c49ddefe3dbc513cc987f3b17a3e8feb127c8899b61685e8357bd57fa41e364cf6b43ccdc2f645a5fe1abe912c59dba049f448d885c2242e9f69f657c0db181adaf485ac08aafa420c3625405488a55d6980e9a36d59a777e2fa916f3e8b0618c4b4f13bc648c56b5b55bed3bf1d7534c5f5434fdc433c6a663de8e25fd93c1dde9f1327e441bc01457fe1692219692f19260f6203bce1c90393a2183ead3d84f1c67254f50c38f2d155fedaf8548363ba1098c0ddae5c59e41ae6037b95c287ec429d01b4eb9661e027329243cd3a5d7a3b15d1088ac7f58614d8b0ec296279b4bc627758b16ce9eb8860bfd456a2c2161d6329f64e146d0966cbf550629996599ecc6651ef3ba582faa4b598487e510ea1feb803247a8cf3136125a15ac2898ca43201896fc50e70b1ccf65d406459dfa682ba43c80adcdfbb0a45a6ecc906477621bc311381052438bf899e0ab54ee25d2d44a32a384df75b2bb0702aa7f50bfe5627823df0b3027c8d6c26b67c9fae23da811b1bd08a966c23706e421023e817390c184b54b52b3321ab3a6b73a56010be262937a55b407a41aac3749b770295b4b2ff6b9b3f58da43daf63c05578dee3bb5b75d572b94c17da77683927a9ba60f2ad1bfbdf04726177e03a7f5da938a998c83b7101bc28035a6f6538e76281a6629758e016fde877bbb0b94c3f26742b7cf08eb080c07a5fffe0035518b843c76431899246a3582cafd13b3631c599e9511b2310388011a752daf75515bc85524ac60a55020b3c4526b02cc183fd632451702205bf4809cc4d62f59240cd0765127829ea046fb274ae468e2f4186d67dbee83261490f94090116aa4bc79ecc15c6a00f46602d4ea0ca6ee0016b97294970d3e0725252ed7fb318a5c027354eaf09d7761c1cea555fd4fca49e35a1830efbece3d7af41f218be28753864d9ae6bdc7d02479b29165ba953369d104f7eb38220ca6e27d39ea4a8166fd54c90c7e2a01fe7cc9b28153953dc5ecb85770dff5eb6e0d2a242e2f0976583fc5d379a7b27ece40b9569aa3ea58bf5f83a79c387d6ae65657040381a0b9694918b5b9d996acdc41deda610580f75383990c9b1cfc54f275f208851b864593d63b505ef79f49fc4993e4af33adb8faead2cc97de262c36279ad6358b753e956445ccfb38aa9dc86f09467de05b992cd11c3a2a34a04776970ca9adc61d9a4702784eb739ce2cdebfcc968a9df5285ae9f6ca1bea79608f7b815a16360fae01b189a35ea495217c041696d7fbce5872efb6e119d6a53365813da189af9aa43c93502ad03aec21d250429e2cdeaa29ec3ca268abc72a60f10871710dbd152bc0da5edd024d13ba5ffd5ae4f9c7567037e39c02ede700461dce07601fa4c4037fd60fa06ea9eb0e37c2c3555750db43e1cbe525e438cddcb5739bf9d0dc4eaecd5ad7853c51ea7cd58195b0df475b96f56ea0a6a4f48f4d0a336d729bdfadf67be5fe35b2aa47ce13af663a2f9c998aed88b0cedbf88323010d645664e5daa30b8860fae6fe079cbb3797795db04780d35957ad0eb207b389d17b10eb7cde5cce7e5ca077a178b9e09a01412c78c3304dab1fd1ec4c4a805ee247ceb100cba59eab44be203f96da05e09b341e68a1117a19f05fd6a3bc9741d7f896329bd1fdb196fb86576bfd27d206c839c8d393028631abbd92ab286f48e7e03cdfbcf014cda8b68e2a07322b55580b465b1963032bd794d0719a5a52c1852388bcf4f8e0cd3a56f1edde8477a7de9cacb51df48e4d633028d05e68ba4bb1b7e276e232639767197f0ba1ff9d002f252d5e8b7181179f5fce717474f723b7fecf9a2ac8c2934a38ac25cff68dcad3e6eec5311d73e2333c6e14a796b5dc3dd3946a3812f1cab25c29758d765163ba63fef94f3e99038f30fc336468edf3123c9bfafe6ab0c9ec0e1087a55fe4f468abdd166b7432df688af8bd73f56a2ed3a3875db2bd570789fb7dc88b9647c9f2c6f7015eb8c58f7077dc9c466ccd02a0b6d1c093a73776c0e6ec98804184064b1e76768e35fecfcdd125bbf7b274bfdeaf7600e56ddb05fe8063f760d8062f147d6bdad5e54afec373d179a468c1a7d6b2217c6bc864b5b47af27506bbd756d71bfb838a4d6acf831b70c79312e9f9e57f265c50c131219d8d0162bd803b0a8e50e3c0210b1e9f3ad0c4463602f1a672a032ea74b6325b767c621c842fd3f57d9cf896f09a00a5304d26942515145bd23405938a349d4af2d3ab18ffb5cd789f932be5457cf4bdafd8406242692bc5feb434da47fd0bf4da156c4e1ee03d6f89c21ce25694601f6a92b30516f3691762db47bdc462f017dd9d3ca204410919940dd223f73dabdfb857d6764cae98552e482bdddc02c44ef06b5edaa4e327049919148107147a90cd6df59f9f34ca55825b09f355ea037c2c6e48c733b0930fc020dceec416bb8624d06cb042e136e877e22e6ba57a83f643819310107e6da1430bd0891e7d437ea5145195319efdaf4e6d4e975587ff01cb0a73dbc5bbe4f0c21f47faf0534763cd5a1fad8a2dc822ebca2fa0b036d8c755c9facc78625749b1b9fb4c4e78e109f047edfc77d6f159180658ed8fd1683bfc213a04189dbdf3f87ee923881882007b1aa40a81ba017f2f81090d17a9145cd62ee3e261e0695aea2c13c04cc815aa53a886e1c21504f46d595c46ab1828aa5817b882fca3be3dfd50a178da384523544cb1e438b91d47ed29780b35e9075d3ce2cc63ec9d1252b92c417a1b7506537eed9ec24392d73a41341412ebb8de669eddf49afe832933016072756887c96b06242bbbbc9ddf66b2487d8fac1b1d4481a299f84689ab28af6ee48c236a0af46e1f1eda7ddd800d5814cb643055f4036492acd1d7b6a448cdc5e4dccc5457ccd2f1c56b8d397ac39f381f2d67cb5846e330527f85915cdd9f56a40586fb349b3b27429e343a092dfcd2356714b32d9684e2bcf4b84e2cc975148ae23af9a1ec566ce9cd160296a3721eda39e4b9391f8d7c7d618abcc58fd012422b1836484e2c9a751ae45386dcfb1d1687777f248b26b6c50b11960b819166f04de1abbd58f77eabdd9810fe907103e32bad778238f70064b19a0632bdda180ebd872aa6b6367c440fcd18631007ed078978266ae068eb3bbca3800160fc5d176aa74cd748f951e30a8e689b8b0e481d37d8589fa70943c62ffdc5b77474856b75cc57fbd59b5818e5a7dedfd970da4cc08fe7b9fa60cdfac3bea4e219276d95d379abe6c17159314c05a10c27a4d6b83ac6cfd1833b1ab8f81c21493be37b27e44323517d1650e19461bc7ad3bfcec1498009f2771dce38521da1dc4c38cd5c54e45731d3abd578ee92b6fd7b37c3abe06a39fa6df7ca47ae89fbf258c3ba18cb8c2c1d077aad29088e52dfb05a00b3f261f1fe9e172766ee7c3c9d3795f76965ff588914d214b33ce102f02488e9537f1e49e6b97a3282c37a5603f70f5b266b433077fd539b0ae66b9b86613ee42526679b867ce51a5fa6ef37734d3d1aae54528ed1be89eecdfed2a8756fba59a3c282cff63060b1d4dfae4da599dbafc1f76f1d7bf3f4ba27ffe91b0ca49dec91a15ed3b537b768bc0583b9319806", 0x1000, 0x5}, {&(0x7f0000001300)="e7fe903d5595de234e3c80818b5711849f65f430d02fd40d87174c21c2903bd8a766d67596fb88fb83610bd3ff6068d31fb048271d0ce5", 0x37, 0x9}, {&(0x7f0000001340)="fe60973ca9b5309daf356104328daad85b966557a74fa537feca411b9f7734c106cd5ebc36d5e803be9291e3e78096e5730038cc2daf9aeb2f7e06fe0539ee958d39c65ac69a298669990aca5e7e182def0ef78f096b8a0ecb653812cb8e79bf353d26630099c611f97615ea950b257d500579d0fc95a2302b5674800f3e5cafeab3165b3444f976136e", 0x8a, 0x8}, {&(0x7f0000001400)="f7744efade95dd2a06d5aaa7846e4028edae0b8f6cefaddd17", 0x19, 0x5}], 0x0, &(0x7f00000014c0)='nfs4\x00') 13:29:12 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') [ 1290.725888][T31461] block nbd5: shutting down sockets [ 1290.791186][T31481] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 1290.832527][T31461] block nbd5: shutting down sockets 13:29:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x3f}]]}}}]}, 0x40}}, 0x0) 13:29:12 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x300000000000000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1290.911455][T31468] block nbd2: Could not allocate knbd recv work queue. [ 1290.936969][T31468] block nbd2: shutting down sockets 13:29:12 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\xf5', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:29:12 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x3f00000000000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1291.010705][T31496] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 13:29:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x3f}]]}}}]}, 0x40}}, 0x0) 13:29:12 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') [ 1291.101840][T23485] block nbd5: Receive control failed (result -22) [ 1291.113727][T31499] block nbd5: shutting down sockets [ 1291.212194][T23485] block nbd2: Receive control failed (result -22) [ 1291.224388][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1291.230228][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1291.245364][T31504] block nbd2: shutting down sockets [ 1291.267607][T31518] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 1291.293036][T31499] block nbd5: shutting down sockets 13:29:13 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x4000000000000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:13 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x400000000000000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x3f}]]}}}]}, 0x40}}, 0x0) 13:29:13 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') [ 1291.493209][T23485] block nbd2: Receive control failed (result -22) [ 1291.502338][T31525] block nbd2: shutting down sockets [ 1291.557217][T23485] block nbd5: Receive control failed (result -22) [ 1291.568932][T31531] block nbd5: shutting down sockets [ 1291.598160][T31539] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 1291.632852][T23485] block nbd2: Receive control failed (result -22) [ 1291.643724][T31531] block nbd5: shutting down sockets [ 1291.650171][T31525] block nbd2: shutting down sockets 13:29:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x3f}]]}}}]}, 0x40}}, 0x0) 13:29:13 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\xf6', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:29:13 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x500000000000000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:13 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x6000000000000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:13 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = openat$cgroup_subtree(r10, 0xffffffffffffffff, 0x2, 0x0) ioctl(r11, 0x3ff, &(0x7f0000000080)="f461af660667e98cd9724b9fd140009f49ae8a301953640a2f42588b5c582a57f081aaeffd99f180b4d1415389307e54235a6e288db3b8567c0579cbd8f10eb5dec2209019100cc17f25bdf09f") [ 1291.867109][T31559] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 1291.908543][T23485] block nbd2: Receive control failed (result -22) [ 1291.920159][T31560] block nbd2: shutting down sockets 13:29:13 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x3f}]]}}}]}, 0x40}}, 0x0) 13:29:13 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') [ 1291.962010][T23485] block nbd5: Receive control failed (result -22) [ 1291.970809][T31557] block