a16b887c43a350b0417c6ed27ca22e7fc925d3be053e9dbef3aef77a8685d2909e3597af16068283a54bcb19ee47072685bb40a4dba843d7b7105b404ab7ac5eb1c3297211c6a1a0ed3bf1dd8134b99fd1cb", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r13, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000020) [ 2642.804864][T24212] block nbd4: Receive control failed (result -22) [ 2642.821903][ T3637] Unknown ioctl 21524 [ 2642.890356][ T3740] Unknown ioctl 21524 [ 2642.952881][ T3624] block nbd4: shutting down sockets [ 2642.968363][ T3630] EXT4-fs (loop0): Unsupported filesystem blocksize 524288 (41 log_block_size) 16:22:21 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x64a, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000632000/0x2000)=nil, 0x2000}}) r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 16:22:22 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)=ANY=[@ANYBLOB="278eab46ffff766b"]) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:22:22 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000042d00000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 16:22:22 executing program 5: setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="003179e66fdd7817d92dcf926b6d3f6ca580b5b3b3e6fbb88444d5b67777340d727dbf6ce9bd0cbe815290044e7e361587146436af6f1c16cae0c183c6f5a820d6801e0163077807246a4d13c536cae5f097facc2af7a0f226b3aa97abba071c82be362d22d3a841c7878975e73ddedef1"], 0x1) perf_event_open(&(0x7f0000000000)={0x0, 0xffffff04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x80ae325843b163ea, 0x1000000000000, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000340)=""/94) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000300)={0x80fb}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000632000/0x2000)=nil, 0x2000}}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x1a4400, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000200)={r3, 0x42f1, 0x101, "33ad73662afee55896ba4cb9ac7050b9c2ee2487aa022ea68c5e9e83f053309a7e7d42ce26b207500c273fb2ceb077562df2259250a80493d09b8aa6d08ea98d1407dac5db7b7ce669c1fd7d4c90805d299b61a20494fc34ff1fb2d974f5f51b883816ccf1344e15c971a9540846727eb9b830932961b6f620f9e294f6b2696998dc3cf768ffeddc210299d3262cc460a1811824d3673e3bc117e823cb827cab7bd3961a7dd3266063b917dd583208507f4db1b673"}) r4 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r4, 0xc0487c04, &(0x7f0000000000)=""/226) 16:22:22 executing program 1: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, 0x0, 0x0) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) 16:22:22 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x80, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000680)={0x5, &(0x7f00000003c0)=""/116, &(0x7f0000000880)=[{0xa2, 0x94, 0xd7, &(0x7f0000000440)=""/148}, {0xffffffc1, 0x46, 0x36, &(0x7f0000000500)=""/70}, {0x20, 0xcf, 0x15, &(0x7f0000000580)=""/207}, {0x3, 0x5f, 0xe3, &(0x7f0000000700)=""/95}, {0x0, 0xc2, 0x7ff, &(0x7f0000000780)=""/194}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000032e4c421d3cd7a76702c5ada76fe688ce72f19d8333bd7e251e27a418de88032d9718dc6fdcc250bbf98775a842810bbe5b8ae9b926df59051a5139fcfd2da59b98365afaddd02f3ecd9fdce24e7b0b7ebff07954fe8437a4e02b65899"]) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x11800801}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)=@deltaction={0x5c, 0x31, 0x21711e755ab1b93a, 0x70bd2d, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x13, @TCA_ACT_KIND={0x8, 0x1, 'xt\x00'}}, {0x14, 0x1a, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x1e, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1d, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) getpid() r3 = socket$key(0xf, 0x3, 0x2) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000900)={0x2, 0xfff7, 0x1f, 0x1}, 0x8) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000340)=0x20, 0x4) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x42a00, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r4, 0x3, 0x0, 0x0) ioctl$EVIOCGPHYS(r4, 0x80404507, &(0x7f0000000280)=""/188) 16:22:22 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x10001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000632000/0x2000)=nil, 0x2000}}) mount(&(0x7f0000000180)=@sr0='/dev/sr0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='gfs2\x00', 0x23800, &(0x7f0000000240)='/dev/media#\x00') r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) setxattr$trusted_overlay_upper(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f0000000300)={0x0, 0xfb, 0xda, 0x0, 0x8, "fa093245d75aee3cdcbb40594c660777", "7545d9b6a58775d48624f94cf772f60b5352c00cf33db15089c63992e0c4f182bd1bd1726a84b0609b1e99dbb7560875d9f3ea152fbad25bc17ef47f3abd4c5ef03fbf572b5ecf6244378041c6a827478e22b762e6e0ce9db5be568118f97f974029808774d3760da439d5cce46141e01f68a0a75a12a04bad06e08468124fa8b9d0136ef5d2c262c2833f5e383b1ba397c7f686b80965809b40f0bee6f57b686075030e4083409a8dcee2b9495f1cf1429c2c56ec5d6893208d6ef70b9796726114614ca0"}, 0xda, 0x1) [ 2643.584342][ T3776] EXT4-fs (loop0): Unsupported filesystem blocksize 8388608 (45 log_block_size) [ 2643.640357][ T3790] validate_nla: 7 callbacks suppressed [ 2643.640365][ T3790] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2643.679501][ T3783] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 16:22:22 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x8001}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0x9, 0xffffffffffffffff, 0x2) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000632000/0x2000)=nil, 0x2000}}) r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 16:22:22 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000200000bc700000000000009500000000000000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r2, 0xc0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r3}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r3}, 0xc) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) [ 2643.705584][ T3783] __nla_validate_parse: 7 callbacks suppressed [ 2643.705594][ T3783] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2643.732831][ T3790] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. 16:22:22 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000003d00000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 16:22:22 executing program 2: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, 0x0, 0x0, 0x8, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r13, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000020) [ 2643.848373][T24212] block nbd4: Receive control failed (result -22) [ 2643.859269][ T3796] block nbd4: shutting down sockets [ 2643.918188][ T3800] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2643.926329][ T3800] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. 16:22:22 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000632000/0x2000)=nil, 0x2000}}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x7, {0x36, 0x70, 0x0, 0x2, 0x3, 0x9}, 0xff, 0x7}, 0xe) ioctl$EVIOCGKEY(r1, 0xc0487c04, &(0x7f0000000000)=""/226) 16:22:23 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r1, &(0x7f00000017c0), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={r1, r2, 0x8, 0x1}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x0) r4 = accept$inet(r3, &(0x7f0000000180), &(0x7f00000001c0)=0x10) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000002c0)={0x3, 0x2}, 0x8) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2644.073686][ T3910] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 16:22:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400000, 0x0) ioctl$VIDIOC_G_AUDIO(r3, 0x80345621, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r2, 0xab03) [ 2644.118045][ T3910] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. 16:22:23 executing program 5: perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000632000/0x2000)=nil, 0x2000}}) r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) [ 2644.293566][ T3911] EXT4-fs (loop0): Unsupported filesystem blocksize 0 (61 log_block_size) 16:22:23 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x84502) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000180)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2644.368767][T24212] block nbd4: Receive control failed (result -22) [ 2644.391072][ T3920] block nbd4: shutting down sockets 16:22:23 executing program 1: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="31d96da88b0cce5062747ce237ca24f05b05df66b34814c1cdb2db3642a7c880224c03d6cffd67b36c7f1a51ae9aeaa3892b040ba2105d77d4e4579d745ad601f19c26d1260bcd5435ae4ad35d123f7e809a7b0576431fde9f78c3260a3837b52ef6437c404147add96892a9d3a67dcf93c198c3b7727cd266c20c5e584c28ae0843064b8f7f199db8641f71a407775e0090bbedee63a4640e1f012e5ca95bd14b5aa0da642b552ae4aa2b869458dec283c16f25c67068fc528a793f75c81acac8ee6596d79c449ade5eeee332c460ebc0d46c076e871b6426d521c571a95d0fa800de30a110e719ffde8f103773daaaec8c313aa3be0bdaa6e7e796df3975a8e37aee6d10579f8afe6552f187c242c731375f5d64cd40ab8904400f00000000000000000000000000000058b4721949da012002cb7f4ac8fe195c1388861be8cd45020083b0089b23f86603321faf83e794bea1ece8051e9996306347bd562aa2437fa6bdb57086302926b8af069b8d331ebf5c0e1a7f163e6d711af330efdfae413fafef9acf1d53e6aaf4f2dec9ddfb4ca321583e35a14a92e82bdbea3c127a033b32059fbadce23a3e87957f8238886aa9380000000018888c4c20ba104342e8c9d85a9dcf06abbb7a2905d37839bff6f8641ebce172c60a8d368cd4a94af484749dc4ccdd380bbf5d501302d50e79d3536eab5a12abdd347dac985c4349ec712661df947315514e45a515417e6b00000000000000002bdacdb2631c83a90dbca3aa7e5936f8aa413a75c7780309e1c178bce65ed205154ab4f55241cd2b6e83b29fc6cefe050d7d662360718e25bbdb2d34264d6a741cbbed50422f5d") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100), 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) 16:22:23 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000003f00000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 16:22:23 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60c116512ef8478f, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000632000/0x2000)=nil, 0x2000}}) r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 16:22:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r3, &(0x7f00000017c0), 0x150, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) connect$netrom(r2, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@bcast, @default, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r4, 0xab03) [ 2644.742594][ T4050] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2644.797052][ T4046] EXT4-fs (loop0): Unsupported filesystem blocksize 0 (63 log_block_size) [ 2644.817406][ T4050] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. 16:22:23 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000633000/0x3000)=nil, 0x3000}}) r3 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/create\x00', 0x2, 0x0) write(r3, &(0x7f00000000c0), 0x0) dup2(r2, r0) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x40000, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10218000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x6c}, @FOU_ATTR_TYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x885) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(0x0, 0x0, 0x802) r6 = socket$netlink(0x10, 0x3, 0xc) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000018c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000480)=""/128, 0x80}, {0x0}, {&(0x7f0000000980)=""/68, 0x44}, {0x0}, {&(0x7f0000000380)=""/35, 0x23}], 0x5}, 0x12040) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xf, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x7}, [@jmp={0x5, 0x0, 0x4, 0xb, 0x0, 0xffffffffffffffc0, 0x7126c95168a0df82}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0xb4, &(0x7f0000000280)=""/180, 0x0, 0x1, [], r7, 0xd, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x3, 0xd, 0x0, 0x80000001}, 0x10}, 0x70) r9 = getpid() sched_setscheduler(r9, 0x5, &(0x7f0000000380)) r10 = getpgrp(r9) sendmsg$nl_route(r6, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x60022040}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=@newlink={0x8c, 0x10, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, 0x41010, 0x1400}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xfffffff7}, @IFLA_NET_NS_PID={0x8, 0x13, r10}, @IFLA_OPERSTATE={0x8, 0x10, 0x1}, @IFLA_TXQLEN={0x8, 0xd, 0x5}, @IFLA_CARRIER_CHANGES={0x8}, @IFLA_WEIGHT={0x8, 0xf, 0x3}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@IFLA_IPTUN_PROTO={0x8}]}}}, @IFLA_PHYS_PORT_ID={0x1c, 0x22, "d0258f0bab8b9564997047860ea12d7eb3e9f0ac21794e91"}, @IFLA_MASTER={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44001}, 0x4000000) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x80045505, &(0x7f0000000380)={0x2, 0x0, "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"}) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) 16:22:23 executing program 2: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, 0x0, 0x0, 0x8, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r13, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000020) [ 2644.855187][T24212] block nbd4: Receive control failed (result -22) [ 2644.882644][ T4051] block nbd4: shutting down sockets 16:22:23 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x202000) ioctl$KVM_SMI(r1, 0xaeb7) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2645.011392][ T4063] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:22:24 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000004000000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 2645.070346][ T4063] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.5'. 16:22:24 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x6) ioctl$sock_proto_private(r3, 0x89e6, &(0x7f0000000000)="dd1109f60d6166e01dd1e1f5a003fcd2f9c4dc5f9dda2a76f8eb4e5aa30c85e25f8b822f069056701ed3a4eb88fb683a35ca504320b2189fe12975b242f2a82a65d0e4b2849026a83ffd5e0bd5921aabb3e36bf8200dd19610b61d117d2fb8d5270fb4261fda56293496c79ba9a83b18aa7d89e951c7") ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r2, 0xab03) [ 2645.113496][ T4170] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2645.157567][ T4170] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2645.158970][ T4063] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2645.243261][ T4063] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2645.270910][ T4176] block nbd4: shutting down sockets [ 2645.289684][ T4063] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.5'. 16:22:24 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/100, 0x0, 0x1001}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2645.335844][ T4063] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2645.428251][ T4180] EXT4-fs (loop0): Invalid log block size: 64 16:22:24 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000632000/0x2000)=nil, 0x2000}}) r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000180)=0x8, 0x4) 16:22:24 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000000c0)={0x57, 0x2008, 0xc19, {0x6, 0x6}, {0x2, 0x7}, @period={0x5a, 0x0, 0xcc1, 0x1, 0x3, {0x5, 0x400, 0x0, 0x2}, 0x5, &(0x7f0000000040)=[0x40, 0x4, 0x7, 0x8, 0x20]}}) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r3, 0xab03) [ 2645.472944][ T4183] block nbd4: shutting down sockets 16:22:24 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6f9, 0x301002) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000180)=0x3f) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:22:24 executing program 1: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="31d96da88b0cce5062747ce237ca24f05b05df66b34814c1cdb2db3642a7c880224c03d6cffd67b36c7f1a51ae9aeaa3892b040ba2105d77d4e4579d745ad601f19c26d1260bcd5435ae4ad35d123f7e809a7b0576431fde9f78c3260a3837b52ef6437c404147add96892a9d3a67dcf93c198c3b7727cd266c20c5e584c28ae0843064b8f7f199db8641f71a407775e0090bbedee63a4640e1f012e5ca95bd14b5aa0da642b552ae4aa2b869458dec283c16f25c67068fc528a793f75c81acac8ee6596d79c449ade5eeee332c460ebc0d46c076e871b6426d521c571a95d0fa800de30a110e719ffde8f103773daaaec8c313aa3be0bdaa6e7e796df3975a8e37aee6d10579f8afe6552f187c242c731375f5d64cd40ab8904400f00000000000000000000000000000058b4721949da012002cb7f4ac8fe195c1388861be8cd45020083b0089b23f86603321faf83e794bea1ece8051e9996306347bd562aa2437fa6bdb57086302926b8af069b8d331ebf5c0e1a7f163e6d711af330efdfae413fafef9acf1d53e6aaf4f2dec9ddfb4ca321583e35a14a92e82bdbea3c127a033b32059fbadce23a3e87957f8238886aa9380000000018888c4c20ba104342e8c9d85a9dcf06abbb7a2905d37839bff6f8641ebce172c60a8d368cd4a94af484749dc4ccdd380bbf5d501302d50e79d3536eab5a12abdd347dac985c4349ec712661df947315514e45a515417e6b00000000000000002bdacdb2631c83a90dbca3aa7e5936f8aa413a75c7780309e1c178bce65ed205154ab4f55241cd2b6e83b29fc6cefe050d7d662360718e25bbdb2d34264d6a741cbbed50422f5d") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="ccd3486d7de0b0ff1d3a169334e5d7a57745fcfd039105538dc6e4cdc0ab685306f84f82649847d52c0a13c100b40130362aed2868244349e04c0a37bef6588f72c362f7f2a421d002054413bc1076d1cdef176803a5607991b2bd127acc9512ae8c862d2d331ad68b6880a8d1698b13087b610b3f1f102731ad6c617750c182a11bb55564cd849e89da07bd4a1d311e4420530478be9c9fa16cd08830ee187fe2bd0c9fefb10636ff09c4a16b887c43a350b0417c6ed27ca22e7fc925d3be053e9dbef3aef77a8685d2909e3597af16068283a54bcb19ee47072685bb40a4dba843d7b7105b404ab7ac5eb1c3297211c6a1a0ed3bf1dd8134b99fd1cb", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100), 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) 16:22:24 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000045900000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 2645.707475][T24212] block nbd4: Receive control failed (result -22) [ 2645.729900][ T4295] block nbd4: shutting down sockets 16:22:24 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x20, 0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) rt_sigqueueinfo(r0, 0x30, &(0x7f0000000200)={0x3b, 0x3ff, 0x101}) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0) write$selinux_user(r1, &(0x7f0000000280)={'/sbin/dhclient', 0x20, 'user_u\x00'}, 0x16) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000632000/0x2000)=nil, 0x2000}}) r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r2, 0xc0487c04, &(0x7f0000000000)=""/226) [ 2645.804571][ T4301] block nbd4: Could not allocate knbd recv work queue. [ 2645.815193][ T4311] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2645.847715][ T4301] block nbd4: shutting down sockets 16:22:24 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)=ANY=[@ANYBLOB="201dc221df0fd14e"]) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:22:24 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$NBD_DO_IT(r2, 0xab03) 16:22:24 executing program 2: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, 0x0, 0x0, 0x8, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r13, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000020) 16:22:25 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x2, 0x410400) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000002c0)=[{{0x4, 0x1, 0x0, 0x1}, {0x2, 0x1}}, {{0x3, 0x1}, {0x77, 0x1, 0x1}}, {{0x1, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1}}, {{0x1, 0x0, 0x1}, {0x2, 0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x1}, {0x3, 0x1, 0x1}}], 0x30) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000200)={0x3, 0xa, 0x7, 0x6, 0x2a, 0xb004, &(0x7f00000001c0)="50560a9eb2b56f94a35309736f1c389e2ffc51e60884c90c076332f96e85bb17fb6d87e6bd5494f02581"}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000632000/0x2000)=nil, 0x2000}}) r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x0, 0x802) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x80045505, &(0x7f0000000380)={0x2, 0x0, "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"}) fsetxattr$security_smack_transmute(r0, &(0x7f0000000300)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000340)='\xf4\xff\xffl', 0x4, 0x6) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = syz_open_procfs(r4, &(0x7f0000000240)='net/protocols\x00') ioctl$PPPIOCGNPMODE(r5, 0xc008744c, &(0x7f0000000280)={0x2f, 0x1}) ioctl$EVIOCGKEY(r2, 0xc0487c04, &(0x7f0000000000)=""/226) r6 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r7 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf", 0x80, r6) r8 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r8, r9, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\x00'}}) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000004c0)={r9, 0x36, 0x1000}, &(0x7f0000000500)={'enc=', 'raw', ' hash=', {'crct10dif-generic\x00'}}, &(0x7f0000000580)="9420e0d06c74cf3b1574f2f34ea7f2eb63f91667524c7976eaa53361e48f76fa686a4567090fbcfb8b295bbc51bf6d58a8e188187b02", &(0x7f00000005c0)=""/4096) [ 2646.152308][T24212] block nbd4: Receive control failed (result -22) [ 2646.161838][ T4326] block nbd4: shutting down sockets [ 2646.184813][ T4320] EXT4-fs (loop0): Unsupported filesystem blocksize 0 (89 log_block_size) [ 2646.222382][ T4337] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 16:22:25 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:22:25 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000045a00000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 16:22:25 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x551000) r1 = socket(0x1, 0x1, 0x0) r2 = accept$inet6(r1, 0x0, &(0x7f0000000000)) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000000c0)={0x841, {{0xa, 0x4e20, 0x1f, @empty, 0x5a3}}, 0x1, 0x3, [{{0xa, 0x4e24, 0x6, @mcast1, 0x8}}, {{0xa, 0x4e20, 0x5, @ipv4={[], [], @multicast2}, 0x100}}, {{0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}}]}, 0x210) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r3, 0xab03) 16:22:25 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x7f, 0x7f, 0x2, 0x3, 0x0, 0x9, 0x1000, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xfe, 0x4}, 0x13000, 0xfffffffffffff801, 0x2, 0x0, 0x9, 0x515a, 0x7fff}, r1, 