= syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r8, 0x40383d03, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r8, 0x40082102, &(0x7f0000000400)) ioctl$PTP_PEROUT_REQUEST(r7, 0x40383d03, 0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r9, 0x40383d03, 0x0) r10 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x101800, 0x0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r4, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r9}, {0x8}, {0x8, 0x1, r10}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c000200000039"], 0x34}}, 0x0) 14:19:31 executing program 3: r0 = getpgrp(0x0) syz_open_procfs$namespace(r0, 0x0) r1 = gettid() r2 = getpid() sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x11c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4001}, 0x800) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010020001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c000200000039"], 0x34}}, 0x0) 14:19:31 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r1 = socket(0x8, 0x4, 0x3) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r3) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r8, 0x40383d03, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) r11 = socket(0x2e, 0x3, 0x3) r12 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r12, 0x40383d03, 0x0) r13 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r13, 0x40383d03, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, r7, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3f}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffff1a8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '(.!*('}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040810}, 0x40) sendmsg$RDMA_NLDEV_CMD_SET(r9, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="180009008bb02e96465275d8f576865e000214000effff7000fbdbdf250500540001000000"], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r16, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r17, 0x1}, 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r17, 0xfe}, 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r15, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x2c}}, 0x40000) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x58, r7, 0x501, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r12}, {0x8, 0x1, r13}, {0x8, 0x1, r1}, {0x8, 0x1, r9}, {0x8, 0x1, r9}, {0x8, 0x1, r5}, {0x8, 0x1, r11}, {0x8, 0x1, r6}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80d0}, 0x52) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x70, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2d}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa93}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x70}}, 0x20000095) 14:19:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3e0075987752aa9285ac87a77cd4ae1db75c2c4e17ef4135a6a6141c3b5e15d019c09d508259284180921e4a53122fab69fbcd2ab22e5c142c148ae196763ed4f857f41fe6f231397eba9fe95a9b176401000080000000009c516c859500a50f95cf00000000001ec34f98482b812fed31aeb11010d62db0d7ef8bac6a8db0f47a8ead0a70d90d38bc179cd9f6feaa724aa05fec73f6e442a64b3ada77bd906048168fd8494cc5f9fe00b673d84167"], 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x0) [ 926.383758] nbd: must specify at least one socket 14:19:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x200280) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x5, 0xa, 0x10, "b9433ae68c4eb19cb70582de84bc723864d7d6abf8f94d4386b87078c316b0fa1e6e343ef48b8e7a8a8a16143a190efc4cef14befd0a4c64b98e9b42ad7b98b3", "735243d2256dd3ac031c73e736deb1bdc34a46976b16c7597e9f6c44e0c63d48", [0x0, 0xc26]}) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x18, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}}, 0x0) 14:19:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00060000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c000200000039"], 0x34}}, 0x0) 14:19:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x20000010) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r8, 0x40383d03, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r8, 0x40082102, &(0x7f0000000400)) ioctl$PTP_PEROUT_REQUEST(r7, 0x40383d03, 0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r9, 0x40383d03, 0x0) r10 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x101800, 0x0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r4, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r9}, {0x8}, {0x8, 0x1, r10}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c000200000039"], 0x34}}, 0x0) [ 926.455597] nbd: must specify a size in bytes for the device [ 926.486471] nbd: couldn't find device at index 1 14:19:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x4) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x34}}, 0x0) 14:19:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080001f7ffffff0017859972ca61c447ff41efdf7d37221e47a658eab1acc6cf9350505085d7b3a4239a0413b8e2600e60e1d53d16ee15ba31ccabea"], 0x1c}}, 0x0) [ 926.532125] nbd: must specify a size in bytes for the device 14:19:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00060000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c000200000039"], 0x34}}, 0x0) 14:19:31 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x18, r1, 0x20, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) 14:19:31 executing program 4: syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket(0x9, 0x4, 0x4) r1 = socket(0x2, 0x3, 0x7) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, 0x0, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400010}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000fdd1789f6300", @ANYRES16=r2, @ANYBLOB="000325bd7000fcdbdf25020000000800020000000000080009000000000008000900030000000800020000000000080002000100000008000400ac14140a08000500ac14140c0800080001000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x40080) 14:19:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x20000010) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r8, 0x40383d03, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r8, 0x40082102, &(0x7f0000000400)) ioctl$PTP_PEROUT_REQUEST(r7, 0x40383d03, 0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r9, 0x40383d03, 0x0) r10 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x101800, 0x0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r4, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r9}, {0x8}, {0x8, 0x1, r10}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c000200000039"], 0x34}}, 0x0) 14:19:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r3, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x107}]}, 0x20}, 0x1, 0x0, 0x0, 0x484}, 0x4000) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x20, r4, 0x1, 0x0, 0xfffffffe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x20}}, 0x0) 14:19:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00060000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c000200000039"], 0x34}}, 0x0) 14:19:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x20000010) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r7, 0x40383d03, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r7, 0x40082102, &(0x7f0000000400)) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r8, 0x40383d03, 0x0) r9 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x101800, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r3, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) [ 926.617685] nbd: must specify a size in bytes for the device [ 926.644679] nbd: must specify at least one socket 14:19:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000080000000000000010000001400078008000100f223cd942d81abdb8d5a11f696e8c2ee0491767fd590d40fb62b3817ddf52ee7b6760027ab8a632a8c94484c8c8ad3fefb5d5c458e9970b5ed42c58fb15a93d9f7ad2be2a1f44902f97163ecc13fab577c2d460773e2c5b056e53178297388077946971553f7bc12fb88956575ecf359d9384168a195dae1f4e89615a532ddc4ec48bc78f8fdff2aa951718d1e8e0074f50d29ab49b1aab2dfb0caa85ea2e10bc12faedd6ca0fe378e3dd45db09d138aa59455a11aac924209356bb2d484abe307d74183ecd1a3d87a3c90948223325b5d91f3c22b3b", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002000000000000000000"], 0x34}}, 0x0) 14:19:31 executing program 1: r0 = socket(0x27, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000180)={&(0x7f0000000240), 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x1c, r4, 0x300, 0x2, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4008804) socket(0x2c, 0x5, 0x8000) 14:19:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (fail_nth: 1) [ 926.712619] nbd: couldn't find device at index 5 14:19:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000480)={'wpan4\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r5) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r6, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x80) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="484cea205def3adea88bb492e47437f14c11818182899eeb807ecbed656ee8", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00'], 0x14}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5a040000", @ANYRESHEX=r0, @ANYRESOCT=r3, @ANYRESHEX=r2, @ANYRES16=r5, @ANYRES32, @ANYRES8=r1], 0x34}, 0x1, 0x0, 0x0, 0x24048051}, 0x600440c1) 14:19:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) (fail_nth: 1) [ 926.740373] nbd: must specify at least one socket [ 926.757288] nbd: must specify a size in bytes for the device 14:19:31 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (fail_nth: 1) 14:19:31 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (fail_nth: 1) 14:19:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x20000010) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r7, 0x40383d03, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r7, 0x40082102, &(0x7f0000000400)) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r8, 0x40383d03, 0x0) r9 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r3, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) [ 926.784872] FAULT_INJECTION: forcing a failure. [ 926.784872] name failslab, interval 1, probability 0, space 0, times 0 [ 926.832382] CPU: 1 PID: 31688 Comm: syz-executor.0 Not tainted 4.14.302-syzkaller #0 [ 926.840290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 926.849641] Call Trace: [ 926.852222] dump_stack+0x1b2/0x281 [ 926.855840] should_fail.cold+0x10a/0x149 [ 926.859984] should_failslab+0xd6/0x130 [ 926.863950] kmem_cache_alloc_node+0x263/0x410 [ 926.868532] __alloc_skb+0x5c/0x510 [ 926.872153] netlink_sendmsg+0x91e/0xbc0 [ 926.876209] ? nlmsg_notify+0x1b0/0x1b0 [ 926.880169] ? kernel_recvmsg+0x210/0x210 [ 926.884315] ? security_socket_sendmsg+0x83/0xb0 [ 926.889060] ? nlmsg_notify+0x1b0/0x1b0 [ 926.893029] sock_sendmsg+0xb5/0x100 [ 926.896735] ___sys_sendmsg+0x6c8/0x800 [ 926.900699] ? get_pid_task+0x91/0x130 [ 926.904577] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 926.909336] ? lock_downgrade+0x740/0x740 [ 926.913482] ? __fget+0x23e/0x3e0 [ 926.916935] ? lock_acquire+0x170/0x3f0 [ 926.920925] ? lock_downgrade+0x740/0x740 [ 926.925080] ? __fget+0x265/0x3e0 [ 926.928539] ? __fdget+0x19b/0x1f0 [ 926.932130] ? sockfd_lookup_light+0xb2/0x160 [ 926.936622] __sys_sendmsg+0xa3/0x120 [ 926.940423] ? SyS_shutdown+0x160/0x160 [ 926.944400] ? wait_for_completion_io+0x10/0x10 [ 926.949077] ? SyS_read+0x210/0x210 [ 926.952698] ? __do_page_fault+0x159/0xad0 [ 926.957013] SyS_sendmsg+0x27/0x40 [ 926.960550] ? __sys_sendmsg+0x120/0x120 [ 926.964607] do_syscall_64+0x1d5/0x640 [ 926.968499] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 926.973683] RIP: 0033:0x7f268d9110a9 [ 926.977386] RSP: 002b:00007f268be83168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 926.985092] RAX: ffffffffffffffda RBX: 00007f268da30f80 RCX: 00007f268d9110a9 [ 926.992356] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 926.999618] RBP: 00007f268be831d0 R08: 0000000000000000 R09: 0000000000000000 [ 927.006879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 927.014142] R13: 00007ffebe89cf2f R14: 00007f268be83300 R15: 0000000000022000 14:19:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x20000010) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r7, 0x40383d03, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r7, 0x40082102, &(0x7f0000000400)) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r8, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r3, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) [ 927.055520] FAULT_INJECTION: forcing a failure. [ 927.055520] name failslab, interval 1, probability 0, space 0, times 0 [ 927.064873] FAULT_INJECTION: forcing a failure. [ 927.064873] name failslab, interval 1, probability 0, space 0, times 0 [ 927.090267] FAULT_INJECTION: forcing a failure. [ 927.090267] name failslab, interval 1, probability 0, space 0, times 0 [ 927.108499] CPU: 1 PID: 31707 Comm: syz-executor.1 Not tainted 4.14.302-syzkaller #0 [ 927.116394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 927.125744] Call Trace: [ 927.128332] dump_stack+0x1b2/0x281 [ 927.131962] should_fail.cold+0x10a/0x149 [ 927.136117] should_failslab+0xd6/0x130 [ 927.140105] kmem_cache_alloc_node+0x263/0x410 [ 927.144688] __alloc_skb+0x5c/0x510 [ 927.148316] netlink_sendmsg+0x91e/0xbc0 [ 927.152375] ? nlmsg_notify+0x1b0/0x1b0 [ 927.156341] ? kernel_recvmsg+0x210/0x210 [ 927.160486] ? security_socket_sendmsg+0x83/0xb0 [ 927.165233] ? nlmsg_notify+0x1b0/0x1b0 [ 927.169195] sock_sendmsg+0xb5/0x100 [ 927.172903] ___sys_sendmsg+0x6c8/0x800 [ 927.176866] ? get_pid_task+0x91/0x130 [ 927.180744] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 927.185502] ? lock_downgrade+0x740/0x740 [ 927.189648] ? __fget+0x23e/0x3e0 [ 927.193095] ? lock_acquire+0x170/0x3f0 [ 927.197321] ? lock_downgrade+0x740/0x740 [ 927.201463] ? __fget+0x265/0x3e0 [ 927.204919] ? __fdget+0x19b/0x1f0 14:19:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x20000010) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r7, 0x40383d03, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r7, 0x40082102, &(0x7f0000000400)) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r3, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) [ 927.208452] ? sockfd_lookup_light+0xb2/0x160 [ 927.212940] __sys_sendmsg+0xa3/0x120 [ 927.216739] ? SyS_shutdown+0x160/0x160 [ 927.220710] ? wait_for_completion_io+0x10/0x10 [ 927.225379] ? SyS_read+0x210/0x210 [ 927.228995] ? __do_page_fault+0x159/0xad0 [ 927.233216] SyS_sendmsg+0x27/0x40 [ 927.236743] ? __sys_sendmsg+0x120/0x120 [ 927.240798] do_syscall_64+0x1d5/0x640 [ 927.244683] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 927.249864] RIP: 0033:0x7ff5570ac0a9 [ 927.253569] RSP: 002b:00007ff55561e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 927.261269] RAX: ffffffffffffffda RBX: 00007ff5571cbf80 RCX: 00007ff5570ac0a9 [ 927.268525] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 927.275795] RBP: 00007ff55561e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 927.283059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 927.290321] R13: 00007fff8d0203af R14: 00007ff55561e300 R15: 0000000000022000 [ 927.302316] CPU: 0 PID: 31708 Comm: syz-executor.5 Not tainted 4.14.302-syzkaller #0 [ 927.310212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 927.319555] Call Trace: [ 927.322138] dump_stack+0x1b2/0x281 [ 927.325780] should_fail.cold+0x10a/0x149 [ 927.329930] should_failslab+0xd6/0x130 [ 927.333904] kmem_cache_alloc_node+0x263/0x410 [ 927.338485] __alloc_skb+0x5c/0x510 [ 927.342107] netlink_sendmsg+0x91e/0xbc0 [ 927.346168] ? nlmsg_notify+0x1b0/0x1b0 [ 927.350132] ? kernel_recvmsg+0x210/0x210 [ 927.354278] ? security_socket_sendmsg+0x83/0xb0 [ 927.359024] ? nlmsg_notify+0x1b0/0x1b0 [ 927.362995] sock_sendmsg+0xb5/0x100 [ 927.366703] ___sys_sendmsg+0x6c8/0x800 [ 927.370671] ? get_pid_task+0x91/0x130 [ 927.374608] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 927.379358] ? lock_downgrade+0x740/0x740 [ 927.383506] ? __fget+0x23e/0x3e0 [ 927.384320] FAULT_INJECTION: forcing a failure. [ 927.384320] name failslab, interval 1, probability 0, space 0, times 0 [ 927.386960] ? lock_acquire+0x170/0x3f0 [ 927.386971] ? lock_downgrade+0x740/0x740 [ 927.386985] ? __fget+0x265/0x3e0 [ 927.386998] ? __fdget+0x19b/0x1f0 [ 927.387007] ? sockfd_lookup_light+0xb2/0x160 [ 927.387023] __sys_sendmsg+0xa3/0x120 [ 927.421644] ? SyS_shutdown+0x160/0x160 [ 927.425606] ? wait_for_completion_io+0x10/0x10 [ 927.430261] ? SyS_read+0x210/0x210 [ 927.434129] ? __do_page_fault+0x159/0xad0 [ 927.438348] SyS_sendmsg+0x27/0x40 [ 927.441867] ? __sys_sendmsg+0x120/0x120 [ 927.445914] do_syscall_64+0x1d5/0x640 [ 927.449791] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 927.454961] RIP: 0033:0x7f91d59e90a9 14:19:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000480)={'wpan4\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r5) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r6, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x80) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="484cea205def3adea88bb492e47437f14c11818182899eeb807ecbed656ee8", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00'], 0x14}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5a040000", @ANYRESHEX=r0, @ANYRESOCT=r3, @ANYRESHEX=r2, @ANYRES16=r5, @ANYRES32, @ANYRES8=r1], 0x34}, 0x1, 0x0, 0x0, 0x24048051}, 0x600440c1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), r2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000480)={'wpan4\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r5) (async) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r6, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x80) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="484cea205def3adea88bb492e47437f14c11818182899eeb807ecbed656ee8", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00'], 0x14}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5a040000", @ANYRESHEX=r0, @ANYRESOCT=r3, @ANYRESHEX=r2, @ANYRES16=r5, @ANYRES32, @ANYRES8=r1], 0x34}, 0x1, 0x0, 0x0, 0x24048051}, 0x600440c1) (async) 14:19:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (fail_nth: 2) [ 927.458650] RSP: 002b:00007f91d3f5b168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 927.466337] RAX: ffffffffffffffda RBX: 00007f91d5b08f80 RCX: 00007f91d59e90a9 [ 927.473583] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 927.480833] RBP: 00007f91d3f5b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 927.488103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 927.495351] R13: 00007ffd180e90bf R14: 00007f91d3f5b300 R15: 0000000000022000 [ 927.502612] CPU: 1 PID: 31732 Comm: syz-executor.1 Not tainted 4.14.302-syzkaller #0 [ 927.510551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 927.519899] Call Trace: [ 927.522483] dump_stack+0x1b2/0x281 [ 927.526113] should_fail.cold+0x10a/0x149 [ 927.530258] should_failslab+0xd6/0x130 [ 927.534231] kmem_cache_alloc_node_trace+0x25a/0x400 [ 927.539334] __kmalloc_node_track_caller+0x38/0x70 [ 927.544257] __alloc_skb+0x96/0x510 [ 927.547882] netlink_sendmsg+0x91e/0xbc0 [ 927.551948] ? nlmsg_notify+0x1b0/0x1b0 [ 927.555919] ? kernel_recvmsg+0x210/0x210 [ 927.560069] ? security_socket_sendmsg+0x83/0xb0 [ 927.564964] ? nlmsg_notify+0x1b0/0x1b0 [ 927.568934] sock_sendmsg+0xb5/0x100 [ 927.572647] ___sys_sendmsg+0x6c8/0x800 [ 927.576627] ? get_pid_task+0x91/0x130 [ 927.580503] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 927.585254] ? lock_downgrade+0x740/0x740 [ 927.589400] ? __fget+0x23e/0x3e0 [ 927.592852] ? lock_acquire+0x170/0x3f0 [ 927.596823] ? lock_downgrade+0x740/0x740 [ 927.600969] ? __fget+0x265/0x3e0 [ 927.604416] ? __fdget+0x19b/0x1f0 14:19:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (fail_nth: 2) [ 927.607939] ? sockfd_lookup_light+0xb2/0x160 [ 927.612417] __sys_sendmsg+0xa3/0x120 [ 927.616219] ? SyS_shutdown+0x160/0x160 [ 927.620178] ? wait_for_completion_io+0x10/0x10 [ 927.624833] ? SyS_read+0x210/0x210 [ 927.628456] ? __do_page_fault+0x159/0xad0 [ 927.632688] SyS_sendmsg+0x27/0x40 [ 927.636222] ? __sys_sendmsg+0x120/0x120 [ 927.640274] do_syscall_64+0x1d5/0x640 [ 927.644424] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 927.649616] RIP: 0033:0x7ff5570ac0a9 [ 927.653317] RSP: 002b:00007ff55561e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 14:19:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x20000010) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r7, 0x40383d03, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r7, 0x40082102, &(0x7f0000000400)) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r3, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) [ 927.661019] RAX: ffffffffffffffda RBX: 00007ff5571cbf80 RCX: 00007ff5570ac0a9 [ 927.668279] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 927.675541] RBP: 00007ff55561e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 927.682808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 927.690085] R13: 00007fff8d0203af R14: 00007ff55561e300 R15: 0000000000022000 [ 927.701538] CPU: 0 PID: 31705 Comm: syz-executor.4 Not tainted 4.14.302-syzkaller #0 [ 927.709429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 927.718774] Call Trace: [ 927.721353] dump_stack+0x1b2/0x281 [ 927.724986] should_fail.cold+0x10a/0x149 [ 927.729150] should_failslab+0xd6/0x130 [ 927.730236] FAULT_INJECTION: forcing a failure. [ 927.730236] name failslab, interval 1, probability 0, space 0, times 0 [ 927.733128] kmem_cache_alloc_node+0x263/0x410 [ 927.733162] __alloc_skb+0x5c/0x510 [ 927.752512] sock_wmalloc+0xa5/0xf0 [ 927.756129] l2tp_ip_sendmsg+0x14c/0x12a0 [ 927.760264] inet_sendmsg+0x11a/0x4e0 [ 927.764048] ? security_socket_sendmsg+0x83/0xb0 [ 927.768802] ? inet_recvmsg+0x4d0/0x4d0 [ 927.772764] sock_sendmsg+0xb5/0x100 [ 927.776460] SyS_sendto+0x1c7/0x2c0 [ 927.780072] ? SyS_getpeername+0x220/0x220 [ 927.784298] ? lock_downgrade+0x740/0x740 [ 927.788446] ? wait_for_completion_io+0x10/0x10 [ 927.793106] ? vfs_write+0x319/0x4d0 [ 927.796799] ? fput_many+0xe/0x140 [ 927.800320] ? SyS_write+0x14d/0x210 [ 927.804028] ? SyS_read+0x210/0x210 [ 927.807647] ? __do_page_fault+0x159/0xad0 [ 927.811862] ? do_syscall_64+0x4c/0x640 [ 927.815862] ? SyS_getpeername+0x220/0x220 [ 927.820087] do_syscall_64+0x1d5/0x640 [ 927.823962] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 927.829152] RIP: 0033:0x7f3483bfe0a9 [ 927.832843] RSP: 002b:00007f3482170168 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 927.840530] RAX: ffffffffffffffda RBX: 00007f3483d1df80 RCX: 00007f3483bfe0a9 [ 927.847789] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 927.855039] RBP: 00007f34821701d0 R08: 0000000020000140 R09: 0000000000000010 14:19:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000480)={'wpan4\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r5) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r6, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x80) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="484cea205def3adea88bb492e47437f14c11818182899eeb807ecbed656ee8", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00'], 0x14}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5a040000", @ANYRESHEX=r0, @ANYRESOCT=r3, @ANYRESHEX=r2, @ANYRES16=r5, @ANYRES32, @ANYRES8=r1], 0x34}, 0x1, 0x0, 0x0, 0x24048051}, 0x600440c1) [ 927.862287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 927.869543] R13: 00007ffec8703f0f R14: 00007f3482170300 R15: 0000000000022000 [ 927.876838] CPU: 1 PID: 31740 Comm: syz-executor.0 Not tainted 4.14.302-syzkaller #0 [ 927.884721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 927.894069] Call Trace: [ 927.896652] dump_stack+0x1b2/0x281 [ 927.900280] should_fail.cold+0x10a/0x149 [ 927.904430] should_failslab+0xd6/0x130 14:19:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x20000010) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r7, 0x40383d03, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r7, 0x40082102, &(0x7f0000000400)) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r3, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) [ 927.908404] kmem_cache_alloc_node_trace+0x25a/0x400 [ 927.913511] __kmalloc_node_track_caller+0x38/0x70 [ 927.918435] __alloc_skb+0x96/0x510 [ 927.922055] netlink_sendmsg+0x91e/0xbc0 [ 927.926108] ? nlmsg_notify+0x1b0/0x1b0 [ 927.930086] ? kernel_recvmsg+0x210/0x210 [ 927.934236] ? security_socket_sendmsg+0x83/0xb0 [ 927.938986] ? nlmsg_notify+0x1b0/0x1b0 [ 927.942958] sock_sendmsg+0xb5/0x100 [ 927.946669] ___sys_sendmsg+0x6c8/0x800 [ 927.950636] ? get_pid_task+0x91/0x130 [ 927.954520] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 927.959280] ? lock_downgrade+0x740/0x740 [ 927.963428] ? __fget+0x23e/0x3e0 [ 927.966882] ? lock_acquire+0x170/0x3f0 [ 927.970850] ? lock_downgrade+0x740/0x740 [ 927.974996] ? __fget+0x265/0x3e0 [ 927.978448] ? __fdget+0x19b/0x1f0 [ 927.981988] ? sockfd_lookup_light+0xb2/0x160 [ 927.986479] __sys_sendmsg+0xa3/0x120 [ 927.990276] ? SyS_shutdown+0x160/0x160 [ 927.994254] ? wait_for_completion_io+0x10/0x10 [ 927.998926] ? SyS_read+0x210/0x210 [ 928.002553] ? __do_page_fault+0x159/0xad0 [ 928.006786] SyS_sendmsg+0x27/0x40 [ 928.010318] ? __sys_sendmsg+0x120/0x120 [ 928.014376] do_syscall_64+0x1d5/0x640 [ 928.018264] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 928.023442] RIP: 0033:0x7f268d9110a9 [ 928.027143] RSP: 002b:00007f268be83168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 928.034846] RAX: ffffffffffffffda RBX: 00007f268da30f80 RCX: 00007f268d9110a9 [ 928.042111] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 928.049377] RBP: 00007f268be831d0 R08: 0000000000000000 R09: 0000000000000000 14:19:32 executing program 5: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x6, 0x1a, 0x9, "240e52f3ce27bfba6e0d60afcfa8655232c0324b287f04de8a142ed5f77d210285d86ff5c020a9fe6c86476bc3298214c11e8970bcafd7cf329f57fb2c393f88", "3f9876e1b207f1016881e9de6de0d2290d40ccd70f2db9ba1e82881d31a886fbe908377a6b91efb0a0cf54d042ebeeb09bfe4b8dc32006e3f005c457cb0173b2", "8eb6ed2d13f5619752c50705a6127b9968ebdc9258d9900225b3ec7ff62d8ae3", [0x6]}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="00000004", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c000200000000000000000004000a000c000600010000000000000004000780"], 0x34}}, 0x0) 14:19:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x20000010) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r7, 0x40383d03, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r7, 0x40082102, &(0x7f0000000400)) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r3, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:32 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x7c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3f}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xcbfe}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8800) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x3f5, 0x8, 0x70bd2c, 0x25dfdbfc}, 0x10}}, 0x800) 14:19:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c000200000039"], 0x34}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r2) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1dc5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x24008080) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0104000000000000000006000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r5, 0x7b157662288d2745, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x67}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xc}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48040}, 0x8880) 14:19:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (fail_nth: 3) 14:19:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (fail_nth: 3) [ 928.056645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 928.063913] R13: 00007ffebe89cf2f R14: 00007f268be83300 R15: 0000000000022000 [ 928.146891] FAULT_INJECTION: forcing a failure. [ 928.146891] name failslab, interval 1, probability 0, space 0, times 0 [ 928.179445] CPU: 0 PID: 31764 Comm: syz-executor.1 Not tainted 4.14.302-syzkaller #0 [ 928.187351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 928.196699] Call Trace: [ 928.199285] dump_stack+0x1b2/0x281 [ 928.202908] should_fail.cold+0x10a/0x149 [ 928.207058] should_failslab+0xd6/0x130 [ 928.211031] kmem_cache_alloc_trace+0x29a/0x3d0 [ 928.215691] nbd_alloc_config+0x5e/0x180 [ 928.219735] nbd_genl_connect+0x40f/0x13e0 [ 928.223948] ? nbd_xmit_timeout+0x500/0x500 [ 928.228249] ? validate_nla+0x192/0x5e0 [ 928.232208] ? nla_parse+0x157/0x1f0 [ 928.235905] genl_family_rcv_msg+0x572/0xb20 [ 928.240302] ? genl_rcv+0x40/0x40 [ 928.243734] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 928.249163] ? __kmalloc_node_track_caller+0x4c/0x70 [ 928.254242] ? trace_hardirqs_on+0x10/0x10 [ 928.258469] genl_rcv_msg+0xaf/0x140 [ 928.262176] netlink_rcv_skb+0x125/0x390 [ 928.266232] ? genl_family_rcv_msg+0xb20/0xb20 [ 928.270797] ? netlink_ack+0x9a0/0x9a0 [ 928.274663] ? lock_acquire+0x170/0x3f0 [ 928.278618] genl_rcv+0x24/0x40 [ 928.281874] netlink_unicast+0x437/0x610 [ 928.285952] ? netlink_sendskb+0xd0/0xd0 [ 928.290000] ? __check_object_size+0x179/0x230 [ 928.294558] netlink_sendmsg+0x648/0xbc0 [ 928.298597] ? nlmsg_notify+0x1b0/0x1b0 [ 928.302553] ? kernel_recvmsg+0x210/0x210 [ 928.306686] ? security_socket_sendmsg+0x83/0xb0 [ 928.311426] ? nlmsg_notify+0x1b0/0x1b0 [ 928.315382] sock_sendmsg+0xb5/0x100 [ 928.319078] ___sys_sendmsg+0x6c8/0x800 [ 928.323047] ? get_pid_task+0x91/0x130 [ 928.326924] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 928.331659] ? lock_downgrade+0x740/0x740 [ 928.335790] ? __fget+0x23e/0x3e0 [ 928.339220] ? lock_acquire+0x170/0x3f0 [ 928.343169] ? lock_downgrade+0x740/0x740 [ 928.347297] ? __fget+0x265/0x3e0 [ 928.350730] ? __fdget+0x19b/0x1f0 [ 928.354247] ? sockfd_lookup_light+0xb2/0x160 [ 928.358806] __sys_sendmsg+0xa3/0x120 [ 928.362583] ? SyS_shutdown+0x160/0x160 [ 928.366541] ? wait_for_completion_io+0x10/0x10 [ 928.371190] ? SyS_read+0x210/0x210 [ 928.374792] ? __do_page_fault+0x159/0xad0 [ 928.379003] SyS_sendmsg+0x27/0x40 [ 928.382525] ? __sys_sendmsg+0x120/0x120 [ 928.386569] do_syscall_64+0x1d5/0x640 [ 928.390436] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 14:19:33 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x7c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3f}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xcbfe}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8800) (async) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x3f5, 0x8, 0x70bd2c, 0x25dfdbfc}, 0x10}}, 0x800) [ 928.395601] RIP: 0033:0x7ff5570ac0a9 [ 928.399286] RSP: 002b:00007ff55561e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 928.406975] RAX: ffffffffffffffda RBX: 00007ff5571cbf80 RCX: 00007ff5570ac0a9 [ 928.414228] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 928.421474] RBP: 00007ff55561e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 928.428721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 928.435968] R13: 00007fff8d0203af R14: 00007ff55561e300 R15: 0000000000022000 14:19:33 executing program 5: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x6, 0x1a, 0x9, "240e52f3ce27bfba6e0d60afcfa8655232c0324b287f04de8a142ed5f77d210285d86ff5c020a9fe6c86476bc3298214c11e8970bcafd7cf329f57fb2c393f88", "3f9876e1b207f1016881e9de6de0d2290d40ccd70f2db9ba1e82881d31a886fbe908377a6b91efb0a0cf54d042ebeeb09bfe4b8dc32006e3f005c457cb0173b2", "8eb6ed2d13f5619752c50705a6127b9968ebdc9258d9900225b3ec7ff62d8ae3", [0x6]}) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="00000004", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c000200000000000000000004000a000c000600010000000000000004000780"], 0x34}}, 0x0) 14:19:33 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x32001, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0x6}) sendmsg$AUDIT_USER(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, 0x3ed, 0xc98cd2655b42601d, 0x70bd25, 0x25dfdbff, "0d22fc7f10ea55a725b884258e87d6bac158b9674c01d3319d72d93e72db5c84b66f", ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f00000002c0)={0x43c, 0x3f3, 0x20, 0x70bd28, 0x25dfdbfe, {0x1, 0x1, 0x3a, [0x7ff, 0x7f, 0x1c, 0x5, 0x4, 0x17b, 0x1ff, 0x7fffffff, 0x5, 0x200000, 0x7f, 0x3, 0x3ff, 0x7f, 0x7, 0x5e, 0x1, 0x4, 0x868, 0x7, 0x2, 0x0, 0x9, 0x2, 0x5, 0x7ff, 0x5, 0x6, 0x2, 0x20, 0xbb, 0x6, 0x5, 0xfffffffe, 0x81, 0x1, 0x4, 0x20, 0x0, 0x80, 0x8, 0x4a4, 0x0, 0x2a, 0x6, 0x1f, 0x1ff, 0x7893, 0x9, 0x6, 0x854f, 0x7, 0x8, 0x6, 0x81, 0x2, 0x5d9, 0x5, 0x3, 0xffffffff, 0xb6f, 0x8, 0x1ff, 0x9c], [0x93, 0x0, 0x3f, 0x5, 0x5, 0xffff, 0x1ff, 0x7ff, 0x8001, 0x74, 0x4, 0x0, 0x39d, 0xffffffff, 0x4, 0x1000, 0xfffffffd, 0x1, 0x18d, 0x20, 0x7ff, 0xfffffffa, 0x1, 0x8000, 0x101, 0x0, 0x1000, 0x20, 0x8, 0x7ff, 0x3, 0x1, 0x3, 0x3, 0x4, 0xffff, 0x80000000, 0x4, 0x35, 0x41f, 0x0, 0x9, 0x8, 0x6, 0x5, 0x6, 0x9, 0x7fffffff, 0x5, 0x1, 0x6, 0x6, 0x7, 0x2b9, 0x2, 0xcb92, 0x4, 0x2, 0xa3, 0x38caecc9, 0x6b5, 0x7, 0xffffffff, 0x4], [0x101, 0x1bc0, 0x7ff, 0x79, 0x5, 0x6, 0x7, 0x400, 0x4, 0x94, 0x9f, 0x400, 0x8, 0x7fff, 0xffffffff, 0x8000, 0x7fff, 0x9, 0x7, 0x2, 0x101, 0x7f, 0x5, 0x2, 0x66d, 0x8, 0x96, 0x6, 0x3, 0x0, 0x1, 0xe00000, 0x6, 0x4, 0x1, 0x2, 0x800, 0x5, 0xfffffffc, 0x400, 0x200, 0x6, 0x5, 0x3, 0xb741, 0x0, 0xffffffff, 0x8, 0x6, 0x80000001, 0x55bd51b2, 0x100, 0xe43a, 0x7, 0x1ff, 0x100, 0xa2a6, 0x9d7, 0xe00000, 0x1, 0x5, 0x9, 0x4, 0xa827], [0x5, 0x200, 0xffff, 0x5, 0xcd89, 0x3f, 0x8, 0x5, 0x0, 0x5, 0x9, 0x81, 0xffffff80, 0xfffffffd, 0xffffffff, 0x101, 0x7, 0x1, 0x5, 0x9, 0xffff4456, 0x8000, 0xfff, 0x5, 0x6, 0x0, 0x3ff, 0x6, 0xffffffff, 0x7, 0x5120, 0xfff, 0x8000, 0x80000001, 0x9, 0x4, 0x401, 0x0, 0x7, 0x6, 0x9, 0x6, 0x2f2b, 0x4f, 0x1, 0x8, 0x10000, 0x7, 0x5cb, 0x7fc8, 0x6, 0x9, 0x3, 0x7, 0xbbee, 0x3, 0x200, 0x9, 0x6, 0x4, 0x800, 0xa0f, 0x2, 0x80], 0x1b, ['/dev/nvme-fabrics\x00', 'nbd\x00', '[%-#\x00']}, ["", "", ""]}, 0x43c}, 0x1, 0x0, 0x0, 0x80}, 0x4009044) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd8e}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x0) 14:19:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (fail_nth: 4) 14:19:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x20000010) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r7, 0x40383d03, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r7, 0x40082102, &(0x7f0000000400)) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r3, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:33 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c000200000039"], 0x34}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r2) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1dc5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x24008080) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0104000000000000000006000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r5, 0x7b157662288d2745, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x67}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xc}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48040}, 0x8880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c000200000039"], 0x34}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r2) (async) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1dc5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x24008080) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0104000000000000000006000000"], 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r5, 0x7b157662288d2745, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x67}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xc}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48040}, 0x8880) (async) [ 928.459947] nbd: couldn't allocate config [ 928.467984] nbd: couldn't find device at index 3 [ 928.476670] nbd: must specify at least one socket 14:19:33 executing program 5: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x6, 0x1a, 0x9, "240e52f3ce27bfba6e0d60afcfa8655232c0324b287f04de8a142ed5f77d210285d86ff5c020a9fe6c86476bc3298214c11e8970bcafd7cf329f57fb2c393f88", "3f9876e1b207f1016881e9de6de0d2290d40ccd70f2db9ba1e82881d31a886fbe908377a6b91efb0a0cf54d042ebeeb09bfe4b8dc32006e3f005c457cb0173b2", "8eb6ed2d13f5619752c50705a6127b9968ebdc9258d9900225b3ec7ff62d8ae3", [0x6]}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="00000004", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c000200000000000000000004000a000c000600010000000000000004000780"], 0x34}}, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x6, 0x1a, 0x9, "240e52f3ce27bfba6e0d60afcfa8655232c0324b287f04de8a142ed5f77d210285d86ff5c020a9fe6c86476bc3298214c11e8970bcafd7cf329f57fb2c393f88", "3f9876e1b207f1016881e9de6de0d2290d40ccd70f2db9ba1e82881d31a886fbe908377a6b91efb0a0cf54d042ebeeb09bfe4b8dc32006e3f005c457cb0173b2", "8eb6ed2d13f5619752c50705a6127b9968ebdc9258d9900225b3ec7ff62d8ae3", [0x6]}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="00000004", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c000200000000000000000004000a000c000600010000000000000004000780"], 0x34}}, 0x0) (async) 14:19:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x20000010) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r7, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r3, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:33 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x7c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3f}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xcbfe}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8800) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x3f5, 0x8, 0x70bd2c, 0x25dfdbfc}, 0x10}}, 0x800) socket$l2tp(0x2, 0x2, 0x73) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x7c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3f}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xcbfe}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8800) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x3f5, 0x8, 0x70bd2c, 0x25dfdbfc}, 0x10}}, 0x800) (async) [ 928.536372] nbd: must specify at least one socket 14:19:33 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x32001, 0x0) (async) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0x6}) (async, rerun: 64) sendmsg$AUDIT_USER(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, 0x3ed, 0xc98cd2655b42601d, 0x70bd25, 0x25dfdbff, "0d22fc7f10ea55a725b884258e87d6bac158b9674c01d3319d72d93e72db5c84b66f", ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f00000002c0)={0x43c, 0x3f3, 0x20, 0x70bd28, 0x25dfdbfe, {0x1, 0x1, 0x3a, [0x7ff, 0x7f, 0x1c, 0x5, 0x4, 0x17b, 0x1ff, 0x7fffffff, 0x5, 0x200000, 0x7f, 0x3, 0x3ff, 0x7f, 0x7, 0x5e, 0x1, 0x4, 0x868, 0x7, 0x2, 0x0, 0x9, 0x2, 0x5, 0x7ff, 0x5, 0x6, 0x2, 0x20, 0xbb, 0x6, 0x5, 0xfffffffe, 0x81, 0x1, 0x4, 0x20, 0x0, 0x80, 0x8, 0x4a4, 0x0, 0x2a, 0x6, 0x1f, 0x1ff, 0x7893, 0x9, 0x6, 0x854f, 0x7, 0x8, 0x6, 0x81, 0x2, 0x5d9, 0x5, 0x3, 0xffffffff, 0xb6f, 0x8, 0x1ff, 0x9c], [0x93, 0x0, 0x3f, 0x5, 0x5, 0xffff, 0x1ff, 0x7ff, 0x8001, 0x74, 0x4, 0x0, 0x39d, 0xffffffff, 0x4, 0x1000, 0xfffffffd, 0x1, 0x18d, 0x20, 0x7ff, 0xfffffffa, 0x1, 0x8000, 0x101, 0x0, 0x1000, 0x20, 0x8, 0x7ff, 0x3, 0x1, 0x3, 0x3, 0x4, 0xffff, 0x80000000, 0x4, 0x35, 0x41f, 0x0, 0x9, 0x8, 0x6, 0x5, 0x6, 0x9, 0x7fffffff, 0x5, 0x1, 0x6, 0x6, 0x7, 0x2b9, 0x2, 0xcb92, 0x4, 0x2, 0xa3, 0x38caecc9, 0x6b5, 0x7, 0xffffffff, 0x4], [0x101, 0x1bc0, 0x7ff, 0x79, 0x5, 0x6, 0x7, 0x400, 0x4, 0x94, 0x9f, 0x400, 0x8, 0x7fff, 0xffffffff, 0x8000, 0x7fff, 0x9, 0x7, 0x2, 0x101, 0x7f, 0x5, 0x2, 0x66d, 0x8, 0x96, 0x6, 0x3, 0x0, 0x1, 0xe00000, 0x6, 0x4, 0x1, 0x2, 0x800, 0x5, 0xfffffffc, 0x400, 0x200, 0x6, 0x5, 0x3, 0xb741, 0x0, 0xffffffff, 0x8, 0x6, 0x80000001, 0x55bd51b2, 0x100, 0xe43a, 0x7, 0x1ff, 0x100, 0xa2a6, 0x9d7, 