nbd5: shutting down sockets 13:29:13 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1292.065784][T23485] block nbd2: Receive control failed (result -22) [ 1292.075096][T31560] block nbd2: shutting down sockets [ 1292.086646][T23485] block nbd5: Receive control failed (result -22) [ 1292.096949][T31557] block nbd5: shutting down sockets 13:29:14 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x3f}]]}}}]}, 0x40}}, 0x0) 13:29:14 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x7e00000000000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:14 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x600000000000000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1292.324758][T23485] block nbd2: Receive control failed (result -22) 13:29:14 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') [ 1292.366778][T31589] block nbd2: shutting down sockets 13:29:14 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1292.432570][T23485] block nbd5: Receive control failed (result -22) [ 1292.448972][T31593] block nbd5: shutting down sockets [ 1292.467406][T31589] block nbd2: shutting down sockets 13:29:14 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x3f}]]}}}]}, 0x40}}, 0x0) 13:29:14 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0xf0ffffff00000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1292.562394][T31593] block nbd5: shutting down sockets 13:29:14 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') [ 1292.741537][T23485] block nbd2: Receive control failed (result -22) 13:29:14 executing program 3: syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) 13:29:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x3f}]]}}}]}, 0x40}}, 0x0) 13:29:14 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x700000000000000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1292.785932][T31614] block nbd2: shutting down sockets 13:29:14 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1292.903525][T23485] block nbd5: Receive control failed (result -22) [ 1292.915571][T31625] block nbd5: shutting down sockets 13:29:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x3f}]]}}}]}, 0x40}}, 0x0) [ 1292.965293][T23485] block nbd2: Receive control failed (result -22) [ 1292.975764][T31614] block nbd2: shutting down sockets [ 1293.043549][T31625] block nbd5: shutting down sockets 13:29:14 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0xf6ffffff00000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:15 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x800000000000000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:15 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') 13:29:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x3f}]]}}}]}, 0x40}}, 0x0) [ 1293.271447][T23485] block nbd2: Receive control failed (result -22) [ 1293.281328][T31653] block nbd2: shutting down sockets 13:29:15 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:29:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x3f}]]}}}]}, 0x40}}, 0x0) [ 1293.371791][T23485] block nbd5: Receive control failed (result -22) [ 1293.383227][T31657] block nbd5: shutting down sockets [ 1293.388965][T23485] block nbd2: Receive control failed (result -22) [ 1293.399816][T31653] block nbd2: shutting down sockets [ 1293.468560][T23485] block nbd5: Receive control failed (result -22) [ 1293.481162][T31657] block nbd5: shutting down sockets 13:29:15 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0xff00000000000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1293.653580][T23485] block nbd2: Receive control failed (result -22) [ 1293.666920][T31681] block nbd2: shutting down sockets [ 1293.763279][T23485] block nbd2: Receive control failed (result -22) [ 1293.776022][T31681] block nbd2: shutting down sockets 13:29:15 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 13:29:15 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x2000000000000000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:15 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') 13:29:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x3f}]]}}}]}, 0x40}}, 0x0) 13:29:15 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:29:15 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0xffefffffff7f0000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1293.989891][T23485] block nbd5: Receive control failed (result -22) [ 1294.005145][T31695] block nbd5: shutting down sockets 13:29:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x3f}]]}}}]}, 0x40}}, 0x0) [ 1294.047029][T23485] block nbd2: Receive control failed (result -22) [ 1294.056540][T31704] block nbd2: shutting down sockets 13:29:15 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') [ 1294.117071][T31704] block nbd2: shutting down sockets [ 1294.126495][T23485] block nbd5: Receive control failed (result -22) [ 1294.144720][T31695] block nbd5: shutting down sockets 13:29:16 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x3000000000000000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:16 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0xffffffffff600000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:16 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:29:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x3f}]]}}}]}, 0x40}}, 0x0) [ 1294.421701][T23485] block nbd5: Receive control failed (result -22) [ 1294.433039][T31734] block nbd5: shutting down sockets [ 1294.465527][T23485] block nbd2: Receive control failed (result -22) [ 1294.474268][T31738] block nbd2: shutting down sockets [ 1294.523431][T31750] validate_nla: 6 callbacks suppressed [ 1294.523442][T31750] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 1294.539185][T23485] block nbd5: Receive control failed (result -22) [ 1294.547841][T23485] block nbd2: Receive control failed (result -22) [ 1294.554750][T31734] block nbd5: shutting down sockets [ 1294.577402][T31738] block nbd2: shutting down sockets 13:29:16 executing program 3: syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 13:29:16 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') 13:29:16 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x4000000000000000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x3f}]]}}}]}, 0x40}}, 0x0) 13:29:16 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000140)=0x0) r4 = socket(0x42000000015, 0x805, 0x0) getsockopt(r4, 0x114, 0x0, 0x0, &(0x7f0000000000)) r5 = accept4$unix(r4, &(0x7f0000000300), &(0x7f0000000380)=0x6e, 0x800) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = syz_open_dev$media(&(0x7f0000000900)='/dev/media#\x00', 0xfffffffffffff801, 0x12000) r14 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r14, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r15 = syz_open_dev$radio(&(0x7f00000009c0)='/dev/radio#\x00', 0x0, 0x2) io_submit(r3, 0x9, &(0x7f0000000b40)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x2, r2, &(0x7f0000000200)="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", 0xfe, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x5, r5, &(0x7f00000003c0)="5f19ed9e74acb24f766ab06a98c9c14ca2ab37a9e4f9e5b2ac54e6dc8af1ae5263c26421dc471a0357d8484f88a7f0e317359daa8c5a8273b5eb76eb03089f93edf173f7febb4f078c50094a8d10efe83c0011a04425af49d85a6d9230a1693804476df5b591e18e96cf27aa88ecdfdb1d6ffbf1b46dc4456a075f5229197095bbb1aaf6641870b7192b1b9c4d91d84b7cc9cc45fb824d183c97cefb65d8c4ca939d398a6440d668da1cef5e30aa3aedbc7629db07ba4f5083e7d867b1e51bc8f83618644e7aeaffa09db23e023cbf", 0xcf, 0x3fff800000000000, 0x0, 0x0, r7}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x5, r8, &(0x7f0000000500)="2078642a274fd9ca01579cbcacc8ac11037def22308f15411429063ec99d8079e2b767b763c02ae40ec0ba196cd77c279e4ce950ebd60ed2ac", 0x39, 0x7, 0x0, 0x2}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f0000000580)="61fceefb6df4934b1a27ae42ca31826b551864d2083918ea80e537d2a4e7baafef4cdb6ce0dc9c1c204ec554c6483682a7de3c31707e8fdfcff44026c820fdcfcabdbda26a50ac5b04a107ff97588c9f54535f65eb72d16d156d5a54ab8796bf3633d1d63356ec290e981fcb36b48d06a3e3a5f169b409188d55a09e0c6ffb949f022d5b6f398ab0155685990d6a0fb45973843e25fd89593cc37397b25baed0f7b205d1619479ede1b929715fc87fec3df6b16fd416140c712a36f642f635a040811c2cd61041addee0cef6d698ddcb809cde9058be009ce35ba225b2942b15520d2982c6bf4fe55653f58e835e286f0d5e", 0xf2, 0x2a1000000}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x1, r2, &(0x7f00000006c0)="f903ddfaf79544a0fe17aa3c4161bfdb499b62cb27623f169add8177f772b51afb4bb79d9bec8f4e2391dd6af9ef667a8e50dd2a7152a618b7dcc45528f2b4f76347", 0x42, 0xfffffffffffffffb, 0x0, 0x2, r10}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7cacb4433e09089c, 0xe532, 0xffffffffffffffff, &(0x7f0000000780)="676eb2baa0d52f9e6be78ea7072623f7ff3107b66f", 0x15, 0x7f1, 0x0, 0x1, r12}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x5, 0xfff, r0, &(0x7f0000000800)="a6ed5ec17a8ecd02722fa99023a52cc24b5dd98a27bf75ecd65c34756fd4ffc385cfb1a072ad56872a424c8cb7ec7a8a8d4d17b4348fdeec9316547ecf4c843cb9c7137776e218a545150fea90f15ec67df1574acd73885309f278e4a37b831894a22ad8ba04db186d949f3f480800ebd3aef8c13ac66f4624aee83d2fe24b3f03d1fd84ae20d97499c9631c2927cb0e748edc0b7cb090813b62be1891f062fdb6c0e02b133d455461c0eda20d887f9d82661717e49e44549e3a44b2fd249b0722dcd5c2ad9586cb701c59a545c877a8673877afeb84e2fa8b8994cb74", 0xdd, 0x5, 0x0, 0x1, r13}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x5, 