0x0, r2, 0x0) unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x98b1ec3b7eb7cc6f) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000632000/0x2000)=nil, 0x2000}}) r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r3, 0xc0487c04, &(0x7f0000000000)=""/226) 16:22:25 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x100000, 0x0) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000340)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4, @default, @rose={'rose', 0x0}, 0x6, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @default, @null, @default, @bcast]}) getpid() r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x800, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f00000002c0)={0x7852, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x100, 0x4480) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:22:25 executing program 1: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100), 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) 16:22:25 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x10, 0x1, 0x80) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7d, &(0x7f0000000000)={r4}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x3, 0x208, 0x4, 0xfffffff8, r4}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000000c0)={r5, 0x3}, 0x8) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r6, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r6, 0xab03) 16:22:25 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x2, @perf_config_ext={0xb2, 0x9a9}, 0x500, 0x0, 0x0, 0x0, 0x0, 0x80000, 0xffff}, 0x0, 0x800000, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000632000/0x2000)=nil, 0x2000}}) r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x802) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x80045505, &(0x7f0000000380)={0x2, 0x0, "2c096e3659066f32daec85bccf90ac5642208e828d2dfccaa6c3ae612ad7d3c4382f2d211f2f8a3afcd759a437fb2258063f0bf108b9f82f5b570fbd978c3830095e09ca20ab9d83de55403d86fa7b1895b34f76d71614d075b9e4fe6a87c1c0fc5bebce32e0c4b5b8109744f0ac777cb7c7f2e88e6e674df8573c2d21c9cc49232e8013155f8ea355f314103c129ee97306b2745cf84e69c047eff561616036493f5b7d768a00315d413e355750e203450959c7fd06a90e3f27013ab40f93ed6312366b6882063acac294d7deac3a659a7a81d32c184c96830284954319650ead82d45ab0276b036e8d5a5bf0f5023f4c76deb82a06f8f35e0bfba07ac03d6a"}) ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, &(0x7f0000000140)) [ 2646.763164][ T4487] EXT4-fs (loop0): Unsupported filesystem blocksize 0 (90 log_block_size) 16:22:25 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000045b00000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 16:22:25 executing program 2: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x0, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r13, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000020) 16:22:26 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000040)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/109, 0x0, 0x4000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r2, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000000)=0x80, 0x80000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)=ANY=[@ANYBLOB="b21f50e4548884b0bb54934cfc2c0de9a917613076b293603e1f25f07ee8b472cb8726cc51acfbe3b131f84d4986e547b132ac5a26ba5fba918a10a002df4ab0292802ad6f04d03ed5bb079ff066c2ade77ea817d3e9d8cedccc7339b2caa0fb902518488cbaf7f91272799543fecabc8eefca42a6377529de0b8137b5f2c568ad2a97a7e2030875622a398082f0424ff6faa42e4cf58362"]) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0)=0x2, 0x4) 16:22:26 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) socket(0x4539d6a5f187a732, 0x304f90efc9215d4, 0x2f) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r2, 0xab03) 16:22:26 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x3ff, @ipv4={[], [], @loopback}, 0x9}], 0x1c) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000632000/0x2000)=nil, 0x2000}}) r1 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r1, 0xc0487c04, &(0x7f0000000000)=""/226) [ 2647.252904][T24212] block nbd4: Receive control failed (result -22) [ 2647.269119][ T4688] block nbd4: shutting down sockets 16:22:26 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) syz_open_dev$radio(&(0x7f0000000440)='/dev/radio#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000600)='/dev/dsp\x00', 0x1) syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) preadv(r3, &(0x7f00000017c0), 0x0, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x0, 0x802) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x80045505, &(0x7f0000000380)={0x2, 0x0, "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"}) r5 = syz_open_dev$usbfs(0x0, 0x0, 0x802) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x80045505, &(0x7f0000000380)={0x2, 0x0, "2c096e3659066f32daec85bccf90ac5642208e828d2dfccaa6c3ae612ad7d3c4382f2d211f2f8a3afcd759a437fb2258063f0bf108b9f82f5b570fbd978c3830095e09ca20ab9d83de55403d86fa7b1895b34f76d71614d075b9e4fe6a87c1c0fc5bebce32e0c4b5b8109744f0ac777cb7c7f2e88e6e674df8573c2d21c9cc49232e8013155f8ea355f314103c129ee97306b2745cf84e69c047eff561616036493f5b7d768a00315d413e355750e203450959c7fd06a90e3f27013ab40f93ed6312366b6882063acac294d7deac3a659a7a81d32c184c96830284954319650ead82d45ab0276b036e8d5a5bf0f5023f4c76deb82a06f8f35e0bfba07ac03d6a"}) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/checkreqprot\x00', 0x440, 0x0) clone3(&(0x7f0000000b80)={0x400, &(0x7f0000000a40)=0xffffffffffffffff, &(0x7f0000000a80), &(0x7f0000000ac0), 0x11, 0x0, &(0x7f0000000b00)=""/53, 0xff5e, &(0x7f0000000cc0)=""/56}, 0x40) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r7, &(0x7f00000017c0), 0x1b4, 0x0) io_submit(0x0, 0x7, &(0x7f0000000c80)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f0000000400)="82c4f9a497c1f2ba2f09d1cb20d9a21cafb6e87ec9ce2908a309749a17b20815692e3597cc130859eac8e1de91f9b0ecf399", 0x32, 0x93}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000004c0)="7a29a11d388c9a3488b5f9353064f5f53a676e719d12fa23a41056fbcc47487ec6c5b30232ab87078615b9dbedf316225651bb535b35099bece9eaf38d31ec9e6f49486c8d6272f8e7db3f7fbd50c2be02ffda39901fcfdcc1f86e3cc359b7a48c4b565c93a72d8feb80ffbf57577034889579b9e84d38f312a1a06b0f16a27b455cfba62f92ff1b88f60ed61f6528364217f16066239bf0ac88bdf6cb7860b34df23a6e9d131884965b719689deda3d7a9abe84ffb4e09eacb42044c156dea9a996447c8f3acd5123d341db6560a1fe215d", 0xd2, 0x4c1, 0x0, 0x2}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x7, 0x5, r2, &(0x7f0000000640)="0dab9afc88cf24462cc9d5711c82578806bdba3a525f3ac94b62e5d24a168bcc30bcf0c80b651ec4f964f615d33ad2e6aa47fadc0c22447444bef477014d6db0d51773a91a3b24c4f5e838b80039800dce2bc3995f7f67663cd564f7cda3733961e4aab21ca4b554ecb0c5ef02ccb3538c8628500c8c52", 0x77, 0x44, 0x0, 0x4}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x8, 0x3, r4, &(0x7f0000000740)="7a26546fef1f6b894133c014ac95607a8143cb9b5f0e34d3a3d6147e7fd04274a32f8fefc12e3941feaf74fd82d7b99a289043f6f0933cf8d157c7f89d3f6f16b3671db05764d832b275a68450820ae458be46511d4de747f929d4ab987fccae51a78735923523517d68029b944a5730c22aa1279ac87699db3735f56e4ad0c84baecd9b4605fca6b8ece705fc23f36f8344b12d200c28a43e124e06454eb59edd18f6b8910779f8258d77dc51578543cbf5d10ddf0e436839b544df326143d6f63138a8096cef58f5cbecd4ccaffbd8a1058efe8c7ef2a62faa5db84038d75fd0c9", 0xe2, 0x1, 0x0, 0x3}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0xd5ad94233a05b85, 0x6, r5, &(0x7f0000000880)="bd4e53ccb5fd5da31fcc0d68a243bbf7fc36c4e68331a3a8011330fa630dc37367428839270940de437d8669dd7642232333e9a15b0a953a905faeffa23ad32705a5eb833bddf4cf8f52b85d70db7fa62f5527ecbab04c68578a09be3bdd18027000499dcb3edd625dd046b362", 0x6d, 0x4, 0x0, 0x5, r7}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x8, 0x8, r0, &(0x7f0000000980)="f3c65e358ea394643bf9010df5bc673636431a2c40ed7b05e53df01bdfb5dea202ee132bffed46ebb21b25a2e9423ef6636ba5b76731cd314433032f0ef1023b5556da54c974eb1045a4820935a14f28086f6b4343a7", 0x56, 0x9, 0x0, 0x2}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x3, 0x8, r6, &(0x7f0000000bc0)="76992923b292d2b56d126aa5badcbb2b74cda9d32fd497d19c05325a4808e6f61a5a24b974f60be83db3ce1723b784c1a19e05edc2eb314077961fcf4caa8c98a08c151df302f6ae85c0bc363e08088830ff0b93600c6db7902ff2c6e88a7c8dedf3b57e39", 0x65, 0x100000001}]) r8 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r8, &(0x7f00000017c0), 0x1b4, 0x0) setsockopt$inet_tcp_TLS_RX(r8, 0x6, 0x2, &(0x7f0000000340)=@ccm_128={{0x303}, "923dd6d55d0d1b82", "757b9d52279c333aeccb789f15b64c77", "fa3af549", "0836c15f8e02679b"}, 0x28) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00@\x00\x00\x00\x00\x00\x00']) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25DELUID(r9, 0x89e2, &(0x7f0000000280)={0x3, @null, r10}) r11 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x80000, 0x0) write$P9_RCREATE(r11, &(0x7f00000001c0)={0x18, 0x73, 0x1, {{0x40, 0x3, 0x7}, 0x21b}}, 0x18) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2647.433092][ T4695] EXT4-fs (loop0): Unsupported filesystem blocksize 0 (91 log_block_size) [ 2647.500507][ T4688] block nbd4: shutting down sockets 16:22:26 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000000)=0x1, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000040)) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x40000) ioctl$NBD_DO_IT(r3, 0xab03) 16:22:26 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000045c00000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 16:22:26 executing program 1: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) [ 2647.782667][T24212] block nbd4: Receive control failed (result -22) [ 2647.791747][ T4817] block nbd4: shutting down sockets 16:22:26 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7015}, 0x0, 0x200000000000000, 0x0, 0x0, 0x2000000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000632000/0x2000)=nil, 0x2000}}) r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000004c0), &(0x7f0000000500)=0x4) preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0) syz_open_pts(r1, 0xfd5706bad0ed703e) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc0004280}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, r2, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8f}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x81}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_DEST={0xfffffffffffffdd8, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x401}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x0, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x0, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_DEST={0xffffffffffffffb2, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000340)=0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) r5 = syz_open_dev$usbfs(0x0, 0x0, 0x802) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x80045505, &(0x7f0000000380)={0x2, 0x0, "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"}) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r6, &(0x7f00000017c0), 0x1b4, 0x0) r7 = epoll_create(0x80000001) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r5, &(0x7f0000000400)={r6, r7, 0x3f}) [ 2647.901810][T24212] block nbd4: Receive control failed (result -22) [ 2647.910542][ T4817] block nbd4: shutting down sockets [ 2648.029844][ T4825] EXT4-fs (loop0): Unsupported filesystem blocksize 0 (92 log_block_size) 16:22:27 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x40000) shmget(0x3, 0x3000, 0x20, &(0x7f0000ffc000/0x3000)=nil) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r3, 0xab03) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f00000000c0)=0x9, &(0x7f0000000100)=0x4) 16:22:27 executing program 2: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x0, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r13, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000020) [ 2648.311878][T24212] block nbd4: Receive control failed (result -22) [ 2648.322783][ T4842] block nbd4: shutting down sockets 16:22:27 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000045d00000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 16:22:27 executing program 5: perf_event_open(&(0x7f0000000000)={0xa, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000632000/0x2000)=nil, 0x2000}}) r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000180)={0x19, 0x7, 0x1, {{0xc, '/dev/media#\x00'}, 0xc04c}}, 0x19) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 16:22:27 executing program 1: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="ccd3486d7de0b0ff1d3a169334e5d7a57745fcfd039105538dc6e4cdc0ab685306f84f82649847d52c0a13c100b40130362aed2868244349e04c0a37bef6588f72c362f7f2a421d002054413bc1076d1cdef176803a5607991b2bd127acc9512ae8c862d2d331ad68b6880a8d1698b13087b610b3f1f102731ad6c617750c182a11bb55564cd849e89da07bd4a1d311e4420530478be9c9fa16cd08830ee187fe2bd0c9fefb10636ff09c4a16b887c43a350b0417c6ed27ca22e7fc925d3be053e9dbef3aef77a8685d2909e3597af16068283a54bcb19ee47072685bb40a4dba843d7b7105b404ab7ac5eb1c3297211c6a1a0ed3bf1dd8134b99fd1cb", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) [ 2648.451444][T24212] block nbd4: Receive control failed (result -22) [ 2648.632595][ T4842] block nbd4: shutting down sockets 16:22:27 executing program 4: getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x18400) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r1, 0xab03) [ 2648.685816][ T4895] EXT4-fs (loop0): Unsupported filesystem blocksize 0 (93 log_block_size) 16:22:27 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xe58a) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000632000/0x2000)=nil, 0x2000}}) r1 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r1, 0xc0487c04, &(0x7f0000000000)=""/226) 16:22:27 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x802) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x80045505, &(0x7f0000000380)={0x2, 0x0, "2c096e3659066f32daec85bccf90ac5642208e828d2dfccaa6c3ae612ad7d3c4382f2d211f2f8a3afcd759a437fb2258063f0bf108b9f82f5b570fbd978c3830095e09ca20ab9d83de55403d86fa7b1895b34f76d71614d075b9e4fe6a87c1c0fc5bebce32e0c4b5b8109744f0ac777cb7c7f2e88e6e674df8573c2d21c9cc49232e8013155f8ea355f314103c129ee97306b2745cf84e69c047eff561616036493f5b7d768a00315d413e355750e203450959c7fd06a90e3f27013ab40f93ed6312366b6882063acac294d7deac3a659a7a81d32c184c96830284954319650ead82d45ab0276b036e8d5a5bf0f5023f4c76deb82a06f8f35e0bfba07ac03d6a"}) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x802) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x80045505, &(0x7f0000000380)={0x2, 0x0, "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"}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRESOCT=r1, @ANYBLOB="9503dacf8c079f8ece", @ANYRES32, @ANYPTR]) getpid() preadv(0xffffffffffffffff, 0x0, 0x82, 0x0) 16:22:27 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000045e00000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 16:22:27 executing program 1: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) 16:22:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x7c850500, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00n\t'], 0x48}}, 0x0) 16:22:27 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r2, 0xab03) [ 2649.037192][ T5081] validate_nla: 7 callbacks suppressed [ 2649.037202][ T5081] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2649.157904][ T5081] __nla_validate_parse: 9 callbacks suppressed [ 2649.157913][ T5081] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. 16:22:28 executing program 2: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="ccd3486d7de0b0ff1d3a169334e5d7a57745fcfd039105538dc6e4cdc0ab685306f84f82649847d52c0a13c100b40130362aed2868244349e04c0a37bef6588f72c362f7f2a421d002054413bc1076d1cdef176803a5607991b2bd127acc9512ae8c862d2d331ad68b6880a8d1698b13087b610b3f1f102731ad6c617750c182a11bb55564cd849e89da07bd4a1d311e4420530478be9c9fa16cd08830ee187fe2bd0c9fefb10636ff09c4a16b887c43a350b0417c6ed27ca22e7fc925d3be053e9dbef3aef77a8685d2909e3597af16068283a54bcb19ee47072685bb40a4dba843d7b7105b404ab7ac5eb1c3297211c6a1a0ed3bf1dd8134b99fd1cb", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x0, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r13, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000020) [ 2649.220401][T24212] block nbd4: Receive control failed (result -22) [ 2649.234328][ T5086] block nbd4: shutting down sockets [ 2649.388606][ T5170] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2649.389885][ T5083] EXT4-fs (loop0): Unsupported filesystem blocksize 0 (94 log_block_size) [ 2649.421706][ T5170] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. 16:22:28 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)=ANY=[@ANYRES32=0x0]) getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r4, 0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000280)={0xa8, 0xffffffffffffffda, 0x5, [{{0x3, 0x0, 0xf3, 0x9, 0xfff, 0x9, {0x5, 0x1, 0x5, 0xfffffffffffffff8, 0xffff, 0xfffffffffffffff7, 0x0, 0x7, 0x10001, 0x554, 0x40, r3, r4, 0x8, 0x1}}, {0x4, 0x400, 0x0, 0xb0a}}]}, 0xa8) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x340041, 0x0) 16:22:28 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) r1 = dup(0xffffffffffffffff) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x100000000, 0xfffffffffffff000}) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r4, 0xab03) 16:22:28 executing program 1: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) 16:22:28 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000045f00000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 2649.718694][T24212] block nbd4: Receive control failed (result -107) [ 2649.729122][ T5202] block nbd4: shutting down sockets 16:22:28 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)) getpid() r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x20000, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000180)={0xfffffffffffffffc, 0x2, 0x716b, 0x3, 0x15}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:22:28 executing program 5: [ 2649.833454][ T5270] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 16:22:28 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) open_by_handle_at(r0, &(0x7f0000000100)={0x9e, 0x1, "733f68f82671eda17180f778bedd54c31c0b0fd6d12ed46bb7c0aa4ebe5d50b76b4a9a5a9c3afd4a7c1ae7ea6bf6805529a78e0d1f8672f703300e57d7978b4076eee85751a9ed6f5b4f3872ab79eba3e274eade9ab8423fb801f1cb51ee65096cafa69599493852bbd0faadbbf8aa60c23a0342d7360e419234c927ea403baa558f6ad3697f3cfb07ae2116e98cb898b7bff649cb34"}, 0x220000) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x1ffffffff) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 2649.893525][ T5270] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. 16:22:28 executing program 5: [ 2650.041279][ T5325] block nbd4: shutting down sockets 16:22:29 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r1, &(0x7f00000017c0), 0x0, 0x8) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000400)) getpid() r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000280)=[{0x0, 0x3, {0x2, 0x0, 0x1}, {0x1, 0xf0, 0x2}, 0xfd}, {0x1, 0x1, {0x1, 0x0, 0x2}, {0x4, 0x1ee}, 0x1, 0x1}, {0x0, 0x1, {}, {0x3, 0xf0, 0x4}, 0x1, 0xfe}, {0x3, 0x2, {0x0, 0xf0, 0x3}, {0x3, 0xf0}, 0x0, 0xfe}, {0x0, 0x3, {0x2, 0xff, 0x4}, {0x2, 0xff, 0x1}, 0xfd, 0x5}], 0xa0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2650.101081][ T5296] EXT4-fs (loop0): Unsupported filesystem blocksize 0 (95 log_block_size) 16:22:29 executing program 5: [ 2650.210094][ T5325] block nbd4: shutting down sockets 16:22:29 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x80000) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r2, 0x80045510, &(0x7f0000000040)=0x9) r3 = syz_open_dev$ndb(0x0, 0x0, 0x4260c0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r3, 0xab03) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x84201, 0x180) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x2, 0x10000}) 16:22:29 executing program 2: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r13, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000020) 16:22:29 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000046000000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 2650.380996][ T5440] block nbd4: shutting down sockets 16:22:29 executing program 5: [ 2650.404700][ T5448] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2650.460160][ T5448] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2650.562535][ T5440] block nbd4: shutting down sockets 16:22:29 executing program 5: 16:22:29 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r2, 0xab03) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x0) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000000)={0xce0, 0x800, 0x5, 0x0, 0x1f, "819f382a0bdf58a417abb5df282a4bfe5a962a", 0x1, 0xa13e}) 16:22:29 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x2, 0x200) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/109, 0x0, 0x10000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000200)=0x7ff) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)) getpid() r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x1) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={0x0, 0x0, 0x6}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f00000001c0)={r3, 0x0, 0x7ff}) syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x88600) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:22:29 executing program 1: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="ccd3486d7de0b0ff1d3a169334e5d7a57745fcfd039105538dc6e4cdc0ab685306f84f82649847d52c0a13c100b40130362aed2868244349e04c0a37bef6588f72c362f7f2a421d002054413bc1076d1cdef176803a5607991b2bd127acc9512ae8c862d2d331ad68b6880a8d1698b13087b610b3f1f102731ad6c617750c182a11bb55564cd849e89da07bd4a1d311e4420530478be9c9fa16cd08830ee187fe2bd0c9fefb10636ff09c4a16b887c43a350b0417c6ed27ca22e7fc925d3be053e9dbef3aef77a8685d2909e3597af16068283a54bcb19ee47072685bb40a4dba843d7b7105b404ab7ac5eb1c3297211c6a1a0ed3bf1dd8134b99fd1cb", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) [ 2650.717015][ T5525] EXT4-fs (loop0): Invalid log block size: 96 16:22:29 executing program 5: [ 2650.822731][T24212] block nbd4: Receive control failed (result -22) [ 2650.833174][ T5561] block nbd4: shutting down sockets 16:22:29 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000046100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 2650.893131][ T5572] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2650.937681][ T5572] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. 