0xe00000, 0x1, 0x5, 0x9, 0x4, 0xa827], [0x5, 0x200, 0xffff, 0x5, 0xcd89, 0x3f, 0x8, 0x5, 0x0, 0x5, 0x9, 0x81, 0xffffff80, 0xfffffffd, 0xffffffff, 0x101, 0x7, 0x1, 0x5, 0x9, 0xffff4456, 0x8000, 0xfff, 0x5, 0x6, 0x0, 0x3ff, 0x6, 0xffffffff, 0x7, 0x5120, 0xfff, 0x8000, 0x80000001, 0x9, 0x4, 0x401, 0x0, 0x7, 0x6, 0x9, 0x6, 0x2f2b, 0x4f, 0x1, 0x8, 0x10000, 0x7, 0x5cb, 0x7fc8, 0x6, 0x9, 0x3, 0x7, 0xbbee, 0x3, 0x200, 0x9, 0x6, 0x4, 0x800, 0xa0f, 0x2, 0x80], 0x1b, ['/dev/nvme-fabrics\x00', 'nbd\x00', '[%-#\x00']}, ["", "", ""]}, 0x43c}, 0x1, 0x0, 0x0, 0x80}, 0x4009044) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd8e}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x0) [ 928.578514] FAULT_INJECTION: forcing a failure. [ 928.578514] name failslab, interval 1, probability 0, space 0, times 0 [ 928.600737] CPU: 0 PID: 31788 Comm: syz-executor.1 Not tainted 4.14.302-syzkaller #0 [ 928.608637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 928.617995] Call Trace: [ 928.620586] dump_stack+0x1b2/0x281 [ 928.624216] should_fail.cold+0x10a/0x149 [ 928.628370] should_failslab+0xd6/0x130 [ 928.632351] kmem_cache_alloc_trace+0x29a/0x3d0 [ 928.637016] ? dev_uevent_filter+0xd0/0xd0 [ 928.641252] kobject_uevent_env+0x20c/0xf30 [ 928.645573] ? wait_for_completion_io+0x10/0x10 [ 928.650246] ? is_acpi_device_node+0x5b/0x70 [ 928.654652] device_del+0x642/0xa80 [ 928.658277] ? __device_links_no_driver+0x1b0/0x1b0 [ 928.663292] device_unregister+0x22/0xc0 [ 928.667347] bdi_unregister+0x42f/0x610 [ 928.671320] ? wb_blkcg_offline+0x180/0x180 [ 928.675648] del_gendisk+0x453/0x820 [ 928.679362] ? refcount_dec_not_one+0x75/0xc0 [ 928.683944] ? disk_events_poll_msecs_store+0x150/0x150 [ 928.689396] ? wait_for_completion_io+0x10/0x10 [ 928.694067] nbd_put.part.0+0xb0/0x140 [ 928.697956] nbd_genl_connect+0xcf6/0x13e0 [ 928.702182] ? nbd_xmit_timeout+0x500/0x500 [ 928.706480] ? __mutex_lock+0x356/0x1310 [ 928.710528] ? validate_nla+0x192/0x5e0 [ 928.714478] ? nla_parse+0x157/0x1f0 [ 928.718184] genl_family_rcv_msg+0x572/0xb20 [ 928.722578] ? genl_rcv+0x40/0x40 [ 928.726011] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 928.731455] ? trace_hardirqs_on+0x10/0x10 [ 928.735670] genl_rcv_msg+0xaf/0x140 [ 928.739370] netlink_rcv_skb+0x125/0x390 [ 928.743416] ? genl_family_rcv_msg+0xb20/0xb20 [ 928.747980] ? netlink_ack+0x9a0/0x9a0 [ 928.751847] ? lock_acquire+0x170/0x3f0 [ 928.755799] genl_rcv+0x24/0x40 [ 928.759054] netlink_unicast+0x437/0x610 [ 928.763111] ? netlink_sendskb+0xd0/0xd0 [ 928.767169] ? __check_object_size+0x179/0x230 [ 928.771746] netlink_sendmsg+0x648/0xbc0 [ 928.775791] ? nlmsg_notify+0x1b0/0x1b0 [ 928.779745] ? kernel_recvmsg+0x210/0x210 [ 928.783884] ? security_socket_sendmsg+0x83/0xb0 [ 928.788636] ? nlmsg_notify+0x1b0/0x1b0 [ 928.792600] sock_sendmsg+0xb5/0x100 [ 928.796309] ___sys_sendmsg+0x6c8/0x800 [ 928.800278] ? get_pid_task+0x91/0x130 [ 928.804151] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 928.808885] ? lock_downgrade+0x740/0x740 [ 928.813138] ? __fget+0x23e/0x3e0 [ 928.816577] ? lock_acquire+0x170/0x3f0 [ 928.820533] ? lock_downgrade+0x740/0x740 [ 928.824663] ? __fget+0x265/0x3e0 [ 928.828108] ? __fdget+0x19b/0x1f0 [ 928.831635] ? sockfd_lookup_light+0xb2/0x160 [ 928.836116] __sys_sendmsg+0xa3/0x120 [ 928.839896] ? SyS_shutdown+0x160/0x160 [ 928.843869] ? wait_for_completion_io+0x10/0x10 [ 928.848529] ? SyS_read+0x210/0x210 [ 928.852136] ? __do_page_fault+0x159/0xad0 [ 928.856349] SyS_sendmsg+0x27/0x40 [ 928.859876] ? __sys_sendmsg+0x120/0x120 [ 928.863924] do_syscall_64+0x1d5/0x640 [ 928.867797] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 928.872961] RIP: 0033:0x7ff5570ac0a9 14:19:33 executing program 4: socket$l2tp(0x2, 0x2, 0x73) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4c80, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendto$l2tp(r0, 0x0, 0x0, 0xc000, &(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) [ 928.876652] RSP: 002b:00007ff55561e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 928.884337] RAX: ffffffffffffffda RBX: 00007ff5571cbf80 RCX: 00007ff5570ac0a9 [ 928.891592] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 928.898846] RBP: 00007ff55561e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 928.906091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 928.913343] R13: 00007fff8d0203af R14: 00007ff55561e300 R15: 0000000000022000 14:19:33 executing program 4: socket$l2tp(0x2, 0x2, 0x73) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4c80, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendto$l2tp(r0, 0x0, 0x0, 0xc000, &(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$l2tp(0x2, 0x2, 0x73) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4c80, 0x0) (async) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendto$l2tp(r0, 0x0, 0x0, 0xc000, &(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) 14:19:33 executing program 4: socket$l2tp(0x2, 0x2, 0x73) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4c80, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendto$l2tp(r0, 0x0, 0x0, 0xc000, &(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 14:19:33 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3fb, 0x800, 0x70bd25, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc045}, 0x4884) 14:19:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (fail_nth: 5) 14:19:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x48091) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:33 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c000200000039"], 0x34}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r2) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1dc5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x24008080) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0104000000000000000006000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r5, 0x7b157662288d2745, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x67}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xc}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48040}, 0x8880) 14:19:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x20000010) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r7, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r3, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:33 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x32001, 0x0) (async) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r1, 0x6}) (async) sendmsg$AUDIT_USER(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, 0x3ed, 0xc98cd2655b42601d, 0x70bd25, 0x25dfdbff, "0d22fc7f10ea55a725b884258e87d6bac158b9674c01d3319d72d93e72db5c84b66f", ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f00000002c0)={0x43c, 0x3f3, 0x20, 0x70bd28, 0x25dfdbfe, {0x1, 0x1, 0x3a, [0x7ff, 0x7f, 0x1c, 0x5, 0x4, 0x17b, 0x1ff, 0x7fffffff, 0x5, 0x200000, 0x7f, 0x3, 0x3ff, 0x7f, 0x7, 0x5e, 0x1, 0x4, 0x868, 0x7, 0x2, 0x0, 0x9, 0x2, 0x5, 0x7ff, 0x5, 0x6, 0x2, 0x20, 0xbb, 0x6, 0x5, 0xfffffffe, 0x81, 0x1, 0x4, 0x20, 0x0, 0x80, 0x8, 0x4a4, 0x0, 0x2a, 0x6, 0x1f, 0x1ff, 0x7893, 0x9, 0x6, 0x854f, 0x7, 0x8, 0x6, 0x81, 0x2, 0x5d9, 0x5, 0x3, 0xffffffff, 0xb6f, 0x8, 0x1ff, 0x9c], [0x93, 0x0, 0x3f, 0x5, 0x5, 0xffff, 0x1ff, 0x7ff, 0x8001, 0x74, 0x4, 0x0, 0x39d, 0xffffffff, 0x4, 0x1000, 0xfffffffd, 0x1, 0x18d, 0x20, 0x7ff, 0xfffffffa, 0x1, 0x8000, 0x101, 0x0, 0x1000, 0x20, 0x8, 0x7ff, 0x3, 0x1, 0x3, 0x3, 0x4, 0xffff, 0x80000000, 0x4, 0x35, 0x41f, 0x0, 0x9, 0x8, 0x6, 0x5, 0x6, 0x9, 0x7fffffff, 0x5, 0x1, 0x6, 0x6, 0x7, 0x2b9, 0x2, 0xcb92, 0x4, 0x2, 0xa3, 0x38caecc9, 0x6b5, 0x7, 0xffffffff, 0x4], [0x101, 0x1bc0, 0x7ff, 0x79, 0x5, 0x6, 0x7, 0x400, 0x4, 0x94, 0x9f, 0x400, 0x8, 0x7fff, 0xffffffff, 0x8000, 0x7fff, 0x9, 0x7, 0x2, 0x101, 0x7f, 0x5, 0x2, 0x66d, 0x8, 0x96, 0x6, 0x3, 0x0, 0x1, 0xe00000, 0x6, 0x4, 0x1, 0x2, 0x800, 0x5, 0xfffffffc, 0x400, 0x200, 0x6, 0x5, 0x3, 0xb741, 0x0, 0xffffffff, 0x8, 0x6, 0x80000001, 0x55bd51b2, 0x100, 0xe43a, 0x7, 0x1ff, 0x100, 0xa2a6, 0x9d7, 0xe00000, 0x1, 0x5, 0x9, 0x4, 0xa827], [0x5, 0x200, 0xffff, 0x5, 0xcd89, 0x3f, 0x8, 0x5, 0x0, 0x5, 0x9, 0x81, 0xffffff80, 0xfffffffd, 0xffffffff, 0x101, 0x7, 0x1, 0x5, 0x9, 0xffff4456, 0x8000, 0xfff, 0x5, 0x6, 0x0, 0x3ff, 0x6, 0xffffffff, 0x7, 0x5120, 0xfff, 0x8000, 0x80000001, 0x9, 0x4, 0x401, 0x0, 0x7, 0x6, 0x9, 0x6, 0x2f2b, 0x4f, 0x1, 0x8, 0x10000, 0x7, 0x5cb, 0x7fc8, 0x6, 0x9, 0x3, 0x7, 0xbbee, 0x3, 0x200, 0x9, 0x6, 0x4, 0x800, 0xa0f, 0x2, 0x80], 0x1b, ['/dev/nvme-fabrics\x00', 'nbd\x00', '[%-#\x00']}, ["", "", ""]}, 0x43c}, 0x1, 0x0, 0x0, 0x80}, 0x4009044) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd8e}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x0) [ 929.013978] nbd: must specify at least one socket 14:19:33 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3fb, 0x800, 0x70bd25, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc045}, 0x4884) 14:19:33 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3fb, 0x800, 0x70bd25, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc045}, 0x4884) socket$l2tp(0x2, 0x2, 0x73) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3fb, 0x800, 0x70bd25, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc045}, 0x4884) (async) 14:19:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x48091) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040045}, 0xc001) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 929.141889] nbd: must specify at least one socket 14:19:33 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) sendmsg$AUDIT_TRIM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f6, 0x100, 0x70bd2c, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}}, 0x800) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x3, 0x1}) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x3, 0xb0800) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="a80000005304000825bd7000fddbdf259a7e45c078ae9144904013397c81a5c63dc9e733b814b76d5526b4572a9567139462e743c5072f0198047245ee86247775073f0a78946a722ad96984fb314467e6d9c33adb750b0f13d722f02a4ab030b686a7b0cc248baa7fb376d577036d20b3267a7341cac344b7a3bb0000521be5647024a3ac91ede2eae5c439b27df9668ea7cd898d96e8590298bc367daf6f1ecb11dab2c144d18b"], 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x20000040) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000300)={0x4, 0x13, 0x101, 0x7, 0xdc, 0x80, &(0x7f0000000200)="0ce3d29242ff49b24c5ea3f2cfd6178bb55892309ef42bd11ae9cb83f3cbf7bc32c44481e3c24fe1ea386fb1a623e6f77636b0a623065b4189889b6ed3949e404ac06696bb0e7f8da22707986d2391fe3890fe71b390bf2158a6742fd33c45d61edc6e4205ac2caf91853b80edd29e524aebe81cf7d41e449ffe77e5b55ead19ecea5e5ac92d4da274d628f8d9615e967ff6569af79da4a7f79fba108fe13782cdb11a95acd782c85f20c6795115e5ea15164a50cd787a1ca598fa0895c4a778c755d073e58cee33276f1d5d3dca3990c1bc7b11598215afe0d4d25f"}) r3 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r3, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000180)={{0x9, 0x7f}, {0x1, 0x83a}, 0x9, 0x1}) [ 929.176110] FAULT_INJECTION: forcing a failure. [ 929.176110] name failslab, interval 1, probability 0, space 0, times 0 [ 929.215495] CPU: 1 PID: 31860 Comm: syz-executor.1 Not tainted 4.14.302-syzkaller #0 [ 929.223402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 929.232750] Call Trace: [ 929.235339] dump_stack+0x1b2/0x281 [ 929.238971] should_fail.cold+0x10a/0x149 [ 929.243130] should_failslab+0xd6/0x130 [ 929.247106] kmem_cache_alloc_trace+0x29a/0x3d0 [ 929.251770] ? dev_uevent_filter+0xd0/0xd0 [ 929.256011] kobject_uevent_env+0x20c/0xf30 [ 929.260330] ? wait_for_completion_io+0x10/0x10 [ 929.264991] ? is_acpi_device_node+0x5b/0x70 [ 929.269399] device_del+0x642/0xa80 14:19:33 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) (async) sendmsg$AUDIT_TRIM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f6, 0x100, 0x70bd2c, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}}, 0x800) (async) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x3, 0x1}) (async) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x3, 0xb0800) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="a80000005304000825bd7000fddbdf259a7e45c078ae9144904013397c81a5c63dc9e733b814b76d5526b4572a9567139462e743c5072f0198047245ee86247775073f0a78946a722ad96984fb314467e6d9c33adb750b0f13d722f02a4ab030b686a7b0cc248baa7fb376d577036d20b3267a7341cac344b7a3bb0000521be5647024a3ac91ede2eae5c439b27df9668ea7cd898d96e8590298bc367daf6f1ecb11dab2c144d18b"], 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x20000040) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000300)={0x4, 0x13, 0x101, 0x7, 0xdc, 0x80, &(0x7f0000000200)="0ce3d29242ff49b24c5ea3f2cfd6178bb55892309ef42bd11ae9cb83f3cbf7bc32c44481e3c24fe1ea386fb1a623e6f77636b0a623065b4189889b6ed3949e404ac06696bb0e7f8da22707986d2391fe3890fe71b390bf2158a6742fd33c45d61edc6e4205ac2caf91853b80edd29e524aebe81cf7d41e449ffe77e5b55ead19ecea5e5ac92d4da274d628f8d9615e967ff6569af79da4a7f79fba108fe13782cdb11a95acd782c85f20c6795115e5ea15164a50cd787a1ca598fa0895c4a778c755d073e58cee33276f1d5d3dca3990c1bc7b11598215afe0d4d25f"}) (async) r3 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r3, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000180)={{0x9, 0x7f}, {0x1, 0x83a}, 0x9, 0x1}) [ 929.273029] ? __device_links_no_driver+0x1b0/0x1b0 [ 929.278047] device_unregister+0x22/0xc0 [ 929.282102] bdi_unregister+0x42f/0x610 [ 929.286072] ? wb_blkcg_offline+0x180/0x180 [ 929.290400] del_gendisk+0x453/0x820 [ 929.294113] ? refcount_dec_not_one+0x75/0xc0 [ 929.298608] ? disk_events_poll_msecs_store+0x150/0x150 [ 929.303971] ? wait_for_completion_io+0x10/0x10 [ 929.308644] nbd_put.part.0+0xb0/0x140 [ 929.312531] nbd_genl_connect+0xcf6/0x13e0 [ 929.316768] ? nbd_xmit_timeout+0x500/0x500 [ 929.321085] ? __mutex_lock+0x356/0x1310 14:19:34 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) (async) sendmsg$AUDIT_TRIM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f6, 0x100, 0x70bd2c, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}}, 0x800) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x3, 0x1}) (async) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x3, 0xb0800) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) (async) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="a80000005304000825bd7000fddbdf259a7e45c078ae9144904013397c81a5c63dc9e733b814b76d5526b4572a9567139462e743c5072f0198047245ee86247775073f0a78946a722ad96984fb314467e6d9c33adb750b0f13d722f02a4ab030b686a7b0cc248baa7fb376d577036d20b3267a7341cac344b7a3bb0000521be5647024a3ac91ede2eae5c439b27df9668ea7cd898d96e8590298bc367daf6f1ecb11dab2c144d18b"], 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x20000040) (async) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000300)={0x4, 0x13, 0x101, 0x7, 0xdc, 0x80, &(0x7f0000000200)="0ce3d29242ff49b24c5ea3f2cfd6178bb55892309ef42bd11ae9cb83f3cbf7bc32c44481e3c24fe1ea386fb1a623e6f77636b0a623065b4189889b6ed3949e404ac06696bb0e7f8da22707986d2391fe3890fe71b390bf2158a6742fd33c45d61edc6e4205ac2caf91853b80edd29e524aebe81cf7d41e449ffe77e5b55ead19ecea5e5ac92d4da274d628f8d9615e967ff6569af79da4a7f79fba108fe13782cdb11a95acd782c85f20c6795115e5ea15164a50cd787a1ca598fa0895c4a778c755d073e58cee33276f1d5d3dca3990c1bc7b11598215afe0d4d25f"}) (async) r3 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r3, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) (async, rerun: 64) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000180)={{0x9, 0x7f}, {0x1, 0x83a}, 0x9, 0x1}) (rerun: 64) [ 929.325144] ? validate_nla+0x192/0x5e0 [ 929.329116] ? nla_parse+0x157/0x1f0 [ 929.332826] genl_family_rcv_msg+0x572/0xb20 [ 929.337234] ? genl_rcv+0x40/0x40 [ 929.340686] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 929.346136] ? trace_hardirqs_on+0x10/0x10 [ 929.350379] genl_rcv_msg+0xaf/0x140 [ 929.354092] netlink_rcv_skb+0x125/0x390 [ 929.358148] ? genl_family_rcv_msg+0xb20/0xb20 [ 929.362726] ? netlink_ack+0x9a0/0x9a0 [ 929.366616] ? lock_acquire+0x170/0x3f0 [ 929.370591] genl_rcv+0x24/0x40 [ 929.373867] netlink_unicast+0x437/0x610 [ 929.377927] ? netlink_sendskb+0xd0/0xd0 [ 929.381988] ? __check_object_size+0x179/0x230 [ 929.386566] netlink_sendmsg+0x648/0xbc0 [ 929.390628] ? nlmsg_notify+0x1b0/0x1b0 [ 929.394597] ? kernel_recvmsg+0x210/0x210 [ 929.398739] ? security_socket_sendmsg+0x83/0xb0 [ 929.403476] ? nlmsg_notify+0x1b0/0x1b0 [ 929.407431] sock_sendmsg+0xb5/0x100 [ 929.411122] ___sys_sendmsg+0x6c8/0x800 [ 929.415080] ? get_pid_task+0x91/0x130 [ 929.418954] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 929.423703] ? lock_downgrade+0x740/0x740 [ 929.427839] ? __fget+0x23e/0x3e0 [ 929.431283] ? lock_acquire+0x170/0x3f0 [ 929.435237] ? lock_downgrade+0x740/0x740 [ 929.439371] ? __fget+0x265/0x3e0 [ 929.442817] ? __fdget+0x19b/0x1f0 [ 929.446343] ? sockfd_lookup_light+0xb2/0x160 [ 929.450822] __sys_sendmsg+0xa3/0x120 [ 929.454605] ? SyS_shutdown+0x160/0x160 [ 929.458562] ? wait_for_completion_io+0x10/0x10 [ 929.463232] ? SyS_read+0x210/0x210 [ 929.466836] ? __do_page_fault+0x159/0xad0 [ 929.471050] SyS_sendmsg+0x27/0x40 [ 929.474565] ? __sys_sendmsg+0x120/0x120 [ 929.478604] do_syscall_64+0x1d5/0x640 [ 929.482474] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 929.487642] RIP: 0033:0x7ff5570ac0a9 [ 929.491330] RSP: 002b:00007ff55561e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 929.499018] RAX: ffffffffffffffda RBX: 00007ff5571cbf80 RCX: 00007ff5570ac0a9 [ 929.506264] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 929.513512] RBP: 00007ff55561e1d0 R08: 0000000000000000 R09: 0000000000000000 14:19:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (fail_nth: 6) 14:19:34 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x610102, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x220}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = getpgrp(0xffffffffffffffff) r4 = getpgrp(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004080}, 0x8000) r5 = socket$l2tp(0x2, 0x2, 0x73) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r7, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x24}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r7, 0x40, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40041}, 0x8000) sendto$l2tp(r5, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) [ 929.520759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 929.528007] R13: 00007fff8d0203af R14: 00007ff55561e300 R15: 0000000000022000 14:19:34 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c000200000039"], 0x34}}, 0x0) 14:19:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040045}, 0xc001) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040045}, 0xc001) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x84) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) 14:19:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x20000010) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r7, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r3, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x48091) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (rerun: 32) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:34 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x610102, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x220}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = getpgrp(0xffffffffffffffff) (async) r4 = getpgrp(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004080}, 0x8000) (async, rerun: 64) r5 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r7, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x24}}, 0x0) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r7, 0x40, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40041}, 0x8000) (async) sendto$l2tp(r5, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) [ 929.618582] FAULT_INJECTION: forcing a failure. [ 929.618582] name failslab, interval 1, probability 0, space 0, times 0 [ 929.660390] CPU: 1 PID: 31920 Comm: syz-executor.1 Not tainted 4.14.302-syzkaller #0 [ 929.668300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 929.677653] Call Trace: [ 929.680242] dump_stack+0x1b2/0x281 [ 929.683870] should_fail.cold+0x10a/0x149 [ 929.688019] should_failslab+0xd6/0x130 [ 929.692004] kmem_cache_alloc_trace+0x29a/0x3d0 [ 929.696672] rand_initialize_disk+0x46/0xa9 [ 929.700991] alloc_disk_node+0x1f7/0x3d0 [ 929.705051] nbd_dev_add+0x9f/0x800 [ 929.708675] ? nbd_send_cmd+0x11f0/0x11f0 [ 929.712816] ? ns_capable_common+0x127/0x150 [ 929.717230] nbd_genl_connect+0x3a4/0x13e0 [ 929.721460] ? lock_acquire+0x170/0x3f0 [ 929.725434] ? nbd_xmit_timeout+0x500/0x500 [ 929.729756] ? validate_nla+0x192/0x5e0 [ 929.733731] ? nla_parse+0x157/0x1f0 [ 929.737451] genl_family_rcv_msg+0x572/0xb20 [ 929.741863] ? genl_rcv+0x40/0x40 [ 929.745317] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 929.750759] ? __kmalloc_node_track_caller+0x4c/0x70 [ 929.755851] ? trace_hardirqs_on+0x10/0x10 [ 929.760104] genl_rcv_msg+0xaf/0x140 [ 929.763807] netlink_rcv_skb+0x125/0x390 [ 929.767861] ? genl_family_rcv_msg+0xb20/0xb20 [ 929.772434] ? netlink_ack+0x9a0/0x9a0 [ 929.776301] ? lock_acquire+0x170/0x3f0 [ 929.780259] genl_rcv+0x24/0x40 [ 929.783519] netlink_unicast+0x437/0x610 [ 929.787571] ? netlink_sendskb+0xd0/0xd0 [ 929.791619] ? __check_object_size+0x179/0x230 [ 929.796181] netlink_sendmsg+0x648/0xbc0 [ 929.800226] ? nlmsg_notify+0x1b0/0x1b0 [ 929.804202] ? kernel_recvmsg+0x210/0x210 [ 929.808335] ? security_socket_sendmsg+0x83/0xb0 [ 929.813073] ? nlmsg_notify+0x1b0/0x1b0 [ 929.817028] sock_sendmsg+0xb5/0x100 [ 929.820735] ___sys_sendmsg+0x6c8/0x800 [ 929.824691] ? get_pid_task+0x91/0x130 [ 929.828565] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 929.833344] ? lock_downgrade+0x740/0x740 [ 929.837472] ? __fget+0x23e/0x3e0 [ 929.840915] ? lock_acquire+0x170/0x3f0 [ 929.844879] ? lock_downgrade+0x740/0x740 [ 929.849015] ? __fget+0x265/0x3e0 [ 929.852461] ? __fdget+0x19b/0x1f0 [ 929.855984] ? sockfd_lookup_light+0xb2/0x160 [ 929.860460] __sys_sendmsg+0xa3/0x120 [ 929.864239] ? SyS_shutdown+0x160/0x160 [ 929.868196] ? wait_for_completion_io+0x10/0x10 [ 929.872849] ? SyS_read+0x210/0x210 [ 929.876461] ? __do_page_fault+0x159/0xad0 [ 929.880682] SyS_sendmsg+0x27/0x40 [ 929.884203] ? __sys_sendmsg+0x120/0x120 [ 929.888243] do_syscall_64+0x1d5/0x640 [ 929.892117] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 929.897284] RIP: 0033:0x7ff5570ac0a9 [ 929.900971] RSP: 002b:00007ff55561e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 929.908658] RAX: ffffffffffffffda RBX: 00007ff5571cbf80 RCX: 00007ff5570ac0a9 [ 929.915904] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 929.923152] RBP: 00007ff55561e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 929.930438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 929.937701] R13: 00007fff8d0203af R14: 00007ff55561e300 R15: 0000000000022000 14:19:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040045}, 0xc001) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x84) (async, rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) 14:19:34 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c000200000039"], 0x34}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c000200000039"], 0x34}}, 0x0) (async) 14:19:34 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x610102, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x220}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = getpgrp(0xffffffffffffffff) r4 = getpgrp(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004080}, 0x8000) r5 = socket$l2tp(0x2, 0x2, 0x73) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r7, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x24}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r7, 0x40, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40041}, 0x8000) sendto$l2tp(r5, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x610102, 0x0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x220}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async) getpgrp(0xffffffffffffffff) (async) getpgrp(0x0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004080}, 0x8000) (async) socket$l2tp(0x2, 0x2, 0x73) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r7, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x24}}, 0x0) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r7, 0x40, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40041}, 0x8000) (async) sendto$l2tp(r5, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) 14:19:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (fail_nth: 7) 14:19:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x20000010) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r3, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) 14:19:34 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=""/94}) 14:19:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf250100f8ffffff020000000000000000000c000600010000000000000004000780"], 0x30}, 0x1, 0x0, 0x0, 0x44040}, 0x0) [ 930.114554] FAULT_INJECTION: forcing a failure. [ 930.114554] name failslab, interval 1, probability 0, space 0, times 0 [ 930.140474] CPU: 0 PID: 31983 Comm: syz-executor.1 Not tainted 4.14.302-syzkaller #0 [ 930.148384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 930.157820] Call Trace: [ 930.160407] dump_stack+0x1b2/0x281 [ 930.164036] should_fail.cold+0x10a/0x149 [ 930.168192] should_failslab+0xd6/0x130 [ 930.172170] kmem_cache_alloc_node_trace+0x25a/0x400 [ 930.177274] __kmalloc_node+0x38/0x70 [ 930.181072] blk_mq_alloc_tag_set+0x27c/0x910 [ 930.185586] nbd_dev_add+0x2ae/0x800 [ 930.189295] ? nbd_send_cmd+0x11f0/0x11f0 [ 930.193439] ? ns_capable_common+0x127/0x150 [ 930.197844] nbd_genl_connect+0x3a4/0x13e0 [ 930.202075] ? lock_acquire+0x170/0x3f0 [ 930.206049] ? nbd_xmit_timeout+0x500/0x500 [ 930.210369] ? validate_nla+0x192/0x5e0 [ 930.214431] ? nla_parse+0x157/0x1f0 [ 930.218144] genl_family_rcv_msg+0x572/0xb20 [ 930.222559] ? genl_rcv+0x40/0x40 [ 930.226012] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 930.231453] ? __kmalloc_node_track_caller+0x4c/0x70 [ 930.236539] ? trace_hardirqs_on+0x10/0x10 [ 930.240757] genl_rcv_msg+0xaf/0x140 [ 930.244449] netlink_rcv_skb+0x125/0x390 [ 930.248492] ? genl_family_rcv_msg+0xb20/0xb20 [ 930.253051] ? netlink_ack+0x9a0/0x9a0 [ 930.256915] ? lock_acquire+0x170/0x3f0 [ 930.260873] genl_rcv+0x24/0x40 [ 930.264131] netlink_unicast+0x437/0x610 [ 930.268178] ? netlink_sendskb+0xd0/0xd0 [ 930.272220] ? __check_object_size+0x179/0x230 [ 930.276784] netlink_sendmsg+0x648/0xbc0 [ 930.280833] ? nlmsg_notify+0x1b0/0x1b0 [ 930.284787] ? kernel_recvmsg+0x210/0x210 [ 930.288915] ? security_socket_sendmsg+0x83/0xb0 [ 930.293675] ? nlmsg_notify+0x1b0/0x1b0 [ 930.297632] sock_sendmsg+0xb5/0x100 [ 930.301330] ___sys_sendmsg+0x6c8/0x800 [ 930.305289] ? get_pid_task+0x91/0x130 [ 930.309162] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 930.313905] ? lock_downgrade+0x740/0x740 [ 930.318048] ? __fget+0x23e/0x3e0 [ 930.321497] ? lock_acquire+0x170/0x3f0 [ 930.325456] ? lock_downgrade+0x740/0x740 [ 930.329582] ? __fget+0x265/0x3e0 [ 930.333018] ? __fdget+0x19b/0x1f0 [ 930.336535] ? sockfd_lookup_light+0xb2/0x160 [ 930.341007] __sys_sendmsg+0xa3/0x120 [ 930.344788] ? SyS_shutdown+0x160/0x160 [ 930.348742] ? wait_for_completion_io+0x10/0x10 [ 930.353405] ? SyS_read+0x210/0x210 [ 930.357022] ? __do_page_fault+0x159/0xad0 [ 930.361322] SyS_sendmsg+0x27/0x40 [ 930.364841] ? __sys_sendmsg+0x120/0x120 [ 930.368885] do_syscall_64+0x1d5/0x640 [ 930.372754] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 930.377920] RIP: 0033:0x7ff5570ac0a9 [ 930.381611] RSP: 002b:00007ff55561e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 930.389294] RAX: ffffffffffffffda RBX: 00007ff5571cbf80 RCX: 00007ff5570ac0a9 [ 930.396541] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 930.403788] RBP: 00007ff55561e1d0 R08: 0000000000000000 R09: 0000000000000000 14:19:35 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=""/94}) socket$l2tp(0x2, 0x2, 0x73) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) pipe(&(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=""/94}) (async) 14:19:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (fail_nth: 8) 14:19:35 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c000200000039"], 0x34}}, 0x0) [ 930.411035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 930.418286] R13: 00007fff8d0203af R14: 00007ff55561e300 R15: 0000000000022000 [ 930.426760] nbd: failed to add new device 14:19:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (rerun: 32) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) 14:19:35 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf250100f8ffffff020000000000000000000c000600010000000000000004000780"], 0x30}, 0x1, 0x0, 0x0, 0x44040}, 0x0) 14:19:35 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=""/94}) 14:19:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x20000010) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r3, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) [ 930.514802] FAULT_INJECTION: forcing a failure. [ 930.514802] name failslab, interval 1, probability 0, space 0, times 0 [ 930.556314] CPU: 0 PID: 32017 Comm: syz-executor.1 Not tainted 4.14.302-syzkaller #0 [ 930.564221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 930.573607] Call Trace: [ 930.576198] dump_stack+0x1b2/0x281 [ 930.579829] should_fail.cold+0x10a/0x149 [ 930.583979] should_failslab+0xd6/0x130 [ 930.587960] kmem_cache_alloc_node_trace+0x25a/0x400 [ 930.593066] __kmalloc_node+0x38/0x70 [ 930.596865] blk_mq_alloc_tag_set+0x30f/0x910 [ 930.601362] nbd_dev_add+0x2ae/0x800 [ 930.605069] ? nbd_send_cmd+0x11f0/0x11f0 [ 930.609212] ? ns_capable_common+0x127/0x150 [ 930.613623] nbd_genl_connect+0x3a4/0x13e0 [ 930.617851] ? lock_acquire+0x170/0x3f0 [ 930.621821] ? nbd_xmit_timeout+0x500/0x500 [ 930.626135] ? validate_nla+0x192/0x5e0 [ 930.630087] ? nla_parse+0x157/0x1f0 [ 930.633780] genl_family_rcv_msg+0x572/0xb20 [ 930.638168] ? genl_rcv+0x40/0x40 [ 930.641599] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 930.647028] ? __kmalloc_node_track_caller+0x4c/0x70 [ 930.652108] ? trace_hardirqs_on+0x10/0x10 [ 930.656324] genl_rcv_msg+0xaf/0x140 [ 930.660015] netlink_rcv_skb+0x125/0x390 [ 930.664051] ? genl_family_rcv_msg+0xb20/0xb20 [ 930.668608] ? netlink_ack+0x9a0/0x9a0 [ 930.672476] ? lock_acquire+0x170/0x3f0 [ 930.676444] genl_rcv+0x24/0x40 [ 930.679713] netlink_unicast+0x437/0x610 [ 930.683756] ? netlink_sendskb+0xd0/0xd0 [ 930.688115] ? __check_object_size+0x179/0x230 [ 930.692674] netlink_sendmsg+0x648/0xbc0 [ 930.696714] ? nlmsg_notify+0x1b0/0x1b0 [ 930.700664] ? kernel_recvmsg+0x210/0x210 [ 930.704798] ? security_socket_sendmsg+0x83/0xb0 [ 930.709535] ? nlmsg_notify+0x1b0/0x1b0 [ 930.713489] sock_sendmsg+0xb5/0x100 [ 930.717181] ___sys_sendmsg+0x6c8/0x800 [ 930.721140] ? get_pid_task+0x91/0x130 [ 930.725009] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 930.729742] ? lock_downgrade+0x740/0x740 [ 930.733867] ? __fget+0x23e/0x3e0 [ 930.737300] ? lock_acquire+0x170/0x3f0 [ 930.741253] ? lock_downgrade+0x740/0x740 [ 930.745379] ? __fget+0x265/0x3e0 [ 930.748811] ? __fdget+0x19b/0x1f0 [ 930.752328] ? sockfd_lookup_light+0xb2/0x160 [ 930.756817] __sys_sendmsg+0xa3/0x120 [ 930.760944] ? SyS_shutdown+0x160/0x160 [ 930.764897] ? wait_for_completion_io+0x10/0x10 [ 930.769809] ? SyS_read+0x210/0x210 [ 930.773411] ? __do_page_fault+0x159/0xad0 [ 930.777622] SyS_sendmsg+0x27/0x40 [ 930.781142] ? __sys_sendmsg+0x120/0x120 [ 930.785184] do_syscall_64+0x1d5/0x640 [ 930.789055] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 930.794224] RIP: 0033:0x7ff5570ac0a9 [ 930.797914] RSP: 002b:00007ff55561e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 14:19:35 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 14:19:35 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf250100f8ffffff020000000000000000000c000600010000000000000004000780"], 0x30}, 0x1, 0x0, 0x0, 0x44040}, 0x0) 14:19:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) 14:19:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (fail_nth: 9) [ 930.805616] RAX: ffffffffffffffda RBX: 00007ff5571cbf80 RCX: 00007ff5570ac0a9 [ 930.812867] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 930.820113] RBP: 00007ff55561e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 930.827367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 930.834612] R13: 00007fff8d0203af R14: 00007ff55561e300 R15: 0000000000022000 [ 930.843750] nbd: failed to add new device 14:19:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x20000010) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r3, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000006d8eea438e380d0eec0833ad210b67002f1011c72ade71c387e25b4c2c9c6628ce93791abb33175d5ccad4baa5660bed143c3d22aed8a59aff07000000000000dc6813e06360b4a429c50578c90050b9516a5a1aa0359d36995bac06bdc96496d6e4feec24911d91", @ANYRES16=r2, @ANYRES32=r1, @ANYRES32, @ANYBLOB="f4000000", @ANYRES32, @ANYBLOB="0c000200000039"], 0x34}, 0x1, 0x0, 0x0, 0x9d29acd4bfd2809e}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan1\x00'}) 14:19:35 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) 14:19:35 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:35 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) [ 930.914260] nla_parse: 95 callbacks suppressed [ 930.914266] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 930.951600] nbd: must specify at least one socket [ 930.998745] FAULT_INJECTION: forcing a failure. [ 930.998745] name failslab, interval 1, probability 0, space 0, times 0 [ 931.015904] CPU: 1 PID: 32049 Comm: syz-executor.1 Not tainted 4.14.302-syzkaller #0 [ 931.023797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 931.033142] Call Trace: [ 931.035728] dump_stack+0x1b2/0x281 [ 931.039368] should_fail.cold+0x10a/0x149 [ 931.043548] should_failslab+0xd6/0x130 [ 931.047525] kmem_cache_alloc_node_trace+0x25a/0x400 [ 931.052628] blk_mq_init_tags+0x5e/0x280 [ 931.056698] blk_mq_alloc_rq_map+0x90/0x220 [ 931.061019] __blk_mq_alloc_rq_map+0xa3/0x3a0 [ 931.065522] blk_mq_alloc_tag_set+0x4ac/0x910 [ 931.070019] nbd_dev_add+0x2ae/0x800 [ 931.073729] ? nbd_send_cmd+0x11f0/0x11f0 [ 931.077882] ? ns_capable_common+0x127/0x150 [ 931.082288] nbd_genl_connect+0x3a4/0x13e0 [ 931.086517] ? lock_acquire+0x170/0x3f0 [ 931.090485] ? nbd_xmit_timeout+0x500/0x500 [ 931.094809] ? validate_nla+0x192/0x5e0 [ 931.098783] ? nla_parse+0x157/0x1f0 [ 931.102496] genl_family_rcv_msg+0x572/0xb20 [ 931.106912] ? genl_rcv+0x40/0x40 [ 931.110360] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 931.115807] ? __kmalloc_node_track_caller+0x4c/0x70 [ 931.120905] ? trace_hardirqs_on+0x10/0x10 [ 931.125147] genl_rcv_msg+0xaf/0x140 [ 931.128857] netlink_rcv_skb+0x125/0x390 [ 931.132913] ? genl_family_rcv_msg+0xb20/0xb20 [ 931.137487] ? netlink_ack+0x9a0/0x9a0 [ 931.141369] ? lock_acquire+0x170/0x3f0 [ 931.145343] genl_rcv+0x24/0x40 [ 931.148620] netlink_unicast+0x437/0x610 [ 931.152677] ? netlink_sendskb+0xd0/0xd0 [ 931.156735] ? __check_object_size+0x179/0x230 [ 931.161320] netlink_sendmsg+0x648/0xbc0 [ 931.165369] ? nlmsg_notify+0x1b0/0x1b0 [ 931.169324] ? kernel_recvmsg+0x210/0x210 [ 931.173458] ? security_socket_sendmsg+0x83/0xb0 [ 931.178198] ? nlmsg_notify+0x1b0/0x1b0 [ 931.182158] sock_sendmsg+0xb5/0x100 [ 931.185861] ___sys_sendmsg+0x6c8/0x800 [ 931.189827] ? get_pid_task+0x91/0x130 [ 931.193702] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 931.198438] ? lock_downgrade+0x740/0x740 [ 931.202564] ? __fget+0x23e/0x3e0 [ 931.205994] ? lock_acquire+0x170/0x3f0 [ 931.209956] ? lock_downgrade+0x740/0x740 [ 931.214101] ? __fget+0x265/0x3e0 [ 931.217539] ? __fdget+0x19b/0x1f0 [ 931.221058] ? sockfd_lookup_light+0xb2/0x160 [ 931.225530] __sys_sendmsg+0xa3/0x120 [ 931.229314] ? SyS_shutdown+0x160/0x160 [ 931.233279] ? wait_for_completion_io+0x10/0x10 [ 931.237929] ? SyS_read+0x210/0x210 [ 931.241540] ? __do_page_fault+0x159/0xad0 [ 931.245759] SyS_sendmsg+0x27/0x40 [ 931.249285] ? __sys_sendmsg+0x120/0x120 [ 931.253329] do_syscall_64+0x1d5/0x640 [ 931.257201] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 931.262367] RIP: 0033:0x7ff5570ac0a9 [ 931.266059] RSP: 002b:00007ff55561e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 931.273752] RAX: ffffffffffffffda RBX: 00007ff5571cbf80 RCX: 00007ff5570ac0a9 [ 931.281001] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 931.288261] RBP: 00007ff55561e1d0 R08: 0000000000000000 R09: 0000000000000000 14:19:35 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast, 0x2}, 0x10) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x20140, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1407, 0x4, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x8000) 14:19:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000006d8eea438e380d0eec0833ad210b67002f1011c72ade71c387e25b4c2c9c6628ce93791abb33175d5ccad4baa5660bed143c3d22aed8a59aff07000000000000dc6813e06360b4a429c50578c90050b9516a5a1aa0359d36995bac06bdc96496d6e4feec24911d91", @ANYRES16=r2, @ANYRES32=r1, @ANYRES32, @ANYBLOB="f4000000", @ANYRES32, @ANYBLOB="0c000200000039"], 0x34}, 0x1, 0x0, 0x0, 0x9d29acd4bfd2809e}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000006d8eea438e380d0eec0833ad210b67002f1011c72ade71c387e25b4c2c9c6628ce93791abb33175d5ccad4baa5660bed143c3d22aed8a59aff07000000000000dc6813e06360b4a429c50578c90050b9516a5a1aa0359d36995bac06bdc96496d6e4feec24911d91", @ANYRES16=r2, @ANYRES32=r1, @ANYRES32, @ANYBLOB="f4000000", @ANYRES32, @ANYBLOB="0c000200000039"], 0x34}, 0x1, 0x0, 0x0, 0x9d29acd4bfd2809e}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan1\x00'}) (async) [ 931.295517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 931.302766] R13: 00007fff8d0203af R14: 00007ff55561e300 R15: 0000000000022000 14:19:36 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast, 0x2}, 0x10) (async) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x20140, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1407, 0x4, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x8000) 14:19:36 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast, 0x2}, 0x10) (async, rerun: 64) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x20140, 0x0) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1407, 0x4, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x8000) 14:19:36 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x1402, 0x200, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x4) [ 931.417841] blk-mq: reduced tag depth (128 -> 64) 14:19:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="901413bff71566508799d0427303bf729fc74258bb8c7e081cf48e022fa5908b0190f640845030b8b627d40cf691ee9912517fe64628b8b2f835b51bd195fac754f80af59c1c78", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c000200000000000000000004000a000c000600010000000000000004000780"], 0x34}}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:19:36 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (fail_nth: 10) 14:19:36 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) (async) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x1402, 0x200, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x4) 14:19:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x20000010) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r3, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:36 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="901413bff71566508799d0427303bf729fc74258bb8c7e081cf48e022fa5908b0190f640845030b8b627d40cf691ee9912517fe64628b8b2f835b51bd195fac754f80af59c1c78", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c000200000000000000000004000a000c000600010000000000000004000780"], 