0xfff8, r14, &(0x7f0000000980)="ef65b754075178f4fbb12b6b97eeda29", 0x10, 0x0, 0x0, 0xb5d8b4c6515f63f4, r15}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x8, 0x7497, r0, &(0x7f0000000a40)="7068855b7348fa30a124cbc3000b46dbc8e5a54f8add398f110a4b49cdf966183a32e6baa225ddf4c3d138bdda7da25d1b87388ad66a36bf2966bff1534b98932e55c2129858f3e65fa1089d537778818d3c5d89d15cb8c86f67a5c667241a2f0fb913c86f2696ebf1fb6580f9a73f5e4385a88516e60edf5479c597aa8b3e8e06e947b9fe1a7e0eee201e0726", 0x8d, 0x1, 0x0, 0x2}]) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)=0xdb) 13:29:16 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1294.824935][ C1] net_ratelimit: 20 callbacks suppressed [ 1294.824944][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1294.836447][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1294.863698][T23485] block nbd5: Receive control failed (result -22) [ 1294.901404][T31762] block nbd5: shutting down sockets [ 1294.938175][T31773] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 13:29:16 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') 13:29:16 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x5c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4054}, 0x4000) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r3, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x5581109286804072) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x9) 13:29:16 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) r3 = socket(0x42000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x0, 0x0, &(0x7f0000000000)) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f0000000000)=0x2, 0x4) 13:29:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x3f}]]}}}]}, 0x40}}, 0x0) 13:29:17 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x6000000000000000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1295.139226][T23485] block nbd2: Receive control failed (result -22) [ 1295.158008][T31784] block nbd2: shutting down sockets [ 1295.284232][T23485] block nbd2: Receive control failed (result -22) [ 1295.288100][T31795] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 1295.301214][T31784] block nbd2: shutting down sockets 13:29:17 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') [ 1295.359760][T23485] block nbd5: Receive control failed (result -22) [ 1295.371150][T31792] block nbd5: shutting down sockets [ 1295.385045][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1295.390869][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:29:17 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:29:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x3f}]]}}}]}, 0x40}}, 0x0) [ 1295.469966][T31792] block nbd5: shutting down sockets 13:29:17 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000)='/\xc3gO\f;\xbb\xd6\x00', 0x0, 0x4000) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000040)={0x520c, 0x2, 0x3, 0x20, 0x200, 0x9, 0x4}) 13:29:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x3f}]]}}}]}, 0x40}}, 0x0) 13:29:17 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x7e00000000000000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1295.522465][T31811] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 1295.624404][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1295.630231][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1295.641834][T31824] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 1295.667242][T23485] block nbd5: Receive control failed (result -22) [ 1295.679498][T31820] block nbd5: shutting down sockets 13:29:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x3f}]]}}}]}, 0x40}}, 0x0) 13:29:17 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') 13:29:17 executing program 2: socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x04\x00', 0x0, 0x70000) r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000000)={0x1, {0x77359400}, 0x2badb5c3, 0x9}) syz_open_dev$dspn(0x0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1295.778519][T23485] block nbd5: Receive control failed (result -22) [ 1295.793126][T31820] block nbd5: shutting down sockets [ 1295.934879][T31843] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 1296.024385][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1296.030246][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:29:18 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x1000, 0x82080) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f00000000c0)=0x1) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 13:29:18 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0xe0ffffffffffffff) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:18 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000040)={0x3, 'bond_slave_1\x00', 0x2}, 0x18) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000200)=""/132, 0x84}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000001380)=""/91, 0x5b}, {&(0x7f0000001400)=""/91, 0x5b}, {&(0x7f0000001480)=""/96, 0x60}, {&(0x7f0000001500)=""/185, 0xb9}], 0x7}, 0xc63e1d1d2d704b64) connect$caif(r5, &(0x7f0000000180)=@dgm={0x25, 0x7fff, 0x1f}, 0x18) 13:29:18 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x3f}]]}}}]}, 0x40}}, 0x0) 13:29:18 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:29:18 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') [ 1296.226356][T23485] block nbd2: Receive control failed (result -22) [ 1296.249510][T31850] block nbd2: shutting down sockets [ 1296.255245][T23485] block nbd5: Receive control failed (result -22) 13:29:18 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x3f}]]}}}]}, 0x40}}, 0x0) [ 1296.345671][T31856] block nbd5: shutting down sockets [ 1296.358145][T23485] block nbd2: Receive control failed (result -22) [ 1296.388131][T31850] block nbd2: shutting down sockets [ 1296.407301][T31856] block nbd5: shutting down sockets [ 1296.424429][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1296.430286][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:29:18 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x3f}]]}}}]}, 0x40}}, 0x0) 13:29:18 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') 13:29:18 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0xf0ffffff00000000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:18 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) r3 = syz_open_dev$ndb(0x0, 0x0, 0x401040) r4 = socket(0x42000000015, 0x805, 0x0) getsockopt(r4, 0x114, 0x0, 0x0, &(0x7f0000000000)) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f00000051c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0xc0}, 0x1c, 0x0}}], 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000200)=0xe8) getpeername$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = socket(0x10, 0x80002, 0x0) connect$netlink(r10, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0xd) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1, 0x8b14570151ee72f9}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}}, 0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f00000002c0)={0x300, r5, 0x100, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0x12c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8, 0x1, r11}, {0x1b0, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x9, 0x20, 0x2, 0xffff}, {0x101, 0x2, 0x9, 0x3}, {0x5, 0x0, 0x52, 0x3}]}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x1508, 0x81, 0x8, 0x7}, {0x4, 0x0, 0xfd}, {0x72e5, 0x7, 0x4c, 0x4}, {0x1, 0x1, 0x81, 0x4}, {0x3, 0x6, 0x8, 0x3}, {0x4, 0xfb, 0x1f, 0x4}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}]}}]}, 0x300}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000000)=0x7) syz_open_dev$dspn(0x0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:18 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1296.753749][T23485] block nbd5: Receive control failed (result -22) [ 1296.762643][T31884] block nbd5: shutting down sockets [ 1296.769015][T23485] block nbd2: Receive control failed (result -22) [ 1296.787635][T31883] block nbd2: shutting down sockets [ 1296.878690][T23485] block nbd5: Receive control failed (result -22) [ 1296.888564][T31884] block nbd5: shutting down sockets [ 1296.915380][T23485] block nbd2: Receive control failed (result -22) [ 1296.935569][T31883] block nbd2: shutting down sockets 13:29:18 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000040)=0xeb12) 13:29:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 13:29:18 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') 13:29:18 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0xf6ffffff00000000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:18 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x800) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") shutdown(r3, 0x1) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) r4 = syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x210040, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KDSETKEYCODE(r6, 0x4b4d, &(0x7f0000000240)={0x1, 0x80000000}) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100)={0x2, [0x0, 0x0]}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={r7, 0x3, 0x30}, &(0x7f0000000200)=0xc) 13:29:18 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1297.170800][T23485] block nbd5: Receive control failed (result -22) [ 1297.182083][T31916] block nbd5: shutting down sockets [ 1297.278150][T31916] block nbd5: shutting down sockets 