16:22:29 executing program 5: 16:22:30 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x7b, 0xc600) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f00000000c0)="73397aaf8e5efa2a0378f4afeb51ea293c0121b76b43cdccda97837e9b2b252d8a4e7abae807650e3a6977347d339124d67945e6c5b554a6610e11682d1ee5b7b14f6a661be3e28f82cb13a7bbf71fa716a9c94d12fdaa63ddf68902fb66b0179c0589ce") r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r3, 0xab03) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 16:22:30 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000140)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000040)={0x3, 0x0, 0x0, &(0x7f00000005c0)=""/109, 0x0, 0x2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x802) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x80045505, &(0x7f0000000380)={0x2, 0x0, "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"}) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x802) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x80045505, &(0x7f0000000380)={0x2, 0x0, "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"}) r3 = syz_open_dev$usbfs(0x0, 0x0, 0x802) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x80045505, &(0x7f0000000380)={0x2, 0x0, "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"}) r4 = syz_open_dev$usbfs(0x0, 0x0, 0x802) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x80045505, &(0x7f0000000380)={0x2, 0x0, "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"}) r5 = syz_open_dev$usbfs(0x0, 0x0, 0x802) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x80045505, &(0x7f0000000380)={0x2, 0x0, "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"}) syz_open_dev$usbfs(0x0, 0x0, 0x802) r6 = dup(r3) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x80045505, &(0x7f0000000380)={0x2, 0x0, "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"}) r7 = syz_open_dev$usbfs(0x0, 0x0, 0x802) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x80045505, &(0x7f0000000380)={0x2, 0x0, "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"}) r8 = syz_open_dev$usbfs(0x0, 0x0, 0x802) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x80045505, &(0x7f0000000380)={0x2, 0x0, "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"}) r9 = syz_open_dev$usbfs(0x0, 0x0, 0x802) ioctl$USBDEVFS_DISCONNECT_CLAIM(r9, 0x80045505, &(0x7f0000000380)={0x2, 0x0, "2c096e3659066f32daec85bccf90ac5642208e828d2dfccaa6c3ae612ad7d3c4382f2d211f2f8a3afcd759a437fb2258063f0bf108b9f82f5b570fbd978c3830095e09ca20ab9d83de55403d86fa7b1895b34f76d71614d075b9e4fe6a87c1c0fc5bebce32e0c4b5b8109744f0ac777cb7c7f2e88e6e674df8573c2d21c9cc49232e8013155f8ea355f314103c129ee97306b2745cf84e69c047eff561616036493f5b7d768a00315d413e355750e203450959c7fd06a90e3f27013ab40f93ed6312366b6882063acac294d7deac3a659a7a81d32c184c96830284954319650ead82d45ab0276b036e8d5a5bf0f5023f4c76deb82a06f8f35e0bfba07ac03d6a"}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYRESDEC=r2], @ANYRESDEC=r1, @ANYPTR64=&(0x7f00000008c0)=ANY=[@ANYRESDEC=r7, @ANYBLOB="c60031776b7d85c5581661b01fcb0352fd699c6ad914694abe951b9456c38117d5717bf6f3c3543c977c7e52f2640e756661bec2cbddd8d258500987a4b58be6f27b1e3d8204d89fc8f9fc367cd916a6e5516c905638ecf93df4f9648f83ba1edba5454d570cc7dd2d732af4b8838e76cbdf3e224d6fd6aa884d0122e49ced3d9991be3a432b87f299a80f9dd5efb5edaa0e70b410f643767903b3d3d0a8019abd7e055ff28b46dd3051a2dff238d4d60f01fc8d38c1415a000000", @ANYRESHEX=r9], @ANYRES32]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000050000000000"]) r10 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0xffffffff, 0x40000) ioctl$KVM_SET_PIT2(r10, 0x4070aea0, &(0x7f0000000280)={[{0x81, 0x93e, 0x67, 0x81, 0x3f, 0xcf, 0xe1, 0x0, 0x2, 0x2, 0x1, 0x0, 0xf2a}, {0x0, 0x0, 0x1, 0x6, 0xff, 0x9, 0x3, 0x5, 0x40, 0x8, 0x3, 0x2, 0x10001}, {0x2, 0x0, 0x3, 0x5, 0x3, 0x7, 0x40, 0xf7, 0x8, 0x0, 0x1f, 0x8, 0xfffffffffffffffd}], 0x9}) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:22:30 executing program 2: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r13, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000020) 16:22:30 executing program 5: [ 2651.252394][ T5685] block nbd4: shutting down sockets [ 2651.261626][ T5681] EXT4-fs (loop0): Invalid log block size: 97 16:22:30 executing program 4: syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x1, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) recvmsg$can_j1939(r0, &(0x7f00000006c0)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/244, 0xf4}, {&(0x7f00000001c0)=""/85, 0x55}, {&(0x7f0000000240)=""/208, 0xd0}, {&(0x7f0000000340)=""/216, 0xd8}, {&(0x7f0000000440)=""/220, 0xdc}], 0x5, &(0x7f00000005c0)=""/226, 0xe2}, 0x42) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000700)='/dev/dmmidi#\x00', 0xc363, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r3, 0xab03) 16:22:30 executing program 5: 16:22:30 executing program 3: io_setup(0x7, &(0x7f0000000180)=0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x802) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x80045505, &(0x7f0000000380)={0x2, 0x0, "2c096e3659066f32daec85bccf90ac5642208e828d2dfccaa6c3ae612ad7d3c4382f2d211f2f8a3afcd759a437fb2258063f0bf108b9f82f5b570fbd978c3830095e09ca20ab9d83de55403d86fa7b1895b34f76d71614d075b9e4fe6a87c1c0fc5bebce32e0c4b5b8109744f0ac777cb7c7f2e88e6e674df8573c2d21c9cc49232e8013155f8ea355f314103c129ee97306b2745cf84e69c047eff561616036493f5b7d768a00315d413e355750e203450959c7fd06a90e3f27013ab40f93ed6312366b6882063acac294d7deac3a659a7a81d32c184c96830284954319650ead82d45ab0276b036e8d5a5bf0f5023f4c76deb82a06f8f35e0bfba07ac03d6a"}) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x802) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x80045505, &(0x7f0000000380)={0x2, 0x0, "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"}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x200, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vsock\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(0x0, 0x0, 0x802) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x80045505, &(0x7f0000000380)={0x2, 0x0, "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"}) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/policy\x00', 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') r8 = syz_open_dev$usbfs(0x0, 0x0, 0x802) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x80045505, &(0x7f0000000380)={0x2, 0x0, "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"}) preadv(r8, &(0x7f00000017c0), 0x1db, 0x0) r9 = openat$cgroup_subtree(r7, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) r10 = syz_open_dev$amidi(&(0x7f0000000640)='/dev/amidi#\x00', 0x5, 0x400) r11 = syz_open_dev$usbfs(0x0, 0x0, 0x802) ioctl$USBDEVFS_DISCONNECT_CLAIM(r11, 0x80045505, &(0x7f0000000380)={0x2, 0x0, "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"}) r12 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001840)='/dev/vcs\x00', 0xc0400, 0x0) r13 = syz_open_dev$usbfs(0x0, 0x0, 0x802) ioctl$USBDEVFS_DISCONNECT_CLAIM(r13, 0x80045505, &(0x7f0000000380)={0x2, 0x0, "2c096e3659066f32daec85bccf90ac5642208e828d2dfccaa6c3ae612ad7d3c4382f2d211f2f8a3afcd759a437fb2258063f0bf108b9f82f5b570fbd978c3830095e09ca20ab9d83de55403d86fa7b1895b34f76d71614d075b9e4fe6a87c1c0fc5bebce32e0c4b5b8109744f0ac777cb7c7f2e88e6e674df8573c2d21c9cc49232e8013155f8ea355f314103c129ee97306b2745cf84e69c047eff561616036493f5b7d768a00315d413e355750e203450959c7fd06a90e3f27013ab40f93ed6312366b6882063acac294d7deac3a659a7a81d32c184c96830284954319650ead82d45ab0276b036e8d5a5bf0f5023f4c76deb82a06f8f35e0bfba07ac03d6a"}) r14 = openat$zero(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/zero\x00', 0x100, 0x0) r15 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r15, &(0x7f00000017c0), 0x1b4, 0x0) io_submit(r0, 0x8, &(0x7f0000001ac0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x5, r1, &(0x7f00000001c0)="1f32ff95b9dca6e00a7ea051f5157f54dc127e0f0dca6917795a3b250440416abe33f93ec5be644c6af9655ac685742b1593", 0x32, 0x2, 0x0, 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0xec, r2, &(0x7f00000002c0)="90c03adf5ede4ac2d13c48dcd96734ee932efc6f0ed1c8d8b0c081bffa7e189016903f914738f22b5cc9fb754348bf9be8ddf747cc7151a38c95acec574593902f3b9fa34054e3d497c5283a2b5d4c2556fe86305076fa43284f9dbdb9022bb7825faee0146b5e67fe0b33abe0509b81ccee13cb92eacee5398ce9c52691b45f237bfb8a7954892a605eac83eb5822a6d37b2dc07161eff595852cf91a8bc7fd8e6e110ec23f6baec827807dbc23d8ef988c22545ce077ee9ad77a5a3b3736ff7f213a676d5247ffe2b18e17daeb90558a97f0e9ac053fdb8d4eabfff43d5c8ef392945de791", 0xe6, 0x40, 0x0, 0x0, r3}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x4d57, 0xffffffffffffffff, &(0x7f0000000480)="cb042c31abcf92cc29dff99cd0d6acdbc2ba171ca2c2560fa6da5d299895e5baee7da009bc990a6966f21a5044d4526108c39db60b0e8c72c6d2f69c88c9a4500ebadf54665a4398a6cb840dd14d083170ac754f205f6aa7656c3b", 0x5b, 0x6, 0x0, 0x2, r4}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x1000, r5, &(0x7f0000000700)="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", 0x1000, 0x1, 0x0, 0x2, r6}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x155, r9, &(0x7f0000001700)="3b4c137ff30fe52d1cfa7b8b87a4f8312342b0957c9d8342e6257264c2adbb838033bf03d68cc12242da540aa7befb5eadf083b2e208860108ee12d7b9e8db42c2ddbbb2cd8c42334cc5406b228f1e7be12f1c36456c788c1a964996b939358036fa59fe3c56be4de3e2c8a2593790612672b2ee2fbfbc1afbbb0be04f8c52de31ab07e720434a3c9cc7be90af45a515354fc5c673792a855cab5906bb3ffbe74ca9eebd64367cea897bf81bb1563ea6307e20751724a2621a6fcbe779bb51", 0xbf, 0x9, 0x0, 0x0, r10}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x3, 0x1, r11, &(0x7f00000017c0)="f317e89a936ba6213bfdfda665f52aa97a96effd0d7a5d72719f5f6aed34fc3fbab5255c9f8d9bde6a675871affbc15dd5d3dc3afebb2871c3ad44a1ce7af7e7708801256969af497018486bb381565bbb4bf1", 0x53, 0x5, 0x0, 0x3, r12}, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x1, 0x1000, r13, &(0x7f00000018c0)="565158e80b9004db815675a4faeb2838484560a313dcf1f7cc24b6ea240b641549beeb9f43a06dbcd4ff44370bec43e4e3a226c7b8a670ddbb17363544d1a4effe838732b3e431449fccd5a0c3254851ec67756b813e7f66c922ead2f2dce6307e752db3dbba674d6df38b4e4e1d2f0d7afa129b6b7b2a6948468128055cf4c4fbec9ae974c1f2351c6f8abfa39bf27de49a6dd2cc8b3f057ed02edd72e533c66fedabad73ff4595d66431fbc9541dc87688bc44e881c659a1438fc8b11f34e8fbe3d2dc44ed5743ce7ce6295f720dc377c838d896d44040", 0xd8, 0x8fb, 0x0, 0x2, r14}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000001a40)="a3aeaaaa1e33f014929b71f28b2f801fd68eaf1adff5c10b0f8050440ff2ace76c9d11182b381b68ad2b4982984273730ceb", 0x32, 0x80000000, 0x0, 0x4, r15}]) r16 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r16, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r16, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r16, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r16, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r16, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r16, 0x4008af03, &(0x7f00000003c0)) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x40) [ 2651.417993][ T5802] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2651.457606][ T5802] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. 16:22:30 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000046200000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 16:22:30 executing program 1: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="31d96da88b0cce5062747ce237ca24f05b05df66b34814c1cdb2db3642a7c880224c03d6cffd67b36c7f1a51ae9aeaa3892b040ba2105d77d4e4579d745ad601f19c26d1260bcd5435ae4ad35d123f7e809a7b0576431fde9f78c3260a3837b52ef6437c404147add96892a9d3a67dcf93c198c3b7727cd266c20c5e584c28ae0843064b8f7f199db8641f71a407775e0090bbedee63a4640e1f012e5ca95bd14b5aa0da642b552ae4aa2b869458dec283c16f25c67068fc528a793f75c81acac8ee6596d79c449ade5eeee332c460ebc0d46c076e871b6426d521c571a95d0fa800de30a110e719ffde8f103773daaaec8c313aa3be0bdaa6e7e796df3975a8e37aee6d10579f8afe6552f187c242c731375f5d64cd40ab8904400f00000000000000000000000000000058b4721949da012002cb7f4ac8fe195c1388861be8cd45020083b0089b23f86603321faf83e794bea1ece8051e9996306347bd562aa2437fa6bdb57086302926b8af069b8d331ebf5c0e1a7f163e6d711af330efdfae413fafef9acf1d53e6aaf4f2dec9ddfb4ca321583e35a14a92e82bdbea3c127a033b32059fbadce23a3e87957f8238886aa9380000000018888c4c20ba104342e8c9d85a9dcf06abbb7a2905d37839bff6f8641ebce172c60a8d368cd4a94af484749dc4ccdd380bbf5d501302d50e79d3536eab5a12abdd347dac985c4349ec712661df947315514e45a515417e6b00000000000000002bdacdb2631c83a90dbca3aa7e5936f8aa413a75c7780309e1c178bce65ed205154ab4f55241cd2b6e83b29fc6cefe050d7d662360718e25bbdb2d34264d6a741cbbed50422f5d") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="ccd3486d7de0b0ff1d3a169334e5d7a57745fcfd039105538dc6e4cdc0ab685306f84f82649847d52c0a13c100b40130362aed2868244349e04c0a37bef6588f72c362f7f2a421d002054413bc1076d1cdef176803a5607991b2bd127acc9512ae8c862d2d331ad68b6880a8d1698b13087b610b3f1f102731ad6c617750c182a11bb55564cd849e89da07bd4a1d311e4420530478be9c9fa16cd08830ee187fe2bd0c9fefb10636ff09c4a16b887c43a350b0417c6ed27ca22e7fc925d3be053e9dbef3aef77a8685d2909e3597af16068283a54bcb19ee47072685bb40a4dba843d7b7105b404ab7ac5eb1c3297211c6a1a0ed3bf1dd8134b99fd1cb", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) 16:22:30 executing program 5: 16:22:30 executing program 5: 16:22:30 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000000)=0x9, 0x8) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r2, 0xab03) [ 2651.858097][ T5812] EXT4-fs (loop0): Invalid log block size: 98 [ 2651.861904][ T5927] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2651.916323][ T5927] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2651.934042][T24212] block nbd4: Receive control failed (result -22) [ 2651.943419][ T5930] block nbd4: shutting down sockets 16:22:30 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x802) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x80045505, &(0x7f0000000380)={0x2, 0x0, "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"}) write$binfmt_misc(r1, &(0x7f0000000180)={'syz0', "a35ce84d76ce12c281e099e3e613370d7ad02665eaac4d5b790e5a96b2aa66b4941ed005365a"}, 0x2a) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10000, 0x0) 16:22:31 executing program 5: 16:22:31 executing program 2: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r13, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000020) 16:22:31 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000006300000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 16:22:31 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x1cd) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f00000000c0)=0x2) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = syz_open_dev$ndb(0x0, 0x0, 0x208080) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000100)={'erspan0\x00', {0x2, 0x4e22, @local}}) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000140)=""/117) r4 = clone3(&(0x7f0000000340)={0x8000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), 0x40, 0x0, &(0x7f0000000280)=""/47, 0x2f, &(0x7f00000002c0)=""/80}, 0x40) getpgrp(r4) ioctl$NBD_DO_IT(r3, 0xab03) 16:22:31 executing program 5: [ 2652.346908][ T6048] block nbd4: shutting down sockets [ 2652.391714][ T6055] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2652.426196][ T6055] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. 16:22:31 executing program 5: [ 2652.479557][ T6052] EXT4-fs (loop0): Invalid log block size: 99 16:22:31 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x2, 0x0, 0x0, &(0x7f0000000280)=""/105, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)) getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f00000001c0)) [ 2652.609671][ T6048] block nbd4: shutting down sockets 16:22:31 executing program 5: 16:22:31 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000040)=0x7, 0x4) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r3, 0xab03) 16:22:31 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000006d00000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 16:22:31 executing program 1: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="ccd3486d7de0b0ff1d3a169334e5d7a57745fcfd039105538dc6e4cdc0ab685306f84f82649847d52c0a13c100b40130362aed2868244349e04c0a37bef6588f72c362f7f2a421d002054413bc1076d1cdef176803a5607991b2bd127acc9512ae8c862d2d331ad68b6880a8d1698b13087b610b3f1f102731ad6c617750c182a11bb55564cd849e89da07bd4a1d311e4420530478be9c9fa16cd08830ee187fe2bd0c9fefb10636ff09c4a16b887c43a350b0417c6ed27ca22e7fc925d3be053e9dbef3aef77a8685d2909e3597af16068283a54bcb19ee47072685bb40a4dba843d7b7105b404ab7ac5eb1c3297211c6a1a0ed3bf1dd8134b99fd1cb", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, 0x0, 0x0) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) 16:22:31 executing program 5: [ 2652.833557][ T6175] block nbd4: shutting down sockets [ 2652.873241][ T6183] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2652.897399][ T6183] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. 16:22:32 executing program 5: [ 2653.123523][ T6185] EXT4-fs (loop0): Unsupported filesystem blocksize 8388608 (109 log_block_size) 16:22:32 executing program 2: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r13, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000020) 16:22:32 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r1, 0xab03) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x1) 16:22:32 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proi20ncci\x00', 0x316737fb3fdc5f1b, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = getpgrp(r4) sched_setscheduler(r5, 0x1, &(0x7f0000000280)=0x1) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c000010", @ANYRES16=r3, @ANYBLOB="0f0d0000000000000000030000005800010044000400200001000a00000000000000fe8000000000000000000000000000aa00000000200002000a0000000000000000000000000000000000ffff7f00000100000000100001007564703a73797a3000000000"], 0x6c}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="a6aa1397dee4788c1f0d0da3f8339e11e05973ff", @ANYRES16=r3, @ANYBLOB="00032b010000fedbdf25070000005000070008000100000800000800010001000000080001000400000008000100eb0000000c00030009000000000000000c000300020000000000000008000100090000000c00030003000000000000004c0004001400010062726f6164636173742d6c696e6b00000c00010073797a31000000000c00010073797a31000000001c000700080004000300000039ddf67e0101000008000300000000002800060024000200080003000500000008000300000000000800040006000000080003000200000008ebf6c75329617c23d8e98601b044d69033b1"], 0xd8}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xbcbf73502262e611}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x220, r3, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x13c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1f, @local, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @remote, 0x639}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @mcast1, 0x6}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc35}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2fe4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'ifb0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4b}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x154}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x808}, 0x4006040) 16:22:32 executing program 5: 16:22:32 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000037900000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 16:22:32 executing program 5: [ 2653.406857][ T6319] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2653.444775][ T6319] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. 