0x34}}, 0x10) (async, rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) 14:19:36 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x1402, 0x200, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x4) socket$l2tp(0x2, 0x2, 0x73) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) (async) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x1402, 0x200, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x4) (async) 14:19:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000006d8eea438e380d0eec0833ad210b67002f1011c72ade71c387e25b4c2c9c6628ce93791abb33175d5ccad4baa5660bed143c3d22aed8a59aff07000000000000dc6813e06360b4a429c50578c90050b9516a5a1aa0359d36995bac06bdc96496d6e4feec24911d91", @ANYRES16=r2, @ANYRES32=r1, @ANYRES32, @ANYBLOB="f4000000", @ANYRES32, @ANYBLOB="0c000200000039"], 0x34}, 0x1, 0x0, 0x0, 0x9d29acd4bfd2809e}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000006d8eea438e380d0eec0833ad210b67002f1011c72ade71c387e25b4c2c9c6628ce93791abb33175d5ccad4baa5660bed143c3d22aed8a59aff07000000000000dc6813e06360b4a429c50578c90050b9516a5a1aa0359d36995bac06bdc96496d6e4feec24911d91", @ANYRES16=r2, @ANYRES32=r1, @ANYRES32, @ANYBLOB="f4000000", @ANYRES32, @ANYBLOB="0c000200000039"], 0x34}, 0x1, 0x0, 0x0, 0x9d29acd4bfd2809e}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan1\x00'}) (async) 14:19:36 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (async) [ 931.618312] FAULT_INJECTION: forcing a failure. [ 931.618312] name failslab, interval 1, probability 0, space 0, times 0 [ 931.648946] CPU: 0 PID: 32129 Comm: syz-executor.1 Not tainted 4.14.302-syzkaller #0 [ 931.656851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 14:19:36 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x9, &(0x7f00000000c0)=[{0x0}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000080)={r2, 0x20}) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 14:19:36 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) (async, rerun: 32) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (rerun: 32) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}]}) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x9, &(0x7f00000000c0)=[{0x0}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000080)={r2, 0x20}) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) [ 931.666199] Call Trace: [ 931.668794] dump_stack+0x1b2/0x281 [ 931.672428] should_fail.cold+0x10a/0x149 [ 931.676592] should_failslab+0xd6/0x130 [ 931.680569] kmem_cache_alloc_node_trace+0x25a/0x400 [ 931.685681] __kmalloc_node+0x38/0x70 [ 931.689485] sbitmap_init_node+0x10c/0x3d0 [ 931.693721] sbitmap_queue_init_node+0x37/0x5d0 [ 931.698387] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 931.703404] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 931.708680] blk_mq_init_tags+0xf4/0x280 [ 931.712743] blk_mq_alloc_rq_map+0x90/0x220 14:19:36 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}]}) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x9, &(0x7f00000000c0)=[{0x0}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000080)={r2, 0x20}) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 14:19:36 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000040)) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) [ 931.717064] __blk_mq_alloc_rq_map+0xa3/0x3a0 [ 931.721561] blk_mq_alloc_tag_set+0x4ac/0x910 [ 931.726067] nbd_dev_add+0x2ae/0x800 [ 931.729780] ? nbd_send_cmd+0x11f0/0x11f0 [ 931.733923] ? ns_capable_common+0x127/0x150 [ 931.738326] nbd_genl_connect+0x3a4/0x13e0 [ 931.742730] ? lock_acquire+0x170/0x3f0 [ 931.746700] ? nbd_xmit_timeout+0x500/0x500 [ 931.751020] ? validate_nla+0x192/0x5e0 [ 931.754990] ? nla_parse+0x157/0x1f0 [ 931.758702] genl_family_rcv_msg+0x572/0xb20 [ 931.763116] ? genl_rcv+0x40/0x40 [ 931.766581] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 931.772029] ? __kmalloc_node_track_caller+0x4c/0x70 [ 931.777128] ? trace_hardirqs_on+0x10/0x10 [ 931.781369] genl_rcv_msg+0xaf/0x140 [ 931.785080] netlink_rcv_skb+0x125/0x390 [ 931.789136] ? genl_family_rcv_msg+0xb20/0xb20 [ 931.793709] ? netlink_ack+0x9a0/0x9a0 [ 931.797577] ? lock_acquire+0x170/0x3f0 [ 931.801534] genl_rcv+0x24/0x40 [ 931.804793] netlink_unicast+0x437/0x610 [ 931.808834] ? netlink_sendskb+0xd0/0xd0 [ 931.812882] ? __check_object_size+0x179/0x230 [ 931.817444] netlink_sendmsg+0x648/0xbc0 [ 931.821484] ? nlmsg_notify+0x1b0/0x1b0 [ 931.825444] ? kernel_recvmsg+0x210/0x210 [ 931.829572] ? security_socket_sendmsg+0x83/0xb0 [ 931.834303] ? nlmsg_notify+0x1b0/0x1b0 [ 931.838254] sock_sendmsg+0xb5/0x100 [ 931.841943] ___sys_sendmsg+0x6c8/0x800 [ 931.845898] ? get_pid_task+0x91/0x130 [ 931.849761] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 931.854496] ? lock_downgrade+0x740/0x740 [ 931.858624] ? __fget+0x23e/0x3e0 [ 931.862056] ? lock_acquire+0x170/0x3f0 [ 931.866005] ? lock_downgrade+0x740/0x740 [ 931.870130] ? __fget+0x265/0x3e0 [ 931.873560] ? __fdget+0x19b/0x1f0 [ 931.877076] ? sockfd_lookup_light+0xb2/0x160 [ 931.881723] __sys_sendmsg+0xa3/0x120 [ 931.885509] ? SyS_shutdown+0x160/0x160 [ 931.889464] ? wait_for_completion_io+0x10/0x10 [ 931.894114] ? SyS_read+0x210/0x210 [ 931.897719] ? __do_page_fault+0x159/0xad0 [ 931.901948] SyS_sendmsg+0x27/0x40 [ 931.905472] ? __sys_sendmsg+0x120/0x120 [ 931.909512] do_syscall_64+0x1d5/0x640 [ 931.913379] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 931.918545] RIP: 0033:0x7ff5570ac0a9 [ 931.922230] RSP: 002b:00007ff55561e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 931.929916] RAX: ffffffffffffffda RBX: 00007ff5571cbf80 RCX: 00007ff5570ac0a9 [ 931.937170] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 931.944429] RBP: 00007ff55561e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 931.951674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 931.958921] R13: 00007fff8d0203af R14: 00007ff55561e300 R15: 0000000000022000 [ 931.968542] blk-mq: reduced tag depth (128 -> 64) 14:19:36 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (fail_nth: 11) 14:19:36 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000040)) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) socket$l2tp(0x2, 0x2, 0x73) (async) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000040)) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) 14:19:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="901413bff71566508799d0427303bf729fc74258bb8c7e081cf48e022fa5908b0190f640845030b8b627d40cf691ee9912517fe64628b8b2f835b51bd195fac754f80af59c1c78", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c000200000000000000000004000a000c000600010000000000000004000780"], 0x34}}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="901413bff71566508799d0427303bf729fc74258bb8c7e081cf48e022fa5908b0190f640845030b8b627d40cf691ee9912517fe64628b8b2f835b51bd195fac754f80af59c1c78", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c000200000000000000000004000a000c000600010000000000000004000780"], 0x34}}, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) 14:19:36 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4d00160078dc87d3602e7436283a84af3b82ed669ee50a5a8659c01630198d5e4b92bc3293a26c4ef57baae92e560497a2dd8f90b79292c41d46b4667beee587", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000000000000004000780"], 0x30}}, 0x0) 14:19:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x20000010) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r3, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x6c, r1, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x802}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r3}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008004}, 0x40000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) r5 = gettid() r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x78, r4, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x44000}, 0x20044001) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="01000000", @ANYRES32, @ANYBLOB="0c000200000039"], 0x34}}, 0x0) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x900, 0x70bd26, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}}, 0x4c804) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r7) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r9, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, r9, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x0) 14:19:36 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000040)) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) socket$l2tp(0x2, 0x2, 0x73) (async) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000040)) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) 14:19:36 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4d00160078dc87d3602e7436283a84af3b82ed669ee50a5a8659c01630198d5e4b92bc3293a26c4ef57baae92e560497a2dd8f90b79292c41d46b4667beee587", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000000000000004000780"], 0x30}}, 0x0) 14:19:36 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) [ 932.130826] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 932.148525] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 14:19:36 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) socket$l2tp(0x2, 0x2, 0x73) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async) 14:19:36 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:36 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4d00160078dc87d3602e7436283a84af3b82ed669ee50a5a8659c01630198d5e4b92bc3293a26c4ef57baae92e560497a2dd8f90b79292c41d46b4667beee587", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000000000000004000780"], 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4d00160078dc87d3602e7436283a84af3b82ed669ee50a5a8659c01630198d5e4b92bc3293a26c4ef57baae92e560497a2dd8f90b79292c41d46b4667beee587", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000000000000004000780"], 0x30}}, 0x0) (async) 14:19:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) [ 932.172899] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 932.185481] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 932.195420] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 932.208927] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 932.220239] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:19:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x20000010) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r3, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:36 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) socket$l2tp(0x2, 0x2, 0x73) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async) 14:19:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) (async, rerun: 32) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (rerun: 32) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x6c, r1, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x802}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r3}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008004}, 0x40000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) r5 = gettid() (async) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x78, r4, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x44000}, 0x20044001) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="01000000", @ANYRES32, @ANYBLOB="0c000200000039"], 0x34}}, 0x0) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x900, 0x70bd26, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}}, 0x4c804) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r7) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r9, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, r9, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x0) 14:19:37 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:37 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=""/160}) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 14:19:37 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=""/160}) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 14:19:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) (async) 14:19:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000009fca0000010108000c000200000000000004b6f21e910007810000000000000000000000000000000c679e311547e76dcf0b38e50d9aeb6f82317b7ac511714f946d2974d175a26d93596275b806a0a7fdfff37390e5"], 0x30}}, 0x0) 14:19:37 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (async) 14:19:37 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=""/160}) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) [ 932.435254] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:19:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000009fca0000010108000c000200000000000004b6f21e910007810000000000000000000000000000000c679e311547e76dcf0b38e50d9aeb6f82317b7ac511714f946d2974d175a26d93596275b806a0a7fdfff37390e5"], 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000009fca0000010108000c000200000000000004b6f21e910007810000000000000000000000000000000c679e311547e76dcf0b38e50d9aeb6f82317b7ac511714f946d2974d175a26d93596275b806a0a7fdfff37390e5"], 0x30}}, 0x0) (async) 14:19:37 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x6c, r1, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x802}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r3}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008004}, 0x40000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) r5 = gettid() (async) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x78, r4, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x44000}, 0x20044001) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="01000000", @ANYRES32, @ANYBLOB="0c000200000039"], 0x34}}, 0x0) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x900, 0x70bd26, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}}, 0x4c804) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r7) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r9, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, r9, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x0) 14:19:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x20000010) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r3, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) [ 932.487233] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 932.507017] nbd: must specify at least one socket 14:19:37 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x10}, @val={0x8}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x800, 0x6e}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000011) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) getpeername$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x200840, 0x0) 14:19:37 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x10}, @val={0x8}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x800, 0x6e}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000011) (async) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) (async) getpeername$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x200840, 0x0) [ 932.579687] nbd: must specify at least one socket 14:19:37 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x10}, @val={0x8}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x800, 0x6e}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000011) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) getpeername$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x200840, 0x0) socket$l2tp(0x2, 0x2, 0x73) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x10}, @val={0x8}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x800, 0x6e}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000011) (async) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) (async) getpeername$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) (async) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x200840, 0x0) (async) 14:19:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:37 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f00000001c0)={0x0, 0x9, &(0x7f0000000080)=[0x1, 0x8, 0x7, 0x7fff, 0x7fff, 0x7f, 0xfffffffe, 0x7, 0x1954], &(0x7f00000000c0)=[0x7, 0x9f3e, 0x4, 0x9, 0x6], 0x0, 0x1, 0xffffffff, &(0x7f0000000100)=[0x65], &(0x7f0000000180)=[0x20, 0x3, 0x80]}) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x2, r3, 0x3, 0x80000}) accept4$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x800) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000200)={0x0, 0x1, r1, 0x723, 0x80000}) 14:19:37 executing program 5: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000009fca0000010108000c000200000000000004b6f21e910007810000000000000000000000000000000c679e311547e76dcf0b38e50d9aeb6f82317b7ac511714f946d2974d175a26d93596275b806a0a7fdfff37390e5"], 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000009fca0000010108000c000200000000000004b6f21e910007810000000000000000000000000000000c679e311547e76dcf0b38e50d9aeb6f82317b7ac511714f946d2974d175a26d93596275b806a0a7fdfff37390e5"], 0x30}}, 0x0) (async) [ 932.709032] nbd: must specify at least one socket 14:19:37 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) read$ptp(r3, &(0x7f0000000340)=""/59, 0x3b) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000000c0)) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x20, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x1407, 0x8, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4c000) 14:19:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x20000010) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r3, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:37 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f00000001c0)={0x0, 0x9, &(0x7f0000000080)=[0x1, 0x8, 0x7, 0x7fff, 0x7fff, 0x7f, 0xfffffffe, 0x7, 0x1954], &(0x7f00000000c0)=[0x7, 0x9f3e, 0x4, 0x9, 0x6], 0x0, 0x1, 0xffffffff, &(0x7f0000000100)=[0x65], &(0x7f0000000180)=[0x20, 0x3, 0x80]}) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x2, r3, 0x3, 0x80000}) accept4$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x800) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000200)={0x0, 0x1, r1, 0x723, 0x80000}) socket$l2tp(0x2, 0x2, 0x73) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) (async) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f00000001c0)={0x0, 0x9, &(0x7f0000000080)=[0x1, 0x8, 0x7, 0x7fff, 0x7fff, 0x7f, 0xfffffffe, 0x7, 0x1954], &(0x7f00000000c0)=[0x7, 0x9f3e, 0x4, 0x9, 0x6], 0x0, 0x1, 0xffffffff, &(0x7f0000000100)=[0x65], &(0x7f0000000180)=[0x20, 0x3, 0x80]}) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), r3) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x2, r3, 0x3, 0x80000}) (async) accept4$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x800) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000200)={0x0, 0x1, r1, 0x723, 0x80000}) (async) 14:19:37 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c000200000039"], 0x34}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) r4 = socket(0x10, 0x6, 0x65f0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = socket(0x2a, 0x2, 0x2) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x154, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x40}, 0x48040) ioctl$PTP_PEROUT_REQUEST(r9, 0x40383d03, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004000}, 0x1) 14:19:37 executing program 5: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) (async) [ 932.801489] nbd: must specify at least one socket 14:19:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x20000010) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r3, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:37 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}}, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) read$ptp(r3, &(0x7f0000000340)=""/59, 0x3b) (async) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000000c0)) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x20, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x1407, 0x8, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4c000) [ 932.837215] nbd: must specify at least one socket [ 932.855005] nbd: must specify at least one socket 14:19:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000000)={0x0, 0x2, r3, 0x3, 0x80000}) 14:19:37 executing program 5: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) (async) 14:19:37 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f00000001c0)={0x0, 0x9, &(0x7f0000000080)=[0x1, 0x8, 0x7, 0x7fff, 0x7fff, 0x7f, 0xfffffffe, 0x7, 0x1954], &(0x7f00000000c0)=[0x7, 0x9f3e, 0x4, 0x9, 0x6], 0x0, 0x1, 0xffffffff, &(0x7f0000000100)=[0x65], &(0x7f0000000180)=[0x20, 0x3, 0x80]}) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r3) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x2, r3, 0x3, 0x80000}) (async) accept4$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x800) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000200)={0x0, 0x1, r1, 0x723, 0x80000}) 14:19:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x20000010) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r3, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:37 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c000200000039"], 0x34}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) (async) r4 = socket(0x10, 0x6, 0x65f0) (async) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r8 = socket(0x2a, 0x2, 0x2) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x154, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x40}, 0x48040) ioctl$PTP_PEROUT_REQUEST(r9, 0x40383d03, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004000}, 0x1) 14:19:37 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}}, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) (async) read$ptp(r3, &(0x7f0000000340)=""/59, 0x3b) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000000c0)) (async) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x20, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x1407, 0x8, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4c000) [ 932.949519] nbd: must specify at least one socket 14:19:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x5c, r1, 0x200, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r3}]}]}, 0x5c}}, 0x8004) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="58fefdfeaf9b00"/18, @ANYRES16=r4, @ANYBLOB="080026bd7000fedbdf250200000008000100000000000e000a002f6465762f66756c6c00000006000a0040a800000c00030008000000000000000c00040000000000000000000c0006000000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x42844}, 0x4084) 14:19:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (async, rerun: 64) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (rerun: 64) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r3) (async, rerun: 32) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) (async, rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000000)={0x0, 0x2, r3, 0x3, 0x80000}) 14:19:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x20000010) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r3, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:37 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8001}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x80) getpeername$l2tp(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, &(0x7f0000000300)=0x10) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x24}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r4, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x24000090) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000280)={'\x00', 0x4, 0x0, 0x35}) setns(0xffffffffffffffff, 0x20000000) [ 933.047133] nbd: must specify at least one socket 14:19:37 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c000200000039"], 0x34}}, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) (async) r4 = socket(0x10, 0x6, 0x65f0) (async) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) (async) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) (async) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r8 = socket(0x2a, 0x2, 0x2) (async) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x154, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x40}, 0x48040) (async) ioctl$PTP_PEROUT_REQUEST(r9, 0x40383d03, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004000}, 0x1) 14:19:37 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x1b8, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x199, 0xa, 'Ubd\x00\xbdW\x96S\xf1\xa3\x9aS\x995\x93\xf9\xb9Y\xdaK\x90\xab`\x9f\xd5\x81\x941\xf4\xae$\xe7[Aot\x1d\xaa\xf2\x9e\xa8\xb7\xa5k\x12\x82\'\xf0\xdc\x81n1^\xbf\x8d\xfa\xdf\xebt.2\x99\xed4\xdd#\t\xbc\x12/F\xe8\xee\x1d\xd38\xc40x\xd3\x19s=\xe0\xce\xa8^L\xd4\xfei\xa8\xf3 \x01\x98C\xf1PU\x9d\a\x01\x9e`\x18~\x01\xc8\xff\xa1\x87\x80]\x1bh\x16B\x1ei\xdfU\xban \x88\xd1\xbeP\xa2\xbfj\xbe\x82\x02\xccM\xc8\x80\xdc(}\x18\xad\a\x1c\x16\xc5`ag\xec(\x9b-\xe6\"\xda\xb0\xe5\xc8g\x12,\x0e\xdd\xa1/\xc9A Q\xc8\xcc\x9e\a3\xaf\x93\x8b\xf4\x97\xf4\x8b\xc2$4}^`\x8c\xf8o\xcdU\r\xb1\xd1F\x97\r(\xb6\xcc\xd0\xd7<\xea7\x1f\xb4\x9b\xf9\x9c;\xd8=z|\x11\xcdH\x91\xa1@\xbf3^\xa5o\x8e\x87\xaf\x86\x95 \x98\x03\xa2\xc6\xd6a\x06\xa7 r\x94pM\x96<\xbb\x01\xddGbZ\xc2\xb3#\xd2/\xbe\x14M\\\x96n\xa1\x11\x88^\f\xa7\x8d^\x99\r+\xf6uK\"\xc5@F\xa9\xa8\x9f\xf1\xef\fn\xfa\xf8\xef\xeb\xc8hH\x7f[e\xef\xea\xaa\x1e\xd2:\xd6\xec\x182\fZ\x8fh)\xb3\xf0\x81\xb1bv\x1b=\x15V\x8a\x95\xf0!4+\xfcgT4\xd9w\xa6\x9f@O\xdd\xc5}\x9b\xfc\xac\xc6\x11q\xb7\xff./\r\xd1[\xa6\x88\x85\xcc\xf3=;!\xd1\x06\x97\a\xa1\xa4\xd3\xe4F1\xee(\xc7\x96E\xb1s\xaf\x9d\x83\x9a\xe4\x8d\xd4\xc0\xb4$\x05\'a>\x01il\xd7\xa8x'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '(\x93'}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async, rerun: 32) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (rerun: 32) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x5c, r1, 0x200, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r3}]}]}, 0x5c}}, 0x8004) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="58fefdfeaf9b00"/18, @ANYRES16=r4, @ANYBLOB="080026bd7000fedbdf250200000008000100000000000e000a002f6465762f66756c6c00000006000a0040a800000c00030008000000000000000c00040000000000000000000c0006000000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x42844}, 0x4084) 14:19:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x20000010) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, 0x0, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:37 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8001}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x80) getpeername$l2tp(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, &(0x7f0000000300)=0x10) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x24}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r4, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x24000090) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000280)={'\x00', 0x4, 0x0, 0x35}) setns(0xffffffffffffffff, 0x20000000) socket$l2tp(0x2, 0x2, 0x73) (async) socket$l2tp(0x2, 0x2, 0x73) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8001}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x80) (async) getpeername$l2tp(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, &(0x7f0000000300)=0x10) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x24}}, 0x0) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r4, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x24000090) (async) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000280)={'\x00', 0x4, 0x0, 0x35}) (async) setns(0xffffffffffffffff, 0x20000000) (async) 14:19:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x5c, r1, 0x200, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r3}]}]}, 0x5c}}, 0x8004) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="58fefdfeaf9b00"/18, @ANYRES16=r4, @ANYBLOB="080026bd7000fedbdf250200000008000100000000000e000a002f6465762f66756c6c00000006000a0040a800000c00030008000000000000000c00040000000000000000000c0006000000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x42844}, 0x4084) [ 933.190385] nbd: couldn't find device at index 1 14:19:37 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan1\x00'}) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xbd19}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x4040) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES8=r3, @ANYBLOB="0c000200000039"], 0x34}}, 0x0) 14:19:37 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x1b8, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x199, 0xa, 'Ubd\x00\xbdW\x96S\xf1\xa3\x9aS\x995\x93\xf9\xb9Y\xdaK\x90\xab`\x9f\xd5\x81\x941\xf4\xae$\xe7[Aot\x1d\xaa\xf2\x9e\xa8\xb7\xa5k\x12\x82\'\xf0\xdc\x81n1^\xbf\x8d\xfa\xdf\xebt.2\x99\xed4\xdd#\t\xbc\x12/F\xe8\xee\x1d\xd38\xc40x\xd3\x19s=\xe0\xce\xa8^L\xd4\xfei\xa8\xf3 \x01\x98C\xf1PU\x9d\a\x01\x9e`\x18~\x01\xc8\xff\xa1\x87\x80]\x1bh\x16B\x1ei\xdfU\xban \x88\xd1\xbeP\xa2\xbfj\xbe\x82\x02\xccM\xc8\x80\xdc(}\x18\xad\a\x1c\x16\xc5`ag\xec(\x9b-\xe6\"\xda\xb0\xe5\xc8g\x12,\x0e\xdd\xa1/\xc9A Q\xc8\xcc\x9e\a3\xaf\x93\x8b\xf4\x97\xf4\x8b\xc2$4}^`\x8c\xf8o\xcdU\r\xb1\xd1F\x97\r(\xb6\xcc\xd0\xd7<\xea7\x1f\xb4\x9b\xf9\x9c;\xd8=z|\x11\xcdH\x91\xa1@\xbf3^\xa5o\x8e\x87\xaf\x86\x95 \x98\x03\xa2\xc6\xd6a\x06\xa7 r\x94pM\x96<\xbb\x01\xddGbZ\xc2\xb3#\xd2/\xbe\x14M\\\x96n\xa1\x11\x88^\f\xa7\x8d^\x99\r+\xf6uK\"\xc5@F\xa9\xa8\x9f\xf1\xef\fn\xfa\xf8\xef\xeb\xc8hH\x7f[e\xef\xea\xaa\x1e\xd2:\xd6\xec\x182\fZ\x8fh)\xb3\xf0\x81\xb1bv\x1b=\x15V\x8a\x95\xf0!4+\xfcgT4\xd9w\xa6\x9f@O\xdd\xc5}\x9b\xfc\xac\xc6\x11q\xb7\xff./\r\xd1[\xa6\x88\x85\xcc\xf3=;!\xd1\x06\x97\a\xa1\xa4\xd3\xe4F1\xee(\xc7\x96E\xb1s\xaf\x9d\x83\x9a\xe4\x8d\xd4\xc0\xb4$\x05\'a>\x01il\xd7\xa8x'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '(\x93'}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x20000010) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, 0x0, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) [ 933.304526] nbd: couldn't find device at index 1 [ 933.382704] nbd: must specify a size in bytes for the device 14:19:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000000)={0x0, 0x2, r3, 0x3, 0x80000}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), r3) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000000)={0x0, 0x2, r3, 0x3, 0x80000}) (async) 14:19:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c000200000000000000000004000a000cdf0600010000000000000004000780"], 0x34}}, 0x0) 14:19:38 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8001}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x80) getpeername$l2tp(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, &(0x7f0000000300)=0x10) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x24}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r4, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x24000090) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000280)={'\x00', 0x4, 0x0, 0x35}) setns(0xffffffffffffffff, 0x20000000) socket$l2tp(0x2, 0x2, 0x73) (async) socket$l2tp(0x2, 0x2, 0x73) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8001}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x80) (async) getpeername$l2tp(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, &(0x7f0000000300)=0x10) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x24}}, 0x0) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r4, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x24000090) (async) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000280)={'\x00', 0x4, 0x0, 0x35}) (async) setns(0xffffffffffffffff, 0x20000000) (async) 14:19:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x1b8, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x199, 0xa, 'Ubd\x00\xbdW\x96S\xf1\xa3\x9aS\x995\x93\xf9\xb9Y\xdaK\x90\xab`\x9f\xd5\x81\x941\xf4\xae$\xe7[Aot\x1d\xaa\xf2\x9e\xa8\xb7\xa5k\x12\x82\'\xf0\xdc\x81n1^\xbf\x8d\xfa\xdf\xebt.2\x99\xed4\xdd#\t\xbc\x12/F\xe8\xee\x1d\xd38\xc40x\xd3\x19s=\xe0\xce\xa8^L\xd4\xfei\xa8\xf3 \x01\x98C\xf1PU\x9d\a\x01\x9e`\x18~\x01\xc8\xff\xa1\x87\x80]\x1bh\x16B\x1ei\xdfU\xban \x88\xd1\xbeP\xa2\xbfj\xbe\x82\x02\xccM\xc8\x80\xdc(}\x18\xad\a\x1c\x16\xc5`ag\xec(\x9b-\xe6\"\xda\xb0\xe5\xc8g\x12,\x0e\xdd\xa1/\xc9A Q\xc8\xcc\x9e\a3\xaf\x93\x8b\xf4\x97\xf4\x8b\xc2$4}^`\x8c\xf8o\xcdU\r\xb1\xd1F\x97\r(\xb6\xcc\xd0\xd7<\xea7\x1f\xb4\x9b\xf9\x9c;\xd8=z|\x11\xcdH\x91\xa1@\xbf3^\xa5o\x8e\x87\xaf\x86\x95 \x98\x03\xa2\xc6\xd6a\x06\xa7 r\x94pM\x96<\xbb\x01\xddGbZ\xc2\xb3#\xd2/\xbe\x14M\\\x96n\xa1\x11\x88^\f\xa7\x8d^\x99\r+\xf6uK\"\xc5@F\xa9\xa8\x9f\xf1\xef\fn\xfa\xf8\xef\xeb\xc8hH\x7f[e\xef\xea\xaa\x1e\xd2:\xd6\xec\x182\fZ\x8fh)\xb3\xf0\x81\xb1bv\x1b=\x15V\x8a\x95\xf0!4+\xfcgT4\xd9w\xa6\x9f@O\xdd\xc5}\x9b\xfc\xac\xc6\x11q\xb7\xff./\r\xd1[\xa6\x88\x85\xcc\xf3=;!\xd1\x06\x97\a\xa1\xa4\xd3\xe4F1\xee(\xc7\x96E\xb1s\xaf\x9d\x83\x9a\xe4\x8d\xd4\xc0\xb4$\x05\'a>\x01il\xd7\xa8x'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '(\x93'}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r1) (async) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x1b8, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x199, 0xa, 'Ubd\x00\xbdW\x96S\xf1\xa3\x9aS\x995\x93\xf9\xb9Y\xdaK\x90\xab`\x9f\xd5\x81\x941\xf4\xae$\xe7[Aot\x1d\xaa\xf2\x9e\xa8\xb7\xa5k\x12\x82\'\xf0\xdc\x81n1^\xbf\x8d\xfa\xdf\xebt.2\x99\xed4\xdd#\t\xbc\x12/F\xe8\xee\x1d\xd38\xc40x\xd3\x19s=\xe0\xce\xa8^L\xd4\xfei\xa8\xf3 \x01\x98C\xf1PU\x9d\a\x01\x9e`\x18~\x01\xc8\xff\xa1\x87\x80]\x1bh\x16B\x1ei\xdfU\xban \x88\xd1\xbeP\xa2\xbfj\xbe\x82\x02\xccM\xc8\x80\xdc(}\x18\xad\a\x1c\x16\xc5`ag\xec(\x9b-\xe6\"\xda\xb0\xe5\xc8g\x12,\x0e\xdd\xa1/\xc9A Q\xc8\xcc\x9e\a3\xaf\x93\x8b\xf4\x97\xf4\x8b\xc2$4}^`\x8c\xf8o\xcdU\r\xb1\xd1F\x97\r(\xb6\xcc\xd0\xd7<\xea7\x1f\xb4\x9b\xf9\x9c;\xd8=z|\x11\xcdH\x91\xa1@\xbf3^\xa5o\x8e\x87\xaf\x86\x95 \x98\x03\xa2\xc6\xd6a\x06\xa7 r\x94pM\x96<\xbb\x01\xddGbZ\xc2\xb3#\xd2/\xbe\x14M\\\x96n\xa1\x11\x88^\f\xa7\x8d^\x99\r+\xf6uK\"\xc5@F\xa9\xa8\x9f\xf1\xef\fn\xfa\xf8\xef\xeb\xc8hH\x7f[e\xef\xea\xaa\x1e\xd2:\xd6\xec\x182\fZ\x8fh)\xb3\xf0\x81\xb1bv\x1b=\x15V\x8a\x95\xf0!4+\xfcgT4\xd9w\xa6\x9f@O\xdd\xc5}\x9b\xfc\xac\xc6\x11q\xb7\xff./\r\xd1[\xa6\x88\x85\xcc\xf3=;!