13:29:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 13:29:19 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(0x0) [ 1297.329842][T23485] block nbd2: Receive control failed (result -22) [ 1297.388559][T31925] block nbd2: shutting down sockets 13:29:19 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0xff00000000000000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 13:29:19 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x0) r3 = socket(0x42000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x0, 0x0, &(0x7f0000000000)) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, 0xffffffffffffffd1) [ 1297.595713][T31944] Failed to access avail idx at 0000000036bf248c 13:29:19 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1297.653650][T23485] block nbd5: Receive control failed (result -22) [ 1297.655181][ T1530] block nbd2: Receive control failed (result -22) [ 1297.679812][T31946] block nbd5: shutting down sockets [ 1297.689605][T31951] block nbd2: shutting down sockets [ 1297.748267][T31946] block nbd5: shutting down sockets [ 1297.788524][ T1530] block nbd2: Receive control failed (result -22) [ 1297.797668][T31951] block nbd2: shutting down sockets 13:29:19 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timerfd_settime(r2, 0x1, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x77359400}}, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080)) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/keycreate\x00', 0x2, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x2000}, {r6, 0x2}], 0x292, 0x0, 0x0, 0x3b) 13:29:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 13:29:19 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(0x0) 13:29:19 executing program 2: r0 = socket(0x0, 0x2, 0xf8) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) getpeername$tipc(r0, &(0x7f0000000180)=@id, &(0x7f0000000200)=0x10) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket(0x42000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x0, 0x0, &(0x7f0000000000)) r4 = socket(0x42000000015, 0x805, 0x0) getsockopt(r4, 0x114, 0x0, 0x0, &(0x7f0000000000)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/audio\x00', 0xbe45827d7520ce85, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000600)={0x1}, 0x4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") dup(r6) accept$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) sendmsg$can_raw(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r7}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)=@canfd={{0x0, 0x1, 0x1, 0x1}, 0x38, 0x1, 0x0, 0x0, "9dc360ae8d064a86e32d0597bf5733d2cc99ba72ef596694e3e0b39c6864b91b945027002e50defea4a974e663545ac78b807f705d7396286d4d8df28fb92226"}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000063000000630005eb9fefbe781ea315a795300a5b0000050000000c0000000000000204000000020000000600000f0300000000000100400000000800000002000000ff000000040000000500000001000000fcffffff0400000001000080fcffffff050000002000000001f0ffff0300ab37d3e900"], &(0x7f00000000c0)=""/86, 0x81, 0x56}, 0x20) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) epoll_create1(0x80000) syz_open_dev$ndb(0x0, 0x0, 0x401040) clone3(&(0x7f0000000580)={0x10000000, &(0x7f0000000240), &(0x7f0000000440), &(0x7f0000000480), 0x25, 0x0, &(0x7f00000004c0)=""/12, 0xc, &(0x7f0000000500)=""/67}, 0x40) syz_open_dev$dspn(0x0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:19 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0xffefffffff7f0000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:19 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1298.145961][ T1530] block nbd5: Receive control failed (result -22) [ 1298.158694][T31979] block nbd5: shutting down sockets 13:29:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 1298.216273][T31989] Failed to access avail idx at 0000000036bf248c 13:29:20 executing program 3: syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000200)=""/243) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x800, 0x0) ppoll(&(0x7f00000001c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) [ 1298.315011][ T1530] block nbd5: Receive control failed (result -22) [ 1298.330042][T31979] block nbd5: shutting down sockets 13:29:20 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(0x0) 13:29:20 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) open_by_handle_at(r2, &(0x7f0000000000)={0xf0, 0xe4a, "a40971eecc7e9ed4695bc32fddd4475d916dce924279666d46ab8109c4d7d8911ca8ba5f1d3efa5c1cc86660a5eac34dda46d438d63816eb80ee7ffb7550c6168bc7f7b1d1a51603c6989a245ed551ce578136ad0b59d50594550f93350169e4c0464a62e23162f4cbad5145e9a1565871de1fe12d2d8d0efb52e3e7f4cb34cb84dcf5db75ad09dd196d65b3e242d63e30dec2ad4b928909dd04193bf6b13e971079f97e5c40f14fecdf809e3abe9eff6ef44377e3c44604a29945e0f4cdc24300ddaa98c7874e7587d5ff18bb3a0ee30a436fcdaf3171478e8850d9abb156000a738f9dfa25f101"}, 0x8000) 13:29:20 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:29:20 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0xffffffffff600000) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 1298.615129][ T1530] block nbd2: Receive control failed (result -22) [ 1298.624863][T32010] block nbd2: shutting down sockets 13:29:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 1298.707543][T32022] Failed to access avail idx at 0000000036bf248c [ 1298.712102][ T1530] block nbd5: Receive control failed (result -22) [ 1298.723428][T32016] block nbd5: shutting down sockets [ 1298.732627][T32010] block nbd2: shutting down sockets 13:29:20 executing program 2: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:20 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0xffffffffffffffe0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:20 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'ip6erspan0\x00', 0x2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x80}, {0x16}]}) [ 1298.944640][ T1530] block nbd2: Receive control failed (result -22) [ 1298.966398][T32036] block nbd2: shutting down sockets 13:29:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 13:29:20 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) [ 1299.018329][ T1530] block nbd5: Receive control failed (result -22) [ 1299.047541][T32041] block nbd5: shutting down sockets [ 1299.164800][ T1530] block nbd5: Receive control failed (result -22) [ 1299.175113][T32041] block nbd5: shutting down sockets 13:29:21 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000200)=""/205) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 13:29:21 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r4, 0x4008af23, &(0x7f0000000140)={0x2}) r5 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x20, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x82, &(0x7f0000000100)={r7}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={r7, 0xb4, "8be9d69012a3557245b12403aacb114b1bc3d98d0a3169dc4a5efe6da08e36394442decb78335e1d95e091f08d7ae3897b12523159240352f6cc9b82fbd1ad4f21c68e3d28b34f07bc9068d2b41bd3205899a9b26b1bea290b4a1b6a4a8e46b2ada0a59c89d83be3f0d60a7ee676e28f47df9ad5c67c98d602789ab58686861d7f8e9adfa716eff66fa8efd9d6f3fa0515c7652a7cc7911655b29af09c20c02b0759d52e476723bcde9235dd85bb8b61486c4bb9"}, &(0x7f00000000c0)=0xbc) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={r8, 0x8, 0x7, [0x9, 0x542, 0x5, 0x6, 0x7c, 0x9, 0xff]}, 0x16) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 13:29:21 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) r3 = syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0x2, 0x20000) ioctl$RTC_PIE_OFF(r3, 0x7006) r4 = syz_open_dev$dspn(0x0, 0x0, 0x0) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) r6 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio\x00', 0x9ec372932a80d738, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r7, 0x4008642a, &(0x7f0000000400)={r8, 0x1}) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f00000002c0)={{0xf5, 0x81}, {0x8, 0x8}, 0x4, 0x5, 0xf7}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x16, 0x0, 0x40001, 0x1, 0x0, 0x1}, 0x3c) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') r11 = fcntl$dupfd(r7, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_DBG_G_REGISTER(r11, 0xc0385650, &(0x7f0000000440)={{0x1, @name="9bb7953edff58783098f4870c33b5413f79adfd9d63e56e3b83d56a3704cf3dc"}, 0x8, 0x2, 0x2}) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x21000040}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0x1e8, r10, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa746860}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_MEDIA={0x14, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x80, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, [], 0xc}, 0x190f450d}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xea}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x97}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xeb0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x1e8}}, 0x1) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x4, &(0x7f0000000140)={r9, 0x0, 0x0}, 0x18) ioctl$TIOCSSERIAL(r5, 0x541f, &(0x7f0000000040)={0x0, 0x400, 0x6, 0x2, 0x2, 0x2, 0x6, 0x5, 0x7, 0x3, 0x8, 0x6, 0x33, 0x4, &(0x7f0000000000)=""/23, 0x3, 0x5, 0x1}) 13:29:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x3f}]]}}}]}, 0x40}}, 0x0) [ 1299.441103][ T1530] block nbd5: Receive control failed (result -22) [ 1299.493002][T32065] block nbd5: shutting down sockets [ 1299.514502][ T1530] block