16:22:32 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7d, &(0x7f0000000000)={r4}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000400)={r4, 0x9d, "c4cd12ea15681552bb5806f2ecca4d9839f606ba62e416f5486470202a457393df20dafa25681b7906203264cccaae267fe8c32effe0518d77556d3a979c4b13c1452df0709fac0f4bef0b4e3d3767f97005c88d7b8628bab620b6d581d5d3ffa0566ffdbb4eb00c1f7b88c1bd13cb53c2ba7e32847eb97dbf7a31f5cde951b8f1765168ced917903f575c1370b7f6a2874c5af6b0d7bf2f14fb39e971"}, &(0x7f0000000180)=0xa5) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001700)=ANY=[@ANYBLOB="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"]) getpid() r5 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r5, &(0x7f00000017c0), 0x1b4, 0x0) ioctl$sock_bt_hci(r5, 0x400448e0, &(0x7f00000002c0)="ba5c97bf3652fddc6a7c49230638187e8d46fc83bd26cf974e0bd32e76e002b0ce21918198f044b7d2f76b658c27873628751c93ad576599f0e586778b43be2493ec7a93bff504e8a51a5f43ac5812f78f3df93273ea936aabd93d63f10e7d41e38cf2c467c410d7c00db68e36234203eb7f5942d39982d7f4d817d74c34475149572ad72aa0356b40d6f559cf9f97fc8f09dc3cb9633cb606598d9697a1184a981b705785f4bc29ac696b10218e785b8597662f95a1903e4abdd17c1a9f70a5c038e2e10616e8f56f5d80e49c0a43b2f6492a0cb8a288a6ee8e016b6d61464438bfeb97cda7d7b764ce36953972c506") preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r6, &(0x7f00000017c0), 0x1b4, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r6, 0xc008ae09, &(0x7f0000000700)=""/4096) 16:22:32 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x8000) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r2, 0xab03) [ 2653.596607][ T6320] EXT4-fs (loop0): Unsupported filesystem blocksize 0 (121 log_block_size) 16:22:32 executing program 5: 16:22:32 executing program 1: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, 0x0, 0x0) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) 16:22:32 executing program 5: [ 2653.820178][T24212] block nbd4: Receive control failed (result -22) [ 2653.832327][ T6424] block nbd4: shutting down sockets 16:22:32 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000008000000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 2653.910214][ T6424] block nbd4: shutting down sockets 16:22:33 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x200, 0x0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000400)={0x8, 0x3ba}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) write(0xffffffffffffffff, &(0x7f0000000440)="3cfbf1782a695f60c3b7b6ef4080cfb35df1d845cd0043faa617a3a5c445b58c10f08b6bfc593030b8b6b0df", 0x2c) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0) sendmsg$unix(r2, &(0x7f0000000340)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000280)="3797d1fe3d314491d7a76b2683a4d85fceba45bdc91d84b9f6a4cabf3b2aabfe7e928af494b14411d70ca85de6d088db2ac018549a1bd8e580c52f0d8df13f4d06c7e63005ce794606da914eaeeb3e001b8bd4c3a4909d6c39483f04721303de3ff37afee3281df9d69f1e65487207c48a959f2090298fbdc964e176110e95753c3416aaba89dc6c4f15cc2efba4acd153b1bcb2530229e46f78462e8b49", 0x9e}], 0x1, 0x0, 0x0, 0x4004}, 0x4) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:22:33 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000000)={0x40, 0x20}, 0x2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r3, 0xab03) 16:22:33 executing program 5: 16:22:33 executing program 2: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="31d96da88b0cce5062747ce237ca24f05b05df66b34814c1cdb2db3642a7c880224c03d6cffd67b36c7f1a51ae9aeaa3892b040ba2105d77d4e4579d745ad601f19c26d1260bcd5435ae4ad35d123f7e809a7b0576431fde9f78c3260a3837b52ef6437c404147add96892a9d3a67dcf93c198c3b7727cd266c20c5e584c28ae0843064b8f7f199db8641f71a407775e0090bbedee63a4640e1f012e5ca95bd14b5aa0da642b552ae4aa2b869458dec283c16f25c67068fc528a793f75c81acac8ee6596d79c449ade5eeee332c460ebc0d46c076e871b6426d521c571a95d0fa800de30a110e719ffde8f103773daaaec8c313aa3be0bdaa6e7e796df3975a8e37aee6d10579f8afe6552f187c242c731375f5d64cd40ab8904400f00000000000000000000000000000058b4721949da012002cb7f4ac8fe195c1388861be8cd45020083b0089b23f86603321faf83e794bea1ece8051e9996306347bd562aa2437fa6bdb57086302926b8af069b8d331ebf5c0e1a7f163e6d711af330efdfae413fafef9acf1d53e6aaf4f2dec9ddfb4ca321583e35a14a92e82bdbea3c127a033b32059fbadce23a3e87957f8238886aa9380000000018888c4c20ba104342e8c9d85a9dcf06abbb7a2905d37839bff6f8641ebce172c60a8d368cd4a94af484749dc4ccdd380bbf5d501302d50e79d3536eab5a12abdd347dac985c4349ec712661df947315514e45a515417e6b00000000000000002bdacdb2631c83a90dbca3aa7e5936f8aa413a75c7780309e1c178bce65ed205154ab4f55241cd2b6e83b29fc6cefe050d7d662360718e25bbdb2d34264d6a741cbbed50422f5d") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r13, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000020) [ 2654.168520][ T6440] EXT4-fs (loop0): Invalid log block size: 128 16:22:33 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c00000000ffffffc000000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 16:22:33 executing program 5: [ 2654.341497][T24212] block nbd4: Receive control failed (result -22) [ 2654.347979][ T6456] validate_nla: 1 callbacks suppressed [ 2654.347989][ T6456] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2654.387053][ T6456] __nla_validate_parse: 1 callbacks suppressed [ 2654.387063][ T6456] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2654.397588][ T6447] block nbd4: shutting down sockets 16:22:33 executing program 5: [ 2654.504300][T24212] block nbd4: Receive control failed (result -22) [ 2654.518149][ T6447] block nbd4: shutting down sockets 16:22:33 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000180)=0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r4, &(0x7f00000017c0), 0x1b4, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0], 0x2, 0x269a}) preadv(r3, &(0x7f00000017c0), 0x1b4, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r3, 0x800443d3, &(0x7f00000002c0)={{0x4d, 0x80, 0x3, 0xe8, 0x7f, 0x8}, 0x8, 0x81, 0x9}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000001c0)={r2, 0x45}, 0x8) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:22:33 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) read(0xffffffffffffffff, &(0x7f00000000c0)=""/216, 0xd8) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x3, 0xef20ceb6eda4df26) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8, 0x404142) setsockopt$sock_int(r3, 0x1, 0x2c, &(0x7f00000001c0)=0x5, 0x4) ioctl$NBD_DO_IT(r2, 0xab03) 16:22:33 executing program 1: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="31d96da88b0cce5062747ce237ca24f05b05df66b34814c1cdb2db3642a7c880224c03d6cffd67b36c7f1a51ae9aeaa3892b040ba2105d77d4e4579d745ad601f19c26d1260bcd5435ae4ad35d123f7e809a7b0576431fde9f78c3260a3837b52ef6437c404147add96892a9d3a67dcf93c198c3b7727cd266c20c5e584c28ae0843064b8f7f199db8641f71a407775e0090bbedee63a4640e1f012e5ca95bd14b5aa0da642b552ae4aa2b869458dec283c16f25c67068fc528a793f75c81acac8ee6596d79c449ade5eeee332c460ebc0d46c076e871b6426d521c571a95d0fa800de30a110e719ffde8f103773daaaec8c313aa3be0bdaa6e7e796df3975a8e37aee6d10579f8afe6552f187c242c731375f5d64cd40ab8904400f00000000000000000000000000000058b4721949da012002cb7f4ac8fe195c1388861be8cd45020083b0089b23f86603321faf83e794bea1ece8051e9996306347bd562aa2437fa6bdb57086302926b8af069b8d331ebf5c0e1a7f163e6d711af330efdfae413fafef9acf1d53e6aaf4f2dec9ddfb4ca321583e35a14a92e82bdbea3c127a033b32059fbadce23a3e87957f8238886aa9380000000018888c4c20ba104342e8c9d85a9dcf06abbb7a2905d37839bff6f8641ebce172c60a8d368cd4a94af484749dc4ccdd380bbf5d501302d50e79d3536eab5a12abdd347dac985c4349ec712661df947315514e45a515417e6b00000000000000002bdacdb2631c83a90dbca3aa7e5936f8aa413a75c7780309e1c178bce65ed205154ab4f55241cd2b6e83b29fc6cefe050d7d662360718e25bbdb2d34264d6a741cbbed50422f5d") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, 0x0, 0x0) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) [ 2654.656842][ T6463] EXT4-fs (loop0): Invalid log block size: 192 16:22:33 executing program 5: 16:22:33 executing program 5: [ 2654.925612][ T6522] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2654.967932][ T6522] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. 16:22:34 executing program 2: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="ccd3486d7de0b0ff1d3a169334e5d7a57745fcfd039105538dc6e4cdc0ab685306f84f82649847d52c0a13c100b40130362aed2868244349e04c0a37bef6588f72c362f7f2a421d002054413bc1076d1cdef176803a5607991b2bd127acc9512ae8c862d2d331ad68b6880a8d1698b13087b610b3f1f102731ad6c617750c182a11bb55564cd849e89da07bd4a1d311e4420530478be9c9fa16cd08830ee187fe2bd0c9fefb10636ff09c4a16b887c43a350b0417c6ed27ca22e7fc925d3be053e9dbef3aef77a8685d2909e3597af16068283a54bcb19ee47072685bb40a4dba843d7b7105b404ab7ac5eb1c3297211c6a1a0ed3bf1dd8134b99fd1cb", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r13, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000020) 16:22:34 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x800, 0x4) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r2, 0xab03) 16:22:34 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c00000000000003cc00000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 16:22:34 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socket$kcm(0x29, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000009be63c9ec354ee65367b720c5b12755c44ff7da9dd2f77b1fbfc0f0884047a2341c494dd5d608b2925fd3f76fd41e7905f91d8e366b570101e602bc13d6d93665f3db38d2f588ebdb5c736d453bb21691a642be4b9cafdd23218d22d1bb6b849180360260b4efd0237e361064642ed82a7b49ab0c17a71e770"]) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000000)=""/19) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0) write$P9_RFLUSH(r2, &(0x7f0000000180)={0x7, 0x6d, 0x1}, 0x7) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:22:34 executing program 5: 16:22:34 executing program 5: [ 2655.342777][ T6655] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2655.370975][ T6655] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2655.382386][ T6600] EXT4-fs (loop0): Unsupported filesystem blocksize 4194304 (204 log_block_size) 16:22:34 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x5, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r3, 0xab03) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r4, &(0x7f00000017c0), 0x1b4, 0x0) ioctl$VIDIOC_G_STD(r4, 0x80085617, &(0x7f0000000000)) 16:22:34 executing program 5: 16:22:34 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000007ffffff200000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 16:22:34 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000280)={0x7, 0x0, [{0x1, 0x81, 0x3, 0x800, 0xcf6, 0x6, 0x2b8}, {0xb, 0x40, 0x4, 0xfffffffb, 0x9, 0x7f8caa65, 0x9}, {0xb, 0x5, 0x1, 0xffff, 0x9, 0xff, 0x9}, {0xa, 0x0, 0x4, 0x4, 0x400, 0x200, 0x282}, {0xb, 0x1, 0xe, 0x81, 0x7f, 0x100, 0x10001}, {0x40000000, 0x4, 0x6, 0x1ff, 0x2, 0xff, 0x20}, {0x7, 0x2431, 0x6, 0x3ff, 0x3, 0x7af0, 0x5}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:22:34 executing program 5: 16:22:34 executing program 1: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) [ 2655.862042][ T6835] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2655.887241][ T6835] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2655.933459][ T6825] EXT4-fs (loop0): Unsupported filesystem blocksize 268435456 (242 log_block_size) 16:22:35 executing program 2: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r13, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000020) 16:22:35 executing program 4: syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x1, 0x1, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x1685d2f7e34e51b2, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 16:22:35 executing program 5: 16:22:35 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000007ffffff800000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 16:22:35 executing program 1: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) 16:22:35 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc000, 0x564f8c117fe01dda) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0x223840, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000180)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)) getpid() preadv(0xffffffffffffffff, 0x0, 0xffffffffffffffde, 0x0) 16:22:35 executing program 5: [ 2656.174641][ T6847] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2656.187416][ T6847] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2656.292222][ T6886] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2656.325615][ T6886] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. 16:22:35 executing program 5: 16:22:35 executing program 1: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) 16:22:35 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000700)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x6}}, 0xf5f50033e3dc4666, 0x8, [{{0xa, 0x4e24, 0x20, @ipv4={[], [], @loopback}, 0x9}}, {{0xa, 0x4e22, 0xfffffffe, @mcast1, 0x3ac}}, {{0xa, 0x4e21, 0xff, @rand_addr="84be7ccdf27e6c0077a8893eaa4e024d", 0x6}}, {{0xa, 0x4e21, 0xb7c, @local, 0x200}}, {{0xa, 0x4e21, 0x1000, @dev={0xfe, 0x80, [], 0x1d}, 0xe5}}, {{0xa, 0x4e21, 0x80000001, @remote, 0x400}}, {{0xa, 0x4e23, 0x8, @rand_addr="16c90da6f415b1d9ff42e02bdc50a5dd", 0x4}}, {{0xa, 0x4e20, 0x33b, @mcast2, 0x2}}]}, 0x490) [ 2656.468212][ T6855] EXT4-fs (loop0): Unsupported filesystem blocksize 0 (248 log_block_size) 16:22:35 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x8, 0x80001, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x0) openat$cgroup_ro(r3, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x0, 0x802) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x80045505, &(0x7f0000000380)={0x40, 0x0, "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"}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x40010, r4, 0xaa729000) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r5, &(0x7f00000017c0), 0x1b4, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000300)=ANY=[], &(0x7f000095dffc)) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="570298fa5487e6e94f6cbbf31a170936b60b9c8f", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000000)={r8}, 0x8) r9 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r9, &(0x7f00000004c0), 0x56, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x7d, &(0x7f0000000000)={r12}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r12, 0xffffb869}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000001c0)={r8, 0x2}, &(0x7f0000000200)=0xffffffffffffff7b) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x7d, &(0x7f0000000000)={r13}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0xfff, @mcast2, 0xfffffffd}}, 0xfffb, 0x2}, &(0x7f0000000180)=0x1f5) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r5, 0x0, 0xc, &(0x7f0000000500)='/dev/media#\x00', 0xffffffffffffffff}, 0x30) r15 = syz_open_procfs(r14, &(0x7f00000004c0)='fd\x00') preadv(r15, &(0x7f00000017c0), 0x1b4, 0x0) r16 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0x2400) ioctl$NBD_SET_FLAGS(r16, 0xab0a, 0x2) ioctl$NBD_DO_IT(r2, 0xab03) 16:22:35 executing program 5: [ 2656.621181][ T6974] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2656.674367][ T6974] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. 16:22:36 executing program 2: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r13, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000020) 16:22:36 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000007ffffff900000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 16:22:36 executing program 5: openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) 16:22:36 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x3, 0x0, &(0x7f0000000180)=""/102, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[@ANYBLOB="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"]) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:22:36 executing program 1: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) 16:22:36 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000100)={0x0, @initdev, @multicast2}, &(0x7f0000000140)=0xc) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x400) mq_open(&(0x7f0000000040)='nodevcgroup\x00', 0x0, 0x100, &(0x7f00000000c0)={0x2c, 0x98, 0x5, 0x7b11, 0x7, 0x0, 0x9e4, 0x1}) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r4, &(0x7f0000000700)=[{&(0x7f0000000180)=""/67, 0xfffffffffffffcb7}, {&(0x7f0000000200)=""/28, 0x1c}, {&(0x7f00000002c0)=""/150, 0x96}, {&(0x7f0000000380)=""/151, 0x97}, {&(0x7f0000000440)=""/157, 0x9d}, {&(0x7f0000000500)=""/250, 0xfa}, {&(0x7f0000000600)=""/204, 0xcc}], 0x7, 0x80000000000000cd) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f0000000000)=0x401) ioctl$NBD_DO_IT(r3, 0xab03) [ 2657.190719][ T7093] block nbd4: shutting down sockets [ 2657.218041][ T7101] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2657.248016][ T7101] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2657.253743][ T7108] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2657.274624][ T7108] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2657.301881][ T7098] EXT4-fs (loop0): Unsupported filesystem blocksize 0 (249 log_block_size) 16:22:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x1cb) socket$packet(0x11, 0x3, 0x300) sendmmsg$inet(r0, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x3b0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000600)="da", 0x220908}], 0x1}}], 0x4000000000001cc, 0x4000000) 16:22:36 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000006c0)=0x5) r2 = syz_open_procfs(0x0, &(0x7f0000000280)) preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000580)={0x8, 0x0, [{0x5000, 0x9, &(0x7f0000000000)=""/9}, {0xf000, 0x93, &(0x7f0000000280)=""/147}, {0x10000, 0xb3, &(0x7f0000000400)=""/179}, {0x1, 0xa3, &(0x7f00000004c0)=""/163}, {0x5000, 0x42, &(0x7f0000000700)=""/66}, {0x0, 0x6b, &(0x7f0000000340)=""/107}, {0x5000, 0x6, &(0x7f00000001c0)=""/6}, {0x3000, 0x1000, &(0x7f0000001780)=""/4096}]}) getpid() preadv(0xffffffffffffffff, 0x0, 0x15, 0x800000000002) 16:22:36 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c00000000000000ff00000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 2657.543344][ T7099] block nbd4: shutting down sockets 16:22:36 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000001c0)) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x0) ptrace(0x4206, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000040)="19010000b1") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000000)={0x0}) 16:22:36 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x7e, 0x4808c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x68, r4, 0x1, 0x0, 0x0, {{}, 0x0, 0x3, 0x0, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x4, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x212000, 0x0) ioctl$NBD_SET_FLAGS(r6, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r5, 0xab03) [ 2657.567427][ C0] net_ratelimit: 9 callbacks suppressed [ 2657.567437][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2657.578869][ C0] protocol 88fb is buggy, dev hsr_slave_1 16:22:36 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x70, r1, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xb88b}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfff8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x10) getpid() r2 = syz_open_dev$usbfs(0x0, 0x0, 0x802) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x80045505, &(0x7f0000000380)={0x10000, 0x0, "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"}) preadv(r0, 0x0, 0x0, 0x10005) [ 2657.692413][ T7231] block nbd4: shutting down sockets [ 2657.861023][ T7235] EXT4-fs (loop0): Unsupported filesystem blocksize 0 (255 log_block_size) 16:22:37 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)) getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x8001, 0x400040) ioctl$VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000380)={0x20, 0x3, 0x8d, 0x7, 0x80}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000340)={r5, 0x1}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000180)={r5, 0x2}) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x18441, 0x0) preadv(r6, 0x0, 0xfffffffffffffef3, 0x2) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r7, &(0x7f00000017c0), 0x1b4, 0x0) ioctl$TUNGETFILTER(r7, 0x801054db, &(0x7f0000000280)=""/204) 16:22:37 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0xb5cec901b8e2f41f, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x7d, &(0x7f0000000000)={r3}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x7, 0xf6d7, 0x302, 0x7f, 0x200, 0x5, 0xffffffff, 0x1, r3}, &(0x7f00000000c0)=0x20) r4 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r5 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r6, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r6, 0xab03) 16:22:37 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000003fffffff00000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 16:22:37 executing program 1: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) 16:22:37 executing program 2: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="ccd3486d7de0b0ff1d3a169334e5d7a57745fcfd039105538dc6e4cdc0ab685306f84f82649847d52c0a13c100b40130362aed2868244349e04c0a37bef6588f72c362f7f2a421d002054413bc1076d1cdef176803a5607991b2bd127acc9512ae8c862d2d331ad68b6880a8d1698b13087b610b3f1f102731ad6c617750c182a11bb55564cd849e89da07bd4a1d311e4420530478be9c9fa16cd08830ee187fe2bd0c9fefb10636ff09c4a16b887c43a350b0417c6ed27ca22e7fc925d3be053e9dbef3aef77a8685d2909e3597af16068283a54bcb19ee47072685bb40a4dba843d7b7105b404ab7ac5eb1c3297211c6a1a0ed3bf1dd8134b99fd1cb", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r13, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000020) [ 2658.201142][ T7360] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2658.225484][ T7360] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2658.238530][T24212] block nbd4: Receive control failed (result -22) [ 2658.247948][ T7352] block nbd4: shutting down sockets [ 2658.286079][ T7358] EXT4-fs (loop0): Unsupported filesystem blocksize 0 (255 log_block_size) 16:22:37 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x200, 0x10000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$NBD_DO_IT(r2, 0xab03) 16:22:37 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x9, 0x3, 0x2000}, 0x4) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:22:37 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000007fffffff00000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 16:22:37 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000001c0)) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x0) ptrace(0x4206, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000040)="19010000b1") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000000)={0x0}) [ 2658.621047][T24212] block nbd4: Receive control failed (result -22) [ 2658.637634][ T7476] block nbd4: shutting down sockets 16:22:37 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)=ANY=[@ANYBLOB="ca48610100000000"]) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:22:37 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x8200) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r2, 0xab03) [ 2658.785187][ T7490] EXT4-fs (loop0): Unsupported filesystem blocksize 0 (255 log_block_size) 16:22:37 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c0007ffffffffffff00000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 16:22:37 