\xd1\x06\x97\a\xa1\xa4\xd3\xe4F1\xee(\xc7\x96E\xb1s\xaf\x9d\x83\x9a\xe4\x8d\xd4\xc0\xb4$\x05\'a>\x01il\xd7\xa8x'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '(\x93'}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (async) 14:19:38 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x20000010) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, 0x0, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:38 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan1\x00'}) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xbd19}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x4040) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES8=r3, @ANYBLOB="0c000200000039"], 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r1) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan1\x00'}) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xbd19}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x4040) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), r3) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES8=r3, @ANYBLOB="0c000200000039"], 0x34}}, 0x0) (async) 14:19:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c000200000000000000000004000a000cdf0600010000000000000004000780"], 0x34}}, 0x0) 14:19:38 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000000)="873ade5f9042e782b939216e632d2787b182c53582", 0x15, 0x4001, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010100, 0x2}, 0x10) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x54, 0x3ed, 0x2, 0x70bd28, 0x25dfdbfb, "7b38c516f569ea0e13e4da74298ea5904100f2f739b1cfd5002759223464bcd779e4be342afc04d7523fcc06acf102bb72155279696f3e5341a8cc6eb3e7062551f4", ["", "", "", "", "", "", "", "", ""]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) 14:19:38 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x20000010) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r3, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) [ 933.596623] nbd: must specify at least one socket [ 933.604373] nbd: couldn't find device at index 1 14:19:38 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000000)="873ade5f9042e782b939216e632d2787b182c53582", 0x15, 0x4001, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010100, 0x2}, 0x10) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x54, 0x3ed, 0x2, 0x70bd28, 0x25dfdbfb, "7b38c516f569ea0e13e4da74298ea5904100f2f739b1cfd5002759223464bcd779e4be342afc04d7523fcc06acf102bb72155279696f3e5341a8cc6eb3e7062551f4", ["", "", "", "", "", "", "", "", ""]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) 14:19:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:19:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c000200000000000000000004000a000cdf0600010000000000000004000780"], 0x34}}, 0x0) 14:19:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20080}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, r2, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r3, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffff771}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c000}, 0x40) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x38, r1, 0x10, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffffb}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) 14:19:38 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000000)="873ade5f9042e782b939216e632d2787b182c53582", 0x15, 0x4001, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010100, 0x2}, 0x10) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x54, 0x3ed, 0x2, 0x70bd28, 0x25dfdbfb, "7b38c516f569ea0e13e4da74298ea5904100f2f739b1cfd5002759223464bcd779e4be342afc04d7523fcc06acf102bb72155279696f3e5341a8cc6eb3e7062551f4", ["", "", "", "", "", "", "", "", ""]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) 14:19:38 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x20000010) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r2, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) [ 933.701208] nbd: must specify a size in bytes for the device 14:19:38 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan1\x00'}) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xbd19}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x4040) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES8=r3, @ANYBLOB="0c000200000039"], 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r1) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan1\x00'}) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xbd19}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x4040) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), r3) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES8=r3, @ANYBLOB="0c000200000039"], 0x34}}, 0x0) (async) 14:19:38 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) 14:19:38 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x20000010) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r2, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:38 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) 14:19:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20080}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, r2, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r3, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffff771}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c000}, 0x40) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x38, r1, 0x10, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffffb}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20080}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, r2, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r3, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffff771}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c000}, 0x40) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x38, r1, 0x10, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffffb}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) [ 933.830173] nbd: must specify at least one socket 14:19:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r3) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000800010000000000"], 0x1c}}, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x400940, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x1407, 0x1, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x20040010) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x41000}, 0x4c01) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb8, 0x464, 0x0, 0x70bd29, 0x25dfdbfe, "b9e8721675eb64d9bdabe1dc658858ad3e466bcdac34d7ad2109e5de1e876ba858867c228cbcbd3d743bdb45d6fe69835587d4675a92f00450a3faff0d63f2d6c61a75fccf1297ff01bc6588e2a5428cec21e7031f8f61f7f389ec728c6545893edec842e4d56c90315c704bdc3a22c5f503950c648740a6d4bb41a820f4ed8b89478605a59ce18363262ecbc7b9d85f16ecb07314ecb6a7e712bd72b9129e0c747ea335e04f", ["", "", "", "", "", ""]}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x6008014) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="d0301464", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x0) 14:19:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) 14:19:38 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x20000010) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r2, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:38 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) 14:19:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r3) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000800010000000000"], 0x1c}}, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x400940, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x1407, 0x1, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x20040010) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x41000}, 0x4c01) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb8, 0x464, 0x0, 0x70bd29, 0x25dfdbfe, "b9e8721675eb64d9bdabe1dc658858ad3e466bcdac34d7ad2109e5de1e876ba858867c228cbcbd3d743bdb45d6fe69835587d4675a92f00450a3faff0d63f2d6c61a75fccf1297ff01bc6588e2a5428cec21e7031f8f61f7f389ec728c6545893edec842e4d56c90315c704bdc3a22c5f503950c648740a6d4bb41a820f4ed8b89478605a59ce18363262ecbc7b9d85f16ecb07314ecb6a7e712bd72b9129e0c747ea335e04f", ["", "", "", "", "", ""]}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x6008014) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="d0301464", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r3) (async) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000800010000000000"], 0x1c}}, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x400940, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x1407, 0x1, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x20040010) (async) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x41000}, 0x4c01) (async) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb8, 0x464, 0x0, 0x70bd29, 0x25dfdbfe, "b9e8721675eb64d9bdabe1dc658858ad3e466bcdac34d7ad2109e5de1e876ba858867c228cbcbd3d743bdb45d6fe69835587d4675a92f00450a3faff0d63f2d6c61a75fccf1297ff01bc6588e2a5428cec21e7031f8f61f7f389ec728c6545893edec842e4d56c90315c704bdc3a22c5f503950c648740a6d4bb41a820f4ed8b89478605a59ce18363262ecbc7b9d85f16ecb07314ecb6a7e712bd72b9129e0c747ea335e04f", ["", "", "", "", "", ""]}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x6008014) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="d0301464", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x0) (async) [ 933.900756] nbd: must specify a size in bytes for the device 14:19:38 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c000200000039"], 0x34}}, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x400) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r3 = socket(0x18, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) r5 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x401}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x34, 0x1402, 0x800, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x34}}, 0x4008000) 14:19:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20080}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, r2, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r3, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffff771}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c000}, 0x40) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x38, r1, 0x10, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffffb}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) 14:19:38 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast, 0x4}, 0x10) 14:19:38 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast, 0x4}, 0x10) 14:19:38 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x20000010) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r2, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:19:38 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c000200000039"], 0x34}}, 0x0) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x400) (async) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r3 = socket(0x18, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x401}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) (async) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x34, 0x1402, 0x800, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x34}}, 0x4008000) 14:19:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="07a76a77", @ANYRES16=0x0, @ANYBLOB="0100000000000000000014000000"], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000240)) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="0c0006005faf82342f4ee25eee6bc200"], 0x38}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000000c0)={'wpan3\x00'}) 14:19:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r3) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000800010000000000"], 0x1c}}, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x400940, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x1407, 0x1, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x20040010) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x41000}, 0x4c01) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb8, 0x464, 0x0, 0x70bd29, 0x25dfdbfe, "b9e8721675eb64d9bdabe1dc658858ad3e466bcdac34d7ad2109e5de1e876ba858867c228cbcbd3d743bdb45d6fe69835587d4675a92f00450a3faff0d63f2d6c61a75fccf1297ff01bc6588e2a5428cec21e7031f8f61f7f389ec728c6545893edec842e4d56c90315c704bdc3a22c5f503950c648740a6d4bb41a820f4ed8b89478605a59ce18363262ecbc7b9d85f16ecb07314ecb6a7e712bd72b9129e0c747ea335e04f", ["", "", "", "", "", ""]}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x6008014) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="d0301464", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r3) (async) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000800010000000000"], 0x1c}}, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x400940, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x1407, 0x1, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x20040010) (async) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x41000}, 0x4c01) (async) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb8, 0x464, 0x0, 0x70bd29, 0x25dfdbfe, "b9e8721675eb64d9bdabe1dc658858ad3e466bcdac34d7ad2109e5de1e876ba858867c228cbcbd3d743bdb45d6fe69835587d4675a92f00450a3faff0d63f2d6c61a75fccf1297ff01bc6588e2a5428cec21e7031f8f61f7f389ec728c6545893edec842e4d56c90315c704bdc3a22c5f503950c648740a6d4bb41a820f4ed8b89478605a59ce18363262ecbc7b9d85f16ecb07314ecb6a7e712bd72b9129e0c747ea335e04f", ["", "", "", "", "", ""]}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x6008014) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="d0301464", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x0) (async) 14:19:38 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r2, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:38 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast, 0x4}, 0x10) 14:19:38 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x20004001, &(0x7f0000000140)={0x2, 0x0, @multicast1, 0x1}, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) pipe(&(0x7f0000000040)) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000000)) 14:19:38 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r1, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r2) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2, @ANYRES16=r1, @ANYBLOB="01000000000300000000020000000c00000000000000000000000c000600010000000000000004000780", @ANYRES32=r0], 0x30}}, 0x4000000) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2, 0x2}, 0x10) 14:19:38 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c000200000039"], 0x34}}, 0x0) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x400) (async, rerun: 64) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) (rerun: 64) r3 = socket(0x18, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x0) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x401}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) (async) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x34, 0x1402, 0x800, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x34}}, 0x4008000) [ 934.252987] nbd: must specify a size in bytes for the device 14:19:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket(0x2a, 0x3, 0x1fd) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r4}]}]}, 0x54}}, 0x0) 14:19:39 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="07a76a77", @ANYRES16=0x0, @ANYBLOB="0100000000000000000014000000"], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000240)) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="0c0006005faf82342f4ee25eee6bc200"], 0x38}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000000c0)={'wpan3\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="07a76a77", @ANYRES16=0x0, @ANYBLOB="0100000000000000000014000000"], 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) (async) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000240)) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="0c0006005faf82342f4ee25eee6bc200"], 0x38}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000000c0)={'wpan3\x00'}) (async) 14:19:39 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x20004001, &(0x7f0000000140)={0x2, 0x0, @multicast1, 0x1}, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) pipe(&(0x7f0000000040)) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000000)) socket$l2tp(0x2, 0x2, 0x73) (async) sendto$l2tp(r0, 0x0, 0x0, 0x20004001, &(0x7f0000000140)={0x2, 0x0, @multicast1, 0x1}, 0x10) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) (async) pipe(&(0x7f0000000040)) (async) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000000)) (async) 14:19:39 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r1, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:39 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r2) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2, @ANYRES16=r1, @ANYBLOB="01000000000300000000020000000c00000000000000000000000c000600010000000000000004000780", @ANYRES32=r0], 0x30}}, 0x4000000) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2, 0x2}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), r2) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2, @ANYRES16=r1, @ANYBLOB="01000000000300000000020000000c00000000000000000000000c000600010000000000000004000780", @ANYRES32=r0], 0x30}}, 0x4000000) (async) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2, 0x2}, 0x10) (async) 14:19:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="00000001d1afad"], 0x34}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) 14:19:39 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r1, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r3 = socket(0x2a, 0x3, 0x1fd) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r4}]}]}, 0x54}}, 0x0) 14:19:39 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x20004001, &(0x7f0000000140)={0x2, 0x0, @multicast1, 0x1}, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) pipe(&(0x7f0000000040)) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000000)) socket$l2tp(0x2, 0x2, 0x73) (async) sendto$l2tp(r0, 0x0, 0x0, 0x20004001, &(0x7f0000000140)={0x2, 0x0, @multicast1, 0x1}, 0x10) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) (async) pipe(&(0x7f0000000040)) (async) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000000)) (async) 14:19:39 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r2) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2, @ANYRES16=r1, @ANYBLOB="01000000000300000000020000000c00000000000000000000000c000600010000000000000004000780", @ANYRES32=r0], 0x30}}, 0x4000000) (async) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2, 0x2}, 0x10) [ 934.455067] nbd: must specify a size in bytes for the device [ 934.470624] nbd: must specify a size in bytes for the device 14:19:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="00000001d1afad"], 0x34}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) 14:19:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r2, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:39 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="07a76a77", @ANYRES16=0x0, @ANYBLOB="0100000000000000000014000000"], 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000240)) (async) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="0c0006005faf82342f4ee25eee6bc200"], 0x38}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000000c0)={'wpan3\x00'}) 14:19:39 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) sendto$l2tp(r0, &(0x7f0000000000)="41bc6351088451ac27880269b054d2f137c1d1a605c5ed446ac044cd590bac70ccf70d2b45970c4148076970d59c62994ee19463beb1d7e82f2fc20abae8a5998d1513b02fbb7246c0bf17c2e619d40bf2696fe37a699503012c4ee453ec9358fe5928a86cfa76c330c330ada2b7e491d08ac8a0dd49705ec51e0f42a38605a0e26e8f5f0c24c2e6633a6aea8cd5e38b5df6b6e1fc3e6b77b676f972163b8dc2ecfcb15721e59ba7fed1bcdd3e790d0fd11cf53fa769986d9cf18779f549e3eff6199f1ef2a4e108e7670dc77b4f460578de3a7afa0ec67c", 0xd8, 0x8001, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, 0x2}, 0x10) 14:19:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r3 = socket(0x2a, 0x3, 0x1fd) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r4}]}]}, 0x54}}, 0x0) 14:19:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="00000001d1afad"], 0x34}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="00000001d1afad"], 0x34}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) (async) 14:19:39 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) 14:19:39 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) sendto$l2tp(r0, &(0x7f0000000000)="41bc6351088451ac27880269b054d2f137c1d1a605c5ed446ac044cd590bac70ccf70d2b45970c4148076970d59c62994ee19463beb1d7e82f2fc20abae8a5998d1513b02fbb7246c0bf17c2e619d40bf2696fe37a699503012c4ee453ec9358fe5928a86cfa76c330c330ada2b7e491d08ac8a0dd49705ec51e0f42a38605a0e26e8f5f0c24c2e6633a6aea8cd5e38b5df6b6e1fc3e6b77b676f972163b8dc2ecfcb15721e59ba7fed1bcdd3e790d0fd11cf53fa769986d9cf18779f549e3eff6199f1ef2a4e108e7670dc77b4f460578de3a7afa0ec67c", 0xd8, 0x8001, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, 0x2}, 0x10) [ 934.577632] nbd: must specify a size in bytes for the device 14:19:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r2, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00025d92ec000000000000000004000a000c000600010000000000000004000780"], 0x34}}, 0x0) [ 934.653172] nbd: must specify a size in bytes for the device [ 934.684797] nbd: must specify a size in bytes for the device 14:19:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r2, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:39 executing program 3: sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa006}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f2, 0x200, 0xfff, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008800}, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c000200000039"], 0x34}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x109400, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x1407, 0x1, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x3c}}, 0x804) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x903000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000400)={r5, 0x76c, 0x8}) [ 934.699186] nbd: must specify a size in bytes for the device 14:19:39 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async, rerun: 32) sendto$l2tp(r0, &(0x7f0000000000)="41bc6351088451ac27880269b054d2f137c1d1a605c5ed446ac044cd590bac70ccf70d2b45970c4148076970d59c62994ee19463beb1d7e82f2fc20abae8a5998d1513b02fbb7246c0bf17c2e619d40bf2696fe37a699503012c4ee453ec9358fe5928a86cfa76c330c330ada2b7e491d08ac8a0dd49705ec51e0f42a38605a0e26e8f5f0c24c2e6633a6aea8cd5e38b5df6b6e1fc3e6b77b676f972163b8dc2ecfcb15721e59ba7fed1bcdd3e790d0fd11cf53fa769986d9cf18779f549e3eff6199f1ef2a4e108e7670dc77b4f460578de3a7afa0ec67c", 0xd8, 0x8001, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, 0x2}, 0x10) (rerun: 32) 14:19:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r2, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:39 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x60, r2, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f3c6d7cd362d8f82fd409f63706c9ebeaa888f11d0ed519010c804bcbfeefb2e6db33524bb1f8e97f76f763bcb0c56c2166518af047655151edb12312b75b48f2c64d932679f7b439b96d692263208dc04765e78ef1ea06284ee35c29941fbc88ec0eb1df3b5e12332d37ef2c809245df584b7ae059a33e56bd0d7a9cfde825dd3d8944347099558207fea6bde2d7bbcf8f77513781b22fc8a53936bd4dcd84262a0375cf014da611a248e42ec3b6793783452c99b50fb04d379c1b2448491ba12b3886de8911581fd601e2c69fbb849034d0db50f66d25f6953340000041cadd59c72030d703f7b", @ANYRES16=r1, @ANYBLOB="01002dbd70000000000001000000415998083e382f456cc27a812d54d8bf092af7c35729dab7a5"], 0x14}}, 0x0) 14:19:39 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r1, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00025d92ec000000000000000004000a000c000600010000000000000004000780"], 0x34}}, 0x0) 14:19:39 executing program 3: sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa006}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f2, 0x200, 0xfff, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008800}, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c000200000039"], 0x34}}, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x109400, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x1407, 0x1, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x3c}}, 0x804) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x903000) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000400)={r5, 0x76c, 0x8}) 14:19:39 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) 14:19:39 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x60, r2, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f3c6d7cd362d8f82fd409f63706c9ebeaa888f11d0ed519010c804bcbfeefb2e6db33524bb1f8e97f76f763bcb0c56c2166518af047655151edb12312b75b48f2c64d932679f7b439b96d692263208dc04765e78ef1ea06284ee35c29941fbc88ec0eb1df3b5e12332d37ef2c809245df584b7ae059a33e56bd0d7a9cfde825dd3d8944347099558207fea6bde2d7bbcf8f77513781b22fc8a53936bd4dcd84262a0375cf014da611a248e42ec3b6793783452c99b50fb04d379c1b2448491ba12b3886de8911581fd601e2c69fbb849034d0db50f66d25f6953340000041cadd59c72030d703f7b", @ANYRES16=r1, @ANYBLOB="01002dbd70000000000001000000415998083e382f456cc27a812d54d8bf092af7c35729dab7a5"], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x60, r2, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f3c6d7cd362d8f82fd409f63706c9ebeaa888f11d0ed519010c804bcbfeefb2e6db33524bb1f8e97f76f763bcb0c56c2166518af047655151edb12312b75b48f2c64d932679f7b439b96d692263208dc04765e78ef1ea06284ee35c29941fbc88ec0eb1df3b5e12332d37ef2c809245df584b7ae059a33e56bd0d7a9cfde825dd3d8944347099558207fea6bde2d7bbcf8f77513781b22fc8a53936bd4dcd84262a0375cf014da611a248e42ec3b6793783452c99b50fb04d379c1b2448491ba12b3886de8911581fd601e2c69fbb849034d0db50f66d25f6953340000041cadd59c72030d703f7b", @ANYRES16=r1, @ANYBLOB="01002dbd70000000000001000000415998083e382f456cc27a812d54d8bf092af7c35729dab7a5"], 0x14}}, 0x0) (async) 14:19:39 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x24400) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) sendto$l2tp(r0, 0x0, 0x0, 0x4801, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) getpeername$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) 14:19:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00025d92ec000000000000000004000a000c000600010000000000000004000780"], 0x34}}, 0x0) 14:19:39 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r1, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) [ 934.877935] nbd: must specify at least one socket 14:19:39 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) (async, rerun: 64) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x24400) (async, rerun: 64) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) sendto$l2tp(r0, 0x0, 0x0, 0x4801, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) getpeername$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) 14:19:39 executing program 3: sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa006}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f2, 0x200, 0xfff, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008800}, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c000200000039"], 0x34}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x109400, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x1407, 0x1, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x3c}}, 0x804) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x903000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000400)={r5, 0x76c, 0x8}) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa006}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f2, 0x200, 0xfff, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008800}, 0x1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c000200000039"], 0x34}}, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x109400, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x1407, 0x1, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x3c}}, 0x804) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x903000) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000400)={r5, 0x76c, 0x8}) (async) 14:19:39 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (async) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$team(&(0x7f0000000000), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) (async) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) 14:19:39 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x60, r2, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f3c6d7cd362d8f82fd409f63706c9ebeaa888f11d0ed519010c804bcbfeefb2e6db33524bb1f8e97f76f763bcb0c56c2166518af047655151edb12312b75b48f2c64d932679f7b439b96d692263208dc04765e78ef1ea06284ee35c29941fbc88ec0eb1df3b5e12332d37ef2c809245df584b7ae059a33e56bd0d7a9cfde825dd3d8944347099558207fea6bde2d7bbcf8f77513781b22fc8a53936bd4dcd84262a0375cf014da611a248e42ec3b6793783452c99b50fb04d379c1b2448491ba12b3886de8911581fd601e2c69fbb849034d0db50f66d25f6953340000041cadd59c72030d703f7b", @ANYRES16=r1, @ANYBLOB="01002dbd70000000000001000000415998083e382f456cc27a812d54d8bf092af7c35729dab7a5"], 0x14}}, 0x0) 14:19:39 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r1, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) r3 = socket(0x8, 0x4, 0x3) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x58, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf045}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c010}, 0x40010) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) [ 934.966799] nbd: must specify at least one socket 14:19:39 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x24400) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) sendto$l2tp(r0, 0x0, 0x0, 0x4801, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) getpeername$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) socket$l2tp(0x2, 0x2, 0x73) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x24400) (async) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) (async) sendto$l2tp(r0, 0x0, 0x0, 0x4801, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) getpeername$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) (async) 14:19:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) 14:19:39 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x1407, 0x10, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x200000c0) 14:19:39 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r7, 0x40383d03, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000bfd4d9e7a24c02417f2f8ebeb900", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf251100000005002e0000000000"], 0x1c}}, 0x20000000) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r8, 0x40383d03, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00012bbd700000000000010000000c000800046d7d00000000000c00060001000000000000002400078008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) 14:19:39 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x58, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}]}]}, 0x58}}, 0x0) 14:19:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r1, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) r3 = socket(0x8, 0x4, 0x3) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x58, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf045}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c010}, 0x40010) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:39 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x1407, 0x10, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x200000c0) 14:19:39 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async, rerun: 32) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (rerun: 32) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x1407, 0x10, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x200000c0) 14:19:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r1, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:39 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1402, 0x10, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) r1 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 14:19:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) r3 = socket(0x8, 0x4, 0x3) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x58, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf045}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c010}, 0x40010) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:39 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async, rerun: 32) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (rerun: 32) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x58, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}]}]}, 0x58}}, 0x0) 14:19:40 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x1407, 0x10, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x200000c0) 14:19:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) (async) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) (async) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r7, 0x40383d03, 0x0) (async) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000bfd4d9e7a24c02417f2f8ebeb900", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf251100000005002e0000000000"], 0x1c}}, 0x20000000) (async) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r8, 0x40383d03, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00012bbd700000000000010000000c000800046d7d00000000000c00060001000000000000002400078008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) 14:19:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r1, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:40 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1402, 0x10, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 14:19:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) r3 = socket(0x8, 0x4, 0x3) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x58, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf045}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c010}, 0x40010) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:40 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1402, 0x10, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) (async, rerun: 32) r1 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 14:19:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x38}}, 0x0) 14:19:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) (async) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) (async) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) (async) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r7, 0x40383d03, 0x0) (async) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000bfd4d9e7a24c02417f2f8ebeb900", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf251100000005002e0000000000"], 0x1c}}, 0x20000000) (async) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r8, 0x40383d03, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00012bbd700000000000010000000c000800046d7d00000000000c00060001000000000000002400078008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) 14:19:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x20008010) 14:19:40 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x4, &(0x7f0000000100), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x4000080) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 14:19:40 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) (async) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x4, &(0x7f0000000100), &(0x7f0000000180)=0x4) (async, rerun: 64) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x4000080) (rerun: 64) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 14:19:40 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async, rerun: 64) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x58, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}]}]}, 0x58}}, 0x0) 14:19:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000826bd7000fbdbdf250900001e0c00080008000000000000000c020800ff01000000001e0008000100000000000c0003000800000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x24000011}, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x20008010) 14:19:40 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r1, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:40 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) (async) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x4, &(0x7f0000000100), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x4000080) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 14:19:40 executing program 4: socket$l2tp(0x2, 0x2, 0x73) r0 = socket(0x10, 0x4, 0x96a) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000530400012dbd7000fbdbdf25aa30c6a84ef362f6878cde2a36f82ad89f1a2bda53e0e87eb6b4149b946b00000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000000) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x180000) sendto$l2tp(r1, 0x0, 0x0, 0x404c8a0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) 14:19:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x20008010) 14:19:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x38}}, 0x0) 14:19:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x20008010) 14:19:40 executing program 4: socket$l2tp(0x2, 0x2, 0x73) (async) r0 = socket(0x10, 0x4, 0x96a) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000530400012dbd7000fbdbdf25aa30c6a84ef362f6878cde2a36f82ad89f1a2bda53e0e87eb6b4149b946b00000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000000) (async) socket$l2tp(0x2, 0x2, 0x73) (async) socket$l2tp(0x2, 0x2, 0x73) (async) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x180000) (async) sendto$l2tp(r1, 0x0, 0x0, 0x404c8a0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) 14:19:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r2, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:40 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000075010000000100006a598721a45f8d5b0c00020000000000000000000c00060001000000000000000400078010ce243ecefa552ac792ccff760139948d8029844b212661ebcd542dd459b99682e3d1cfc99012fa82823e2aedceb3542dba3d26d25eae00"/116], 0x30}}, 0x0) 14:19:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000826bd7000fbdbdf250900001e0c00080008000000000000000c020800ff01000000001e0008000100000000000c0003000800000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x24000011}, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000826bd7000fbdbdf250900001e0c00080008000000000000000c020800ff01000000001e0008000100000000000c0003000800000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x24000011}, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (async) 14:19:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x38}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x38}}, 0x0) (async) 14:19:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x38}}, 0x0) 14:19:40 executing program 4: socket$l2tp(0x2, 0x2, 0x73) (async) r0 = socket(0x10, 0x4, 0x96a) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000530400012dbd7000fbdbdf25aa30c6a84ef362f6878cde2a36f82ad89f1a2bda53e0e87eb6b4149b946b00000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000000) (async) socket$l2tp(0x2, 0x2, 0x73) (async) socket$l2tp(0x2, 0x2, 0x73) (async) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) (async) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x180000) sendto$l2tp(r1, 0x0, 0x0, 0x404c8a0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) 14:19:40 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000075010000000100006a598721a45f8d5b0c00020000000000000000000c00060001000000000000000400078010ce243ecefa552ac792ccff760139948d8029844b212661ebcd542dd459b99682e3d1cfc99012fa82823e2aedceb3542dba3d26d25eae00"/116], 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000075010000000100006a598721a45f8d5b0c00020000000000000000000c00060001000000000000000400078010ce243ecefa552ac792ccff760139948d8029844b212661ebcd542dd459b99682e3d1cfc99012fa82823e2aedceb3542dba3d26d25eae00"/116], 0x30}}, 0x0) (async) 14:19:40 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) 14:19:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x38}}, 0x0) [ 935.931792] nla_parse: 104 callbacks suppressed [ 935.931799] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 14:19:40 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) socket$l2tp(0x2, 0x2, 0x73) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) (async) [ 935.975025] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 935.999030] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 936.014807] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 14:19:40 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) socket$l2tp(0x2, 0x2, 0x73) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) (async) 14:19:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:40 executing program 4: read$ptp(0xffffffffffffffff, &(0x7f0000000080)=""/101, 0x65) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) getpeername$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000180)={0x0, 0x7, 0x0, &(0x7f0000000100)=0x5}) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) [ 936.025011] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 936.034267] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 14:19:40 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000075010000000100006a598721a45f8d5b0c00020000000000000000000c00060001000000000000000400078010ce243ecefa552ac792ccff760139948d8029844b212661ebcd542dd459b99682e3d1cfc99012fa82823e2aedceb3542dba3d26d25eae00"/116], 0x30}}, 0x0) 14:19:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000826bd7000fbdbdf250900001e0c00080008000000000000000c020800ff01000000001e0008000100000000000c0003000800000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x24000011}, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r2) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="eedce725b1cc08", @ANYRES16=r1, @ANYRES16=r2], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x401d) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}]}, 0x3c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:19:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r2, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:40 executing program 4: read$ptp(0xffffffffffffffff, &(0x7f0000000080)=""/101, 0x65) r0 = socket$l2tp(0x2, 0x2, 0x73) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) (async) getpeername$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) (async) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000180)={0x0, 0x7, 0x0, &(0x7f0000000100)=0x5}) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 14:19:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:40 executing program 4: read$ptp(0xffffffffffffffff, &(0x7f0000000080)=""/101, 0x65) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) getpeername$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000180)={0x0, 0x7, 0x0, &(0x7f0000000100)=0x5}) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) read$ptp(0xffffffffffffffff, &(0x7f0000000080)=""/101, 0x65) (async) socket$l2tp(0x2, 0x2, 0x73) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) (async) getpeername$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) (async) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000180)={0x0, 0x7, 0x0, &(0x7f0000000100)=0x5}) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) 14:19:40 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x28, 0x70bd28, 0x25dfdbfc, {0x0, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x4801}, 0x20000000) 14:19:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:40 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) 14:19:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRESDEC=r1, @ANYBLOB="0104000000000000020000000000000c0006000100000000000000040007800000007324be173e5e375765fefddb3f71a5af068e06689184057425a3c75026b8d9111423f90c54f283922641fb9e7334133f30d487d58f163e607e711532b07dc17b8d8db099a8a091426dc5b0b9de3aea3c822aaafe8843dda4ae9ddcd32f2c133c85ffbf76a6002c685ee75caf372f1b598341f72fd6745cba935cc6e90095580493b07731c90393772ae2358b17690d2db7a27ca6e0921effd1"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4880) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x40c00, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xbc, r2, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2c2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '.'