nbd2: Receive control failed (result -22) 13:29:21 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:29:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x3f}]]}}}]}, 0x40}}, 0x0) 13:29:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40800, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000002c0)=0x3) geteuid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000180)="7a8da2d428a65dcc", 0x8) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fallocate(r0, 0x0, 0x0, 0x1000f4) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) [ 1299.613776][T32074] block nbd2: shutting down sockets [ 1299.633401][T32065] block nbd5: shutting down sockets 13:29:21 executing program 2: socket(0x11, 0x2, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket(0x42000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x0, 0x0, &(0x7f0000000000)) r3 = socket(0x42000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x0, 0x0, &(0x7f0000000000)) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) ioctl$NBD_CLEAR_SOCK(r1, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x200000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:21 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xfe49) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r4 = socket(0x42000000015, 0x805, 0x0) getsockopt(r4, 0x114, 0x0, 0x0, &(0x7f0000000000)) r5 = socket(0x42000000015, 0x805, 0x0) getsockopt(r5, 0x114, 0x0, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x3ff, 0x6, [0x3, 0x7fff, 0x9, 0x9, 0x1, 0x0]}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={r6, @in={{0x2, 0x4e23, @multicast1}}, 0x7fff, 0x8, 0x400, 0x1f}, &(0x7f0000000140)=0x98) syz_open_dev$dspn(0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x3f}]]}}}]}, 0x40}}, 0x0) [ 1299.922737][T23485] block nbd5: Receive control failed (result -22) [ 1299.930897][ T26] audit: type=1804 audit(1571405361.774:80): pid=32100 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir926959230/syzkaller.KBQI5n/1807/bus" dev="sda1" ino=17375 res=1 [ 1299.940658][T32098] block nbd5: shutting down sockets [ 1300.061033][T32102] block nbd5: Could not allocate knbd recv work queue. [ 1300.068896][ T26] audit: type=1804 audit(1571405361.914:81): pid=32094 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir926959230/syzkaller.KBQI5n/1807/bus" dev="sda1" ino=17375 res=1 13:29:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x3f}]]}}}]}, 0x40}}, 0x0) [ 1300.110505][T32102] block nbd5: shutting down sockets [ 1300.134596][ T26] audit: type=1800 audit(1571405361.944:82): pid=32100 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=17375 res=0 [ 1300.184393][ C1] net_ratelimit: 20 callbacks suppressed [ 1300.184402][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1300.195925][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1300.232615][T32120] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 13:29:22 executing program 3: syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{0x8, 0xa1, 0x2, 0x8}, 'syz0\x00', 0x1e}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 13:29:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40800, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000002c0)=0x3) geteuid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000180)="7a8da2d428a65dcc", 0x8) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fallocate(r0, 0x0, 0x0, 0x1000f4) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 13:29:22 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x208896, &(0x7f0000000080)={[{@map_off='map=off'}]}) 13:29:22 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x401040) syz_open_dev$dspn(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_wait(r4, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 13:29:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x3f}]]}}}]}, 0x40}}, 0x0) [ 1300.418746][T23485] block nbd5: Receive control failed (result -22) 13:29:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40800, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000002c0)=0x3) geteuid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000180)="7a8da2d428a65dcc", 0x8) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fallocate(r0, 0x0, 0x0, 0x1000f4) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) [ 1300.499526][T32140] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 1300.508029][ T26] audit: type=1804 audit(1571405362.354:83): pid=32138 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir926959230/syzkaller.KBQI5n/1808/bus" dev="sda1" ino=17441 res=1 13:29:22 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) socket$rds(0x15, 0x5, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000140)={0x2, 0x4, "14f4f1ce1b263780f2b4bd2284663f129f7441b8e6c2d462c9e9b3c75e4737f4", 0xfff, 0x6, 0x3, 0x400}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0xa0f, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000080)=0x30) 13:29:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x3f}]]}}}]}, 0x40}}, 0x0) [ 1300.577620][T32127] block nbd5: shutting down sockets [ 1300.584585][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1300.590435][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1300.657170][T32101] block nbd2: Device being setup by another task [ 1300.664423][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1300.670255][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1300.764987][T32095] block nbd2: shutting down sockets [ 1300.842630][T32156] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 1300.933154][ T26] audit: type=1804 audit(1571405362.774:84): pid=32155 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir926959230/syzkaller.KBQI5n/1809/bus" dev="sda1" ino=17342 res=1 [ 1301.064410][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1301.070331][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1301.624447][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1301.630263][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1305.224445][ C1] net_ratelimit: 20 callbacks suppressed [ 1305.230166][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1305.236917][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1305.784485][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1305.790393][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1306.024460][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1306.030265][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1306.424432][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1306.430248][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1306.824447][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1306.830323][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1310.584469][ C1] net_ratelimit: 20 callbacks suppressed [ 1310.584475][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1310.596121][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1310.984466][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1310.990307][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1311.064414][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1311.070291][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1311.464420][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1311.470346][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1312.024425][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1312.030270][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1315.624480][ C1] net_ratelimit: 20 callbacks suppressed [ 1315.630166][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1315.635956][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1316.184476][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1316.190285][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1316.424467][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1316.430249][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1316.824438][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1316.830267][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1317.224468][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1317.230247][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1320.984479][ C1] net_ratelimit: 20 callbacks suppressed [ 1320.990245][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1320.996043][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1321.384532][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1321.390386][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1321.464457][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1321.470291][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1321.864457][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1321.870253][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1322.424439][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1322.430284][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1326.024485][ C1] net_ratelimit: 20 callbacks suppressed [ 1326.030198][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1326.035949][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1326.584520][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1326.590373][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1326.824493][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1326.830331][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1327.224450][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1327.230296][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1327.624474][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1327.630298][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1331.384440][ C1] net_ratelimit: 20 callbacks suppressed [ 1331.390249][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1331.396034][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1331.784429][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1331.790257][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1331.864467][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1331.871078][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1332.264426][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1332.270241][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1332.824444][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1332.830247][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1336.424445][ C1] net_ratelimit: 20 callbacks suppressed [ 1336.424454][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1336.435925][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1336.984438][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1336.990413][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1337.224485][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1337.230581][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1337.624469][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1337.630298][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1338.024473][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1338.030293][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1341.784439][ C1] net_ratelimit: 20 callbacks suppressed [ 1341.784446][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1341.795930][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1342.184496][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1342.190318][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1342.264499][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1342.270290][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1342.664455][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1342.670310][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1343.224448][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1343.230254][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1346.824459][ C1] net_ratelimit: 20 callbacks suppressed [ 1346.830160][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1346.836668][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1347.384472][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1347.390315][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1347.624521][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1347.630352][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1348.024429][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1348.031228][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1348.424433][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1348.430279][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1352.184430][ C1] net_ratelimit: 20 callbacks suppressed [ 1352.184440][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1352.196545][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1352.584509][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1352.590339][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1352.664441][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1352.670287][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1353.064422][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1353.070236][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1353.624530][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1353.630380][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1357.224419][ C1] net_ratelimit: 20 callbacks suppressed [ 1357.230372][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1357.236132][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1357.784443][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1357.790285][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1358.024504][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1358.032081][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1358.424423][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1358.430308][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1358.824442][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1358.830255][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1362.584539][ C1] net_ratelimit: 20 callbacks suppressed [ 1362.590239][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1362.595981][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1362.984518][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1362.990565][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1363.064460][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1363.070247][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1363.464473][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1363.470445][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1364.024428][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1364.030266][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1367.624537][ C1] net_ratelimit: 20 callbacks suppressed [ 1367.630240][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1367.636213][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1368.184468][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1368.190337][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1368.424527][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1368.434537][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1368.824463][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1368.830365][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1369.224453][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1369.230290][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1372.984449][ C1] net_ratelimit: 20 callbacks suppressed [ 1372.990187][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1372.995954][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1373.384433][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1373.390249][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1373.464486][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1373.470480][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1373.864418][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1373.870262][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1374.424499][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1374.430394][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1378.024464][ C1] net_ratelimit: 20 callbacks suppressed [ 1378.030181][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1378.035943][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1378.584511][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1378.590343][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1378.824496][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1378.830437][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1379.224440][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1379.230303][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1379.624526][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1379.630556][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1383.384458][ C1] net_ratelimit: 20 callbacks suppressed [ 1383.384464][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1383.395912][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1383.784477][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1383.790335][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1383.864448][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1383.870255][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1384.264455][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1384.270236][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1384.824462][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1384.830268][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1388.424456][ C1] net_ratelimit: 20 callbacks suppressed [ 1388.424465][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1388.436192][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1388.984455][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1388.990244][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1389.224481][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1389.230444][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1389.624507][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1389.630446][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1390.024417][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1390.030238][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1393.784440][ C1] net_ratelimit: 20 callbacks suppressed [ 1393.790167][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1393.795909][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1394.184501][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1394.190384][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1394.264426][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1394.270263][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1394.664435][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1394.670251][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1395.224436][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1395.230285][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1398.824436][ C1] net_ratelimit: 20 callbacks suppressed [ 1398.824443][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1398.836206][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1399.384456][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1399.390312][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1399.624481][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1399.630288][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1400.024428][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1400.030208][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1400.424461][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1400.430244][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1404.184436][ C1] net_ratelimit: 20 callbacks suppressed [ 1404.184446][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1404.195951][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1404.584526][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1404.590310][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1404.664468][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1404.670290][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1405.064443][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1405.070229][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1405.624509][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1405.630369][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1409.224485][ C1] net_ratelimit: 20 callbacks suppressed [ 1409.230188][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1409.236008][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1409.784517][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1409.790369][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1410.024489][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1410.030295][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1410.424433][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1410.430253][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1410.824449][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1410.830387][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1414.584473][ C1] net_ratelimit: 20 callbacks suppressed [ 1414.584482][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1414.595976][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1414.984477][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1414.990290][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1415.064433][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1415.070226][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1415.464401][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1415.470176][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1416.024444][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1416.030272][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1419.624511][ C1] net_ratelimit: 20 callbacks suppressed [ 1419.630266][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1419.636036][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1420.184455][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1420.190391][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1420.424475][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1420.430269][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1420.824444][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1420.830402][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1421.224478][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1421.230295][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1424.984397][ C1] net_ratelimit: 20 callbacks suppressed [ 1424.990085][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1424.995845][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1425.384446][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1425.390274][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1425.464478][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1425.470267][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1425.864454][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1425.870260][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1426.424446][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1426.430449][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1430.024436][ C1] net_ratelimit: 20 callbacks suppressed [ 1430.030221][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1430.035981][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1430.584481][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1430.590307][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1430.824486][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1430.830373][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1431.224450][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1431.230371][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1431.624511][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1431.630348][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1435.384434][ C1] net_ratelimit: 20 callbacks suppressed [ 1435.384441][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1435.395931][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1435.784463][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1435.790339][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1435.864388][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1435.870191][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1436.274414][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1436.280194][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1436.824450][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1436.830273][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1440.424427][ C1] net_ratelimit: 20 callbacks suppressed [ 1440.430145][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1440.435924][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1440.984429][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1440.990301][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1441.224477][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1441.230319][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1441.624454][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1441.630282][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1442.024453][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1442.030291][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1445.784452][ C1] net_ratelimit: 20 callbacks suppressed [ 1445.784459][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1445.796081][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1446.184476][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1446.190328][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1446.264454][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1446.270251][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1446.664450][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1446.670289][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1447.224445][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1447.230405][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1449.064636][ T1073] INFO: task syz-executor.2:32095 can't die for more than 143 seconds. [ 1449.072923][ T1073] syz-executor.2 D27536 32095 8571 0x00004004 [ 1449.079517][ T1073] Call Trace: [ 1449.082811][ T1073] __schedule+0x94a/0x1e70 [ 1449.087318][ T1073] ? __sched_text_start+0x8/0x8 [ 1449.092200][ T1073] ? __kasan_check_read+0x11/0x20 [ 1449.097290][ T1073] ? __lock_acquire+0x16f2/0x4a00 [ 1449.102321][ T1073] schedule+0xd9/0x260 [ 1449.106441][ T1073] schedule_timeout+0x717/0xc50 [ 1449.111290][ T1073] ? find_held_lock+0x35/0x130 [ 1449.116121][ T1073] ? usleep_range+0x170/0x170 [ 1449.120798][ T1073] ? lock_downgrade+0x920/0x920 [ 1449.125678][ T1073] ? _raw_spin_unlock_irq+0x23/0x80 [ 1449.130872][ T1073] ? wait_for_completion+0x294/0x440 [ 1449.136213][ T1073] ? _raw_spin_unlock_irq+0x23/0x80 [ 1449.141424][ T1073] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1449.146753][ T1073] ? trace_hardirqs_on+0x67/0x240 [ 1449.151773][ T1073] ? __kasan_check_read+0x11/0x20 [ 1449.156857][ T1073] wait_for_completion+0x29c/0x440 [ 1449.161987][ T1073] ? wait_for_completion_interruptible+0x470/0x470 [ 1449.168531][ T1073] ? wake_up_q+0xf0/0xf0 [ 1449.172775][ T1073] ? flush_workqueue_prep_pwqs+0x352/0x590 [ 1449.178637][ T1073] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1449.184921][ T1073] flush_workqueue+0x40a/0x14c0 [ 1449.189769][ T1073] ? __dev_printk+0x202/0x20e [ 1449.194497][ T1073] ? _dev_warn+0xd7/0x109 [ 1449.198844][ T1073] ? pwq_unbound_release_workfn+0x2f0/0x2f0 [ 1449.204801][ T1073] ? sock_shutdown+0x83/0x200 [ 1449.209483][ T1073] nbd_ioctl+0xb2e/0xc44 [ 1449.213705][ T1073] ? nbd_ioctl+0xb2e/0xc44 [ 1449.218179][ T1073] ? nbd_release+0x150/0x150 [ 1449.222889][ T1073] ? finish_wait+0x260/0x260 [ 1449.227589][ T1073] ? nbd_release+0x150/0x150 [ 1449.232189][ T1073] blkdev_ioctl+0xedb/0x1c20 [ 1449.236834][ T1073] ? blkpg_ioctl+0xa90/0xa90 [ 1449.241426][ T1073] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1449.247287][ T1073] block_ioctl+0xee/0x130 [ 1449.251689][ T1073] ? blkdev_fallocate+0x410/0x410 [ 1449.256765][ T1073] do_vfs_ioctl+0xdb6/0x13e0 [ 1449.261373][ T1073] ? compat_ioctl_preallocate+0x210/0x210 [ 1449.267147][ T1073] ? __fget+0x37f/0x550 [ 1449.271568][ T1073] ? ksys_dup3+0x3e0/0x3e0 [ 1449.276037][ T1073] ? nsecs_to_jiffies+0x30/0x30 [ 1449.280892][ T1073] ? tomoyo_file_ioctl+0x23/0x30 [ 1449.285865][ T1073] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1449.292103][ T1073] ? security_file_ioctl+0x8d/0xc0 [ 1449.297283][ T1073] ksys_ioctl+0xab/0xd0 [ 1449.301453][ T1073] __x64_sys_ioctl+0x73/0xb0 [ 1449.306303][ T1073] do_syscall_64+0xfa/0x760 [ 1449.310813][ T1073] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1449.316748][ T1073] RIP: 0033:0x459a59 [ 1449.320644][ T1073] Code: Bad RIP value. [ 1449.324754][ T1073] RSP: 002b:00007f58654dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1449.333167][ T1073] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000459a59 [ 1449.341186][ T1073] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 [ 1449.349194][ T1073] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1449.357297][ T1073] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f58654dd6d4 [ 1449.365307][ T1073] R13: 00000000004c3381 R14: 00000000004d70b8 R15: 00000000ffffffff [ 1449.373276][ T1073] INFO: task syz-executor.2:32095 blocked for more than 143 seconds. [ 1449.381392][ T1073] Not tainted 5.4.0-rc3-next-20191018 #0 [ 1449.387589][ T1073] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1449.396314][ T1073] syz-executor.2 D27536 32095 8571 0x00004004 [ 1449.402667][ T1073] Call Trace: [ 1449.406004][ T1073] __schedule+0x94a/0x1e70 [ 1449.410462][ T1073] ? __sched_text_start+0x8/0x8 [ 1449.415376][ T1073] ? __kasan_check_read+0x11/0x20 [ 1449.420411][ T1073] ? __lock_acquire+0x16f2/0x4a00 [ 1449.425479][ T1073] schedule+0xd9/0x260 [ 1449.429547][ T1073] schedule_timeout+0x717/0xc50 [ 1449.434434][ T1073] ? find_held_lock+0x35/0x130 [ 1449.439206][ T1073] ? usleep_range+0x170/0x170 [ 1449.443876][ T1073] ? lock_downgrade+0x920/0x920 [ 1449.448762][ T1073] ? _raw_spin_unlock_irq+0x23/0x80 [ 1449.453955][ T1073] ? wait_for_completion+0x294/0x440 [ 1449.459286][ T1073] ? _raw_spin_unlock_irq+0x23/0x80 [ 1449.464525][ T1073] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1449.469824][ T1073] ? trace_hardirqs_on+0x67/0x240 [ 1449.476675][ T1073] ? __kasan_check_read+0x11/0x20 [ 1449.481720][ T1073] wait_for_completion+0x29c/0x440 [ 1449.486878][ T1073] ? wait_for_completion_interruptible+0x470/0x470 [ 1449.493376][ T1073] ? wake_up_q+0xf0/0xf0 [ 1449.497694][ T1073] ? flush_workqueue_prep_pwqs+0x352/0x590 [ 1449.503519][ T1073] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1449.509808][ T1073] flush_workqueue+0x40a/0x14c0 [ 1449.514748][ T1073] ? __dev_printk+0x202/0x20e [ 1449.519434][ T1073] ? _dev_warn+0xd7/0x109 [ 1449.523825][ T1073] ? pwq_unbound_release_workfn+0x2f0/0x2f0 [ 1449.529810][ T1073] ? sock_shutdown+0x83/0x200 [ 1449.534549][ T1073] nbd_ioctl+0xb2e/0xc44 [ 1449.538791][ T1073] ? nbd_ioctl+0xb2e/0xc44 [ 1449.543207][ T1073] ? nbd_release+0x150/0x150 [ 1449.547877][ T1073] ? finish_wait+0x260/0x260 [ 1449.552477][ T1073] ? nbd_release+0x150/0x150 [ 1449.557116][ T1073] blkdev_ioctl+0xedb/0x1c20 [ 1449.561711][ T1073] ? blkpg_ioctl+0xa90/0xa90 [ 1449.566340][ T1073] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1449.572153][ T1073] block_ioctl+0xee/0x130 [ 1449.576539][ T1073] ? blkdev_fallocate+0x410/0x410 [ 1449.581561][ T1073] do_vfs_ioctl+0xdb6/0x13e0 [ 1449.586213][ T1073] ? compat_ioctl_preallocate+0x210/0x210 [ 1449.591928][ T1073] ? __fget+0x37f/0x550 [ 1449.596137][ T1073] ? ksys_dup3+0x3e0/0x3e0 [ 1449.600551][ T1073] ? nsecs_to_jiffies+0x30/0x30 [ 1449.605436][ T1073] ? tomoyo_file_ioctl+0x23/0x30 [ 1449.610373][ T1073] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1449.616677][ T1073] ? security_file_ioctl+0x8d/0xc0 [ 1449.621787][ T1073] ksys_ioctl+0xab/0xd0 [ 1449.626570][ T1073] __x64_sys_ioctl+0x73/0xb0 [ 1449.631180][ T1073] do_syscall_64+0xfa/0x760 [ 1449.635747][ T1073] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1449.641640][ T1073] RIP: 0033:0x459a59 [ 1449.645579][ T1073] Code: Bad RIP value. [ 1449.649674][ T1073] RSP: 002b:00007f58654dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1449.658485][ T1073] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000459a59 [ 1449.666563][ T1073] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 [ 1449.674569][ T1073] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1449.682630][ T1073] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f58654dd6d4 [ 1449.690670][ T1073] R13: 00000000004c3381 R14: 00000000004d70b8 R15: 00000000ffffffff [ 1449.698724][ T1073] [ 1449.698724][ T1073] Showing all locks held in the system: [ 1449.706633][ T1073] 1 lock held by khungtaskd/1073: [ 1449.711772][ T1073] #0: ffffffff88fab740 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x279 [ 1449.721113][ T1073] 2 locks held by kworker/u5:0/1530: [ 1449.726440][ T1073] #0: ffff88809c720128 ((wq_completion)knbd2-recv){+.+.}, at: process_one_work+0x88b/0x1740 [ 1449.736672][ T1073] #1: ffff8880a60ffdc0 ((work_completion)(&args->work)){+.+.}, at: process_one_work+0x8c1/0x1740 [ 1449.747334][ T1073] 1 lock held by rsyslogd/8435: [ 1449.752160][ T1073] #0: ffff888099bf8d60 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 1449.760801][ T1073] 2 locks held by getty/8525: [ 1449.765498][ T1073] #0: ffff88809350d090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1449.774478][ T1073] #1: ffffc90005f212e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 1449.784059][ T1073] 2 locks held by getty/8526: [ 1449.788769][ T1073] #0: ffff8880a8257090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1449.797763][ T1073] #1: ffffc90005f352e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 1449.807393][ T1073] 2 locks held by getty/8527: [ 1449.812059][ T1073] #0: ffff8880a15dc090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1449.821039][ T1073] #1: ffffc90005f2d2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 1449.830657][ T1073] 2 locks held by getty/8528: [ 1449.835374][ T1073] #0: ffff888099cf7090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1449.844376][ T1073] #1: ffffc90005f392e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 1449.853935][ T1073] 2 locks held by getty/8529: [ 1449.858663][ T1073] #0: ffff888090eab090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1449.867653][ T1073] #1: ffffc90005f312e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 1449.877253][ T1073] 2 locks held by getty/8530: [ 1449.881936][ T1073] #0: ffff88809a4ed090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1449.890915][ T1073] #1: ffffc90005f1d2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 1449.900508][ T1073] 2 locks held by getty/8531: [ 1449.905286][ T1073] #0: ffff8880a9926090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1449.915428][ T1073] #1: ffffc90005f012e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 1449.925055][ T1073] [ 1449.927378][ T1073] ============================================= [ 1449.927378][ T1073] [ 1449.935826][ T1073] NMI backtrace for cpu 1 [ 1449.940148][ T1073] CPU: 1 PID: 1073 Comm: khungtaskd Not tainted 5.4.0-rc3-next-20191018 #0 [ 1449.948718][ T1073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1449.958752][ T1073] Call Trace: [ 1449.962034][ T1073] dump_stack+0x172/0x1f0 [ 1449.966344][ T1073] nmi_cpu_backtrace.cold+0x70/0xb2 [ 1449.971530][ T1073] ? vprintk_func+0x86/0x189 [ 1449.976108][ T1073] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 1449.981732][ T1073] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 1449.987693][ T1073] arch_trigger_cpumask_backtrace+0x14/0x20 [ 1449.993560][ T1073] watchdog+0xc8f/0x1350 [ 1449.997800][ T1073] kthread+0x361/0x430 [ 1450.001859][ T1073] ? reset_hung_task_detector+0x30/0x30 [ 1450.007398][ T1073] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 1450.014055][ T1073] ret_from_fork+0x24/0x30 [ 1450.018710][ T1073] Sending NMI from CPU 1 to CPUs 0: [ 1450.023985][ C0] NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0xe/0x10 [ 1450.024969][ T1073] Kernel panic - not syncing: hung_task: blocked tasks [ 1450.039077][ T1073] CPU: 1 PID: 1073 Comm: khungtaskd Not tainted 5.4.0-rc3-next-20191018 #0 [ 1450.047647][ T1073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1450.057685][ T1073] Call Trace: [ 1450.060970][ T1073] dump_stack+0x172/0x1f0 [ 1450.065280][ T1073] panic+0x2e3/0x75c [ 1450.069280][ T1073] ? add_taint.cold+0x16/0x16 [ 1450.073942][ T1073] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 1450.079574][ T1073] ? ___preempt_schedule+0x16/0x20 [ 1450.084676][ T1073] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 1450.090815][ T1073] ? nmi_trigger_cpumask_backtrace+0x24c/0x28b [ 1450.096968][ T1073] ? nmi_trigger_cpumask_backtrace+0x256/0x28b [ 1450.103110][ T1073] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 1450.109248][ T1073] watchdog+0xca0/0x1350 [ 1450.113483][ T1073] kthread+0x361/0x430 [ 1450.117541][ T1073] ? reset_hung_task_detector+0x30/0x30 [ 1450.123076][ T1073] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 1450.128778][ T1073] ret_from_fork+0x24/0x30 [ 1450.134811][ T1073] Kernel Offset: disabled [ 1450.139141][ T1073] Rebooting in 86400 seconds..