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) getpeername$unix(0xffffffffffffffff, &(0x7f0000000640), &(0x7f00000003c0)=0x6e) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000700)={0x8, 0x0, [{0x5004, 0x49, &(0x7f0000000180)=""/73}, {0x5000, 0xc3, &(0x7f0000000280)=""/195}, {0x1d000, 0x7f, &(0x7f0000000400)=""/127}, {0x10000, 0x18, &(0x7f0000000000)=""/24}, {0x3000, 0x6d, &(0x7f0000000480)=""/109}, {0x6000, 0x82, &(0x7f0000000500)=""/130}, {0x10000, 0x42, &(0x7f00000005c0)=""/66}, {0x0, 0x30, &(0x7f0000000380)=""/48}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000840)=ANY=[@ANYBLOB="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"/563]) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2658.967803][T24212] block nbd4: Receive control failed (result -22) [ 2658.978655][ T7599] block nbd4: shutting down sockets 16:22:38 executing program 1: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) 16:22:38 executing program 2: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="ccd3486d7de0b0ff1d3a169334e5d7a57745fcfd039105538dc6e4cdc0ab685306f84f82649847d52c0a13c100b40130362aed2868244349e04c0a37bef6588f72c362f7f2a421d002054413bc1076d1cdef176803a5607991b2bd127acc9512ae8c862d2d331ad68b6880a8d1698b13087b610b3f1f102731ad6c617750c182a11bb55564cd849e89da07bd4a1d311e4420530478be9c9fa16cd08830ee187fe2bd0c9fefb10636ff09c4a16b887c43a350b0417c6ed27ca22e7fc925d3be053e9dbef3aef77a8685d2909e3597af16068283a54bcb19ee47072685bb40a4dba843d7b7105b404ab7ac5eb1c3297211c6a1a0ed3bf1dd8134b99fd1cb", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r13, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000020) 16:22:38 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='\x00\x03\x00\x04\x00', 0x2c2401, 0x0) fcntl$notify(r2, 0x402, 0x4) r3 = socket$netlink(0x10, 0x3, 0xc) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000000)=@generic={0x0, 0x800000, 0x8000}) write$P9_RLCREATE(r2, &(0x7f0000000040)={0x18, 0xf, 0x1, {{0x0, 0x2, 0x2}, 0x9}}, 0x18) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1ffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r5, &(0x7f00000017c0), 0x1b4, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') r7 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r7, &(0x7f00000017c0), 0x1b4, 0x0) bind$isdn(r7, &(0x7f00000000c0)={0x22, 0x4c, 0xe0, 0x2, 0x7}, 0x6) preadv(r6, &(0x7f00000017c0), 0x1b4, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r8, &(0x7f00000017c0), 0x1b4, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r9, &(0x7f00000017c0), 0x1b4, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DELDEST(r10, 0x0, 0x488, &(0x7f00000001c0)={{0x4, @empty, 0x4e22, 0x1, 'ovf\x00', 0x10, 0xfffffbff, 0x61}, {@rand_addr=0x6, 0x4e24, 0x0, 0x0, 0x6, 0x1c07f5e5}}, 0x44) r11 = accept$unix(r9, 0x0, &(0x7f0000000180)=0xfffffffffffffda8) ioctl$sock_inet_SIOCGIFDSTADDR(r11, 0x8917, &(0x7f00000003c0)={'syz_tun\x00', {0x2, 0x4e23, @rand_addr=0x1}}) ioctl$NBD_DO_IT(r4, 0xab03) [ 2659.304774][ T7653] EXT4-fs (loop0): Unsupported filesystem blocksize 0 (255 log_block_size) [ 2659.366048][ T7732] validate_nla: 3 callbacks suppressed [ 2659.366058][ T7732] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 16:22:38 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000001c0)) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x0) ptrace(0x4206, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000040)="19010000b1") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000000)={0x0}) 16:22:38 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40000, 0x0) renameat2(r1, &(0x7f0000000000)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x2) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2659.445488][ T7732] __nla_validate_parse: 3 callbacks suppressed [ 2659.445498][ T7732] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. 16:22:38 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006cffffffffffffffff00000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 16:22:38 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x23d02a24c005766, 0x0) write$selinux_load(r1, &(0x7f00000002c0)={0xf97cff8c, 0x8, 'SE Linux', "f3a97e319183fe9981ad9c66ae5ca5fcd628cf84d67a6eb780d03dcc0c0473c95eee97016ec9ed250595365a61b015ee02a453de86501738f587"}, 0x4a) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000009914962462bdd43e620a861d4663ffdd3cb522f452d0f8e9fedd9f11e9a3199a5b72dc6592f3b150540f88298c1505f2b7783f724d0dc848cbdfe1a0a6516b96f7b03da3e0473d7677536e9d69f9e9564e55179e82"]) getpid() r2 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x4) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:22:38 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r2, 0xab03) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x2}) [ 2659.746485][ T7853] EXT4-fs (loop0): Unsupported filesystem blocksize 0 (255 log_block_size) [ 2659.883788][T24212] block nbd4: Receive control failed (result -22) [ 2659.896267][ T7861] block nbd4: shutting down sockets 16:22:38 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000010000000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 2659.957598][T24212] block nbd4: Receive control failed (result -22) 16:22:38 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/inuse#\x00', 0x3, 0x200000) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x20000, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x7d, &(0x7f0000000000)={r5}, 0x8) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r6, &(0x7f00000017c0), 0x1b4, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000002f80)={0x0, @in6={{0xa, 0x4e20, 0x9, @mcast1, 0x1}}, 0x5, 0x6, 0x80000001, 0x2, 0x48}, &(0x7f0000003040)=0x98) r8 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r8, &(0x7f00000017c0), 0x1b4, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000003080)={0x0, 0x432, 0x1, [0xfc0a]}, &(0x7f00000030c0)=0xa) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x7d, &(0x7f0000000000)={r12}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000035c0)=@assoc_value={r12, 0xd5d}, &(0x7f0000003600)=0x8) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) r15 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r14, 0x84, 0x7d, &(0x7f0000000000)={r16}, 0x8) r17 = socket$inet6_sctp(0xa, 0x1, 0x84) r18 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r18, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r17, 0x84, 0x7d, &(0x7f0000000000)={r19}, 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000003cc0)={r19, 0xfa, "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"}, &(0x7f0000003e00)=0x102) r21 = socket$inet6_sctp(0xa, 0x1, 0x84) r22 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r22, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r21, 0x84, 0x7d, &(0x7f0000000000)={r23}, 0x8) sendmmsg$inet_sctp(r2, &(0x7f0000003f00)=[{&(0x7f00000001c0)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10, &(0x7f0000001700)=[{&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000000280)}, {&(0x7f00000002c0)="7a254e26c7d9236d6f895337fc17f785f9457e811b827a74209115e66ab96e2ed04f167bc162402341410820243e737dcab7ccd925b78704ec986436a5fb46524a497753cf11c716ac8ee5e8529cce55a3d3e15cd8f8d2d324f2fa5524ec3e6d3cb47d6eb57a9d62dc921bd1c95478d1b4e7d1f94eeb1ab6254660b92b5d8c5b936ad50cafc5c09e0c93129f", 0x8c}, {&(0x7f0000000400)="fcb1e45144dc9205d06b6fc700298701b4c98f67e4c31cbc56172a4e40723919f1a946deb6881a465bfc88583c004427f6da6a65022c33ddf7031608cd740a75498b4d8afb9e844c383ed4bc5fc4f79413b5ccadf90c9aabe28e852f5f427770e8dbf52574724856f30bfea7fcf4162899fe97c7d706d72240f30a2e026ece1481bf9e8382f609c52961f79420dee179cb084d15a14a7d3e1e35b6395098fa95ac1f35711f11fb1034f0dd0a8044c3", 0xaf}, {&(0x7f0000000380)="7b0fc01be6a12c7919a952cd5b9531a5047a4e966129fb980d9848e942329d87269eae37", 0x24}, {&(0x7f00000004c0)="7af504b1e91b0e5d9f982edb48912f2de17f99a3054cd48cc241827afcb7bd24dcd6b29924f97d0381d191fc9ad38b35c8bb14c75d16c06dcb59655c6a413f6c4c5c", 0x42}, {&(0x7f0000000540)="53b7df8057d2844bbcc516dc6bb46dbcfa684157c70585a84be69c207d0340ea5f1b4158d14acbf87f302af9bdb22992b8de9c14ca335747fa", 0x39}, {&(0x7f0000000580)="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", 0xfa}], 0x8, &(0x7f0000001780)=[@dstaddrv6={0x20, 0x84, 0x8, @local}, @authinfo={0x18, 0x84, 0x6, {0x7}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}], 0x58, 0x40}, {&(0x7f0000000680)=@in6={0xa, 0x4e23, 0x2, @rand_addr="885ef01ea3efa50a7bbcc4e499bf8ddc", 0x1000}, 0x1c, &(0x7f0000002c00)=[{&(0x7f0000001800)="69dcf90a1543eb04df78abf69f0262fc49b23598177f0bde468067b4322f155c117c753ec5bdf6b60336fdb684e80487a0c96ea0faf74d2294ff9f62f77f38b527152f044026a269a055a7aeda76214cede43191190d2476d9add079f9a7f23870d013260de07569000469141ed525eb4ebea54d7a69e481efc9ef1a534f368ed3b035c46693dbb32a9cf2ccc747", 0x8e}, {&(0x7f00000018c0)="5d82455cf68da997caf289df5beca7a37f8e5963f89a3ac7d5618cc2d90e192e16ff21439a42cb96c18e5eaba3bd0c2ee8dee2941a5b28", 0x37}, {&(0x7f0000001900)="803d2a78cd1ceee6f8d2d4bb3884b07fe8e6c2795129ba1711b18df6a705bd27ed22d22bd6a9e3ee12e7ec4559595ffbb6ab8f2407ab81b93d911c", 0x3b}, {&(0x7f0000001940)="c25c42723abf30be94d6b7bc3ed5a4e27b8d752af64a5c4590acf2c2de5bfdab0767620afa3fd1ec1aacbd2a7dc2a8fc6262c3e92e87424aa64d500767505bb9510863e6520b1cac1b22a47c3a90d2894a6bae7151739b43b13f50d801be9128c1320682bb0d8c1f296670da4c73c38cc262dda75d1ffa4ef010a0a687d54a22b9f9964c32540bcacec35af8011fb09a39f3e6f80a6f7592d0e16e8af1566e71c3aef8319a8c9e8413521e36d264f283a68217a0b21898ce9e86e9c0017cbc9535051e7953d541c8d8a51ef0ec", 0xcd}, {&(0x7f0000001a40)="e3c634a69e37d9b754b2949b3939e8a3e8f12c9d2416b6668d195ec3d0456e68f95225b3abd114f44b8ce64f65ae7a25758824770000e709b7633b74c0b97e817c6e8a1f6ccb784efb52e215df02185872fdf3843ae09827fb476daf162c39a44157b44224dd0be4924c2b46896ee14beb086d3fa6", 0x75}, {&(0x7f0000001ac0)="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", 0x1000}, {&(0x7f0000002ac0)="6b250c6f022adcc7633d564e97f12fb1d5f72266bb4933251c", 0x19}, {&(0x7f0000002b00)="b9739a847858679f490449a3f63ba8633273d09b8fd780b3cbd40f755df5fced80f2615751a4302e5dc72fe4c7554e36b881b2e06cebc726ccd6d68880da824e9ece10a3614f3f471ab81ad916093bb3da56c80405575c310600502a41c4374c23c62ac1408eedeb39ab78e2795395654dd4b866b008f61b3e51f6427c311f3e45ca01a307a2bf93cc48fff0d0dc118ad559593a162f9b7cf4ec039efa0a95fdd9f147d6fc96948f146615b805bacd1ab689fbb28fb4efa937405a5d870901802259d84305fb121d92f4caaf16ea", 0xce}], 0x8, &(0x7f0000002c80)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x3}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @remote}}], 0x38, 0x1}, {&(0x7f0000002cc0)=@in6={0xa, 0x4e23, 0x10001, @ipv4={[], [], @empty}, 0x101}, 0x1c, &(0x7f0000002f40)=[{&(0x7f0000002d00)="8b60e5db54", 0x5}, {&(0x7f0000002d40)="84c75ce6e843bc1d50190f2ca7f7f1f3759400035172ebc8f8d9a0da665053be3e0ddaf48776676df4299013770f0d7f597f41a3e5e3243cdf3d5f85c098aab933b4c214093944b08b55e784a71c9a222818cc664b6c0f44c1a77dcaf51358d58bda53c42ca41a82a1aa59591aa4aedd80e9afd5e92666281aeb5c49c31aebed8321ea7ff28d69cd8732ce3048b2043501545a5e99ced4824b0cc724633fc64d674b396d7e7e84741b1186fad3865f755a31ef61c0297f32be33af9becdff62a49507a9cda3d638fbe5da3651fe0cccc36a4c690ef20221e2bff21eea626", 0xde}, {&(0x7f0000002e40)="29378087e43c53ed49dfd3263e01c5ab380dccd005ad6f213e605c205b2f58f3b460e3a09995a82024a1afe6fef6b4f07975d9a92793ada3ed29f24fe841b4ced2ae6a274470a632a9cb3a111e37572adab830f9cacda487604f9c82793ae946bdbc98f17dd454edb53482ec7ce2ddde505672e3c3acdf3403ae4e23f020e3c51f5374ca7ddfdfe0507efd7ec0e7674be8d050b2ad977cd9f34f8a88776cddc2473efe0ca1a8180886d6236f8ff1c17503fb6dce915b7a71e9820e77626a1e0f175d961273259d86506324566a401678a80f70b9a2", 0xd5}], 0x3, &(0x7f0000003100)=[@sndrcv={0x30, 0x84, 0x1, {0xbac, 0x4, 0x1, 0x0, 0x4, 0xef, 0x3, 0x8, r5}}, @authinfo={0x18}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x1a}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0x19}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}, @sndinfo={0x20, 0x84, 0x2, {0x3f, 0x8202, 0x68, 0x8830, r7}}, @sndrcv={0x30, 0x84, 0x1, {0x81, 0x7, 0x8204, 0x4, 0x80, 0xfff, 0x2, 0xd5, r9}}], 0xf0, 0x9d95f648f514754a}, {&(0x7f0000003200)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f0000003540)=[{&(0x7f0000003240)="38fdaf5833d3539db37cbdc55b72b5bcc9c05fc42479cd1ada96d65c63d25c611dc738dfd4ed4b9f959878e32f7443e87b8524b7d8d4e007016c6d38e7b78007b59e350406c7ff6872cc62033a81faf9cdcdfb1d77eb7853991c331da53fcb286c2e5f66310de0c75d2e91726e7264d9bd576fa6ddf92d40436ad5c0a21d547d984c1ae57a3b7561f545c17efb8c7066cec186fa186eb2f0c21a5f494550b943b15aea3cefbd9dca763aa88a3610a7dfb647b140bcc223bdccc3530ec49afadfc988c5e0db58005c197635e564e6289347551cc92bfb", 0xd6}, {&(0x7f0000003340)="0fbaf51b39aca01e0582e9a10be2cdf0266404ccc162ff4711180d0998fbcfd5f4c571054ab998b650ac8f6240eecb70fe6797a9597d2480cfa322769b321f45aaf7abda3aa445298385dcaac3ee3c5d695582c92db24cf04ebeae68b30f199939ab2e972070c186cb661654a398dd83", 0x70}, {&(0x7f00000033c0)="00f38b3cdf35a0cc771cce1851f1ffddc26412cebdd1fab23f14906df45b8597339dcdc9f52f41e3200504e2f084", 0x2e}, {&(0x7f0000003400)="c2fb2a07e37a321511f47056f2b4540dca7793991f41ca6bad9bde496a03423821ec4bedf31d58af5715eef9f4011c76bc9b6ebb3036b29e8760425817f054efb71c11b8740ffa657185595a90294e32e2c21dc2874a2501b1d74b89ff8beb4af50ca5245aa851ef2162033cde1881043487f1b70ecad74b18b9e604bba74e1271f76e592517ec5d60de377d8418ff1ab3974492", 0x94}, {&(0x7f00000034c0)="1067799bf69c499c5a328979d5e9aa4f2c6e01e015b74ef5a3082660878f4ed8ba0663e5f565a60a2dfa973d61f0526ac4b1862b2adfc7c65b9b199d435d781ad066adbcdb7b0f5d557ecac43a8f8ed4a0cbba8194", 0x55}], 0x5, &(0x7f0000003640)=[@sndinfo={0x20, 0x84, 0x2, {0x8001, 0x200, 0x5, 0x9, r13}}, @authinfo={0x18}, @authinfo={0x18, 0x84, 0x6, {0x2}}, @dstaddrv4={0x18, 0x84, 0x7, @local}], 0x68}, {&(0x7f00000036c0)=@in6={0xa, 0x4e24, 0x4, @empty, 0x42}, 0x1c, &(0x7f0000003c00)=[{&(0x7f0000003700)}, {&(0x7f0000003740)="9cb624370a9e0d1ad7c8e4b0acf0389de6036753ea17dcbc039d21f81136dce9766c6327f8fb9f32a9d2dc69d0b8654d52c0bc29546ce269eb27fbd76a27798fa92659d34c9ac82dcb6ba830554b0bbfd14ad35a4638e96b05a351110075dff481804793dc6d517a0fbcca9b11cb856db1a4f9def5a070f0ac86f68bbd4aac9483663a758ecb40f80364493a4f62d757e4430546920b62e634d04b277fe0061cc5015c580359082994333b463fb7e8b80116e88b47eac8673d03e79173ab3b6b9480ac52ead4af81126b", 0xca}, {&(0x7f0000003840)="7739ddaf1798f2e5a22f33f1f2f84fe7ae14abd1dd37ffb9fd9dd3bf958dfc0ae155da07028ac15f6c30bc429caef326c5291c3843fc92e154c73d026e7763642d300126c25f665e41228adb0f9a9eaf618211199d632c483d141b8e3d25a797724d00f38bc9b223b521b62cdc382b7ab1ab7b9c944c4177ad2760bc0f36bb4204a44e1de3b3823f6b11825a0648c6c0a6c4c8c2b023afce8d4877b5dffa73e6e5a20824e513201bf0c29f65", 0xac}, {&(0x7f0000003900)="764081606250a1a37b6551f379ab72567297c5870a0ac28666c01aa844737d740c2e1ade042c28e63cb02e3532413cbed607fe8141f15db0d688c6f3f10c7204b3deae9374fd496bebc6849a1b7ea670d7459ca303056aed0b41a9f7a4cd14096a8f710cd16d", 0x66}, {&(0x7f0000003980)="2529d87671a17a4980f0b7f5f25bb31736f756699df15b35ec7c98a6ab4562c503", 0x21}, {&(0x7f00000039c0)="cac2680bd2320495551a587aa07222b56560bdd66f038cb08b5ca8eb12", 0x1d}, {&(0x7f0000003a00)="9e6e98cfad4f6859c1c7bf7c2df1ed5231a78c24b9d91fe4e6def54cc87f41dfec69b907aa73e09e8f7a8d1de02aa3d2557c9ae192cf4004421abe214c85e84b3eb6f4b6f844abcb29040ec6aa494c15d6d70caac2ce1974870d0c1bba226c724221ce1fdb8ed3201e79f5105dce3d1a7482dd7eec266eae63dd0e", 0x7b}, {&(0x7f0000003a80)="e514eda3d3bf18edeb29d8866e1e261c33d983523c33b6fb80028985391e2702d6afbba883d0394b5f376ddc3f0b5bb63020110a63ba83d91f093e7bf8b94b39ad5bee08636c41e65550d6b421c1830b5da9c298205a4f9db5b8514b5f0c1f608b8aa4e330121da47eae8e378c4c8d6abf06045c3613473dc78541a7052d2921848d82c60c350f4cb3a4487d424a1b45857674ee5647e459214690c081bc1900b082e02db16e7993e0216fa83d617c85c1de8de08f7e30c6ab239a215be1e51e2c1249b8e1c71293f60364a878ff43d761f8e5dc6656380a5d482f564c4bdbc5d8893a7d6f7ff8c3c1a53e3930c1", 0xee}, {&(0x7f0000003b80)="48ab6d9c7fca562a676d5ff0a238be8b4d5130c4e2223a435162e51c7a31b048ec5cb3637a84e0b09c4c8754fc679ed212d4f73922d6bf1f6615a9a029e0c7688dad221ec45199adb0d91157a45d", 0x4e}], 0x9, &(0x7f0000003e40)=[@sndrcv={0x30, 0x84, 0x1, {0x5bbf, 0xce, 0x1, 0xfffffffa, 0xfffffffb, 0x5e, 0x1f, 0x59f, r16}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x8008, 0x80, 0x4, r20}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x40a, 0xd9, 0x0, r23}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr="0be9d6dbd058025f3e7ced593c45ae17"}], 0x90, 0x20000000}], 0x5, 0x840) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:22:39 executing program 1: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, 0x0, 0x0, 0x8, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) 16:22:39 executing program 2: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r13, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000020) [ 2660.154973][ T7864] block nbd4: shutting down sockets 16:22:39 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x9, 0x808, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) [ 2660.227447][ T7965] EXT4-fs (loop0): fragment/cluster size (2048) != block size (1024) 16:22:39 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x802) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x80045505, &(0x7f0000000380)={0x2, 0x0, "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"}) r2 = dup(r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x7d, &(0x7f0000000000)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={r5, 0x80}, &(0x7f00000001c0)=0x8) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x3, 0x6fdd, 0x40, 0xdf, 0x1, 0x1, 0x7, 0x81, 0x4, 0x0, 0x8, 0x7ff}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)) getpid() r6 = syz_open_dev$usbfs(0x0, 0x0, 0x802) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x80045505, &(0x7f0000000380)={0x2, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000004c0)={0x60, 0x24, 0x3ff, 0x40, 0xdc, 0xffffffff, &(0x7f0000000280)="b96f68d8565c04023b3105e7ce5f6e6e53232c861b06921c0df5338bb3b70ff6f450b662b8cbb0b639ddfda0f01771e672ae41e6a7a6c86aa154c8c467ef3a38767376cb4f9058170ef7f0f5c951de0b86657b7d12b752fff311f1487c0d5f29e5d415df9a7aa46f54f01bc4e0a6774cedc224fa8e6ca7aa4a04a41d481697dd4988aaf893f0afc04e0c5c3f726abc475f69a26d3436b1e7497421c4918301eaa9e2af96b2790010c7c130d973d0e662b17b8ab6b0ba592197691e0be2f29d21981d5c5e895fe104bc44c6158ddefdd723b343f7ebeb6ea3cf11727a"}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2660.268438][ T7986] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2660.293648][ T7989] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2660.295783][ T7986] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. 16:22:39 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000001c0)) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x0) ptrace(0x4206, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000040)="19010000b1") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000000)={0x0}) [ 2660.333707][ T7989] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. 