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x125}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8, 0x1, r6}]}]}, 0xbc}}, 0x1) 14:19:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r2, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:40 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x28, 0x70bd28, 0x25dfdbfc, {0x0, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x4801}, 0x20000000) [ 936.276792] nbd: must specify at least one socket 14:19:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r2) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="eedce725b1cc08", @ANYRES16=r1, @ANYRES16=r2], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x401d) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}]}, 0x3c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), r2) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="eedce725b1cc08", @ANYRES16=r1, @ANYRES16=r2], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x401d) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}]}, 0x3c}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) 14:19:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRESDEC=r1, @ANYBLOB="0104000000000000020000000000000c0006000100000000000000040007800000007324be173e5e375765fefddb3f71a5af068e06689184057425a3c75026b8d9111423f90c54f283922641fb9e7334133f30d487d58f163e607e711532b07dc17b8d8db099a8a091426dc5b0b9de3aea3c822aaafe8843dda4ae9ddcd32f2c133c85ffbf76a6002c685ee75caf372f1b598341f72fd6745cba935cc6e90095580493b07731c90393772ae2358b17690d2db7a27ca6e0921effd1"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4880) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x40c00, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xbc, r2, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2c2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '.'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x125}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8, 0x1, r6}]}]}, 0xbc}}, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRESDEC=r1, @ANYBLOB="0104000000000000020000000000000c0006000100000000000000040007800000007324be173e5e375765fefddb3f71a5af068e06689184057425a3c75026b8d9111423f90c54f283922641fb9e7334133f30d487d58f163e607e711532b07dc17b8d8db099a8a091426dc5b0b9de3aea3c822aaafe8843dda4ae9ddcd32f2c133c85ffbf76a6002c685ee75caf372f1b598341f72fd6745cba935cc6e90095580493b07731c90393772ae2358b17690d2db7a27ca6e0921effd1"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4880) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x40c00, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xbc, r2, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2c2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '.'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x125}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8, 0x1, r6}]}]}, 0xbc}}, 0x1) (async) 14:19:41 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x28, 0x70bd28, 0x25dfdbfc, {0x0, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x4801}, 0x20000000) socket$l2tp(0x2, 0x2, 0x73) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x28, 0x70bd28, 0x25dfdbfc, {0x0, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x4801}, 0x20000000) (async) [ 936.345924] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 936.383782] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:19:41 executing program 4: socket$l2tp(0x2, 0x2, 0x73) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) sendto$l2tp(r0, 0x0, 0x0, 0x200488c0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, 0x2000004}, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) 14:19:41 executing program 4: socket$l2tp(0x2, 0x2, 0x73) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) (async) sendto$l2tp(r0, 0x0, 0x0, 0x200488c0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, 0x2000004}, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) (async) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) [ 936.408861] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 936.435743] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:19:41 executing program 4: socket$l2tp(0x2, 0x2, 0x73) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) (async, rerun: 64) sendto$l2tp(r0, 0x0, 0x0, 0x200488c0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, 0x2000004}, 0x10) (rerun: 64) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) (async) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) 14:19:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) 14:19:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r2, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) [ 936.514222] nbd: must specify at least one socket 14:19:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r2) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="eedce725b1cc08", @ANYRES16=r1, @ANYRES16=r2], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x401d) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}]}, 0x3c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:19:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRESDEC=r1, @ANYBLOB="0104000000000000020000000000000c0006000100000000000000040007800000007324be173e5e375765fefddb3f71a5af068e06689184057425a3c75026b8d9111423f90c54f283922641fb9e7334133f30d487d58f163e607e711532b07dc17b8d8db099a8a091426dc5b0b9de3aea3c822aaafe8843dda4ae9ddcd32f2c133c85ffbf76a6002c685ee75caf372f1b598341f72fd6745cba935cc6e90095580493b07731c90393772ae2358b17690d2db7a27ca6e0921effd1"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4880) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x40c00, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) (async, rerun: 64) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (rerun: 64) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xbc, r2, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2c2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '.'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x125}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8, 0x1, r6}]}]}, 0xbc}}, 0x1) 14:19:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x401, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x404c004) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0xc01) r5 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r5, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 14:19:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x38}}, 0x0) 14:19:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) 14:19:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x401, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x404c004) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0xc01) r5 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r5, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)) (async) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) (async) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x401, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x404c004) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0xc01) (async) socket$l2tp(0x2, 0x2, 0x73) (async) sendto$l2tp(r5, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) [ 936.665007] nbd: must specify at least one socket 14:19:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c000200000000000000000004000a000c000600010000000000000004000780"], 0x34}}, 0x0) 14:19:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x90, 0x0, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r8, 0x40383d03, 0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r9, 0x40383d03, 0x0) r10 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r11, 0x40383d03, 0x0) r12 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, '\'N$.\'\xfc^:!'}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8}, {0x8}, {0x8, 0x1, r12}, {0x8}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8804}, 0x20000040) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r13, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c000200000000000000000004000a000c000600010000000000000004000780"], 0x34}}, 0x0) 14:19:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x90, 0x0, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x401, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x404c004) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0xc01) r5 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r5, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)) (async) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) (async) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x401, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x404c004) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0xc01) (async) socket$l2tp(0x2, 0x2, 0x73) (async) sendto$l2tp(r5, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) 14:19:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x90, 0x0, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) (async, rerun: 64) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (rerun: 64) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) (async) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) (async, rerun: 64) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) (rerun: 64) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r8, 0x40383d03, 0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r9, 0x40383d03, 0x0) (async, rerun: 64) r10 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (rerun: 64) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r11, 0x40383d03, 0x0) (async, rerun: 64) r12 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) (rerun: 64) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, '\'N$.\'\xfc^:!'}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8}, {0x8}, {0x8, 0x1, r12}, {0x8}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8804}, 0x20000040) (async) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r13, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c000200000039"], 0x34}}, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x400) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r3 = socket(0x18, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) r5 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x401}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x34, 0x1402, 0x800, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x34}}, 0x4008000) 14:19:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c000200000000000000000004000a000c000600010000000000000004000780"], 0x34}}, 0x0) 14:19:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x15}, 0x20044005) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="53dabf64", @ANYRES16=r1, @ANYBLOB="010000000000002b832419931be33f674e0000000000000000000c00060001000000003d000004000780"], 0x30}}, 0x0) 14:19:41 executing program 4: sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x40011, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) read$usbfs(0xffffffffffffffff, &(0x7f0000000000)=""/229, 0xe5) 14:19:41 executing program 5: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x1c, 0x0, 0x400, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xde0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x4000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0x34, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x11d}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9f}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffffffffff69}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x8014) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, r1, 0x1}, 0x34}}, 0x20000014) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r5 = gettid() pipe(&(0x7f00000004c0)={0xffffffffffffffff}) sendmsg$AUDIT_SET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x3e9, 0x100, 0x70bd2a, 0x25dfdbfd, {0x0, 0x1, 0x2, r5, 0x1, 0x3, 0x8, 0x3, 0x0, 0x714, 0x7}, ["", "", "", "", "", "", ""]}, 0x3c}}, 0x4841) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r7, 0x40383d03, 0x0) sendmsg$AUDIT_TRIM(r7, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3f6, 0x400, 0x70bd25, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000090}, 0x24004040) 14:19:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x15}, 0x20044005) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="53dabf64", @ANYRES16=r1, @ANYBLOB="010000000000002b832419931be33f674e0000000000000000000c00060001000000003d000004000780"], 0x30}}, 0x0) 14:19:41 executing program 4: sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x40011, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) read$usbfs(0xffffffffffffffff, &(0x7f0000000000)=""/229, 0xe5) 14:19:41 executing program 4: sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x40011, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) read$usbfs(0xffffffffffffffff, &(0x7f0000000000)=""/229, 0xe5) 14:19:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) (async) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) (async) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r8, 0x40383d03, 0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r9, 0x40383d03, 0x0) (async) r10 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r11, 0x40383d03, 0x0) (async) r12 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, '\'N$.\'\xfc^:!'}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8}, {0x8}, {0x8, 0x1, r12}, {0x8}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8804}, 0x20000040) (async) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r13, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x15}, 0x20044005) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="53dabf64", @ANYRES16=r1, @ANYBLOB="010000000000002b832419931be33f674e0000000000000000000c00060001000000003d000004000780"], 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x15}, 0x20044005) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="53dabf64", @ANYRES16=r1, @ANYBLOB="010000000000002b832419931be33f674e0000000000000000000c00060001000000003d000004000780"], 0x30}}, 0x0) (async) 14:19:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r2, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:41 executing program 5: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x1c, 0x0, 0x400, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xde0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x4000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0x34, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x11d}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9f}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffffffffff69}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x8014) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, r1, 0x1}, 0x34}}, 0x20000014) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r5 = gettid() pipe(&(0x7f00000004c0)={0xffffffffffffffff}) sendmsg$AUDIT_SET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x3e9, 0x100, 0x70bd2a, 0x25dfdbfd, {0x0, 0x1, 0x2, r5, 0x1, 0x3, 0x8, 0x3, 0x0, 0x714, 0x7}, ["", "", "", "", "", "", ""]}, 0x3c}}, 0x4841) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r7, 0x40383d03, 0x0) sendmsg$AUDIT_TRIM(r7, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3f6, 0x400, 0x70bd25, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000090}, 0x24004040) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x1c, 0x0, 0x400, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xde0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x4000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0x34, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x11d}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9f}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffffffffff69}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x8014) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, r1, 0x1}, 0x34}}, 0x20000014) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) gettid() (async) pipe(&(0x7f00000004c0)) (async) sendmsg$AUDIT_SET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x3e9, 0x100, 0x70bd2a, 0x25dfdbfd, {0x0, 0x1, 0x2, r5, 0x1, 0x3, 0x8, 0x3, 0x0, 0x714, 0x7}, ["", "", "", "", "", "", ""]}, 0x3c}}, 0x4841) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r7, 0x40383d03, 0x0) (async) sendmsg$AUDIT_TRIM(r7, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3f6, 0x400, 0x70bd25, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000090}, 0x24004040) (async) 14:19:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x90, 0x0, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$l2tp(0x2, 0x2, 0x73) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) sendto$l2tp(r2, 0x0, 0x0, 0x800, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) 14:19:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendto$l2tp(0xffffffffffffffff, &(0x7f00000001c0)="8ec5e23b0f105b424a889e46b05b235e64d4d95fe73b2e834e9e493de16ef5ceb5f5659834518e3fc4f198957076d89ae5593e7754975b769db8ac4888beedc2c7f476bd06102c615933c4f337aafa02cc29dffb6968911e5e113204207000dfb9b0b1f4ee9cfdfd7c002dc9690dc2996da14f5dc9422d1859e8253334d7f52edf4d75319cd63a6420ab35c6016681a71e166a565777caf02760c62993c470ead075ceb6f20991c85af456b18328052b3602ba5720277ba77bb3335c95629645b90cde75ebfb943fb50a928d6f88fa985da83648286383694e68f81e945c7751d94899aa922c0ea8", 0xe8, 0x0, &(0x7f0000000040)={0x2, 0x0, @private=0xa010101, 0x2}, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:41 executing program 5: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x1c, 0x0, 0x400, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xde0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x4000) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0x34, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x11d}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9f}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffffffffff69}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x8014) (async, rerun: 64) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, r1, 0x1}, 0x34}}, 0x20000014) (async, rerun: 64) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) r5 = gettid() (async) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) sendmsg$AUDIT_SET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x3e9, 0x100, 0x70bd2a, 0x25dfdbfd, {0x0, 0x1, 0x2, r5, 0x1, 0x3, 0x8, 0x3, 0x0, 0x714, 0x7}, ["", "", "", "", "", "", ""]}, 0x3c}}, 0x4841) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r7, 0x40383d03, 0x0) (async) sendmsg$AUDIT_TRIM(r7, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3f6, 0x400, 0x70bd25, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000090}, 0x24004040) 14:19:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:19:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) socket$l2tp(0x2, 0x2, 0x73) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) (async) sendto$l2tp(r2, 0x0, 0x0, 0x800, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) 14:19:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x6c, r3, 0x2b3, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x5c, r3, 0x300, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x4, 0x71, 0x0, 0xc2c}]}}}]}}]}, 0x5c}}, 0x8010) 14:19:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r2, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendto$l2tp(0xffffffffffffffff, &(0x7f00000001c0)="8ec5e23b0f105b424a889e46b05b235e64d4d95fe73b2e834e9e493de16ef5ceb5f5659834518e3fc4f198957076d89ae5593e7754975b769db8ac4888beedc2c7f476bd06102c615933c4f337aafa02cc29dffb6968911e5e113204207000dfb9b0b1f4ee9cfdfd7c002dc9690dc2996da14f5dc9422d1859e8253334d7f52edf4d75319cd63a6420ab35c6016681a71e166a565777caf02760c62993c470ead075ceb6f20991c85af456b18328052b3602ba5720277ba77bb3335c95629645b90cde75ebfb943fb50a928d6f88fa985da83648286383694e68f81e945c7751d94899aa922c0ea8", 0xe8, 0x0, &(0x7f0000000040)={0x2, 0x0, @private=0xa010101, 0x2}, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$l2tp(0x2, 0x2, 0x73) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) sendto$l2tp(r2, 0x0, 0x0, 0x800, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) socket$l2tp(0x2, 0x2, 0x73) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) (async) sendto$l2tp(r2, 0x0, 0x0, 0x800, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) (async) 14:19:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r7, 0x40383d03, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x94, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}]}]}, 0x94}}, 0x40010) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x501, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfff}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004880}, 0x20040080) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}}, 0x8000) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r9) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r10, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r11) 14:19:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendto$l2tp(0xffffffffffffffff, &(0x7f00000001c0)="8ec5e23b0f105b424a889e46b05b235e64d4d95fe73b2e834e9e493de16ef5ceb5f5659834518e3fc4f198957076d89ae5593e7754975b769db8ac4888beedc2c7f476bd06102c615933c4f337aafa02cc29dffb6968911e5e113204207000dfb9b0b1f4ee9cfdfd7c002dc9690dc2996da14f5dc9422d1859e8253334d7f52edf4d75319cd63a6420ab35c6016681a71e166a565777caf02760c62993c470ead075ceb6f20991c85af456b18328052b3602ba5720277ba77bb3335c95629645b90cde75ebfb943fb50a928d6f88fa985da83648286383694e68f81e945c7751d94899aa922c0ea8", 0xe8, 0x0, &(0x7f0000000040)={0x2, 0x0, @private=0xa010101, 0x2}, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x6c, r3, 0x2b3, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x5c, r3, 0x300, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x4, 0x71, 0x0, 0xc2c}]}}}]}}]}, 0x5c}}, 0x8010) 14:19:42 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendto$l2tp(0xffffffffffffffff, &(0x7f00000001c0)="8ec5e23b0f105b424a889e46b05b235e64d4d95fe73b2e834e9e493de16ef5ceb5f5659834518e3fc4f198957076d89ae5593e7754975b769db8ac4888beedc2c7f476bd06102c615933c4f337aafa02cc29dffb6968911e5e113204207000dfb9b0b1f4ee9cfdfd7c002dc9690dc2996da14f5dc9422d1859e8253334d7f52edf4d75319cd63a6420ab35c6016681a71e166a565777caf02760c62993c470ead075ceb6f20991c85af456b18328052b3602ba5720277ba77bb3335c95629645b90cde75ebfb943fb50a928d6f88fa985da83648286383694e68f81e945c7751d94899aa922c0ea8", 0xe8, 0x0, &(0x7f0000000040)={0x2, 0x0, @private=0xa010101, 0x2}, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) [ 937.429586] nbd: couldn't find device at index 5 14:19:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r2, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r0) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) (async) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) (async) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r7, 0x40383d03, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x94, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}]}]}, 0x94}}, 0x40010) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x501, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfff}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004880}, 0x20040080) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}}, 0x8000) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r9) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r10, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r11) 14:19:42 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x202080, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) getpeername$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x200080) sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f2, 0x200, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) ioctl$USBDEVFS_WAIT_FOR_RESUME(r1, 0x5523) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 14:19:42 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x202080, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) getpeername$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x200080) sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f2, 0x200, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) ioctl$USBDEVFS_WAIT_FOR_RESUME(r1, 0x5523) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 14:19:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r2, 0x401, 0x0, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:42 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async, rerun: 32) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x202080, 0x0) (async, rerun: 32) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) (async) getpeername$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x200080) sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f2, 0x200, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) (async) ioctl$USBDEVFS_WAIT_FOR_RESUME(r1, 0x5523) (async, rerun: 64) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (rerun: 64) 14:19:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x6c, r3, 0x2b3, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x5c, r3, 0x300, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x4, 0x71, 0x0, 0xc2c}]}}}]}}]}, 0x5c}}, 0x8010) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x6c, r3, 0x2b3, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x5c, r3, 0x300, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x4, 0x71, 0x0, 0xc2c}]}}}]}}]}, 0x5c}}, 0x8010) (async) 14:19:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) (async) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) (async) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r7, 0x40383d03, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x94, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}]}]}, 0x94}}, 0x40010) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x501, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfff}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004880}, 0x20040080) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}}, 0x8000) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r9) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r10, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r11) 14:19:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x90, r2, 0x401, 0x0, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:42 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000000000000004000780"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) 14:19:42 executing program 4: socket$l2tp(0x2, 0x2, 0x73) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0xd47cee76cb5883cd, 0x0) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) 14:19:42 executing program 0: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4000081) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x84, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) sendmsg$key(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x2, 0x8, 0xfd, 0x2, 0xa, 0x0, 0x70bd25, 0x25dfdbff, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e24, 0xed, @mcast2, 0x2}, @in6={0xa, 0x4e24, 0x40, @mcast1, 0xfffffffe}}]}, 0x50}}, 0x20000000) socket(0x21, 0x6, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x44, r1, 0x1, 0x0, 0x100000, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_TIMEOUT={0x0, 0x4, 0x101}, @NBD_ATTR_SOCKETS={0x1c}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES]}, 0x82}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r5, 0x200, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r7) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r9, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x120000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x89e7665739415cb2) [ 937.741512] nbd: couldn't find device at index 5 14:19:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r7, 0x40383d03, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x94, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}]}]}, 0x94}}, 0x40010) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x501, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfff}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004880}, 0x20040080) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}}, 0x8000) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r9) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r10, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r11) 14:19:42 executing program 4: socket$l2tp(0x2, 0x2, 0x73) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0xd47cee76cb5883cd, 0x0) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) socket$l2tp(0x2, 0x2, 0x73) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2) (async) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0xd47cee76cb5883cd, 0x0) (async) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) (async) 14:19:42 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000000000000004000780"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) 14:19:42 executing program 0: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4000081) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4000081) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (async) 14:19:42 executing program 4: socket$l2tp(0x2, 0x2, 0x73) (async, rerun: 64) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (rerun: 64) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2) (async) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0xd47cee76cb5883cd, 0x0) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) 14:19:42 executing program 3: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4000081) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x78, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) [ 937.875866] nbd: couldn't find device at index 3 [ 937.884745] nbd: must specify at least one socket 14:19:42 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x458, 0x3f4, 0x10, 0x70bd2c, 0x25dfdbfb, {0x1, 0x0, 0x29, [0x8000, 0x1, 0x8, 0x1, 0x5, 0x400, 0x4, 0x1d4b, 0x400, 0x7, 0x8, 0x80000001, 0x3ff, 0x792, 0x4, 0xff, 0x7, 0x4, 0x6, 0x3ff, 0xdd8, 0x8, 0x7, 0x81, 0x2, 0x5d, 0x57d, 0x7, 0x8, 0x2, 0xb85, 0x2, 0x7, 0x3fe00, 0x1, 0x7, 0x1, 0x32, 0x2, 0x5, 0x4, 0x200, 0x2, 0x9, 0x7e, 0x18, 0x7, 0x8, 0x7, 0x8b8, 0x7d, 0x9, 0x401, 0x101, 0x3, 0x8001, 0x400, 0x4, 0x9, 0x5, 0x8, 0x2, 0x2cf0, 0x100], [0x80, 0x3, 0x9, 0x9, 0x8000, 0x800, 0x8, 0x80000000, 0x7fffffff, 0x4aaded1, 0x4, 0x6, 0x200, 0x3, 0x4, 0x0, 0xf70, 0x3, 0x3, 0x1, 0x9, 0x3, 0x4, 0x1000, 0x6c0, 0x80, 0xa6, 0x0, 0x800, 0x4, 0x4, 0x0, 0x7, 0x80, 0x7f, 0x4ed, 0x1000, 0x100, 0x1fe00, 0xae, 0x0, 0x5, 0x7, 0x3, 0x9, 0x80000000, 0x81, 0xd98, 0xfff, 0x4d96, 0x40, 0x4, 0x2, 0x6, 0xffffffff, 0xffffffff, 0x4, 0x0, 0x1, 0x0, 0x200, 0x129, 0x4, 0x6], [0x1, 0xffffffff, 0x401, 0x1, 0x2, 0x101, 0x56e, 0x7, 0x9, 0xffffffff, 0x2, 0x9, 0x1, 0x8, 0xc6, 0x3ff, 0x4, 0x39, 0x7, 0x40000, 0x100, 0x4, 0x9, 0x5, 0x6, 0x1, 0x4, 0x3, 0x4, 0x3c6, 0x8, 0x7ff, 0x77ee, 0xffffff81, 0x8000, 0x10000000, 0x40, 0x4, 0xbf, 0x2, 0xfa69, 0x0, 0x1, 0x7, 0x6, 0xffff, 0x9, 0x8, 0x5fb0, 0x8, 0x3f31, 0x8, 0x5, 0x5, 0xe7, 0x3f, 0x8c, 0x81, 0x2, 0x321, 0x2, 0x8000, 0x7], [0x7, 0xee8, 0x80000000, 0x7fffffff, 0xfffffffc, 0xfff, 0x800, 0x4, 0x4, 0x8000, 0x0, 0x80000001, 0x4, 0x5, 0x0, 0x1, 0x4, 0x7f, 0x836e, 0x80000001, 0x6, 0x1, 0x9, 0x80000001, 0x40, 0x9, 0x80, 0x6, 0x4, 0x7, 0x2, 0x6, 0x7, 0xffffffff, 0x3, 0xfffffffa, 0x1, 0x1, 0x5, 0x20, 0x1f, 0x938, 0x4, 0x7, 0x3, 0x3, 0x4, 0x6c15, 0x5, 0x8001, 0x5, 0x10000, 0x5, 0x80000001, 0x1ff, 0x200, 0x21cc, 0x1, 0x6, 0x6, 0x9, 0x9fa, 0x3, 0x6], 0x35, ['\xe0(\')+.$\'[+%%V\xce(\x00', '}.,/+\x15--+!}&\xf6:\x00', '.($\'-\x8f\x00', '}!-\\(\x00', '\x00', '$[@,\'@-\x00']}, ["", ""]}, 0x458}}, 0x40040) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 14:19:42 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="3066fff130675c46f06043d5405ecc7234f391b4771dc5e32b8db39dfc70966173eb7caf6eaea037c1850b4a83bbe484f5f104299be075fcfba2723a98669841b52320e31012ace627b4820e9dfe317dc16e5416eb91b4969cdc55b281411bafcfcdbfd754767c10dcbfa7ef15f3de60f45619af3d8ea85f58f193bf9385e8e78e264f9b39fdac0cbdf3a644000000000000000000002b059e279e54bcad5c062192ea3e7f8ddc5dad5cfe7ffcfe708c282e73bb2f8806d0214cc39bc01fdc6dd0825afdacea4cf7537d224420d1f763244f977788a7fafe0f505c02abcdfa16846c8c199b8bbc9ff4998eda0393fc6c4aa96630001484dd2bfd9b4253cd5df7cb6c1b150a5b1295604b2f6495f1046c", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000000000000004000780"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) 14:19:42 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) (async) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x458, 0x3f4, 0x10, 0x70bd2c, 0x25dfdbfb, {0x1, 0x0, 0x29, [0x8000, 0x1, 0x8, 0x1, 0x5, 0x400, 0x4, 0x1d4b, 0x400, 0x7, 0x8, 0x80000001, 0x3ff, 0x792, 0x4, 0xff, 0x7, 0x4, 0x6, 0x3ff, 0xdd8, 0x8, 0x7, 0x81, 0x2, 0x5d, 0x57d, 0x7, 0x8, 0x2, 0xb85, 0x2, 0x7, 0x3fe00, 0x1, 0x7, 0x1, 0x32, 0x2, 0x5, 0x4, 0x200, 0x2, 0x9, 0x7e, 0x18, 0x7, 0x8, 0x7, 0x8b8, 0x7d, 0x9, 0x401, 0x101, 0x3, 0x8001, 0x400, 0x4, 0x9, 0x5, 0x8, 0x2, 0x2cf0, 0x100], [0x80, 0x3, 0x9, 0x9, 0x8000, 0x800, 0x8, 0x80000000, 0x7fffffff, 0x4aaded1, 0x4, 0x6, 0x200, 0x3, 0x4, 0x0, 0xf70, 0x3, 0x3, 0x1, 0x9, 0x3, 0x4, 0x1000, 0x6c0, 0x80, 0xa6, 0x0, 0x800, 0x4, 0x4, 0x0, 0x7, 0x80, 0x7f, 0x4ed, 0x1000, 0x100, 0x1fe00, 0xae, 0x0, 0x5, 0x7, 0x3, 0x9, 0x80000000, 0x81, 0xd98, 0xfff, 0x4d96, 0x40, 0x4, 0x2, 0x6, 0xffffffff, 0xffffffff, 0x4, 0x0, 0x1, 0x0, 0x200, 0x129, 0x4, 0x6], [0x1, 0xffffffff, 0x401, 0x1, 0x2, 0x101, 0x56e, 0x7, 0x9, 0xffffffff, 0x2, 0x9, 0x1, 0x8, 0xc6, 0x3ff, 0x4, 0x39, 0x7, 0x40000, 0x100, 0x4, 0x9, 0x5, 0x6, 0x1, 0x4, 0x3, 0x4, 0x3c6, 0x8, 0x7ff, 0x77ee, 0xffffff81, 0x8000, 0x10000000, 0x40, 0x4, 0xbf, 0x2, 0xfa69, 0x0, 0x1, 0x7, 0x6, 0xffff, 0x9, 0x8, 0x5fb0, 0x8, 0x3f31, 0x8, 0x5, 0x5, 0xe7, 0x3f, 0x8c, 0x81, 0x2, 0x321, 0x2, 0x8000, 0x7], [0x7, 0xee8, 0x80000000, 0x7fffffff, 0xfffffffc, 0xfff, 0x800, 0x4, 0x4, 0x8000, 0x0, 0x80000001, 0x4, 0x5, 0x0, 0x1, 0x4, 0x7f, 0x836e, 0x80000001, 0x6, 0x1, 0x9, 0x80000001, 0x40, 0x9, 0x80, 0x6, 0x4, 0x7, 0x2, 0x6, 0x7, 0xffffffff, 0x3, 0xfffffffa, 0x1, 0x1, 0x5, 0x20, 0x1f, 0x938, 0x4, 0x7, 0x3, 0x3, 0x4, 0x6c15, 0x5, 0x8001, 0x5, 0x10000, 0x5, 0x80000001, 0x1ff, 0x200, 0x21cc, 0x1, 0x6, 0x6, 0x9, 0x9fa, 0x3, 0x6], 0x35, ['\xe0(\')+.$\'[+%%V\xce(\x00', '}.,/+\x15--+!}&\xf6:\x00', '.($\'-\x8f\x00', '}!-\\(\x00', '\x00', '$[@,\'@-\x00']}, ["", ""]}, 0x458}}, 0x40040) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 14:19:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) (async) sendmsg$key(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x2, 0x8, 0xfd, 0x2, 0xa, 0x0, 0x70bd25, 0x25dfdbff, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e24, 0xed, @mcast2, 0x2}, @in6={0xa, 0x4e24, 0x40, @mcast1, 0xfffffffe}}]}, 0x50}}, 0x20000000) (async) socket(0x21, 0x6, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x44, r1, 0x1, 0x0, 0x100000, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_TIMEOUT={0x0, 0x4, 0x101}, @NBD_ATTR_SOCKETS={0x1c}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES]}, 0x82}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r5, 0x200, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (async, rerun: 32) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r7) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r9, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x120000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x89e7665739415cb2) [ 937.952716] nbd: couldn't find device at index 5 14:19:42 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x458, 0x3f4, 0x10, 0x70bd2c, 0x25dfdbfb, {0x1, 0x0, 0x29, [0x8000, 0x1, 0x8, 0x1, 0x5, 0x400, 0x4, 0x1d4b, 0x400, 0x7, 0x8, 0x80000001, 0x3ff, 0x792, 0x4, 0xff, 0x7, 0x4, 0x6, 0x3ff, 0xdd8, 0x8, 0x7, 0x81, 0x2, 0x5d, 0x57d, 0x7, 0x8, 0x2, 0xb85, 0x2, 0x7, 0x3fe00, 0x1, 0x7, 0x1, 0x32, 0x2, 0x5, 0x4, 0x200, 0x2, 0x9, 0x7e, 0x18, 0x7, 0x8, 0x7, 0x8b8, 0x7d, 0x9, 0x401, 0x101, 0x3, 0x8001, 0x400, 0x4, 0x9, 0x5, 0x8, 0x2, 0x2cf0, 0x100], [0x80, 0x3, 0x9, 0x9, 0x8000, 0x800, 0x8, 0x80000000, 0x7fffffff, 0x4aaded1, 0x4, 0x6, 0x200, 0x3, 0x4, 0x0, 0xf70, 0x3, 0x3, 0x1, 0x9, 0x3, 0x4, 0x1000, 0x6c0, 0x80, 0xa6, 0x0, 0x800, 0x4, 0x4, 0x0, 0x7, 0x80, 0x7f, 0x4ed, 0x1000, 0x100, 0x1fe00, 0xae, 0x0, 0x5, 0x7, 0x3, 0x9, 0x80000000, 0x81, 0xd98, 0xfff, 0x4d96, 0x40, 0x4, 0x2, 0x6, 0xffffffff, 0xffffffff, 0x4, 0x0, 0x1, 0x0, 0x200, 0x129, 0x4, 0x6], [0x1, 0xffffffff, 0x401, 0x1, 0x2, 0x101, 0x56e, 0x7, 0x9, 0xffffffff, 0x2, 0x9, 0x1, 0x8, 0xc6, 0x3ff, 0x4, 0x39, 0x7, 0x40000, 0x100, 0x4, 0x9, 0x5, 0x6, 0x1, 0x4, 0x3, 0x4, 0x3c6, 0x8, 0x7ff, 0x77ee, 0xffffff81, 0x8000, 0x10000000, 0x40, 0x4, 0xbf, 0x2, 0xfa69, 0x0, 0x1, 0x7, 0x6, 0xffff, 0x9, 0x8, 0x5fb0, 0x8, 0x3f31, 0x8, 0x5, 0x5, 0xe7, 0x3f, 0x8c, 0x81, 0x2, 0x321, 0x2, 0x8000, 0x7], [0x7, 0xee8, 0x80000000, 0x7fffffff, 0xfffffffc, 0xfff, 0x800, 0x4, 0x4, 0x8000, 0x0, 0x80000001, 0x4, 0x5, 0x0, 0x1, 0x4, 0x7f, 0x836e, 0x80000001, 0x6, 0x1, 0x9, 0x80000001, 0x40, 0x9, 0x80, 0x6, 0x4, 0x7, 0x2, 0x6, 0x7, 0xffffffff, 0x3, 0xfffffffa, 0x1, 0x1, 0x5, 0x20, 0x1f, 0x938, 0x4, 0x7, 0x3, 0x3, 0x4, 0x6c15, 0x5, 0x8001, 0x5, 0x10000, 0x5, 0x80000001, 0x1ff, 0x200, 0x21cc, 0x1, 0x6, 0x6, 0x9, 0x9fa, 0x3, 0x6], 0x35, ['\xe0(\')+.$\'[+%%V\xce(\x00', '}.,/+\x15--+!}&\xf6:\x00', '.($\'-\x8f\x00', '}!