16:22:39 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000200000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 16:22:39 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x20000) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r2, 0xab03) 16:22:39 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\b\x00\x00']) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2660.784576][T24212] block nbd4: Receive control failed (result -22) [ 2660.808887][ T8112] block nbd4: shutting down sockets 16:22:39 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x5800) write$P9_RCREATE(r0, &(0x7f0000000180)={0x18, 0x73, 0x2, {{0x43, 0x2, 0x5}, 0x8}}, 0x18) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000003c0)) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2660.828095][ T8113] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2660.841479][ T8113] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2660.856760][ T8113] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2660.901014][ T8113] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 16:22:39 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000300000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 16:22:39 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x81, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1dc, r4, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK={0xf4, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x955}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x830b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x46ba9e7b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x408}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x80, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0xd588}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x405dcb05}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r2, 0xab03) 16:22:40 executing program 1: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, 0x0, 0x0, 0x8, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) 16:22:40 executing program 2: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="31d96da88b0cce5062747ce237ca24f05b05df66b34814c1cdb2db3642a7c880224c03d6cffd67b36c7f1a51ae9aeaa3892b040ba2105d77d4e4579d745ad601f19c26d1260bcd5435ae4ad35d123f7e809a7b0576431fde9f78c3260a3837b52ef6437c404147add96892a9d3a67dcf93c198c3b7727cd266c20c5e584c28ae0843064b8f7f199db8641f71a407775e0090bbedee63a4640e1f012e5ca95bd14b5aa0da642b552ae4aa2b869458dec283c16f25c67068fc528a793f75c81acac8ee6596d79c449ade5eeee332c460ebc0d46c076e871b6426d521c571a95d0fa800de30a110e719ffde8f103773daaaec8c313aa3be0bdaa6e7e796df3975a8e37aee6d10579f8afe6552f187c242c731375f5d64cd40ab8904400f00000000000000000000000000000058b4721949da012002cb7f4ac8fe195c1388861be8cd45020083b0089b23f86603321faf83e794bea1ece8051e9996306347bd562aa2437fa6bdb57086302926b8af069b8d331ebf5c0e1a7f163e6d711af330efdfae413fafef9acf1d53e6aaf4f2dec9ddfb4ca321583e35a14a92e82bdbea3c127a033b32059fbadce23a3e87957f8238886aa9380000000018888c4c20ba104342e8c9d85a9dcf06abbb7a2905d37839bff6f8641ebce172c60a8d368cd4a94af484749dc4ccdd380bbf5d501302d50e79d3536eab5a12abdd347dac985c4349ec712661df947315514e45a515417e6b00000000000000002bdacdb2631c83a90dbca3aa7e5936f8aa413a75c7780309e1c178bce65ed205154ab4f55241cd2b6e83b29fc6cefe050d7d662360718e25bbdb2d34264d6a741cbbed50422f5d") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r13, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000020) 16:22:40 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000001c0)) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x0) ptrace(0x4206, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000040)="19010000b1") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000000)={0x0}) 16:22:40 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000782837a1673e36000000"]) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2661.272579][ T8242] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2661.331170][ T8277] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2661.341228][ T8242] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2661.379365][ T8277] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2661.409669][ T8237] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2661.434596][ T8237] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2661.460070][ T8237] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock 16:22:40 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r2, 0xab03) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400200, 0x0) [ 2661.509946][ T8240] block nbd4: shutting down sockets [ 2661.510605][ T8237] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 16:22:40 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x4000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r4, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x1d80fcfe9228be7e, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_client='access=client'}, {@version_9p2000='version=9p2000'}, {@cache_mmap='cache=mmap'}, {@posixacl='posixacl'}, {@access_user='access=user'}, {@access_any='access=any'}, {@access_any='access=any'}, {@access_client='access=client'}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@obj_type={'obj_type'}}, {@subj_user={'subj_user'}}]}}) 16:22:40 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000400000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 2661.696226][T24212] block nbd4: Receive control failed (result -22) [ 2661.705442][ T8368] block nbd4: shutting down sockets 16:22:40 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) write$capi20_data(0xffffffffffffffff, &(0x7f0000000000)={{0x10, 0x8000, 0x184, 0x80, 0x1, 0xfffffe00}, 0x56, "56ddbfea35f2971396e4f7a591614f522ac2c94f602c3986aca6df007605e043e1e83ad455a22b27bc608aa877440de3c662d60ee1b56b0a3702ba81635fc69f82036d2a1d1a8c1c685f8591396b43474f27c4fea547"}, 0x68) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r2, 0xab03) 16:22:40 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)) getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000000)={0x1, 0x1ff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2661.972185][T24212] block nbd4: Receive control failed (result -22) [ 2661.981468][ T8481] block nbd4: shutting down sockets 16:22:41 executing program 1: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, 0x0, 0x0, 0x8, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) 16:22:41 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000001c0)) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x0) ptrace(0x4206, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000040)="19010000b1") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000000)={0x0}) [ 2662.043521][ T8479] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2662.067854][ T8479] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2662.080138][ T8479] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2662.158202][ T8479] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 16:22:41 executing program 2: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="ccd3486d7de0b0ff1d3a169334e5d7a57745fcfd039105538dc6e4cdc0ab685306f84f82649847d52c0a13c100b40130362aed2868244349e04c0a37bef6588f72c362f7f2a421d002054413bc1076d1cdef176803a5607991b2bd127acc9512ae8c862d2d331ad68b6880a8d1698b13087b610b3f1f102731ad6c617750c182a11bb55564cd849e89da07bd4a1d311e4420530478be9c9fa16cd08830ee187fe2bd0c9fefb10636ff09c4a16b887c43a350b0417c6ed27ca22e7fc925d3be053e9dbef3aef77a8685d2909e3597af16068283a54bcb19ee47072685bb40a4dba843d7b7105b404ab7ac5eb1c3297211c6a1a0ed3bf1dd8134b99fd1cb", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x46000801}, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r13, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000020) 16:22:41 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[@ANYBLOB="002b9500000000000000"]) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:22:41 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000000c0)=""/230, &(0x7f0000000000)=0xe6) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r2, 0xab03) [ 2662.273850][ T8601] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2662.343808][ T8601] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. 16:22:41 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000500000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 2662.412021][ T8612] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2662.427742][T24212] block nbd4: Receive control failed (result -22) [ 2662.443036][ T8608] block nbd4: shutting down sockets [ 2662.467443][ T8612] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. 16:22:41 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)) getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:22:41 executing program 4: syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r0 = socket(0x1, 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='aG\x9b2E\x06\xc1\xb7\x00\xc4\xf2~\xc6t7\xbcZ\x96!\xda\xe0\xfa\xce\xf0\xfa\xc2x|\xce,~\xaf0\x85\x12\x0e\f~\xa0?C\xdb\x93\xe96\x8cP\xe8\xff\xbd\xfb\xe7\xfb\xdcX!\xac\xba\xf7su*D\x19\xee\x97\xee\xff\xf8t\x00%\x9b\xccra\xa7ZFo,\xa4>\x1c\xf8\xc1\x03\x7f\x9b\xa8X\xdb(\xcd\xca\x05\xdb\x8b^~h\xfap\xd4\xdc\xdb\xba^o\xc2\xe8\x8a\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="ccd3486d7de0b0ff1d3a169334e5d7a57745fcfd039105538dc6e4cdc0ab685306f84f82649847d52c0a13c100b40130362aed2868244349e04c0a37bef6588f72c362f7f2a421d002054413bc1076d1cdef176803a5607991b2bd127acc9512ae8c862d2d331ad68b6880a8d1698b13087b610b3f1f102731ad6c617750c182a11bb55564cd849e89da07bd4a1d311e4420530478be9c9fa16cd08830ee187fe2bd0c9fefb10636ff09c4a16b887c43a350b0417c6ed27ca22e7fc925d3be053e9dbef3aef77a8685d2909e3597af16068283a54bcb19ee47072685bb40a4dba843d7b7105b404ab7ac5eb1c3297211c6a1a0ed3bf1dd8134b99fd1cb", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x0, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) 16:22:42 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x442040, 0x0) setsockopt$packet_buf(r1, 0x107, 0x1, &(0x7f0000000280)="9115c255055dd9ab9e868e4065959affbc1e850af207defaa718c82295c804ac47899df4658227830cc7d517fb33828868cad18534d3c7f78840ab9ceb8f3339612d1696cb408e97690202a0a8a026fb7105782eba69b5ade1bcb9e328924420f52e36855a928ae3e3a60c2087e53dbfe2a51939bed649802619eb12f461d1c8180a1ea6c3283df4b3dfd3875c99f773333d9156fa55f9e6ba925cb1bef5865873c0fb1d3bc485ee87b0b0ca6b545c8d81b6ca3f583bb6f2943c394aa1db38a7dfb9aa6dd906945eed7e419ef915fe3804af", 0xd2) 16:22:42 executing program 2: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="31d96da88b0cce5062747ce237ca24f05b05df66b34814c1cdb2db3642a7c880224c03d6cffd67b36c7f1a51ae9aeaa3892b040ba2105d77d4e4579d745ad601f19c26d1260bcd5435ae4ad35d123f7e809a7b0576431fde9f78c3260a3837b52ef6437c404147add96892a9d3a67dcf93c198c3b7727cd266c20c5e584c28ae0843064b8f7f199db8641f71a407775e0090bbedee63a4640e1f012e5ca95bd14b5aa0da642b552ae4aa2b869458dec283c16f25c67068fc528a793f75c81acac8ee6596d79c449ade5eeee332c460ebc0d46c076e871b6426d521c571a95d0fa800de30a110e719ffde8f103773daaaec8c313aa3be0bdaa6e7e796df3975a8e37aee6d10579f8afe6552f187c242c731375f5d64cd40ab8904400f00000000000000000000000000000058b4721949da012002cb7f4ac8fe195c1388861be8cd45020083b0089b23f86603321faf83e794bea1ece8051e9996306347bd562aa2437fa6bdb57086302926b8af069b8d331ebf5c0e1a7f163e6d711af330efdfae413fafef9acf1d53e6aaf4f2dec9ddfb4ca321583e35a14a92e82bdbea3c127a033b32059fbadce23a3e87957f8238886aa9380000000018888c4c20ba104342e8c9d85a9dcf06abbb7a2905d37839bff6f8641ebce172c60a8d368cd4a94af484749dc4ccdd380bbf5d501302d50e79d3536eab5a12abdd347dac985c4349ec712661df947315514e45a515417e6b00000000000000002bdacdb2631c83a90dbca3aa7e5936f8aa413a75c7780309e1c178bce65ed205154ab4f55241cd2b6e83b29fc6cefe050d7d662360718e25bbdb2d34264d6a741cbbed50422f5d") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x46000801}, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r13, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000020) 16:22:42 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r4, &(0x7f00000017c0), 0x1b4, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) [ 2663.336553][ T8962] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2663.375782][ T8962] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2663.474718][ T8965] block nbd4: shutting down sockets [ 2663.489169][ T8974] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2663.497443][ T8956] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2663.507192][ T8956] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2663.530178][ T8974] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. 16:22:42 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000002c0)=""/116, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) r3 = syz_open_dev$usbfs(0x0, 0x0, 0x802) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x80045505, &(0x7f0000000380)={0x2, 0x0, "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"}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000180)=ANY=[@ANYBLOB="17977a636e79faf4b591bf9f50f7b381308f96e885d8778ce7095e4111cac2f3a2e45270b5b6cbc45e1f4a84ee7c72e5cafe0a5221241890cd", @ANYRESOCT, @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRESOCT=r3], @ANYRES64=r3]) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000003c0)) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2663.579978][ T8956] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2663.645065][ T8956] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 16:22:42 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='lou\x17\xc6ts\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000400)={0x0, 0x80000, r2}) r4 = epoll_create1(0x0) preadv(r4, &(0x7f0000001440), 0x10000000000001e7, 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000000)=0x800) r5 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x44400) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x2}, &(0x7f0000000200)=0x8) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f00000002c0)={0x5, 0x81, 0x2, @random="efd5fbbc2bab", 'eql\x00'}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000240)={r7, 0x5}, &(0x7f00000003c0)=0x8) r8 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r8, &(0x7f00000017c0), 0x1b4, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r8, 0x29, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000057000008000000002900000023e8aea8fb6df5dd7f53be86de61dbf33e153372513ba059effd24190100"], &(0x7f0000000040)=0x4d) r9 = socket(0x3, 0xa, 0x1) ioctl$NBD_SET_SOCK(r5, 0xab00, r9) r10 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r10, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r10, 0xab03) 16:22:42 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000700000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 16:22:42 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000480)={0x6357, 0x1, 0x0, [{0x4, 0x0, 0x5, 0x6, 0xa8, 0x1, 0x5}]}) r3 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, &(0x7f0000000280)=0x3) r4 = syz_open_dev$swradio(&(0x7f0000000300)='/dev/swradio#\x00', 0x1, 0x2) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) write$cgroup_pid(r4, &(0x7f0000000340)=r5, 0x12) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)) r6 = getpid() syz_open_procfs(r6, &(0x7f0000000000)='timers\x00') r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/mls\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r7, 0xc0086423, &(0x7f0000000180)={r8, 0x3}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:22:42 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000001c0)) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x0) ptrace(0x4206, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000040)="19010000b1") socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000000)={0x0}) 16:22:42 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='\x00\x00\x05\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000000)) [ 2664.065204][ T9097] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2664.104388][ T9097] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 16:22:43 executing program 1: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x0, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) [ 2664.137544][ T9097] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2664.175447][ T9097] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 16:22:43 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000800000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 16:22:43 executing program 2: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="31d96da88b0cce5062747ce237ca24f05b05df66b34814c1cdb2db3642a7c880224c03d6cffd67b36c7f1a51ae9aeaa3892b040ba2105d77d4e4579d745ad601f19c26d1260bcd5435ae4ad35d123f7e809a7b0576431fde9f78c3260a3837b52ef6437c404147add96892a9d3a67dcf93c198c3b7727cd266c20c5e584c28ae0843064b8f7f199db8641f71a407775e0090bbedee63a4640e1f012e5ca95bd14b5aa0da642b552ae4aa2b869458dec283c16f25c67068fc528a793f75c81acac8ee6596d79c449ade5eeee332c460ebc0d46c076e871b6426d521c571a95d0fa800de30a110e719ffde8f103773daaaec8c313aa3be0bdaa6e7e796df3975a8e37aee6d10579f8afe6552f187c242c731375f5d64cd40ab8904400f00000000000000000000000000000058b4721949da012002cb7f4ac8fe195c1388861be8cd45020083b0089b23f86603321faf83e794bea1ece8051e9996306347bd562aa2437fa6bdb57086302926b8af069b8d331ebf5c0e1a7f163e6d711af330efdfae413fafef9acf1d53e6aaf4f2dec9ddfb4ca321583e35a14a92e82bdbea3c127a033b32059fbadce23a3e87957f8238886aa9380000000018888c4c20ba104342e8c9d85a9dcf06abbb7a2905d37839bff6f8641ebce172c60a8d368cd4a94af484749dc4ccdd380bbf5d501302d50e79d3536eab5a12abdd347dac985c4349ec712661df947315514e45a515417e6b00000000000000002bdacdb2631c83a90dbca3aa7e5936f8aa413a75c7780309e1c178bce65ed205154ab4f55241cd2b6e83b29fc6cefe050d7d662360718e25bbdb2d34264d6a741cbbed50422f5d") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x46000801}, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r13, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000020) 16:22:43 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/94, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2664.289762][ T9162] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2664.320533][ T9162] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. 16:22:43 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x2, 0x7, 0x80000000, 0x4000, 0xffffffffffffffff}) write$binfmt_aout(r2, &(0x7f00000000c0)={{0xcfa5dad6bdb96609, 0x0, 0x5, 0x39f, 0x1c0, 0x80, 0x25d, 0x1}, "88181d7e597440c48d1632d1ca8978a8f56ea4e98b76162af439c6ce642ed05d795e835d42128629a9963c451d1210901ec11e022abfc53eaed0168cde8408d0b3d0adc1", [[], [], [], [], [], [], [], []]}, 0x864) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r3, 0xab03) [ 2664.506474][ T9243] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2664.558417][ T9243] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2664.588894][ T9242] block nbd4: shutting down sockets [ 2664.660139][ T9244] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 16:22:43 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x3, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000cc196e086b1f41110000"]) getpid() r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x4208c6f75541e2fa) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280), r3, 0x0, 0x1, 0x4}}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r4, &(0x7f00000017c0), 0x1b4, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000300)={0x15, 0x110, 0xfa00, {r6, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @loopback}, @ib={0x1b, 0x5895, 0x8, {"008da1d2d93f4bb5f0f5afb41c0d87e4"}, 0xb1c, 0x100, 0x9}}}, 0x118) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000180)={'veth0_to_hsr\x00', @random="e34eef12e934"}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2664.720113][ T9244] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 16:22:43 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000001c0)) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x0) ptrace(0x4206, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000040)="19010000b1") socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000000)={0x0}) 16:22:43 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x200, 0x1, 0xa6, 0x0, 0x9}, 0xc) getuid() ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r3, 0xab03) [ 2664.786376][ T9244] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2664.827162][ T9244] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 16:22:43 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000060000"]) getpid() r1 = syz_open_dev$usbfs(0x0, 0x0, 0x802) r2 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0xfff, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000002c0)=[@in6={0xa, 0x4e22, 0x778, @loopback, 0x7}], 0x1c) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x80045505, &(0x7f0000000380)={0x2, 0x0, "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"}) r3 = fcntl$dupfd(r1, 0x0, r0) name_to_handle_at(r3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000700)={0x1008, 0x6, "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"}, &(0x7f0000000180), 0x1000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:22:43 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000900000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 2665.013005][T24212] block nbd4: Receive control failed (result -22) [ 2665.033019][ T9396] block nbd4: shutting down sockets 16:22:44 executing program 1: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="31d96da88b0cce5062747ce237ca24f05b05df66b34814c1cdb2db3642a7c880224c03d6cffd67b36c7f1a51ae9aeaa3892b040ba2105d77d4e4579d745ad601f19c26d1260bcd5435ae4ad35d123f7e809a7b0576431fde9f78c3260a3837b52ef6437c404147add96892a9d3a67dcf93c198c3b7727cd266c20c5e584c28ae0843064b8f7f199db8641f71a407775e0090bbedee63a4640e1f012e5ca95bd14b5aa0da642b552ae4aa2b869458dec283c16f25c67068fc528a793f75c81acac8ee6596d79c449ade5eeee332c460ebc0d46c076e871b6426d521c571a95d0fa800de30a110e719ffde8f103773daaaec8c313aa3be0bdaa6e7e796df3975a8e37aee6d10579f8afe6552f187c242c731375f5d64cd40ab8904400f00000000000000000000000000000058b4721949da012002cb7f4ac8fe195c1388861be8cd45020083b0089b23f86603321faf83e794bea1ece8051e9996306347bd562aa2437fa6bdb57086302926b8af069b8d331ebf5c0e1a7f163e6d711af330efdfae413fafef9acf1d53e6aaf4f2dec9ddfb4ca321583e35a14a92e82bdbea3c127a033b32059fbadce23a3e87957f8238886aa9380000000018888c4c20ba104342e8c9d85a9dcf06abbb7a2905d37839bff6f8641ebce172c60a8d368cd4a94af484749dc4ccdd380bbf5d501302d50e79d3536eab5a12abdd347dac985c4349ec712661df947315514e45a515417e6b00000000000000002bdacdb2631c83a90dbca3aa7e5936f8aa413a75c7780309e1c178bce65ed205154ab4f55241cd2b6e83b29fc6cefe050d7d662360718e25bbdb2d34264d6a741cbbed50422f5d") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x0, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) 16:22:44 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x404100, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r1) r4 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r4) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x2, 0x3}}, 0x17945f32d65c5187) ioctl$NBD_SET_FLAGS(r5, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r5, 0xab03) 16:22:44 executing program 2: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r13, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000020) [ 2665.267382][ T9511] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2665.286100][ T9511] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. 16:22:44 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x120000, 0x0) getsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0x1bb) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2665.435034][ T9512] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2665.524177][ T9512] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2665.571119][ T9512] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2665.591081][T24212] block nbd4: Receive control failed (result -22) [ 2665.601289][ T9541] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2665.601317][ T9533] block nbd4: shutting down sockets 16:22:44 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x24200, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000180)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2665.616220][ T9541] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2665.628087][ T9512] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 16:22:44 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000001c0)) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x0) ptrace(0x4206, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000040)="19010000b1") socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000000)={0x0}) [ 2665.687192][T24212] block nbd4: Receive control failed (result -22) [ 2665.695768][ T9533] block nbd4: shutting down sockets 16:22:44 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r2, 0xab03) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x0) write$FUSE_INIT(r3, &(0x7f0000000000)={0x50, 0x0, 0x4, {0x7, 0x1f, 0xffffffff, 0x1040014, 0x7, 0x2, 0x7f, 0x6}}, 0x50) 16:22:44 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000a00000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 16:22:44 executing program 3: syz_emit_ethernet(0x1bb, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6088dc4f01852f00fe8000000000000000000000000000bbff02000000000000000000000000000100006558240190780096e266003db41b"], &(0x7f0000000000)) 16:22:44 executing program 3: syz_emit_ethernet(0x1bb, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6088dc4f01852f00fe8000000000000000000000000000bbff02000000000000000000000000000100006558240190780096e266003db41b"], &(0x7f0000000000)) [ 2665.969078][T24212] block nbd4: Receive control failed (result -22) [ 2665.998440][ T9560] block nbd4: shutting down sockets 16:22:44 executing program 1: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) 16:22:45 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x0) bind$x25(r3, &(0x7f0000000000)={0x9, @remote={[], 0x0}}, 0x12) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r2, 0xab03) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='status\x00') preadv(r4, &(0x7f00000017c0), 0x1b4, 0x0) write$UHID_DESTROY(r4, &(0x7f00000000c0), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r5, &(0x7f00000017c0), 0x1b4, 0x0) ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x22) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r4, 0x4008ae48, &(0x7f0000000040)=0x2) [ 2666.178183][ T9673] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2666.197392][ T9673] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. 16:22:45 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') sendfile(r0, r1, 0x0, 0x80000005) getegid() r2 = syz_open_procfs(0x0, 0x0) ioctl$TIOCLINUX2(r2, 0x541c, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) dup(r3) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) [ 2666.265093][ T9568] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2666.308971][ T9568] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2666.338405][ T9568] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2666.349448][T24212] block nbd4: Receive control failed (result -22) [ 2666.363125][ T9679] block nbd4: shutting down sockets 16:22:45 executing program 2: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r13, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000020) [ 2666.416035][ T9568] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2666.480750][ T9736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pig=9736 comm=syz-executor.3 16:22:45 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000b00000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 2666.540985][ T9679] block nbd4: shutting down sockets 16:22:45 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') sendfile(r0, r1, 0x0, 0x80000005) getegid() r2 = syz_open_procfs(0x0, 0x0) ioctl$TIOCLINUX2(r2, 0x541c, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) dup(r3) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) 16:22:45 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000001c0)) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x0) ptrace(0x4206, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000040)="19010000b1") r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000000)={0x0}) [ 2666.602848][ T9793] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 16:22:45 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x400, 0xfe) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000100)=0x1a, &(0x7f0000000140)=0x4) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r4, &(0x7f00000017c0), 0x1b4, 0x0) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f0000000000)) ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f0000000180)=""/61) ioctl$NBD_DO_IT(r2, 0xab03) r5 = socket$netlink(0x10, 0x3, 0xc) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'vlan0\x00', 0x2000}) [ 2666.669267][ T9793] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2666.722828][ T9800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pig=9800 comm=syz-executor.3 [ 2666.736524][T24212] block nbd4: Receive control failed (result -22) [ 2666.755867][ T9799] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2666.795407][ T9799] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. 16:22:45 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') sendfile(r0, r1, 0x0, 0x80000005) getegid() r2 = syz_open_procfs(0x0, 0x0) ioctl$TIOCLINUX2(r2, 0x541c, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) dup(r3) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) [ 2666.926434][ T9799] block nbd4: shutting down sockets 16:22:45 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x1, 0x1, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r2, 0xab03) 16:22:45 executing program 1: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) [ 2667.051170][ T9914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pig=9914 comm=syz-executor.3 [ 2667.082570][ T9885] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2667.144250][ T9885] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2667.171774][ T9885] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2667.186954][ T9932] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2667.195698][ T9932] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2667.218061][ T9885] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 16:22:46 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') sendfile(r0, r1, 0x0, 0x80000005) getegid() r2 = syz_open_procfs(0x0, 0x0) ioctl$TIOCLINUX2(r2, 0x541c, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) dup(r3) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) 16:22:46 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x109045) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1000) ioctl$NBD_DO_IT(r2, 0xab03) 16:22:46 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000c00000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 16:22:46 executing program 2: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r13, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000020) [ 2667.423936][T24212] block nbd4: Receive control failed (result -22) [ 2667.433365][T10028] block nbd4: shutting down sockets 16:22:46 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000001c0)) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x0) ptrace(0x4206, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000040)="19010000b1") r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000000)={0x0}) 16:22:46 executing program 4: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000000c0)={[0x3, 0x5, 0x5, 0x3, 0x8, 0x536, 0xf4, 0x9, 0x3, 0x6, 0x5, 0x1, 0xb1, 0x5, 0x8000, 0xb51], 0x15000, 0x4000}) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) fcntl$getown(r0, 0x9) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/anycast6\x00') ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f00000002c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x2, 0x3}, @timestamp, @timestamp, @window={0x3, 0x1, 0x8}, @timestamp, @timestamp], 0x6) preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f00000001c0)) r4 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r5, 0xab0a, 0x1ffffffff) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="05000b00000000070081f35aa2fe7a5cdbfbef6ef17e2f9d98ac58b17129c743dd7356313621f0df3a5a1f2cbcc2895069f031edcf47cb9e2e3a465c753ff9a8fabfa19ac6a3663f046e7c3ba72026731e21fba84346bb5410f98b3735c1f2c45b6f6fcb81465c448b908cafff331b002f73234c854746b1f1193a49f09c8e9ec3747bd674b96d7bd61d32ce41560bc8"], 0x8b, 0x6) r6 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x5, 0x1400) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000240), &(0x7f0000000380)=0x40) ioctl$NBD_DO_IT(r5, 0xab03) [ 2667.672483][T10141] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 16:22:46 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') sendfile(r0, r1, 0x0, 0x80000005) getegid() r2 = syz_open_procfs(0x0, 0x0) ioctl$TIOCLINUX2(r2, 0x541c, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) dup(r3) [ 2667.728824][T10141] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2667.786146][T10140] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2667.826753][T10140] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2667.869830][T10140] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2667.901355][T24212] block nbd4: Receive control failed (result -22) [ 2667.910899][T10148] block nbd4: shutting down sockets [ 2667.936957][T10140] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 16:22:46 executing program 1: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="31d96da88b0cce5062747ce237ca24f05b05df66b34814c1cdb2db3642a7c880224c03d6cffd67b36c7f1a51ae9aeaa3892b040ba2105d77d4e4579d745ad601f19c26d1260bcd5435ae4ad35d123f7e809a7b0576431fde9f78c3260a3837b52ef6437c404147add96892a9d3a67dcf93c198c3b7727cd266c20c5e584c28ae0843064b8f7f199db8641f71a407775e0090bbedee63a4640e1f012e5ca95bd14b5aa0da642b552ae4aa2b869458dec283c16f25c67068fc528a793f75c81acac8ee6596d79c449ade5eeee332c460ebc0d46c076e871b6426d521c571a95d0fa800de30a110e719ffde8f103773daaaec8c313aa3be0bdaa6e7e796df3975a8e37aee6d10579f8afe6552f187c242c731375f5d64cd40ab8904400f00000000000000000000000000000058b4721949da012002cb7f4ac8fe195c1388861be8cd45020083b0089b23f86603321faf83e794bea1ece8051e9996306347bd562aa2437fa6bdb57086302926b8af069b8d331ebf5c0e1a7f163e6d711af330efdfae413fafef9acf1d53e6aaf4f2dec9ddfb4ca321583e35a14a92e82bdbea3c127a033b32059fbadce23a3e87957f8238886aa9380000000018888c4c20ba104342e8c9d85a9dcf06abbb7a2905d37839bff6f8641ebce172c60a8d368cd4a94af484749dc4ccdd380bbf5d501302d50e79d3536eab5a12abdd347dac985c4349ec712661df947315514e45a515417e6b00000000000000002bdacdb2631c83a90dbca3aa7e5936f8aa413a75c7780309e1c178bce65ed205154ab4f55241cd2b6e83b29fc6cefe050d7d662360718e25bbdb2d34264d6a741cbbed50422f5d") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) 16:22:47 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') sendfile(r0, r1, 0x0, 0x80000005) getegid() r2 = syz_open_procfs(0x0, 0x0) ioctl$TIOCLINUX2(r2, 0x541c, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) dup(r3) 16:22:47 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c002300000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 16:22:47 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2000, 0x0) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000040)={0x2, {0x0, 0xffffffff, 0x9, 0xe0000000}}) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r3, 0xab03) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/sex\xa5\xa4-\xff\xff\x00\x00\x05K9\b\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000003c80)={@alg={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, {&(0x7f0000003b80)=""/160, 0xa0}, &(0x7f0000003c40), 0x20}, 0xa0) [ 2668.162451][T10264] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2668.170832][T10264] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2668.325339][T24212] block nbd4: Receive control failed (result -22) [ 2668.335301][T10270] block nbd4: shutting down sockets 16:22:47 executing program 2: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r13, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000020) 16:22:47 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') sendfile(r0, r1, 0x0, 0x80000005) getegid() r2 = syz_open_procfs(0x0, 0x0) ioctl$TIOCLINUX2(r2, 0x541c, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) dup(r3) 16:22:47 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x11, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, &(0x7f0000000040)=0x8) ioctl$NBD_DO_IT(r2, 0xab03) [ 2668.484414][T10270] block nbd4: shutting down sockets 16:22:47 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000001c0)) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x0) ptrace(0x4206, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000040)="19010000b1") r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000000)={0x0}) [ 2668.567679][T10276] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2668.632463][T10276] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2668.686377][T10388] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2668.696720][T10276] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2668.702648][T10388] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2668.748080][T10390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pig=10390 comm=syz-executor.3 [ 2668.748186][T10276] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 16:22:47 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f00000002c0), 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x1d, r5}, 0x10, &(0x7f00000000c0)={&(0x7f0000000180), 0x10}}, 0x0) recvmmsg(r2, &(0x7f0000000840)=[{{&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000000)) 16:22:47 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') sendfile(r0, r1, 0x0, 0x80000005) getegid() r2 = syz_open_procfs(0x0, 0x0) ioctl$TIOCLINUX2(r2, 0x541c, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)) 16:22:47 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c002d00000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 16:22:47 executing program 1: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r26, r25) r27 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r27, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r27, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r27, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r28 = accept4(r27, 0x0, 0x0, 0x0) sendto$inet6(r28, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x800) 16:22:48 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x200) ioctl$NBD_DO_IT(r2, 0xab03) [ 2669.034546][T10499] block nbd4: shutting down sockets [ 2669.041567][T10504] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pig=10504 comm=syz-executor.3 16:22:48 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') sendfile(r0, r1, 0x0, 0x80000005) getegid() r2 = syz_open_procfs(0x0, 0x0) ioctl$TIOCLINUX2(r2, 0x541c, 0x0) [ 2669.294286][T24212] block nbd4: Receive control failed (result -22) [ 2669.305071][T10509] block nbd4: shutting down sockets 16:22:48 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='\x01\x00\x00\x01\x00', 0x0, 0x400080) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r2, 0xab03) 16:22:48 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000001c0)) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x0) ptrace(0x4206, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000000)={0x0}) [ 2669.459108][T10514] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2669.467195][T10509] block nbd4: shutting down sockets [ 2669.477561][T10514] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2669.567583][T10514] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock 16:22:48 executing program 2: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="31d96da88b0cce5062747ce237ca24f05b05df66b34814c1cdb2db3642a7c880224c03d6cffd67b36c7f1a51ae9aeaa3892b040ba2105d77d4e4579d745ad601f19c26d1260bcd5435ae4ad35d123f7e809a7b0576431fde9f78c3260a3837b52ef6437c404147add96892a9d3a67dcf93c198c3b7727cd266c20c5e584c28ae0843064b8f7f199db8641f71a407775e0090bbedee63a4640e1f012e5ca95bd14b5aa0da642b552ae4aa2b869458dec283c16f25c67068fc528a793f75c81acac8ee6596d79c449ade5eeee332c460ebc0d46c076e871b6426d521c571a95d0fa800de30a110e719ffde8f103773daaaec8c313aa3be0bdaa6e7e796df3975a8e37aee6d10579f8afe6552f187c242c731375f5d64cd40ab8904400f00000000000000000000000000000058b4721949da012002cb7f4ac8fe195c1388861be8cd45020083b0089b23f86603321faf83e794bea1ece8051e9996306347bd562aa2437fa6bdb57086302926b8af069b8d331ebf5c0e1a7f163e6d711af330efdfae413fafef9acf1d53e6aaf4f2dec9ddfb4ca321583e35a14a92e82bdbea3c127a033b32059fbadce23a3e87957f8238886aa9380000000018888c4c20ba104342e8c9d85a9dcf06abbb7a2905d37839bff6f8641ebce172c60a8d368cd4a94af484749dc4ccdd380bbf5d501302d50e79d3536eab5a12abdd347dac985c4349ec712661df947315514e45a515417e6b00000000000000002bdacdb2631c83a90dbca3aa7e5936f8aa413a75c7780309e1c178bce65ed205154ab4f55241cd2b6e83b29fc6cefe050d7d662360718e25bbdb2d34264d6a741cbbed50422f5d") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r13, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000020) 16:22:48 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') sendfile(r0, r1, 0x0, 0x80000005) getegid() r2 = syz_open_procfs(0x0, 0x0) ioctl$TIOCLINUX2(r2, 0x541c, 0x0) [ 2669.642005][T10514] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 16:22:48 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c004800000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 2669.777690][T10681] validate_nla: 1 callbacks suppressed [ 2669.777700][T10681] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 16:22:48 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x80) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xfffffffffffffffa) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r3, 0xab03) [ 2669.826937][T10681] __nla_validate_parse: 1 callbacks suppressed [ 2669.826947][T10681] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. 16:22:48 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') sendfile(r0, r1, 0x0, 0x80000005) getegid() r2 = syz_open_procfs(0x0, 0x0) ioctl$TIOCLINUX2(r2, 0x541c, 0x0) [ 2669.978344][T10751] block nbd4: shutting down sockets 16:22:48 executing program 1: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="31d96da88b0cce5062747ce237ca24f05b05df66b34814c1cdb2db3642a7c880224c03d6cffd67b36c7f1a51ae9aeaa3892b040ba2105d77d4e4579d745ad601f19c26d1260bcd5435ae4ad35d123f7e809a7b0576431fde9f78c3260a3837b52ef6437c404147add96892a9d3a67dcf93c198c3b7727cd266c20c5e584c28ae0843064b8f7f199db8641f71a407775e0090bbedee63a4640e1f012e5ca95bd14b5aa0da642b552ae4aa2b869458dec283c16f25c67068fc528a793f75c81acac8ee6596d79c449ade5eeee332c460ebc0d46c076e871b6426d521c571a95d0fa800de30a110e719ffde8f103773daaaec8c313aa3be0bdaa6e7e796df3975a8e37aee6d10579f8afe6552f187c242c731375f5d64cd40ab8904400f00000000000000000000000000000058b4721949da012002cb7f4ac8fe195c1388861be8cd45020083b0089b23f86603321faf83e794bea1ece8051e9996306347bd562aa2437fa6bdb57086302926b8af069b8d331ebf5c0e1a7f163e6d711af330efdfae413fafef9acf1d53e6aaf4f2dec9ddfb4ca321583e35a14a92e82bdbea3c127a033b32059fbadce23a3e87957f8238886aa9380000000018888c4c20ba104342e8c9d85a9dcf06abbb7a2905d37839bff6f8641ebce172c60a8d368cd4a94af484749dc4ccdd380bbf5d501302d50e79d3536eab5a12abdd347dac985c4349ec712661df947315514e45a515417e6b00000000000000002bdacdb2631c83a90dbca3aa7e5936f8aa413a75c7780309e1c178bce65ed205154ab4f55241cd2b6e83b29fc6cefe050d7d662360718e25bbdb2d34264d6a741cbbed50422f5d") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r26, r25) r27 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r27, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r27, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r27, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r28 = accept4(r27, 0x0, 0x0, 0x0) sendto$inet6(r28, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x800) [ 2670.144858][T10863] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2670.162044][T10755] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2670.182349][T10863] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2670.195420][T10866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pig=10866 comm=syz-executor.3 [ 2670.204319][T10755] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 16:22:49 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x82080) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="03008c14ee61990000000001040000000000000000000000000000000000d3150afb0e45e354a645f35b4c2e807a0000000000deeb368081c9701c9c5e40d4a500000000000000f6ffffff0000000000000000000000000000003671a8fbafadb28ff77bfea6799625cd0df900132e38173f3598a29d9176a3ae5b67795e654a9bf9decc02d876ebee8ea011c1"]) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r3, &(0x7f00000017c0), 0x1b4, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000000)=r3) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r4, &(0x7f00000017c0), 0x1b4, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 2670.312865][T10755] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock 16:22:49 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') sendfile(r0, r1, 0x0, 0x80000005) getegid() syz_open_procfs(0x0, 0x0) [ 2670.361636][T10870] block nbd4: shutting down sockets [ 2670.374602][T10755] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 16:22:49 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000001c0)) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x0) ptrace(0x4206, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000000)={0x0}) [ 2670.493140][T10969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pig=10969 comm=syz-executor.3 16:22:49 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c004c00000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 16:22:49 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') sendfile(r0, r1, 0x0, 0x80000005) getegid() 16:22:49 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x0, 0x3, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) quotactl(0x2, &(0x7f0000000200)='./file0\x00', r3, &(0x7f0000000400)="8f634a") r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1ffffffff) sendto$ax25(r1, &(0x7f00000000c0)="5865d73372de6bcf8fa74b84fd6ffb7bf23431f45d91a9836db63b9f7351b90785f0b9ed68d781b543fe4e298eadf87b88355e8a19a37521a05a04b8d6ea0a70db86f704e2128ca07963dfeef89e95b685c444ec890a16038ddcdf652e9f4a31ad2f871a37d3169882330b1c773e6f0f9472d17e705c6f8c7f9f416b0f6674f5205c2b62a29d0e20b2b04f86f7e254b9149b08209c5668bf7d401cbbbc76f09845b1688ad38844920dbcc902b9b365259058129e0a7b633fc63aea4c69fa25cbae3b6fb30abf280a5b", 0xc9, 0x4000, &(0x7f0000000000)={{0x3, @default, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$NBD_DO_IT(r4, 0xab03) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') preadv(r5, &(0x7f00000017c0), 0x1b4, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000300)=0xfffffffffffffffb) r6 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf", 0x80, r6) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r6) add_key$keyring(&(0x7f0000000440)='\xef\xec\x00', &(0x7f0000000340)={'\a\x00=', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r7 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r8 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf", 0x80, r7) r9 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r10 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r11 = syz_open_dev$sndpcmc(&(0x7f00000004c0)='/dev/snd/pcmC#D#c\x00', 0x5, 0x80) getpeername(r11, &(0x7f0000000500)=@can, &(0x7f0000000580)=0x80) keyctl$dh_compute(0x17, &(0x7f0000000100)={r9, r10, r8}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\x00'}}) r12 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf", 0x80, r12) keyctl$describe(0x6, r12, &(0x7f0000000240)=""/161, 0xa1) 16:22:49 executing program 2: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r13, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000020) [ 2670.860544][T11045] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2670.891420][T11051] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 16:22:49 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000000)={0x1, 0x7fff, 0x1}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r2, 0xab03) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x100, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f00000000c0)={{0x0, 0x0, @identifier="692f00e558fd79f5211b018aea1a77f0"}}) 16:22:49 executing program 1: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="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") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r26, r25) r27 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r27, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r27, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r27, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r28 = accept4(r27, 0x0, 0x0, 0x0) sendto$inet6(r28, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x800) [ 2670.908220][T11045] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2670.933551][T11051] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 16:22:49 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') sendfile(r0, r1, 0x0, 0x80000005) getegid() [ 2670.994847][T11051] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2671.075971][T11051] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2671.131472][T11107] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2671.148844][T24212] block nbd4: Receive control failed (result -22) [ 2671.163767][T11102] block nbd4: shutting down sockets [ 2671.192368][T11107] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. 