-\\(\x00', '\x00', '$[@,\'@-\x00']}, ["", ""]}, 0x458}}, 0x40040) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 14:19:42 executing program 0: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4000081) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x6c, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:42 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) sendto$l2tp(r0, &(0x7f0000000040)="e0b2ae412defd921f5c1084149fd79dab0e41b7e3873db34465cf649d25e7f74fcadce1949e94954cda53812a781ece6444113725b626f40ec9d9da8f72d2ec16f3e18f26668e20a17d4cb7ac9ebc67ce3837f155de7d9d65b1dbdcd6cecd693a9896b7396013f88c45f62415adf5971cd9bc065726db934abe2bb1babbe548283c8bf805d3d5e753890b906ab15494354c01e3986aec53e78cada00a3c50723873d9e555f69a339abe6b2f2577b9acc78c23374355e6b7d9e71b0d37b955409a51d3f907546ea89687df27c90e823907f2c57c2b8c56190c68c898a40594098d8f1913f0b4e556b68a15868404e8de87d6200390c5c0c743a5297cc7aa786", 0xff, 0x30048040, &(0x7f0000000180)={0x2, 0x0, @remote, 0x4}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x4, 0x4000) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000200)={0xf6bd, 0xfffffffb, 0xca7a, 0x5, 0x6, 0x5}) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 14:19:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x78, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) sendmsg$key(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x2, 0x8, 0xfd, 0x2, 0xa, 0x0, 0x70bd25, 0x25dfdbff, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e24, 0xed, @mcast2, 0x2}, @in6={0xa, 0x4e24, 0x40, @mcast1, 0xfffffffe}}]}, 0x50}}, 0x20000000) socket(0x21, 0x6, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x44, r1, 0x1, 0x0, 0x100000, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_TIMEOUT={0x0, 0x4, 0x101}, @NBD_ATTR_SOCKETS={0x1c}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES]}, 0x82}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r5, 0x200, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r7) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r9, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x120000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x89e7665739415cb2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) (async) sendmsg$key(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x2, 0x8, 0xfd, 0x2, 0xa, 0x0, 0x70bd25, 0x25dfdbff, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e24, 0xed, @mcast2, 0x2}, @in6={0xa, 0x4e24, 0x40, @mcast1, 0xfffffffe}}]}, 0x50}}, 0x20000000) (async) socket(0x21, 0x6, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x44, r1, 0x1, 0x0, 0x100000, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_TIMEOUT={0x0, 0x4, 0x101}, @NBD_ATTR_SOCKETS={0x1c}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES]}, 0x82}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r5, 0x200, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r7) (async) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r9, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x120000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x89e7665739415cb2) (async) 14:19:42 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x101}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x38, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:42 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) sendto$l2tp(r0, &(0x7f0000000040)="e0b2ae412defd921f5c1084149fd79dab0e41b7e3873db34465cf649d25e7f74fcadce1949e94954cda53812a781ece6444113725b626f40ec9d9da8f72d2ec16f3e18f26668e20a17d4cb7ac9ebc67ce3837f155de7d9d65b1dbdcd6cecd693a9896b7396013f88c45f62415adf5971cd9bc065726db934abe2bb1babbe548283c8bf805d3d5e753890b906ab15494354c01e3986aec53e78cada00a3c50723873d9e555f69a339abe6b2f2577b9acc78c23374355e6b7d9e71b0d37b955409a51d3f907546ea89687df27c90e823907f2c57c2b8c56190c68c898a40594098d8f1913f0b4e556b68a15868404e8de87d6200390c5c0c743a5297cc7aa786", 0xff, 0x30048040, &(0x7f0000000180)={0x2, 0x0, @remote, 0x4}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) (async) r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x4, 0x4000) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000200)={0xf6bd, 0xfffffffb, 0xca7a, 0x5, 0x6, 0x5}) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 14:19:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="b5495aa4", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fcdbdf250200000004000a000c00060001000000000000000c00080000100000000000000c0002000300000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) [ 938.192037] nbd: must specify at least one socket [ 938.205543] nbd: couldn't find device at index 1 [ 938.226409] nbd: must specify at least one socket 14:19:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x78, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x38, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) [ 938.238561] nbd: couldn't find device at index 5 14:19:42 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) sendto$l2tp(r0, &(0x7f0000000040)="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", 0xff, 0x30048040, &(0x7f0000000180)={0x2, 0x0, @remote, 0x4}, 0x10) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) (async) r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x4, 0x4000) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000200)={0xf6bd, 0xfffffffb, 0xca7a, 0x5, 0x6, 0x5}) (async) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 14:19:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) shmdt(0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x3c}}, 0x4008080) ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f0000000080)={'\x00', 0x0, 0x3, 0x1ff}) 14:19:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="b5495aa4", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fcdbdf250200000004000a000c00060001000000000000000c00080000100000000000000c0002000300000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x78, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:43 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x101}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) [ 938.340976] nbd: must specify at least one socket 14:19:43 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) read$ptp(r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0xc0200) sendto$l2tp(r0, 0x0, 0x0, 0x2000c801, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010102}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x37}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 14:19:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x38, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x78, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, 0x0) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) shmdt(0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x3c}}, 0x4008080) (async) ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f0000000080)={'\x00', 0x0, 0x3, 0x1ff}) [ 938.411330] nbd: must specify at least one socket 14:19:43 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) read$ptp(r1, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0xc0200) (async) sendto$l2tp(r0, 0x0, 0x0, 0x2000c801, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010102}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x37}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 14:19:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="b5495aa4", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fcdbdf250200000004000a000c00060001000000000000000c00080000100000000000000c0002000300000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (rerun: 32) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:43 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) read$ptp(r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0xc0200) sendto$l2tp(r0, 0x0, 0x0, 0x2000c801, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010102}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x37}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x800) socket$l2tp(0x2, 0x2, 0x73) (async) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) read$ptp(r1, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0xc0200) (async) sendto$l2tp(r0, 0x0, 0x0, 0x2000c801, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010102}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x37}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async) 14:19:43 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x101}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x78, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) [ 938.557376] nbd: must specify at least one socket 14:19:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x64, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, 0x0) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) (async) shmdt(0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x3c}}, 0x4008080) (async) ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f0000000080)={'\x00', 0x0, 0x3, 0x1ff}) 14:19:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r7 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x200800) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r8, 0x40383d03, 0x0) r9 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0800, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xcc, r4, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xeb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7f}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc0}, 0x240048c0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:43 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x81}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4088850}, 0x4004000) [ 938.627605] nbd: must specify at least one socket 14:19:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5c, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:43 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x78, 0x0, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:43 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x78, 0x0, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:43 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x81}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4088850}, 0x4004000) 14:19:43 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3f7, 0x4, 0x70bd2d, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) [ 938.759819] nbd: couldn't find device at index 0 14:19:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x103}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20004004) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) 14:19:43 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x78, 0x0, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) (async) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async) r7 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x200800) (async) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r8, 0x40383d03, 0x0) (async) r9 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0800, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xcc, r4, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xeb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7f}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc0}, 0x240048c0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x78, r1, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:43 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) (async) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3f7, 0x4, 0x70bd2d, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) 14:19:43 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async, rerun: 64) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) (async, rerun: 64) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x81}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4088850}, 0x4004000) 14:19:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x78, r1, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x103}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20004004) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) 14:19:43 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) bind$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @hyper}, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8f8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r5, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffa0e}]}, 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x0) 14:19:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x78, r1, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:43 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3f7, 0x4, 0x70bd2d, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) 14:19:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x4c, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x78, r1, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) (async) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async) r7 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x200800) (async) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r8, 0x40383d03, 0x0) (async) r9 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0800, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xcc, r4, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xeb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7f}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc0}, 0x240048c0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x103}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20004004) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r0) (async) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x103}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20004004) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) (async) 14:19:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x44, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x78, r1, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:43 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) bind$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @hyper}, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8f8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r5, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffa0e}]}, 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x0) socket$l2tp(0x2, 0x2, 0x73) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) (async) bind$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @hyper}, 0x10) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8f8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r5, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffa0e}]}, 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x0) (async) 14:19:43 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000000000000004000780"], 0x30}}, 0x0) 14:19:44 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000000000000004000780"], 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000000000000004000780"], 0x30}}, 0x0) (async) 14:19:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x78, r1, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:44 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) (async) bind$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @hyper}, 0x10) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8f8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r5, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffa0e}]}, 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x0) [ 939.404894] nbd: couldn't find device at index 0 14:19:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x78, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40000000000000}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="30800000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000000000000004000780"], 0x30}}, 0x0) 14:19:44 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000000000000004000780"], 0x30}}, 0x0) 14:19:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x3c, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:44 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) connect$l2tp(r1, &(0x7f0000000100)={0x2, 0x0, @private=0xa010102, 0x4}, 0x10) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000040)={0x0, 0x3, 0x2a, &(0x7f0000000000)=0xe21}) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x0, 0x7f, 0x49, &(0x7f0000000080)=0x8}) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 14:19:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x78, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:44 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) (async) connect$l2tp(r1, &(0x7f0000000100)={0x2, 0x0, @private=0xa010102, 0x4}, 0x10) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) (async) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000040)={0x0, 0x3, 0x2a, &(0x7f0000000000)=0xe21}) socket$vsock_stream(0x28, 0x1, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x0, 0x7f, 0x49, &(0x7f0000000080)=0x8}) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 14:19:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="30800000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000000000000004000780"], 0x30}}, 0x0) 14:19:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x78, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:44 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x4c, r1, 0x1}, 0x4c}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) 14:19:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x30, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:44 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) (async) connect$l2tp(r1, &(0x7f0000000100)={0x2, 0x0, @private=0xa010102, 0x4}, 0x10) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) (async) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000040)={0x0, 0x3, 0x2a, &(0x7f0000000000)=0xe21}) socket$vsock_stream(0x28, 0x1, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x0, 0x7f, 0x49, &(0x7f0000000080)=0x8}) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 14:19:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40000000000000}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="30800000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000000000000004000780"], 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="30800000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000000000000004000780"], 0x30}}, 0x0) (async) 14:19:44 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x78, r1, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) [ 939.695358] nbd: must specify at least one socket 14:19:44 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000000)={'\x00', 0x338, 0x2, 0x4}) sendto$l2tp(r0, 0x0, 0x0, 0x20000080, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) 14:19:44 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x4c, r1, 0x1}, 0x4c}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) 14:19:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x24, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00030009dc00000000000086051717ab138364a8a0bdffe1da12c5fffa0ef4bd1cc32e34ea3ea9dc345e88f61861618965a0dcaab7a0f32e47c3774640071810a3"], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) 14:19:44 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x78, r1, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:44 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x4c, r1, 0x1}, 0x4c}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) 14:19:44 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000000)={'\x00', 0x338, 0x2, 0x4}) sendto$l2tp(r0, 0x0, 0x0, 0x20000080, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) [ 939.833964] nbd: must specify at least one socket 14:19:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40000000000000}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) [ 939.859662] nbd: must specify at least one socket 14:19:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00030009dc00000000000086051717ab138364a8a0bdffe1da12c5fffa0ef4bd1cc32e34ea3ea9dc345e88f61861618965a0dcaab7a0f32e47c3774640071810a3"], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) 14:19:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x24, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:44 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x78, r1, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:44 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) (async) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000000)={'\x00', 0x338, 0x2, 0x4}) sendto$l2tp(r0, 0x0, 0x0, 0x20000080, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) [ 939.908867] nbd: must specify at least one socket 14:19:44 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x34, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6c, 0xa, 'nbd\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x101}]}, 0x34}}, 0x0) 14:19:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x24, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) [ 939.965482] nbd: must specify at least one socket 14:19:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00030009dc00000000000086051717ab138364a8a0bdffe1da12c5fffa0ef4bd1cc32e34ea3ea9dc345e88f61861618965a0dcaab7a0f32e47c3774640071810a3"], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) 14:19:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x78, r1, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) [ 940.013197] nbd: couldn't find device at index 1 14:19:44 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000001c0)={0x424, 0x3f4, 0x10, 0x70bd2a, 0x25dfdbff, {0x1, 0x0, 0x30, [0x77dbc7ca, 0x1, 0x4, 0x5, 0x101, 0x2, 0x3f, 0xfffffffe, 0x3, 0x100, 0x4000, 0x3, 0x8, 0xfffffffd, 0x9, 0xa6, 0x1, 0x4, 0x95, 0x4, 0x9, 0x9, 0x6, 0x915, 0x677, 0xf85, 0x52, 0x5, 0x1, 0x3ff, 0x401, 0xf05e, 0x1f, 0xfffffbff, 0x3, 0x62, 0x9, 0x9, 0x7, 0x6, 0x10000, 0x1000, 0x10000, 0x8000, 0x63, 0x7fff, 0x8000, 0x8, 0xf85b, 0x2, 0x0, 0x5, 0x2, 0x8, 0x3, 0x9210, 0x0, 0x38, 0x3ff, 0x100, 0x40, 0x6, 0x1ff, 0x9], [0x1f, 0x6, 0xea9, 0xca, 0xa7b6, 0x80, 0x3, 0x8062, 0x3, 0x7e8, 0x21, 0xfffffffc, 0x8, 0x0, 0x6, 0xffff, 0x9, 0xb51d, 0x5, 0xf, 0x4, 0x4c, 0x23800000, 0x7, 0x0, 0x8, 0x0, 0x5, 0x4, 0x10001, 0x7fff, 0x8001, 0x0, 0x4, 0x5, 0x0, 0x2, 0x3, 0x4, 0x100, 0x81, 0x1ff, 0x7, 0x80000001, 0xfffffffa, 0x7, 0x8, 0x7fffffff, 0x8001, 0x1, 0x4, 0x6, 0xfffffffc, 0x2, 0x3, 0x8, 0x4, 0x5, 0x9, 0x3, 0x5, 0x200, 0x2, 0x6], [0x7, 0x1, 0x6, 0x7fff, 0x10000893, 0x1, 0x100, 0x5, 0x0, 0x1, 0x5, 0x1, 0xfff, 0x10000, 0x1, 0x8, 0x0, 0x4, 0x37be, 0x1, 0x8, 0x8001, 0x1, 0x20, 0x4, 0x6, 0x9, 0x7, 0x9, 0x1, 0x5, 0x7f, 0x3, 0x0, 0x8, 0x81, 0xfff, 0x91, 0x1, 0x0, 0x3, 0x100, 0x3, 0x9, 0x8001, 0x5, 0x4, 0x1, 0x1, 0x1, 0x3f, 0x20, 0x6, 0x6, 0x1, 0x7, 0x3, 0x0, 0xfff, 0x77, 0x0, 0x1, 0x5, 0x20], [0x401, 0xffffff4f, 0x10001, 0x400, 0x8, 0x3, 0x80, 0x3, 0x6, 0x4000000, 0xffff, 0x8, 0x8, 0x5, 0xe1f, 0x0, 0x9, 0x6, 0x68, 0x0, 0x4, 0x211b, 0xffffffff, 0x7, 0x80000000, 0xff, 0x0, 0x1, 0xff, 0x36, 0x1, 0x8c1, 0x3, 0x1000, 0x5, 0x8, 0x9, 0x8, 0x0, 0x6, 0x10000, 0x1f, 0x8, 0x800, 0x9, 0x101, 0x5, 0xffff, 0x7fffffff, 0x8, 0x80000000, 0x2000000, 0xffffffff, 0x2, 0x2, 0xff, 0xcd, 0x5, 0x6, 0x7, 0x3, 0x40, 0x2, 0x3f], 0x4, [')(/\x00']}, ["", "", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x18}, 0x4840) socket$l2tp(0x2, 0x2, 0x73) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000be", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fedbdf250100000005000600080000000600020001000000050007000300000006000e00cc1600000500120098000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000004) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000140)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r5, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wpan1\x00', 0x0}) r7 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x70, r5, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0xf691276d6003293b}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x88c13403a6fe59c7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000091}, 0x24008000) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x18, 0x3f9, 0x200, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4084}, 0x4000800) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x48, r8, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000845}, 0x20000044) 14:19:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x2, &(0x7f00000001c0)=""/254, &(0x7f0000000000)=0xfe) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:44 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x34, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6c, 0xa, 'nbd\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x101}]}, 0x34}}, 0x0) [ 940.080732] nbd: must specify at least one socket 14:19:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xd79950f00a202ee}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffff8000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffffffff3259}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x0) geteuid() r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="970732184379a87309ee09fdd92d07b6eb8ac91342fbb3e659541b17697f7c3ef65dbe425ebe", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000000000000004000780"], 0x30}}, 0x0) 14:19:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x78, r1, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:44 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000001c0)={0x424, 0x3f4, 0x10, 0x70bd2a, 0x25dfdbff, {0x1, 0x0, 0x30, [0x77dbc7ca, 0x1, 0x4, 0x5, 0x101, 0x2, 0x3f, 0xfffffffe, 0x3, 0x100, 0x4000, 0x3, 0x8, 0xfffffffd, 0x9, 0xa6, 0x1, 0x4, 0x95, 0x4, 0x9, 0x9, 0x6, 0x915, 0x677, 0xf85, 0x52, 0x5, 0x1, 0x3ff, 0x401, 0xf05e, 0x1f, 0xfffffbff, 0x3, 0x62, 0x9, 0x9, 0x7, 0x6, 0x10000, 0x1000, 0x10000, 0x8000, 0x63, 0x7fff, 0x8000, 0x8, 0xf85b, 0x2, 0x0, 0x5, 0x2, 0x8, 0x3, 0x9210, 0x0, 0x38, 0x3ff, 0x100, 0x40, 0x6, 0x1ff, 0x9], [0x1f, 0x6, 0xea9, 0xca, 0xa7b6, 0x80, 0x3, 0x8062, 0x3, 0x7e8, 0x21, 0xfffffffc, 0x8, 0x0, 0x6, 0xffff, 0x9, 0xb51d, 0x5, 0xf, 0x4, 0x4c, 0x23800000, 0x7, 0x0, 0x8, 0x0, 0x5, 0x4, 0x10001, 0x7fff, 0x8001, 0x0, 0x4, 0x5, 0x0, 0x2, 0x3, 0x4, 0x100, 0x81, 0x1ff, 0x7, 0x80000001, 0xfffffffa, 0x7, 0x8, 0x7fffffff, 0x8001, 0x1, 0x4, 0x6, 0xfffffffc, 0x2, 0x3, 0x8, 0x4, 0x5, 0x9, 0x3, 0x5, 0x200, 0x2, 0x6], [0x7, 0x1, 0x6, 0x7fff, 0x10000893, 0x1, 0x100, 0x5, 0x0, 0x1, 0x5, 0x1, 0xfff, 0x10000, 0x1, 0x8, 0x0, 0x4, 0x37be, 0x1, 0x8, 0x8001, 0x1, 0x20, 0x4, 0x6, 0x9, 0x7, 0x9, 0x1, 0x5, 0x7f, 0x3, 0x0, 0x8, 0x81, 0xfff, 0x91, 0x1, 0x0, 0x3, 0x100, 0x3, 0x9, 0x8001, 0x5, 0x4, 0x1, 0x1, 0x1, 0x3f, 0x20, 0x6, 0x6, 0x1, 0x7, 0x3, 0x0, 0xfff, 0x77, 0x0, 0x1, 0x5, 0x20], [0x401, 0xffffff4f, 0x10001, 0x400, 0x8, 0x3, 0x80, 0x3, 0x6, 0x4000000, 0xffff, 0x8, 0x8, 0x5, 0xe1f, 0x0, 0x9, 0x6, 0x68, 0x0, 0x4, 0x211b, 0xffffffff, 0x7, 0x80000000, 0xff, 0x0, 0x1, 0xff, 0x36, 0x1, 0x8c1, 0x3, 0x1000, 0x5, 0x8, 0x9, 0x8, 0x0, 0x6, 0x10000, 0x1f, 0x8, 0x800, 0x9, 0x101, 0x5, 0xffff, 0x7fffffff, 0x8, 0x80000000, 0x2000000, 0xffffffff, 0x2, 0x2, 0xff, 0xcd, 0x5, 0x6, 0x7, 0x3, 0x40, 0x2, 0x3f], 0x4, [')(/\x00']}, ["", "", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x18}, 0x4840) (async) socket$l2tp(0x2, 0x2, 0x73) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000be", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fedbdf250100000005000600080000000600020001000000050007000300000006000e00cc1600000500120098000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000004) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) (async) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000140)) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r5, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wpan1\x00', 0x0}) (async) r7 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x70, r5, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0xf691276d6003293b}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x88c13403a6fe59c7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000091}, 0x24008000) (async) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x18, 0x3f9, 0x200, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4084}, 0x4000800) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x48, r8, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000845}, 0x20000044) [ 940.100912] nbd: must specify at least one socket 14:19:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x30, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x2, &(0x7f00000001c0)=""/254, &(0x7f0000000000)=0xfe) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x78, r1, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xd79950f00a202ee}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffff8000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffffffff3259}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x0) geteuid() r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="970732184379a87309ee09fdd92d07b6eb8ac91342fbb3e659541b17697f7c3ef65dbe425ebe", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000000000000004000780"], 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xd79950f00a202ee}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffff8000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffffffff3259}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async) geteuid() (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="970732184379a87309ee09fdd92d07b6eb8ac91342fbb3e659541b17697f7c3ef65dbe425ebe", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000000000000004000780"], 0x30}}, 0x0) (async) 14:19:44 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000001c0)={0x424, 0x3f4, 0x10, 0x70bd2a, 0x25dfdbff, {0x1, 0x0, 0x30, [0x77dbc7ca, 0x1, 0x4, 0x5, 0x101, 0x2, 0x3f, 0xfffffffe, 0x3, 0x100, 0x4000, 0x3, 0x8, 0xfffffffd, 0x9, 0xa6, 0x1, 0x4, 0x95, 0x4, 0x9, 0x9, 0x6, 0x915, 0x677, 0xf85, 0x52, 0x5, 0x1, 0x3ff, 0x401, 0xf05e, 0x1f, 0xfffffbff, 0x3, 0x62, 0x9, 0x9, 0x7, 0x6, 0x10000, 0x1000, 0x10000, 0x8000, 0x63, 0x7fff, 0x8000, 0x8, 0xf85b, 0x2, 0x0, 0x5, 0x2, 0x8, 0x3, 0x9210, 0x0, 0x38, 0x3ff, 0x100, 0x40, 0x6, 0x1ff, 0x9], [0x1f, 0x6, 0xea9, 0xca, 0xa7b6, 0x80, 0x3, 0x8062, 0x3, 0x7e8, 0x21, 0xfffffffc, 0x8, 0x0, 0x6, 0xffff, 0x9, 0xb51d, 0x5, 0xf, 0x4, 0x4c, 0x23800000, 0x7, 0x0, 0x8, 0x0, 0x5, 0x4, 0x10001, 0x7fff, 0x8001, 0x0, 0x4, 0x5, 0x0, 0x2, 0x3, 0x4, 0x100, 0x81, 0x1ff, 0x7, 0x80000001, 0xfffffffa, 0x7, 0x8, 0x7fffffff, 0x8001, 0x1, 0x4, 0x6, 0xfffffffc, 0x2, 0x3, 0x8, 0x4, 0x5, 0x9, 0x3, 0x5, 0x200, 0x2, 0x6], [0x7, 0x1, 0x6, 0x7fff, 0x10000893, 0x1, 0x100, 0x5, 0x0, 0x1, 0x5, 0x1, 0xfff, 0x10000, 0x1, 0x8, 0x0, 0x4, 0x37be, 0x1, 0x8, 0x8001, 0x1, 0x20, 0x4, 0x6, 0x9, 0x7, 0x9, 0x1, 0x5, 0x7f, 0x3, 0x0, 0x8, 0x81, 0xfff, 0x91, 0x1, 0x0, 0x3, 0x100, 0x3, 0x9, 0x8001, 0x5, 0x4, 0x1, 0x1, 0x1, 0x3f, 0x20, 0x6, 0x6, 0x1, 0x7, 0x3, 0x0, 0xfff, 0x77, 0x0, 0x1, 0x5, 0x20], [0x401, 0xffffff4f, 0x10001, 0x400, 0x8, 0x3, 0x80, 0x3, 0x6, 0x4000000, 0xffff, 0x8, 0x8, 0x5, 0xe1f, 0x0, 0x9, 0x6, 0x68, 0x0, 0x4, 0x211b, 0xffffffff, 0x7, 0x80000000, 0xff, 0x0, 0x1, 0xff, 0x36, 0x1, 0x8c1, 0x3, 0x1000, 0x5, 0x8, 0x9, 0x8, 0x0, 0x6, 0x10000, 0x1f, 0x8, 0x800, 0x9, 0x101, 0x5, 0xffff, 0x7fffffff, 0x8, 0x80000000, 0x2000000, 0xffffffff, 0x2, 0x2, 0xff, 0xcd, 0x5, 0x6, 0x7, 0x3, 0x40, 0x2, 0x3f], 0x4, [')(/\x00']}, ["", "", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x18}, 0x4840) (async, rerun: 32) socket$l2tp(0x2, 0x2, 0x73) (async, rerun: 32) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000be", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fedbdf250100000005000600080000000600020001000000050007000300000006000e00cc1600000500120098000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000004) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) (async, rerun: 64) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000140)) (rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r5, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wpan1\x00', 0x0}) (async) r7 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x70, r5, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0xf691276d6003293b}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x88c13403a6fe59c7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000091}, 0x24008000) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x18, 0x3f9, 0x200, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4084}, 0x4000800) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x48, r8, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000845}, 0x20000044) 14:19:44 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x34, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6c, 0xa, 'nbd\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x101}]}, 0x34}}, 0x0) [ 940.207684] nbd: must specify at least one socket [ 940.219305] nbd: couldn't find device at index 1 14:19:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) (async) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x2, &(0x7f00000001c0)=""/254, &(0x7f0000000000)=0xfe) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (rerun: 32) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x20008010) 14:19:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x24, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xd79950f00a202ee}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffff8000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffffffff3259}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async) geteuid() (async, rerun: 64) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (rerun: 64) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="970732184379a87309ee09fdd92d07b6eb8ac91342fbb3e659541b17697f7c3ef65dbe425ebe", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000000000000004000780"], 0x30}}, 0x0) [ 940.312211] nbd: couldn't find device at index 1 [ 940.331443] nbd: must specify at least one socket 14:19:45 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c0c0006000100000000000000040007800000000000000000000000c078a226c3deaf430f17bb45e62d91eb1045c0fbe95963f77f475db7bfae77756c12b3b5b087b8a74c3f2bf8fdf692c9392a043a00fb30da07b6bf7bf4ca8b206cd23308cc11f1f140d9181e7e6e4a2a5cecb392d956b3005184bb46c2173f7e8437f1397c40129340cefe3254bfb246c33d875e884ddaefd98556b6200db798371c7bf927908f11df5bf6acb3588642fcc58b92da51277f28ba4864d4de01bd3ea4bacffd2033332717ec85d85ce83dffaa5dd298be294f3d101a286dea4de4cb588b3c84b92f97bb7030dc1965ce0fcc76484fe638493236d2baebbde62d214df5faa6c55f1ee7837f0b7b7916edc4e87a0b9c42059ece5b69d4568cb908672200000000aa9e60505d2d6a2c63b225a02196dd58e4eccd52f8bea053db3b1b22b57b3f2cb64f6e7b1249930582b88afea1b642ec69411ec191c29c"], 0x30}}, 0x0) 14:19:45 executing program 4: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffe}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10001}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x220000c5}, 0x80) r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x48000) 14:19:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x24, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) [ 940.380880] nbd: must specify a size in bytes for the device 14:19:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x20008010) 14:19:45 executing program 4: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffe}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10001}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x220000c5}, 0x80) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x48000) [ 940.451122] nbd: must specify at least one socket 14:19:45 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x30}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r2) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x30}}, 0x0) (async) 14:19:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r1, 0x1, 0x810000, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xfffffffffffffdde}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4, 0xa, 'k\x15\x02\xdb\xf6+\xbaQwg}\\\xd7\x00\a\x81\x85yn\xda>K\x04{&\xe7Uc\xb5\xd8\xa5\xce\xc6\xdaJ4z\xc1\xf5\xfb\x9f\x0e7\xe3#\x05\v1P\xcc\xe6\x03\xfc\''}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x4044000) 14:19:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05005500", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000000000000004000780"], 0x30}}, 0x0) 14:19:45 executing program 4: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffe}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10001}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x220000c5}, 0x80) r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x48000) 14:19:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x20008010) [ 940.523073] nbd: must specify at least one socket 14:19:45 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$l2tp(r0, &(0x7f00000002c0)={0x2, 0x0, @broadcast, 0x3}, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40810) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0x8f62aa9e3b9aad1e, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0xffffffffffffff9d}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x0, 0x2b, 0xab7f}, @BATADV_ATTR_HOP_PENALTY={0x0, 0x35, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x20008050) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000000)={0x7, 0x1, {0xffffffffffffffff, 0x0, 0x9, 0x0, 0x30}, 0x7}) [ 940.554404] nbd: must specify at least one socket 14:19:45 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x30}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r2) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x30}}, 0x0) (async) 14:19:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05005500", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000000000000004000780"], 0x30}}, 0x0) 14:19:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x24, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r1, 0x1, 0x810000, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xfffffffffffffdde}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4, 0xa, 'k\x15\x02\xdb\xf6+\xbaQwg}\\\xd7\x00\a\x81\x85yn\xda>K\x04{&\xe7Uc\xb5\xd8\xa5\xce\xc6\xdaJ4z\xc1\xf5\xfb\x9f\x0e7\xe3#\x05\v1P\xcc\xe6\x03\xfc\''}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x4044000) 14:19:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05005500", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000000000000004000780"], 0x30}}, 0x0) [ 940.579309] nbd: must specify a size in bytes for the device [ 940.612586] nbd: must specify at least one socket 14:19:45 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$l2tp(r0, &(0x7f00000002c0)={0x2, 0x0, @broadcast, 0x3}, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40810) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0x8f62aa9e3b9aad1e, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0xffffffffffffff9d}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x0, 0x2b, 0xab7f}, @BATADV_ATTR_HOP_PENALTY={0x0, 0x35, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x20008050) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000000)={0x7, 0x1, {0xffffffffffffffff, 0x0, 0x9, 0x0, 0x30}, 0x7}) socket$l2tp(0x2, 0x2, 0x73) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) connect$l2tp(r0, &(0x7f00000002c0)={0x2, 0x0, @broadcast, 0x3}, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), r3) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40810) (async) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0x8f62aa9e3b9aad1e, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0xffffffffffffff9d}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x0, 0x2b, 0xab7f}, @BATADV_ATTR_HOP_PENALTY={0x0, 0x35, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x20008050) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000000)={0x7, 0x1, {0xffffffffffffffff, 0x0, 0x9, 0x0, 0x30}, 0x7}) (async) 14:19:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x30, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd27, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r1, 0x1, 0x810000, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xfffffffffffffdde}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4, 0xa, 'k\x15\x02\xdb\xf6+\xbaQwg}\\\xd7\x00\a\x81\x85yn\xda>K\x04{&\xe7Uc\xb5\xd8\xa5\xce\xc6\xdaJ4z\xc1\xf5\xfb\x9f\x0e7\xe3#\x05\v1P\xcc\xe6\x03\xfc\''}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x4044000) [ 940.658296] nbd: must specify at least one socket [ 940.663716] nbd: must specify a size in bytes for the device [ 940.687104] nbd: must specify at least one socket [ 940.701467] nbd: must specify at least one socket 14:19:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)={0x120, r3, 0x2b3, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}]}, 0x120}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x248, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa000}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r9}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2d}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x248}, 0x1, 0x0, 0x0, 0x8800}, 0x80) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r10, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x30, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x20008010) 14:19:45 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) connect$l2tp(r0, &(0x7f00000002c0)={0x2, 0x0, @broadcast, 0x3}, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40810) (async, rerun: 32) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0x8f62aa9e3b9aad1e, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0xffffffffffffff9d}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x0, 0x2b, 0xab7f}, @BATADV_ATTR_HOP_PENALTY={0x0, 0x35, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x20008050) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000000)={0x7, 0x1, {0xffffffffffffffff, 0x0, 0x9, 0x0, 0x30}, 0x7}) 14:19:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffffffff13d1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x25fe}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x5c}}, 0x0) [ 940.758307] nbd: must specify at least one socket 14:19:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)={0x120, r3, 0x2b3, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}]}, 0x120}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x248, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa000}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r9}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2d}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x248}, 0x1, 0x0, 0x0, 0x8800}, 0x80) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r10, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)) (async) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)={0x120, r3, 0x2b3, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}]}, 