16:22:50 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c006000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 2671.252525][T11114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pig=11114 comm=syz-executor.3 [ 2671.289051][T24212] block nbd4: Receive control failed (result -22) 16:22:50 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup3(r2, r1, 0x0) r3 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r4, 0xab03) 16:22:50 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') sendfile(r0, r1, 0x0, 0x80000005) [ 2671.309043][T24212] block nbd4: shutting down sockets [ 2671.316338][T24212] [ 2671.318694][T24212] ============================================ [ 2671.324838][T24212] WARNING: possible recursive locking detected [ 2671.330984][T24212] 5.4.0-rc7+ #0 Not tainted [ 2671.335470][T24212] -------------------------------------------- [ 2671.341624][T24212] kworker/u5:1/24212 is trying to acquire lock: [ 2671.347883][T24212] ffff888098906528 ((wq_completion)knbd4-recv){+.+.}, at: flush_workqueue+0xf7/0x14c0 [ 2671.357448][T24212] [ 2671.357448][T24212] but task is already holding lock: [ 2671.364935][T24212] ffff888098906528 ((wq_completion)knbd4-recv){+.+.}, at: process_one_work+0x88b/0x1740 [ 2671.374647][T24212] [ 2671.374647][T24212] other info that might help us debug this: [ 2671.382692][T24212] Possible unsafe locking scenario: [ 2671.382692][T24212] [ 2671.390149][T24212] CPU0 [ 2671.393426][T24212] ---- [ 2671.396686][T24212] lock((wq_completion)knbd4-recv); [ 2671.402727][T24212] lock((wq_completion)knbd4-recv); [ 2671.408168][T24212] [ 2671.408168][T24212] *** DEADLOCK *** [ 2671.408168][T24212] [ 2671.416350][T24212] May be due to missing lock nesting notation [ 2671.416350][T24212] [ 2671.424679][T24212] 3 locks held by kworker/u5:1/24212: [ 2671.430038][T24212] #0: ffff888098906528 ((wq_completion)knbd4-recv){+.+.}, at: process_one_work+0x88b/0x1740 [ 2671.440184][T24212] #1: ffff88809a647dc0 ((work_completion)(&args->work)){+.+.}, at: process_one_work+0x8c1/0x1740 [ 2671.450765][T24212] #2: ffff888218d9a578 (&nbd->config_lock){+.+.}, at: refcount_dec_and_mutex_lock+0x56/0x90 [ 2671.460902][T24212] [ 2671.460902][T24212] stack backtrace: [ 2671.466773][T24212] CPU: 1 PID: 24212 Comm: kworker/u5:1 Not tainted 5.4.0-rc7+ #0 [ 2671.474475][T24212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2671.484589][T24212] Workqueue: knbd4-recv recv_work [ 2671.489591][T24212] Call Trace: [ 2671.492881][T24212] dump_stack+0x197/0x210 [ 2671.497192][T24212] __lock_acquire.cold+0x15d/0x385 [ 2671.502295][T24212] ? mark_held_locks+0xf0/0xf0 [ 2671.507049][T24212] lock_acquire+0x190/0x410 [ 2671.511712][T24212] ? flush_workqueue+0xf7/0x14c0 [ 2671.516632][T24212] flush_workqueue+0x126/0x14c0 [ 2671.521481][T24212] ? flush_workqueue+0xf7/0x14c0 [ 2671.526408][T24212] ? lock_downgrade+0x920/0x920 [ 2671.531238][T24212] ? drain_workqueue+0x2b/0x470 [ 2671.536068][T24212] ? debug_check_no_obj_freed+0x20a/0x43f [ 2671.541783][T24212] ? find_held_lock+0x35/0x130 [ 2671.546535][T24212] ? pwq_unbound_release_workfn+0x2f0/0x2f0 [ 2671.552410][T24212] ? mark_lock+0xc2/0x1220 [ 2671.556805][T24212] drain_workqueue+0x1b4/0x470 [ 2671.561560][T24212] ? drain_workqueue+0x1b4/0x470 [ 2671.566475][T24212] ? kfree+0x226/0x2c0 [ 2671.570532][T24212] destroy_workqueue+0x21/0x700 [ 2671.575382][T24212] ? nbd_config_put+0x378/0x870 [ 2671.580229][T24212] nbd_config_put+0x3dd/0x870 [ 2671.584906][T24212] recv_work+0x19b/0x200 [ 2671.589142][T24212] process_one_work+0x9af/0x1740 [ 2671.594071][T24212] ? pwq_dec_nr_in_flight+0x320/0x320 [ 2671.599426][T24212] ? lock_acquire+0x190/0x410 [ 2671.604092][T24212] worker_thread+0x98/0xe40 16:22:50 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000001c0)) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x0) ptrace(0x4206, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000000)={0x0}) 16:22:50 executing program 2: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="31d96da88b0cce5062747ce237ca24f05b05df66b34814c1cdb2db3642a7c880224c03d6cffd67b36c7f1a51ae9aeaa3892b040ba2105d77d4e4579d745ad601f19c26d1260bcd5435ae4ad35d123f7e809a7b0576431fde9f78c3260a3837b52ef6437c404147add96892a9d3a67dcf93c198c3b7727cd266c20c5e584c28ae0843064b8f7f199db8641f71a407775e0090bbedee63a4640e1f012e5ca95bd14b5aa0da642b552ae4aa2b869458dec283c16f25c67068fc528a793f75c81acac8ee6596d79c449ade5eeee332c460ebc0d46c076e871b6426d521c571a95d0fa800de30a110e719ffde8f103773daaaec8c313aa3be0bdaa6e7e796df3975a8e37aee6d10579f8afe6552f187c242c731375f5d64cd40ab8904400f00000000000000000000000000000058b4721949da012002cb7f4ac8fe195c1388861be8cd45020083b0089b23f86603321faf83e794bea1ece8051e9996306347bd562aa2437fa6bdb57086302926b8af069b8d331ebf5c0e1a7f163e6d711af330efdfae413fafef9acf1d53e6aaf4f2dec9ddfb4ca321583e35a14a92e82bdbea3c127a033b32059fbadce23a3e87957f8238886aa9380000000018888c4c20ba104342e8c9d85a9dcf06abbb7a2905d37839bff6f8641ebce172c60a8d368cd4a94af484749dc4ccdd380bbf5d501302d50e79d3536eab5a12abdd347dac985c4349ec712661df947315514e45a515417e6b00000000000000002bdacdb2631c83a90dbca3aa7e5936f8aa413a75c7780309e1c178bce65ed205154ab4f55241cd2b6e83b29fc6cefe050d7d662360718e25bbdb2d34264d6a741cbbed50422f5d") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40108018}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r13, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000020) [ 2671.608586][T24212] ? trace_hardirqs_on+0x67/0x240 [ 2671.613606][T24212] kthread+0x361/0x430 [ 2671.617677][T24212] ? process_one_work+0x1740/0x1740 [ 2671.622876][T24212] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 2671.628611][T24212] ret_from_fork+0x24/0x30 [ 2671.650606][T12366] kobject: 'loop0' (00000000990f29c2): kobject_uevent_env [ 2671.657950][T12366] kobject: 'loop0' (00000000990f29c2): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2671.688582][ T3900] kobject: 'loop4' (000000004b7db6ae): kobject_uevent_env [ 2671.695753][ T3900] kobject: 'loop4' (000000004b7db6ae): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2671.734032][ T3900] kobject: 'loop3' (000000007d7855b4): kobject_uevent_env [ 2671.748160][T11119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pig=11119 comm=syz-executor.3 [ 2671.761485][T11126] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2671.761497][T11126] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2671.773361][ T3900] kobject: 'loop3' (000000007d7855b4): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2671.813507][ T3900] kobject: 'loop5' (000000005d9dc0fd): kobject_uevent_env [ 2671.821951][ T3900] kobject: 'loop5' (000000005d9dc0fd): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2671.822372][T11127] kobject: 'loop0' (00000000990f29c2): kobject_uevent_env [ 2671.841400][T11127] kobject: 'loop0' (00000000990f29c2): fill_kobj_path: path = '/devices/virtual/block/loop0' 16:22:50 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000005) [ 2671.856976][T11127] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2671.866004][ T3900] kobject: 'loop2' (000000006f9f3873): kobject_uevent_env [ 2671.869085][T11127] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2671.881670][ T3900] kobject: 'loop2' (000000006f9f3873): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2671.900202][T11127] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock 16:22:50 executing program 1: socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000d06090368fe07002b00000001000a0014000300450001070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9}, 0xf) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250200f7ea46b70000100004007f000000080006002c0000000400040008000500060000001400010000000000000000000000ffffffffffff10000400040000000000000001000000d0f8c56601e7599accf4bdd2db5890f9f5f6"], 0x5c}, 0x1, 0x0, 0x0, 0xd6563a5f7d3ecdf1}, 0x20000040) r8 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r9 = fcntl$getown(r8, 0x9) ptrace$pokeuser(0x6, r9, 0x7fe, 0x2) r10 = creat(&(0x7f0000000380)='./bus\x00', 0x4) ioctl$PIO_UNISCRNMAP(r10, 0x4b6a, &(0x7f0000000fc0)="31d96da88b0cce5062747ce237ca24f05b05df66b34814c1cdb2db3642a7c880224c03d6cffd67b36c7f1a51ae9aeaa3892b040ba2105d77d4e4579d745ad601f19c26d1260bcd5435ae4ad35d123f7e809a7b0576431fde9f78c3260a3837b52ef6437c404147add96892a9d3a67dcf93c198c3b7727cd266c20c5e584c28ae0843064b8f7f199db8641f71a407775e0090bbedee63a4640e1f012e5ca95bd14b5aa0da642b552ae4aa2b869458dec283c16f25c67068fc528a793f75c81acac8ee6596d79c449ade5eeee332c460ebc0d46c076e871b6426d521c571a95d0fa800de30a110e719ffde8f103773daaaec8c313aa3be0bdaa6e7e796df3975a8e37aee6d10579f8afe6552f187c242c731375f5d64cd40ab8904400f00000000000000000000000000000058b4721949da012002cb7f4ac8fe195c1388861be8cd45020083b0089b23f86603321faf83e794bea1ece8051e9996306347bd562aa2437fa6bdb57086302926b8af069b8d331ebf5c0e1a7f163e6d711af330efdfae413fafef9acf1d53e6aaf4f2dec9ddfb4ca321583e35a14a92e82bdbea3c127a033b32059fbadce23a3e87957f8238886aa9380000000018888c4c20ba104342e8c9d85a9dcf06abbb7a2905d37839bff6f8641ebce172c60a8d368cd4a94af484749dc4ccdd380bbf5d501302d50e79d3536eab5a12abdd347dac985c4349ec712661df947315514e45a515417e6b00000000000000002bdacdb2631c83a90dbca3aa7e5936f8aa413a75c7780309e1c178bce65ed205154ab4f55241cd2b6e83b29fc6cefe050d7d662360718e25bbdb2d34264d6a741cbbed50422f5d") r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r10, 0xf, &(0x7f0000000180)={0x2, r9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r11, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r12 = syz_open_procfs(r9, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r11, r12, &(0x7f00000000c0)=0x202, 0x8) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r15 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000200)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0xfffffffffffffed7) setsockopt$inet6_int(r15, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="ccd3486d7de0b0ff1d3a169334e5d7a57745fcfd039105538dc6e4cdc0ab685306f84f82649847d52c0a13c100b40130362aed2868244349e04c0a37bef6588f72c362f7f2a421d002054413bc1076d1cdef176803a5607991b2bd127acc9512ae8c862d2d331ad68b6880a8d1698b13087b610b3f1f102731ad6c617750c182a11bb55564cd849e89da07bd4a1d311e4420530478be9c9fa16cd08830ee187fe2bd0c9fefb10636ff09c4a16b887c43a350b0417c6ed27ca22e7fc925d3be053e9dbef3aef77a8685d2909e3597af16068283a54bcb19ee47072685bb40a4dba843d7b7105b404ab7ac5eb1c3297211c6a1a0ed3bf1dd8134b99fd1cb", @ANYRES16=r13, @ANYBLOB="040027bd7000ffdbdf25030000000c00050002000000000000002400070008000100", @ANYRES32, @ANYBLOB="42d58e26977dd0683946d1d5fde20ecdc5ea2dde10516f9569ece9ec244fe4bc26400e33467130dfbfe045c49b6e5603ce0b", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00060002000000000000000c00020007000000000000000c0005002000000000000000"], 0xfffffffffffffe5f}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) r16 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r16, 0x114, 0x6, &(0x7f00000000c0), 0x4) r17 = accept4(r16, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r17, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r17, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r17, 0x10f, 0x88) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000001ea9efca3cab2ee741f1ed18aefac93d0126d4e101d3df2d85cd7c12cab5a1443e6c04540a70e9d1674071177d278adf9396f839d2bd0a1691aae46a32282e8d850c639cce6465ae5c90e9602057d0bbb4d54a631d57fc62573bbcd0bc897dc9183b20c374c959dd8811127f3e4f48a37b54e0d901f6ff2052773427be4536b5fbaa6da40ba2c2043f5ff03b48c491f11683a55591890ccf239d3d9fab7c84edc7b1fe211627fb7848bdbcd4e0f759966871eb2", @ANYRES16=r13, @ANYBLOB="04002700000000dbdf25020000000c0006000200000000003f00"/38], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84006eb608db1c5ff230e00000e1766a5813feb619d873a473bca04beb3fc633d18588733745e20f908af33d2162c66e6d8bd4212ec8acd9394372eae18fd18c237ccec1f568a45573b377237591235a4fcdc7aa6c12a85c96a621662ad3750000b9ac2e729459f44f0f0351ccd3", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf250500000008000100000000000c000800060000000000040008000100000000000c00030802000000000000000c00060000000000000000000c00060002000000000000000c000400000000000000000c000300fdffffffffffffff0c69bed52abdd20daf000300000000000000003f0c0008002000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0xfaf0784a88b8abb9}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r13, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = fcntl$dupfd(r18, 0x0, r18) bind$bt_rfcomm(r19, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r19, &(0x7f0000000140)={0xfffffcd4, 0x9, 0x2, 0x3f}, 0xf) recvmmsg(r19, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4a79bb8416330e5e, 0x0) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8000, 0x0) r21 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400b00, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) writev(r22, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300090468fe0700000000002700ff3f05000000450001070080001419001a00040002001ee4000000000040000000000000000000", 0x39}], 0x1) r23 = accept4(r22, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008088a0}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="9dea49d0eea5057527b14e230fd01bcf201105158a1001851dcd5bd7ff8e86a3076fc9d71cd079e291cfedbae4378fceeb846a5852b64b1cd229e7447b9a8d71be6f388d7da824430945d738a27924000800000000000083f18be8f8a99a7fa2997e056d268d33b18fb424adcb9810d8769c81551cf32d5325b44375ede0c51bca66a9724c10a8a7236b08ad5ae2cb93d7a57a6a6d6f0aa15f655e96e1a81794f678997f5b00"/175, @ANYRES16=r13, @ANYBLOB="020007000000fbdbd725020000000c00050001000000000000000c00060000000000000000002c000700f00001007df5ab2e9ef3e4c22ceac0bd4fea8b0ed834533b5d338de9285d6539e046db7fe32c948aa0727685", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="080001009d7b069d77cf5fd9e9b08371f5bace1f982541bc59d4afb7fbed8e65d7fab7dc3c6fa682b025a1d44ea517862f700d1ab6f7e4534554c10b1aa9c35a69c7f10573a57c54ead3297e46702fde645fee9509c3d503dbfb60037c0511edc201d0713be25491841f62b08bc3493c116438466d220f90daa22d9b011c6ea80be808237b8b2591d7f295120864ae4dca13cbf9793d2e8f6749778fc35ea1f592515443e3b9ff100777bb7508f46c7f455db22545", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="0c00050002000000000000000c000400ff010000000000000c00050000010000000000000c00080006000000000000000c0003000600000000000000"], 0x94}, 0x1, 0x0, 0x0, 0xc040}, 0x2) r24 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r24, 0x0, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r25) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r28, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r28, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r28, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) r29 = accept4(r28, 0x0, 0x0, 0x0) sendto$inet6(r29, &(0x7f00000000c0), 0xffffffffffffff47, 0x8, 0x0, 0x1a) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r29}, {0x8, 0x1, r24}, {0x8, 0x1, r27}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46000801}, 0x800) [ 2671.921065][T11127] kobject: 'loop0' (0000000002876f2e): kobject_add_internal: parent: 'ext4', set: '' [ 2671.952591][T11127] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 16:22:50 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000005) [ 2671.991472][ T3900] kobject: 'loop1' (000000008e866a82): kobject_uevent_env [ 2672.019462][ T3900] kobject: 'loop1' (000000008e866a82): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2672.031972][T11241] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 16:22:51 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c006800000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 2672.052067][T11241] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2672.060905][ T3900] kobject: 'loop3' (000000007d7855b4): kobject_uevent_env 16:22:51 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000005) [ 2672.110317][ T3900] kobject: 'loop3' (000000007d7855b4): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2672.122141][T12366] kobject: 'loop0' (0000000002876f2e): kobject_cleanup, parent 000000008946ee55 [ 2672.140888][T12366] kobject: 'loop0' (0000000002876f2e): calling ktype release [ 2672.151091][T12366] kobject: 'loop0': free name [ 2672.187530][T12366] kobject: 'loop0' (00000000990f29c2): kobject_uevent_env [ 2672.194856][T12366] kobject: 'loop0' (00000000990f29c2): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2672.207215][ T3900] kobject: 'loop3' (000000007d7855b4): kobject_uevent_env 16:22:51 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x80000005) [ 2672.229747][ T3900] kobject: 'loop3' (000000007d7855b4): fill_kobj_path: path = '/devices/virtual/block/loop3' 16:22:51 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x80000005) [ 2672.302329][T11250] kobject: 'loop0' (00000000990f29c2): kobject_uevent_env [ 2672.309865][T11250] kobject: 'loop0' (00000000990f29c2): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2672.337981][T11250] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2672.352061][T11250] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2672.355367][ T3900] kobject: 'loop3' (000000007d7855b4): kobject_uevent_env [ 2672.362113][T11250] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2672.386045][ T3900] kobject: 'loop3' (000000007d7855b4): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2672.389705][T11250] kobject: 'loop0' (00000000396cf5a1): kobject_add_internal: parent: 'ext4', set: '' [ 2672.407101][T11250] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 16:22:51 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x80000005) [ 2672.494484][T12366] kobject: 'loop0' (00000000396cf5a1): kobject_cleanup, parent 000000008946ee55 [ 2672.504154][T12366] kobject: 'loop0' (00000000396cf5a1): calling ktype release [ 2672.512145][T12366] kobject: 'loop0': free name [ 2672.567745][T12366] kobject: 'loop0' (00000000990f29c2): kobject_uevent_env [ 2672.575073][T12366] kobject: 'loop0' (00000000990f29c2): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2672.593707][ T3900] kobject: 'loop2' (000000006f9f3873): kobject_uevent_env [ 2672.604049][ T3900] kobject: 'loop2' (000000006f9f3873): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2672.626348][ T3900] kobject: 'loop5' (000000005d9dc0fd): kobject_uevent_env [ 2672.634187][ T3900] kobject: 'loop5' (000000005d9dc0fd): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2672.651834][ T3900] kobject: 'loop3' (000000007d7855b4): kobject_uevent_env [ 2672.659521][ T3900] kobject: 'loop3' (000000007d7855b4): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2672.846321][ T3900] kobject: 'loop1' (000000008e866a82): kobject_uevent_env [ 2672.853687][ T3900] kobject: 'loop1' (000000008e866a82): fill_kobj_path: path = '/devices/virtual/block/loop1'