0x120}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x248, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa000}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r9}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2d}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x248}, 0x1, 0x0, 0x0, 0x8800}, 0x80) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r10, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (async) 14:19:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x30, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x20008010) 14:19:45 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) getpeername$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x140) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) 14:19:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffffffff13d1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x25fe}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x5c}}, 0x0) 14:19:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd27, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:45 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) getpeername$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x140) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) 14:19:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)={0x120, r3, 0x2b3, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}]}, 0x120}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x248, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa000}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r9}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2d}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x248}, 0x1, 0x0, 0x0, 0x8800}, 0x80) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r10, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)) (async) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)={0x120, r3, 0x2b3, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}]}, 0x120}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x248, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa000}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r9}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2d}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x248}, 0x1, 0x0, 0x0, 0x8800}, 0x80) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r10, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (async) 14:19:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x30, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:45 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) getpeername$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x140) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) socket$l2tp(0x2, 0x2, 0x73) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) getpeername$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x140) (async) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) (async) [ 941.000019] nla_parse: 102 callbacks suppressed [ 941.000024] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 941.014374] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:19:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:45 executing program 4: socket$l2tp(0x2, 0x2, 0x73) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) sendto$l2tp(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0xfffffffffffffff8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_newvlan={0x48, 0x70, 0x10, 0x70bd26, 0x25ffdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x9}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x20, 0x2}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) 14:19:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffffffff13d1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x25fe}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x5c}}, 0x0) [ 941.042173] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:19:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd27, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffffffff13d1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x25fe}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x5c}}, 0x0) 14:19:45 executing program 4: socket$l2tp(0x2, 0x2, 0x73) (async, rerun: 32) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (rerun: 32) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) (async, rerun: 64) sendto$l2tp(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0xfffffffffffffff8) (rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async, rerun: 32) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (rerun: 32) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_newvlan={0x48, 0x70, 0x10, 0x70bd26, 0x25ffdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x9}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x20, 0x2}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) 14:19:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x54, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3f}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:45 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x228000, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x8001) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r2, 0x310, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40080c0}, 0x4000800) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000040)) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000200)={0x0, 0x2, 0x6, &(0x7f00000001c0)=0x1}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="30deb0fe880500000000000000000000af2c8939d9bb7999d50e03153d4e46aabe339b13bff437a00ff8c2600e41823f3b4ad4e64382301f43b8ae8997419b0561d4e77958e06bce76789b3de312ec714dff3b485cd03c3346ced4ebf4681f92bb3fe6", @ANYRES16, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000000000000004000780"], 0x30}}, 0x0) 14:19:45 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x228000, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x8001) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r2, 0x310, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40080c0}, 0x4000800) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000040)) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000200)={0x0, 0x2, 0x6, &(0x7f00000001c0)=0x1}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="30deb0fe880500000000000000000000af2c8939d9bb7999d50e03153d4e46aabe339b13bff437a00ff8c2600e41823f3b4ad4e64382301f43b8ae8997419b0561d4e77958e06bce76789b3de312ec714dff3b485cd03c3346ced4ebf4681f92bb3fe6", @ANYRES16, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000000000000004000780"], 0x30}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x228000, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x8001) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) (async) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r2, 0x310, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40080c0}, 0x4000800) (async) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000040)) (async) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000200)={0x0, 0x2, 0x6, &(0x7f00000001c0)=0x1}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="30deb0fe880500000000000000000000af2c8939d9bb7999d50e03153d4e46aabe339b13bff437a00ff8c2600e41823f3b4ad4e64382301f43b8ae8997419b0561d4e77958e06bce76789b3de312ec714dff3b485cd03c3346ced4ebf4681f92bb3fe6", @ANYRES16, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000000000000004000780"], 0x30}}, 0x0) (async) 14:19:45 executing program 4: socket$l2tp(0x2, 0x2, 0x73) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) (async) sendto$l2tp(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0xfffffffffffffff8) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_newvlan={0x48, 0x70, 0x10, 0x70bd26, 0x25ffdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x9}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x20, 0x2}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) 14:19:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x30, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x20008010) 14:19:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r1, 0x69be61a1e066a3c5, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8d}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000805}, 0x1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000214010027bd7000fbdbdf250500540000fe00000900540001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x200048d4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000200)={'wpan0\x00'}) 14:19:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x78, 0x0, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:45 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) 14:19:45 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x228000, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x8001) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r2, 0x310, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40080c0}, 0x4000800) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000040)) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000200)={0x0, 0x2, 0x6, &(0x7f00000001c0)=0x1}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="30deb0fe880500000000000000000000af2c8939d9bb7999d50e03153d4e46aabe339b13bff437a00ff8c2600e41823f3b4ad4e64382301f43b8ae8997419b0561d4e77958e06bce76789b3de312ec714dff3b485cd03c3346ced4ebf4681f92bb3fe6", @ANYRES16, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000000000000004000780"], 0x30}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x228000, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x8001) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) (async) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r2, 0x310, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40080c0}, 0x4000800) (async) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000040)) (async) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000200)={0x0, 0x2, 0x6, &(0x7f00000001c0)=0x1}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="30deb0fe880500000000000000000000af2c8939d9bb7999d50e03153d4e46aabe339b13bff437a00ff8c2600e41823f3b4ad4e64382301f43b8ae8997419b0561d4e77958e06bce76789b3de312ec714dff3b485cd03c3346ced4ebf4681f92bb3fe6", @ANYRES16, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000000000000004000780"], 0x30}}, 0x0) (async) 14:19:45 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) 14:19:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x54, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3f}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x78, 0x0, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:46 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async, rerun: 32) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) (rerun: 32) 14:19:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) (async, rerun: 32) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r1, 0x69be61a1e066a3c5, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8d}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000805}, 0x1) (async, rerun: 32) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000214010027bd7000fbdbdf250500540000fe00000900540001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x200048d4) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000200)={'wpan0\x00'}) 14:19:46 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r5, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48a0}, 0x20004010) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x400542, 0x0) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r6, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004041) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r11, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}]}, 0x1c}}, 0x0) r13 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x441, 0x0) sendmsg$BATADV_CMD_GET_MESH(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010000000000000000000100000008000300", @ANYRES32=r12, @ANYBLOB="cc3b407481d3e9fc9d7b7f2e463e1e22fb01c5ec5c522031124e234877120bd19898b1ccf70a32d7509b943b955b87033e943d0508cac78826087ee156195b8e44f23f84be3e81bd5d51c97504267f0aaa745b5b35df33ff1ae374c4a61e816c1c17cbedf7ee7bd1be884fa8248299033d95c04d7721fcd096b7a16fcafdbb8a320d288a8ada35c7ebbd173e9dc2a1e40dd665e968ae9d62a92ce726bf01010a5fadf1c52056a10bd3f736480a18f227ea85ac1418697bc82e55fdec7bb114e44abf04fe94a8221f75672c5a312e16ce944687d635eacc1fc6db0f93b8f50a36bc5dac0819f188dc6920dbf5dc1f43d7fc6d"], 0x1c}}, 0x800) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x58, 0x0, 0x220, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000100}, 0x20000044) 14:19:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x78, 0x0, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)={0x120, r3, 0x2b3, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}]}, 0x120}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x248, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa000}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r9}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2d}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x248}, 0x1, 0x0, 0x0, 0x8800}, 0x80) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r10, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:46 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x54, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3f}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:46 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000180)=""/235, &(0x7f0000000100)=0xeb) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb402}]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x48000) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 14:19:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r1, 0x69be61a1e066a3c5, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8d}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000805}, 0x1) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000214010027bd7000fbdbdf250500540000fe00000900540001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x200048d4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000200)={'wpan0\x00'}) 14:19:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x78, r2, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:46 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r5, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48a0}, 0x20004010) (async, rerun: 32) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x400542, 0x0) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r6, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004041) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2) (async, rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r11, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}]}, 0x1c}}, 0x0) (async, rerun: 32) r13 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x441, 0x0) (rerun: 32) sendmsg$BATADV_CMD_GET_MESH(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010000000000000000000100000008000300", @ANYRES32=r12, @ANYBLOB="cc3b407481d3e9fc9d7b7f2e463e1e22fb01c5ec5c522031124e234877120bd19898b1ccf70a32d7509b943b955b87033e943d0508cac78826087ee156195b8e44f23f84be3e81bd5d51c97504267f0aaa745b5b35df33ff1ae374c4a61e816c1c17cbedf7ee7bd1be884fa8248299033d95c04d7721fcd096b7a16fcafdbb8a320d288a8ada35c7ebbd173e9dc2a1e40dd665e968ae9d62a92ce726bf01010a5fadf1c52056a10bd3f736480a18f227ea85ac1418697bc82e55fdec7bb114e44abf04fe94a8221f75672c5a312e16ce944687d635eacc1fc6db0f93b8f50a36bc5dac0819f188dc6920dbf5dc1f43d7fc6d"], 0x1c}}, 0x800) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x58, 0x0, 0x220, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000100}, 0x20000044) 14:19:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x44}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x60, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0xc0}, 0x800) 14:19:46 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000180)=""/235, &(0x7f0000000100)=0xeb) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb402}]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x48000) (async) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 14:19:46 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x706a9dadc0631feb}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SOCKETS={0x4}]}, 0x48}}, 0x4000000) 14:19:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x78, r2, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:46 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000180)=""/235, &(0x7f0000000100)=0xeb) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb402}]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x48000) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 14:19:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x78, r2, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x24, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x44}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x60, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0xc0}, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x44}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x60, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0xc0}, 0x800) (async) 14:19:46 executing program 4: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40c0, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0xb, &(0x7f00000000c0)=0xfff, 0x4) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) 14:19:46 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x706a9dadc0631feb}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SOCKETS={0x4}]}, 0x48}}, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r1) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x706a9dadc0631feb}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SOCKETS={0x4}]}, 0x48}}, 0x4000000) (async) [ 941.619756] nbd: must specify a size in bytes for the device 14:19:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x6c, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:46 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r5, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48a0}, 0x20004010) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x400542, 0x0) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r6, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004041) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r11, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}]}, 0x1c}}, 0x0) (async) r13 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x441, 0x0) sendmsg$BATADV_CMD_GET_MESH(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010000000000000000000100000008000300", @ANYRES32=r12, @ANYBLOB="cc3b407481d3e9fc9d7b7f2e463e1e22fb01c5ec5c522031124e234877120bd19898b1ccf70a32d7509b943b955b87033e943d0508cac78826087ee156195b8e44f23f84be3e81bd5d51c97504267f0aaa745b5b35df33ff1ae374c4a61e816c1c17cbedf7ee7bd1be884fa8248299033d95c04d7721fcd096b7a16fcafdbb8a320d288a8ada35c7ebbd173e9dc2a1e40dd665e968ae9d62a92ce726bf01010a5fadf1c52056a10bd3f736480a18f227ea85ac1418697bc82e55fdec7bb114e44abf04fe94a8221f75672c5a312e16ce944687d635eacc1fc6db0f93b8f50a36bc5dac0819f188dc6920dbf5dc1f43d7fc6d"], 0x1c}}, 0x800) (async) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x58, 0x0, 0x220, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000100}, 0x20000044) 14:19:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x706a9dadc0631feb}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SOCKETS={0x4}]}, 0x48}}, 0x4000000) 14:19:46 executing program 4: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40c0, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0xb, &(0x7f00000000c0)=0xfff, 0x4) (async) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) [ 941.689816] nbd: must specify a size in bytes for the device [ 941.716947] nbd: must specify a size in bytes for the device [ 941.726686] nbd: must specify a size in bytes for the device 14:19:46 executing program 4: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40c0, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0xb, &(0x7f00000000c0)=0xfff, 0x4) (async) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) [ 941.758793] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 941.781155] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 941.793163] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:19:46 executing program 4: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r0, &(0x7f0000000280)={0x2, 0x0, @multicast1}, &(0x7f00000002c0)=0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x2000d892, &(0x7f0000000140)={0x2, 0x0, @broadcast, 0xfdffffff}, 0x10) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x800, 0x70bd2a, 0x25dfdbfb, "", ["", ""]}, 0x6e}, 0x1, 0x0, 0x0, 0xd0}, 0x20048054) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000240)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f00000001c0)=""/20, &(0x7f0000000200)=0x14) [ 941.808704] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 941.822536] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 941.833801] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 941.852872] nbd: must specify a size in bytes for the device 14:19:46 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x706a9dadc0631feb}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SOCKETS={0x4}]}, 0x48}}, 0x4000000) 14:19:46 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:19:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x38, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) [ 941.862903] nbd: must specify a size in bytes for the device 14:19:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x44}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x60, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0xc0}, 0x800) 14:19:46 executing program 4: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r0, &(0x7f0000000280)={0x2, 0x0, @multicast1}, &(0x7f00000002c0)=0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) (async) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x2000d892, &(0x7f0000000140)={0x2, 0x0, @broadcast, 0xfdffffff}, 0x10) (async) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x800, 0x70bd2a, 0x25dfdbfb, "", ["", ""]}, 0x6e}, 0x1, 0x0, 0x0, 0xd0}, 0x20048054) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000240)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f00000001c0)=""/20, &(0x7f0000000200)=0x14) 14:19:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x6c, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) [ 941.914199] nbd: must specify at least one socket 14:19:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x38, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:46 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x24004802) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c0012004cba00000000000004000a000c000600010000000000000004000780"], 0x34}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) 14:19:46 executing program 4: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r0, &(0x7f0000000280)={0x2, 0x0, @multicast1}, &(0x7f00000002c0)=0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x2000d892, &(0x7f0000000140)={0x2, 0x0, @broadcast, 0xfdffffff}, 0x10) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x800, 0x70bd2a, 0x25dfdbfb, "", ["", ""]}, 0x6e}, 0x1, 0x0, 0x0, 0xd0}, 0x20048054) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000240)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f00000001c0)=""/20, &(0x7f0000000200)=0x14) socket$l2tp(0x2, 0x2, 0x73) (async) socket$l2tp(0x2, 0x2, 0x73) (async) getpeername$l2tp(r0, &(0x7f0000000280)={0x2, 0x0, @multicast1}, &(0x7f00000002c0)=0x10) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) (async) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x2000d892, &(0x7f0000000140)={0x2, 0x0, @broadcast, 0xfdffffff}, 0x10) (async) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x800, 0x70bd2a, 0x25dfdbfb, "", ["", ""]}, 0x6e}, 0x1, 0x0, 0x0, 0xd0}, 0x20048054) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000240)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f00000001c0)=""/20, &(0x7f0000000200)=0x14) (async) [ 941.940541] nbd: must specify a size in bytes for the device 14:19:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x38, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:46 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = getpgrp(0x0) syz_open_procfs$namespace(r1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='\xbe(@R\x81[\x00'}, 0x30) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) [ 942.000365] nbd: must specify a size in bytes for the device [ 942.007957] nbd: must specify at least one socket [ 942.033609] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 14:19:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000100000000c000600000400000000000004000780"], 0x30}}, 0x0) 14:19:46 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) 14:19:46 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = getpgrp(0x0) syz_open_procfs$namespace(r1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='\xbe(@R\x81[\x00'}, 0x30) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 14:19:46 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x24004802) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c0012004cba00000000000004000a000c000600010000000000000004000780"], 0x34}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x24004802) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c0012004cba00000000000004000a000c000600010000000000000004000780"], 0x34}}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) (async) 14:19:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x24004802) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c0012004cba00000000000004000a000c000600010000000000000004000780"], 0x34}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) 14:19:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x64, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) [ 942.051322] nbd: must specify a size in bytes for the device [ 942.061340] nbd: must specify at least one socket 14:19:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000100000000c000600000400000000000004000780"], 0x30}}, 0x0) 14:19:46 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = getpgrp(0x0) syz_open_procfs$namespace(r1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='\xbe(@R\x81[\x00'}, 0x30) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) socket$l2tp(0x2, 0x2, 0x73) (async) getpgrp(0x0) (async) syz_open_procfs$namespace(r1, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='\xbe(@R\x81[\x00'}, 0x30) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) 14:19:46 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) socket(0x10, 0x4, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000340)={0x0, 0x0, 0x8001, &(0x7f0000000300)=0x6}) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket(0x23, 0xa, 0x9) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x453, 0x2, 0x70bd26, 0x25dfdbfe, "31af5848d9dc1b960c649c89b6f35097e675962cc7b513aec71906b7c847b5ab92ccdd5cbe2f7a64f48bfcced7d400100fc0baca3eb0b142e798b1e5cba78165be348580", ["", "", ""]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x404c091) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r5) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r5) bind$vsock_dgram(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @my=0x0}, 0x10) getpeername$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) 14:19:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5c, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:46 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:19:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000100000000c000600000400000000000004000780"], 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000100000000c000600000400000000000004000780"], 0x30}}, 0x0) (async) 14:19:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x30, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) [ 942.214506] nbd: must specify a size in bytes for the device [ 942.220834] nbd: must specify a size in bytes for the device 14:19:46 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x24004802) (async, rerun: 32) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c0012004cba00000000000004000a000c000600010000000000000004000780"], 0x34}}, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) 14:19:46 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) 14:19:46 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async, rerun: 64) socket(0x10, 0x4, 0x5) (async, rerun: 64) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async, rerun: 32) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000340)={0x0, 0x0, 0x8001, &(0x7f0000000300)=0x6}) (async, rerun: 32) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket(0x23, 0xa, 0x9) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x453, 0x2, 0x70bd26, 0x25dfdbfe, "31af5848d9dc1b960c649c89b6f35097e675962cc7b513aec71906b7c847b5ab92ccdd5cbe2f7a64f48bfcced7d400100fc0baca3eb0b142e798b1e5cba78165be348580", ["", "", ""]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x404c091) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r5) (async, rerun: 64) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r5) bind$vsock_dgram(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @my=0x0}, 0x10) (async) getpeername$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) 14:19:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x2, &(0x7f00000001c0)=""/254, &(0x7f0000000000)=0xfe) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010c000600010000000000000004000780f0e6b606573ed68244243b3e4d940ac561929b463b58fb70013018a04dadc422948c6681d2cc1ff1735c7c7added852b7115a2fdbf9312488a8aac7970a6c70c400cce02611c152c"], 0x30}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) 14:19:47 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 942.328168] nbd: must specify at least one socket 14:19:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:47 executing program 5: ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000000)=0x9) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000300)=0xb4) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="ffffffff", @ANYRES16=r1, @ANYBLOB="01002cbd70000000000001000000"], 0x14}}, 0x400c000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000001c0)={{0x2c, 0x5}, 0x0, 0xfffff000, 0x6, {0x24, 0x80}, 0x9, 0x800}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000380)={0x0, 0x1, r3, 0x2, 0x80000}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004800) 14:19:47 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) socket(0x10, 0x4, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000340)={0x0, 0x0, 0x8001, &(0x7f0000000300)=0x6}) (async) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket(0x23, 0xa, 0x9) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) (async) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x453, 0x2, 0x70bd26, 0x25dfdbfe, "31af5848d9dc1b960c649c89b6f35097e675962cc7b513aec71906b7c847b5ab92ccdd5cbe2f7a64f48bfcced7d400100fc0baca3eb0b142e798b1e5cba78165be348580", ["", "", ""]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x404c091) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r5) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r5) bind$vsock_dgram(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @my=0x0}, 0x10) getpeername$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) 14:19:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x2, &(0x7f00000001c0)=""/254, &(0x7f0000000000)=0xfe) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:47 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) [ 942.438459] nbd: must specify at least one socket [ 942.450622] nbd: must specify at least one socket 14:19:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x4c, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:47 executing program 5: ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000000)=0x9) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000300)=0xb4) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="ffffffff", @ANYRES16=r1, @ANYBLOB="01002cbd70000000000001000000"], 0x14}}, 0x400c000) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000001c0)={{0x2c, 0x5}, 0x0, 0xfffff000, 0x6, {0x24, 0x80}, 0x9, 0x800}) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000380)={0x0, 0x1, r3, 0x2, 0x80000}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004800) 14:19:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010c000600010000000000000004000780f0e6b606573ed68244243b3e4d940ac561929b463b58fb70013018a04dadc422948c6681d2cc1ff1735c7c7added852b7115a2fdbf9312488a8aac7970a6c70c400cce02611c152c"], 0x30}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) [ 942.516433] nbd: must specify at least one socket 14:19:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x2, &(0x7f00000001c0)=""/254, &(0x7f0000000000)=0xfe) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x44, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:47 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f00000001c0)={r1, 0x1, &(0x7f0000000080)=[0xfffe], &(0x7f00000000c0)=[0x7], 0x30, 0x6, 0x80, &(0x7f0000000100)=[0x80000000, 0x401, 0x2, 0x9, 0x80000001, 0x80000000], &(0x7f0000000180)=[0xffff]}) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 14:19:47 executing program 5: ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000000)=0x9) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000300)=0xb4) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="ffffffff", @ANYRES16=r1, @ANYBLOB="01002cbd70000000000001000000"], 0x14}}, 0x400c000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000001c0)={{0x2c, 0x5}, 0x0, 0xfffff000, 0x6, {0x24, 0x80}, 0x9, 0x800}) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000380)={0x0, 0x1, r3, 0x2, 0x80000}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004800) [ 942.583059] nbd: must specify at least one socket 14:19:47 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 14:19:47 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f00000001c0)={r1, 0x1, &(0x7f0000000080)=[0xfffe], &(0x7f00000000c0)=[0x7], 0x30, 0x6, 0x80, &(0x7f0000000100)=[0x80000000, 0x401, 0x2, 0x9, 0x80000001, 0x80000000], &(0x7f0000000180)=[0xffff]}) (async, rerun: 32) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (rerun: 32) [ 942.635184] nbd: must specify at least one socket 14:19:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010c000600010000000000000004000780f0e6b606573ed68244243b3e4d940ac561929b463b58fb70013018a04dadc422948c6681d2cc1ff1735c7c7added852b7115a2fdbf9312488a8aac7970a6c70c400cce02611c152c"], 0x30}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) 14:19:47 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 14:19:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x2, &(0x7f00000001c0)=""/254, &(0x7f0000000000)=0xfe) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x3c, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:47 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f00000001c0)={r1, 0x1, &(0x7f0000000080)=[0xfffe], &(0x7f00000000c0)=[0x7], 0x30, 0x6, 0x80, &(0x7f0000000100)=[0x80000000, 0x401, 0x2, 0x9, 0x80000001, 0x80000000], &(0x7f0000000180)=[0xffff]}) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}]}) (async) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f00000001c0)={r1, 0x1, &(0x7f0000000080)=[0xfffe], &(0x7f00000000c0)=[0x7], 0x30, 0x6, 0x80, &(0x7f0000000100)=[0x80000000, 0x401, 0x2, 0x9, 0x80000001, 0x80000000], &(0x7f0000000180)=[0xffff]}) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) 14:19:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x2, &(0x7f00000001c0)=""/254, &(0x7f0000000000)=0xfe) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:47 executing program 5: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="0008feffffff00000000010000000c00020000000000000000000c00050005000000000000000c00060001000000000000001c00078008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x400804d}, 0x0) 14:19:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x30, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:47 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) [ 942.773905] nbd: must specify at least one socket 14:19:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x2, &(0x7f00000001c0)=""/254, &(0x7f0000000000)=0xfe) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x24, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x800}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000091}, 0x40) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x4, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:47 executing program 5: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="86616a00d4ee8d287637b212f79f5e7cfb928964230470c7d3553a4cb4389196b549d27a0f408d19fad7cc228d72413d78227bc739e7c8a33d9d2eabd815937bddaad9ee7541f985465e16be39b702a3456e9453f1117e69e83dd48e350562631b8c01339583828d915badf3ffec7b96468e4613df6d7bb939a94940765e7a353c6fd81f6940742c876683f71e606bb25fc0d9f0902490dc0feba17e924a11fb16681eb7d3bcb7d47368f6e0db1055f94677d6d7d1a625190436f66b2d5007c0aa3a8876533cf5c7d68bbada65dc87b048dfda90d4cc7315b8724a1750f9578db52c5f4f84f3e38bd4a56327b3a428de9dd232166184165393df12418f1e86ba4c118e68fd9711680aaeeae940", @ANYRES16=r1, @ANYBLOB="0008feffffff00000000010000000c00020000000000000000000c00050005000000000000000c00060001000000000000001c00078008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x400804d}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="0008feffffff00000000010000000c00020000000000000000000c00050005000000000000000c00060001000000000000001c00078008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x400804d}, 0x0) (async) 14:19:47 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x4200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f0000000340)={0x9, 0x4, 0x40, {0x100, 0x9}, 0x101, 0x1}) syz_genetlink_get_family_id$team(&(0x7f0000000000), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRESHEX=r2, @ANYBLOB="000009bd70000000000008000000"], 0x14}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r5) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0xa04, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x863e}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x815}, 0x4000) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYRES64=r0], 0x30}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) 14:19:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x24, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x800}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000091}, 0x40) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x4, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x8}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x7f, 0xffffffff, 0x1, @mcast1, @private1, 0x700, 0x7800, 0xfffffffd, 0x3f2}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010000000000000000000100000008000300", @ANYRES32=r11, @ANYBLOB="11389c5aa247f959c56f3a7be54cae6a02f87407fada4fdf8e4041cb83ee4e524109390e963fd2783aae5191ba86551018a808c850b53bc8c538267f468bda5cd74923310344"], 0x1c}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r14) sendmsg$BATADV_CMD_GET_ORIGINATORS(r14, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) r15 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r5) sendmsg$BATADV_CMD_GET_ORIGINATORS(r14, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r15, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x55) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r13, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r16}]}, 0x1c}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000180)={0x500, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r1}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x2, 0x3f, 0x5}, {0x8, 0x7f, 0xff, 0x8}, {0x7, 0xf7, 0x7, 0xfffeffff}]}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xfffa, 0x0, 0x8, 0x8001}, {0x93, 0x7, 0x2, 0x40}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r16}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff8ff9}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x500}, 0x1, 0x0, 0x0, 0x4000000}, 0x6c001) r17 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r17, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 14:19:47 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x4200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f0000000340)={0x9, 0x4, 0x40, {0x100, 0x9}, 0x101, 0x1}) syz_genetlink_get_family_id$team(&(0x7f0000000000), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRESHEX=r2, @ANYBLOB="000009bd70000000000008000000"], 0x14}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r5) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0xa04, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x863e}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x815}, 0x4000) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYRES64=r0], 0x30}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x4200) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f0000000340)={0x9, 0x4, 0x40, {0x100, 0x9}, 0x101, 0x1}) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), r3) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r3) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRESHEX=r2, @ANYBLOB="000009bd70000000000008000000"], 0x14}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), r5) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0xa04, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x863e}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x815}, 0x4000) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYRES64=r0], 0x30}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) (async) 14:19:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x24, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:47 executing program 5: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="86616a00d4ee8d287637b212f79f5e7cfb928964230470c7d3553a4cb4389196b549d27a0f408d19fad7cc228d72413d78227bc739e7c8a33d9d2eabd815937bddaad9ee7541f985465e16be39b702a3456e9453f1117e69e83dd48e350562631b8c01339583828d915badf3ffec7b96468e4613df6d7bb939a94940765e7a353c6fd81f6940742c876683f71e606bb25fc0d9f0902490dc0feba17e924a11fb16681eb7d3bcb7d47368f6e0db1055f94677d6d7d1a625190436f66b2d5007c0aa3a8876533cf5c7d68bbada65dc87b048dfda90d4cc7315b8724a1750f9578db52c5f4f84f3e38bd4a56327b3a428de9dd232166184165393df12418f1e86ba4c118e68fd9711680aaeeae940", @ANYRES16=r1, @ANYBLOB="0008feffffff00000000010000000c00020000000000000000000c00050005000000000000000c00060001000000000000001c00078008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x400804d}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="86616a00d4ee8d287637b212f79f5e7cfb928964230470c7d3553a4cb4389196b549d27a0f408d19fad7cc228d72413d78227bc739e7c8a33d9d2eabd815937bddaad9ee7541f985465e16be39b702a3456e9453f1117e69e83dd48e350562631b8c01339583828d915badf3ffec7b96468e4613df6d7bb939a94940765e7a353c6fd81f6940742c876683f71e606bb25fc0d9f0902490dc0feba17e924a11fb16681eb7d3bcb7d47368f6e0db1055f94677d6d7d1a625190436f66b2d5007c0aa3a8876533cf5c7d68bbada65dc87b048dfda90d4cc7315b8724a1750f9578db52c5f4f84f3e38bd4a56327b3a428de9dd232166184165393df12418f1e86ba4c118e68fd9711680aaeeae940", @ANYRES16=r1, @ANYBLOB="0008feffffff00000000010000000c00020000000000000000000c00050005000000000000000c00060001000000000000001c00078008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x400804d}, 0x0) (async) 14:19:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x800}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000091}, 0x40) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x4, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x8}, 0x14}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x7f, 0xffffffff, 0x1, @mcast1, @private1, 0x700, 0x7800, 0xfffffffd, 0x3f2}}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010000000000000000000100000008000300", @ANYRES32=r11, @ANYBLOB="11389c5aa247f959c56f3a7be54cae6a02f87407fada4fdf8e4041cb83ee4e524109390e963fd2783aae5191ba86551018a808c850b53bc8c538267f468bda5cd74923310344"], 0x1c}}, 0x0) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r14) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r14, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) r15 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r5) sendmsg$BATADV_CMD_GET_ORIGINATORS(r14, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r15, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x55) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r13, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r16}]}, 0x1c}}, 0x0) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000180)={0x500, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r1}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x2, 0x3f, 0x5}, {0x8, 0x7f, 0xff, 0x8}, {0x7, 0xf7, 0x7, 0xfffeffff}]}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xfffa, 0x0, 0x8, 0x8001}, {0x93, 0x7, 0x2, 0x40}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r16}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff8ff9}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x500}, 0x1, 0x0, 0x0, 0x4000000}, 0x6c001) r17 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r17, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 14:19:47 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x300, 0x70bd25, 0x25dfdbf8, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x4840) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) sendmsg$AUDIT_USER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x3ed, 0x400, 0x70bd25, 0x25dfdbfd, "db15b6bf02ec9b14fb11aa5f", ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3f2, 0x20, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004}, 0x800) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="34ff0000", @ANYRES16=r1, @ANYBLOB="01000100000000000000010002000c000200000000000000000004000a000c000600010000000000000004000780"], 0x34}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) r5 = getpgrp(0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r3) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r8, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r4, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) 14:19:47 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x4200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f0000000340)={0x9, 0x4, 0x40, {0x100, 0x9}, 0x101, 0x1}) syz_genetlink_get_family_id$team(&(0x7f0000000000), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r3) (rerun: 64) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRESHEX=r2, @ANYBLOB="000009bd70000000000008000000"], 0x14}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r5) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) (async, rerun: 32) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0xa04, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x863e}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x815}, 0x4000) (async, rerun: 32) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYRES64=r0], 0x30}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) 14:19:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x30, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) (async, rerun: 64) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x8}, 0x14}}, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) (rerun: 64) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x7f, 0xffffffff, 0x1, @mcast1, @private1, 0x700, 0x7800, 0xfffffffd, 0x3f2}}) (async, rerun: 32) r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010000000000000000000100000008000300", @ANYRES32=r11, @ANYBLOB="11389c5aa247f959c56f3a7be54cae6a02f87407fada4fdf8e4041cb83ee4e524109390e963fd2783aae5191ba86551018a808c850b53bc8c538267f468bda5cd74923310344"], 0x1c}}, 0x0) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r14) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r14, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) (async) r15 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r5) sendmsg$BATADV_CMD_GET_ORIGINATORS(r14, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r15, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x55) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r13, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r16}]}, 0x1c}}, 0x0) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000180)={0x500, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r1}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x2, 0x3f, 0x5}, {0x8, 0x7f, 0xff, 0x8}, {0x7, 0xf7, 0x7, 0xfffeffff}]}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xfffa, 0x0, 0x8, 0x8001}, {0x93, 0x7, 0x2, 0x40}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r16}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff8ff9}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x500}, 0x1, 0x0, 0x0, 0x4000000}, 0x6c001) r17 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r17, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 14:19:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000063d198aae14c0108db710c8c7504f1d719c83639c8e1f5c4288af59df0f703350aa2c27f64396b0c192ef00d51f2918e91b2f260fcda7e6841456b32a28fc68832007ef275a37daea33fee85c556baaac1b8f85e20a", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000000000000004000780"], 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 14:19:47 executing program 2: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r0, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x24, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000063d198aae14c0108db710c8c7504f1d719c83639c8e1f5c4288af59df0f703350aa2c27f64396b0c192ef00d51f2918e91b2f260fcda7e6841456b32a28fc68832007ef275a37daea33fee85c556baaac1b8f85e20a", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000000000000004000780"], 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 14:19:47 executing program 2: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r0, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000063d198aae14c0108db710c8c7504f1d719c83639c8e1f5c4288af59df0f703350aa2c27f64396b0c192ef00d51f2918e91b2f260fcda7e6841456b32a28fc68832007ef275a37daea33fee85c556baaac1b8f85e20a", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000000000000004000780"], 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 14:19:47 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x300, 0x70bd25, 0x25dfdbf8, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x4840) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) sendmsg$AUDIT_USER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x3ed, 0x400, 0x70bd25, 0x25dfdbfd, "db15b6bf02ec9b14fb11aa5f", ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) (async) sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3f2, 0x20, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004}, 0x800) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="34ff0000", @ANYRES16=r1, @ANYBLOB="01000100000000000000010002000c000200000000000000000004000a000c000600010000000000000004000780"], 0x34}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) (async) r5 = getpgrp(0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r3) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r8, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r4, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) [ 943.225018] nbd: must specify a size in bytes for the device 14:19:47 executing program 2: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r0, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c0006000100000000000000040007800d24cf77bf0370e1a9b79df8019b3795a279457c0adc048831dec7bb7a"], 0x30}}, 0x0) 14:19:47 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) gettid() 14:19:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x24, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:48 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0x93, 0xa9, 0xf601, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x40, 0x28, 0xfffffe00}}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000200)=r3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xffffff7a, 0x4, 0x6, 0x4, r0, 0x2, '\x00', r1, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x48) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000180)={0x0, 0x1, 0x7, 0x4, 0x40}) r4 = socket$l2tp(0x2, 0x2, 0x73) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x9, 0x7, 0x0, 0x5, 0x18, 0x0, "b91673f29ff27b0dd8901cf9c979a094aaccaffd051ab9b02c461f242ddcf6490c042aa0dd99094020a78864770d879485625ac721a20c2c9b4f5ef32fe8d5ff", "a690a0213afa8254a1d0f5867d11fe305190a800b6dd449166f92674e2baf32585457279dab87cfae0362a35930f07056177bc10003bd8f1c91fcd457fe21dc4", "2c2aff1e27db72c97e2b0378dc12ceec2cf69690d870bacfba8a24225dc7eb40", [0x401, 0x400]}) sendto$l2tp(r4, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 14:19:48 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(0x0, r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:48 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x300, 0x70bd25, 0x25dfdbf8, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x4840) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) (async, rerun: 32) sendmsg$AUDIT_USER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x3ed, 0x400, 0x70bd25, 0x25dfdbfd, "db15b6bf02ec9b14fb11aa5f", ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) (rerun: 32) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3f2, 0x20, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004}, 0x800) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="34ff0000", @ANYRES16=r1, @ANYBLOB="01000100000000000000010002000c000200000000000000000004000a000c000600010000000000000004000780"], 0x34}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) r5 = getpgrp(0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r3) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r8, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r4, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) 14:19:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c0006000100000000000000040007800d24cf77bf0370e1a9b79df8019b3795a279457c0adc048831dec7bb7a"], 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c0006000100000000000000040007800d24cf77bf0370e1a9b79df8019b3795a279457c0adc048831dec7bb7a"], 0x30}}, 0x0) (async) 14:19:48 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x24, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:48 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) gettid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (async) gettid() (async) 14:19:48 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(0x0, r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:48 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0x93, 0xa9, 0xf601, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x40, 0x28, 0xfffffe00}}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000200)=r3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xffffff7a, 0x4, 0x6, 0x4, r0, 0x2, '\x00', r1, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x48) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000180)={0x0, 0x1, 0x7, 0x4, 0x40}) r4 = socket$l2tp(0x2, 0x2, 0x73) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x9, 0x7, 0x0, 0x5, 0x18, 0x0, "b91673f29ff27b0dd8901cf9c979a094aaccaffd051ab9b02c461f242ddcf6490c042aa0dd99094020a78864770d879485625ac721a20c2c9b4f5ef32fe8d5ff", "a690a0213afa8254a1d0f5867d11fe305190a800b6dd449166f92674e2baf32585457279dab87cfae0362a35930f07056177bc10003bd8f1c91fcd457fe21dc4", "2c2aff1e27db72c97e2b0378dc12ceec2cf69690d870bacfba8a24225dc7eb40", [0x401, 0x400]}) sendto$l2tp(r4, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0x93, 0xa9, 0xf601, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x40, 0x28, 0xfffffe00}}) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000200)=r3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xffffff7a, 0x4, 0x6, 0x4, r0, 0x2, '\x00', r1, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x48) (async) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000180)={0x0, 0x1, 0x7, 0x4, 0x40}) (async) socket$l2tp(0x2, 0x2, 0x73) (async) pipe(&(0x7f00000001c0)) (async) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x9, 0x7, 0x0, 0x5, 0x18, 0x0, "b91673f29ff27b0dd8901cf9c979a094aaccaffd051ab9b02c461f242ddcf6490c042aa0dd99094020a78864770d879485625ac721a20c2c9b4f5ef32fe8d5ff", "a690a0213afa8254a1d0f5867d11fe305190a800b6dd449166f92674e2baf32585457279dab87cfae0362a35930f07056177bc10003bd8f1c91fcd457fe21dc4", "2c2aff1e27db72c97e2b0378dc12ceec2cf69690d870bacfba8a24225dc7eb40", [0x401, 0x400]}) (async) sendto$l2tp(r4, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) 14:19:48 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(0x0, r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:48 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:48 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0x93, 0xa9, 0xf601, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x40, 0x28, 0xfffffe00}}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000200)=r3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xffffff7a, 0x4, 0x6, 0x4, r0, 0x2, '\x00', r1, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x48) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000180)={0x0, 0x1, 0x7, 0x4, 0x40}) r4 = socket$l2tp(0x2, 0x2, 0x73) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x9, 0x7, 0x0, 0x5, 0x18, 0x0, "b91673f29ff27b0dd8901cf9c979a094aaccaffd051ab9b02c461f242ddcf6490c042aa0dd99094020a78864770d879485625ac721a20c2c9b4f5ef32fe8d5ff", "a690a0213afa8254a1d0f5867d11fe305190a800b6dd449166f92674e2baf32585457279dab87cfae0362a35930f07056177bc10003bd8f1c91fcd457fe21dc4", "2c2aff1e27db72c97e2b0378dc12ceec2cf69690d870bacfba8a24225dc7eb40", [0x401, 0x400]}) sendto$l2tp(r4, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0x93, 0xa9, 0xf601, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x40, 0x28, 0xfffffe00}}) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000200)=r3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xffffff7a, 0x4, 0x6, 0x4, r0, 0x2, '\x00', r1, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x48) (async) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000180)={0x0, 0x1, 0x7, 0x4, 0x40}) (async) socket$l2tp(0x2, 0x2, 0x73) (async) pipe(&(0x7f00000001c0)) (async) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x9, 0x7, 0x0, 0x5, 0x18, 0x0, "b91673f29ff27b0dd8901cf9c979a094aaccaffd051ab9b02c461f242ddcf6490c042aa0dd99094020a78864770d879485625ac721a20c2c9b4f5ef32fe8d5ff", "a690a0213afa8254a1d0f5867d11fe305190a800b6dd449166f92674e2baf32585457279dab87cfae0362a35930f07056177bc10003bd8f1c91fcd457fe21dc4", "2c2aff1e27db72c97e2b0378dc12ceec2cf69690d870bacfba8a24225dc7eb40", [0x401, 0x400]}) (async) sendto$l2tp(r4, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) 14:19:48 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x30, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:48 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) 14:19:48 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) 14:19:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x30, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) 14:19:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) gettid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (async) gettid() (async) 14:19:49 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) 14:19:49 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0xbc, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7ffffffe}, @NBD_ATTR_BACKEND_IDENTIFIER={0x83, 0xa, '\xaauQl\xee\xd0v\x82\xc0\xbc\xc1\xd8G\xa9\xe7\x97R\xf7I\xd9Lu\xde\x97\xc5\x1b\n\xc4\x13\xe8\xf2\xf1\xe9\xbbr?\xe3y\xcf\x01\x9d\xd9\xb5\xacoe\xb0j\xe9r\x99\x83\xa5\x06\xaf{\xa7\xa6\x1e7\r\xd6\xdc\xb0\x8a\x18\'U)\x86e\x8b\xb9`\x9fI8Xx\xdc\xc1 \x1d|\rO\x8c\x81\xc6\x8f\xb83\xe5\xa0 \x14o\x9f\xd7Y\x05\x1a>_&\xd6F<\xa0\xac\xd9\xffx,\xc70\x1e\xa7\x7f\xdc\xc1\x85\r\x1dI\xb5\xaa'}]}, 0xbc}}, 0x24000800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r5) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1900000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r6, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8b}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r7, 0x1}, 0x14}}, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r8, 0x40383d03, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x34, r7, 0xa02, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8005}, 0x8880) 14:19:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c0006000100000000000000040007800d24cf77bf0370e1a9b79df8019b3795a279457c0adc048831dec7bb7a"], 0x30}}, 0x0) 14:19:49 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) 14:19:49 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) 14:19:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:49 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) 14:19:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r1, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x840) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:49 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x4b, 0x4, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, 0x10000004}, 0x10) socket$l2tp(0x2, 0x2, 0x73) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 14:19:49 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x4b, 0x4, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, 0x10000004}, 0x10) socket$l2tp(0x2, 0x2, 0x73) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) socket$l2tp(0x2, 0x2, 0x73) (async) sendto$l2tp(r0, 0x0, 0x4b, 0x4, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, 0x10000004}, 0x10) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) (async) 14:19:49 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x100, 0x0, 0x0, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={0x0, 0x1, r2, 0x80008000}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x30, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x20008010) [ 944.599600] nbd: must specify at least one socket 14:19:49 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x4b, 0x4, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, 0x10000004}, 0x10) (async) socket$l2tp(0x2, 0x2, 0x73) (async, rerun: 64) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) (rerun: 64) 14:19:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r1, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x840) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:49 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0xbc, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7ffffffe}, @NBD_ATTR_BACKEND_IDENTIFIER={0x83, 0xa, '\xaauQl\xee\xd0v\x82\xc0\xbc\xc1\xd8G\xa9\xe7\x97R\xf7I\xd9Lu\xde\x97\xc5\x1b\n\xc4\x13\xe8\xf2\xf1\xe9\xbbr?\xe3y\xcf\x01\x9d\xd9\xb5\xacoe\xb0j\xe9r\x99\x83\xa5\x06\xaf{\xa7\xa6\x1e7\r\xd6\xdc\xb0\x8a\x18\'U)\x86e\x8b\xb9`\x9fI8Xx\xdc\xc1 \x1d|\rO\x8c\x81\xc6\x8f\xb83\xe5\xa0 \x14o\x9f\xd7Y\x05\x1a>_&\xd6F<\xa0\xac\xd9\xffx,\xc70\x1e\xa7\x7f\xdc\xc1\x85\r\x1dI\xb5\xaa'}]}, 0xbc}}, 0x24000800) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r5) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1900000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r6, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8b}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r7, 0x1}, 0x14}}, 0x0) (async) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r8, 0x40383d03, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x34, r7, 0xa02, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8005}, 0x8880) 14:19:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x30, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:49 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) 14:19:49 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x100, 0x0, 0x0, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={0x0, 0x1, r2, 0x80008000}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x100, 0x0, 0x0, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}}, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f00000001c0)) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={0x0, 0x1, r2, 0x80008000}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r3) (async) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (async) 14:19:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) [ 944.753653] nbd: must specify at least one socket 14:19:49 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) 14:19:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r1, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x840) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, 0x0, 0x0) 14:19:49 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0xbc, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7ffffffe}, @NBD_ATTR_BACKEND_IDENTIFIER={0x83, 0xa, '\xaauQl\xee\xd0v\x82\xc0\xbc\xc1\xd8G\xa9\xe7\x97R\xf7I\xd9Lu\xde\x97\xc5\x1b\n\xc4\x13\xe8\xf2\xf1\xe9\xbbr?\xe3y\xcf\x01\x9d\xd9\xb5\xacoe\xb0j\xe9r\x99\x83\xa5\x06\xaf{\xa7\xa6\x1e7\r\xd6\xdc\xb0\x8a\x18\'U)\x86e\x8b\xb9`\x9fI8Xx\xdc\xc1 \x1d|\rO\x8c\x81\xc6\x8f\xb83\xe5\xa0 \x14o\x9f\xd7Y\x05\x1a>_&\xd6F<\xa0\xac\xd9\xffx,\xc70\x1e\xa7\x7f\xdc\xc1\x85\r\x1dI\xb5\xaa'}]}, 0xbc}}, 0x24000800) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r5) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1900000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r6, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8b}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r7, 0x1}, 0x14}}, 0x0) (async) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r8, 0x40383d03, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x34, r7, 0xa02, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8005}, 0x8880) 14:19:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x30, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:49 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) 14:19:49 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getaddr={0x14, 0x16, 0x4, 0x70bd28, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000804) 14:19:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, 0x0, 0x0) 14:19:49 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x100, 0x0, 0x0, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={0x0, 0x1, r2, 0x80008000}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x100, 0x0, 0x0, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}}, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f00000001c0)) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={0x0, 0x1, r2, 0x80008000}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r3) (async) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (async) 14:19:49 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getaddr={0x14, 0x16, 0x4, 0x70bd28, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000804) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getaddr={0x14, 0x16, 0x4, 0x70bd28, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000804) (async) 14:19:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r1, 0x10, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}]}, 0x95}}, 0x0) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3fa, 0x0, 0x70bd2d, 0x25dfdbfd, {}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40) 14:19:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, 0x0, 0x0) 14:19:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x30, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x20008010) 14:19:49 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x84, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x94}, @NBD_ATTR_BACKEND_IDENTIFIER={0x54, 0xa, 'uv\xde9\xcdy \xd4\xf3\x04i\x01q\xb9\xf0\xdd\x9d\xb6\xde\xa2/}_@[\xdf#\xfa\xed\xff\x16.\x8c\xa2GF\x14\xd6\xebU\xac\x99\x9b;\x7fc\xb5\xec_\x1c^M\x1a\xfa\x1c\x8f\x8e\x81?e\x94\x1d\x05g\x927y\xc3\x03\xfd\x8a\xd01 \xfa\x10\xb8\x05\xb99'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x84}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 944.957414] nbd: must specify at least one socket 14:19:49 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getaddr={0x14, 0x16, 0x4, 0x70bd28, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000804) 14:19:49 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8050) 14:19:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xfffffeb0, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 14:19:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r1, 0x10, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}]}, 0x95}}, 0x0) (async, rerun: 32) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3fa, 0x0, 0x70bd2d, 0x25dfdbfd, {}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40) (rerun: 32) 14:19:49 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8050) 14:19:49 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x84, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x94}, @NBD_ATTR_BACKEND_IDENTIFIER={0x54, 0xa, 'uv\xde9\xcdy \xd4\xf3\x04i\x01q\xb9\xf0\xdd\x9d\xb6\xde\xa2/}_@[\xdf#\xfa\xed\xff\x16.\x8c\xa2GF\x14\xd6\xebU\xac\x99\x9b;\x7fc\xb5\xec_\x1c^M\x1a\xfa\x1c\x8f\x8e\x81?e\x94\x1d\x05g\x927y\xc3\x03\xfd\x8a\xd01 \xfa\x10\xb8\x05\xb99'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x84}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x84, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x94}, @NBD_ATTR_BACKEND_IDENTIFIER={0x54, 0xa, 'uv\xde9\xcdy \xd4\xf3\x04i\x01q\xb9\xf0\xdd\x9d\xb6\xde\xa2/}_@[\xdf#\xfa\xed\xff\x16.\x8c\xa2GF\x14\xd6\xebU\xac\x99\x9b;\x7fc\xb5\xec_\x1c^M\x1a\xfa\x1c\x8f\x8e\x81?e\x94\x1d\x05g\x927y\xc3\x03\xfd\x8a\xd01 \xfa\x10\xb8\x05\xb99'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x84}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) 14:19:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0xbc, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7ffffffe}, @NBD_ATTR_BACKEND_IDENTIFIER={0x83, 0xa, '\xaauQl\xee\xd0v\x82\xc0\xbc\xc1\xd8G\xa9\xe7\x97R\xf7I\xd9Lu\xde\x97\xc5\x1b\n\xc4\x13\xe8\xf2\xf1\xe9\xbbr?\xe3y\xcf\x01\x9d\xd9\xb5\xacoe\xb0j\xe9r\x99\x83\xa5\x06\xaf{\xa7\xa6\x1e7\r\xd6\xdc\xb0\x8a\x18\'U)\x86e\x8b\xb9`\x9fI8Xx\xdc\xc1 \x1d|\rO\x8c\x81\xc6\x8f\xb83\xe5\xa0 \x14o\x9f\xd7Y\x05\x1a>_&\xd6F<\xa0\xac\xd9\xffx,\xc70\x1e\xa7\x7f\xdc\xc1\x85\r\x1dI\xb5\xaa'}]}, 0xbc}}, 0x24000800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r5) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1900000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r6, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8b}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r7, 0x1}, 0x14}}, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r8, 0x40383d03, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x34, r7, 0xa02, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8005}, 0x8880) 14:19:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) [ 945.096847] nbd: must specify a size in bytes for the device [ 945.136171] nbd: must specify at least one socket 14:19:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xfffffeb0, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xfffffeb0, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (async) 14:19:49 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async, rerun: 32) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8050) (rerun: 32) 14:19:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r1, 0x10, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}]}, 0x95}}, 0x0) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3fa, 0x0, 0x70bd2d, 0x25dfdbfd, {}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r1, 0x10, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}]}, 0x95}}, 0x0) (async) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3fa, 0x0, 0x70bd2d, 0x25dfdbfd, {}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40) (async) [ 945.168801] nbd: must specify at least one socket 14:19:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 14:19:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x30, r2, 0x401, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) [ 945.203762] nbd: must specify at least one socket [ 945.218104] nbd: must specify a size in bytes for the device [ 945.239012] nbd: must specify at least one socket 14:19:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xfffffeb0, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 14:19:49 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x4b, 0x4, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, 0x10000004}, 0x10) socket$l2tp(0x2, 0x2, 0x73) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) [ 945.271211] nbd: must specify a size in bytes for the device 14:19:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x84, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x94}, @NBD_ATTR_BACKEND_IDENTIFIER={0x54, 0xa, 'uv\xde9\xcdy \xd4\xf3\x04i\x01q\xb9\xf0\xdd\x9d\xb6\xde\xa2/}_@[\xdf#\xfa\xed\xff\x16.\x8c\xa2GF\x14\xd6\xebU\xac\x99\x9b;\x7fc\xb5\xec_\x1c^M\x1a\xfa\x1c\x8f\x8e\x81?e\x94\x1d\x05g\x927y\xc3\x03\xfd\x8a\xd01 \xfa\x10\xb8\x05\xb99'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x84}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:19:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02000001000000000000010000000c000400ffffffffffffffff0c00060001000000000000000c00040000005efcffffffffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x6c, r1, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9e}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x20000091) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x101}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x101) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:19:50 executing program 1: ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x3, 0x2, {0x4, 0x2, 0x0, 0x3, 0x3}, 0x8001}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x4c, r2, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffd}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) r3 = socket(0x16, 0x5, 0xfffffffb) setsockopt$MRT_PIM(r3, 0x0, 0xcf, &(0x7f0000000300), 0x4) [ 945.327591] nbd: must specify at least one socket 14:19:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 14:19:50 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x31, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast, 0x2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000000)={0x8, 0x3, 0x9, {0x7, 0xf8e3}, 0x86, 0x6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000bc0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x24}}, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendto$l2tp(r0, &(0x7f0000000a80)="2364f0f9c4eee16d196e45f63baf0c92a1e6d60d1623326afdea7fe6f71fb77b340ec59be022d4a792ca534dcafc708e6f5ea9cd7c2b8e0ecbb39bea3e583a1a14f77fb956fb0ab9475c3aaaf8b0f7b8829bb786f64e67dbc52576055ada35556460ff5e1238e63717eab75c0bf49a2d78673fa658dbaab3c46ef21e", 0x7c, 0x40000, &(0x7f0000000b00)={0x2, 0x0, @multicast1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r13, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x0, 0x7fffffff, 0x8, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x5, 0x8000}}) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r15, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c000400ef672316da62d1bb4372b82086ecdcf75a6ecff780eea0b4ae759c95845e09e5ec450d240e00f5aea2c9e94807b0a8f4c0b5e2b11a023a9d2db98a3fafacbefd74ad68acee01dd89b1bc74af", @ANYRES16=r16, @ANYBLOB="010000000000000000000100000008000300", @ANYRES32=r17, @ANYBLOB], 0x1c}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000a40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f00000002c0)={0x708, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x250, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r4}, {0x260, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ee6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7811d2fb}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x22c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r17}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x12e}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x708}, 0x1, 0x0, 0x0, 0x1}, 0x44090) 14:19:50 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x4b, 0x4, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, 0x10000004}, 0x10) socket$l2tp(0x2, 0x2, 0x73) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 14:19:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f00000001c0)={0x11}) 14:19:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02000001000000000000010000000c000400ffffffffffffffff0c00060001000000000000000c00040000005efcffffffffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x6c, r1, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9e}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x20000091) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x101}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x101) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 945.380257] nbd: must specify a size in bytes for the device 14:19:50 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x4b, 0x4, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, 0x10000004}, 0x10) socket$l2tp(0x2, 0x2, 0x73) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 14:19:50 executing program 1: ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x3, 0x2, {0x4, 0x2, 0x0, 0x3, 0x3}, 0x8001}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x4c, r2, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffd}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) r3 = socket(0x16, 0x5, 0xfffffffb) setsockopt$MRT_PIM(r3, 0x0, 0xcf, &(0x7f0000000300), 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x3, 0x2, {0x4, 0x2, 0x0, 0x3, 0x3}, 0x8001}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x4c, r2, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffd}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (async) socket(0x16, 0x5, 0xfffffffb) (async) setsockopt$MRT_PIM(r3, 0x0, 0xcf, &(0x7f0000000300), 0x4) (async) 14:19:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 14:19:50 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x4b, 0x4, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, 0x10000004}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 14:19:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02000001000000000000010000000c000400ffffffffffffffff0c00060001000000000000000c00040000005efcffffffffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x6c, r1, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9e}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x20000091) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x101}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x101) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:19:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) (async) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f00000001c0)={0x11}) 14:19:50 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x4b, 0x4, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, 0x10000004}, 0x10) 14:19:50 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x31, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast, 0x2}, 0x10) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000000)={0x8, 0x3, 0x9, {0x7, 0xf8e3}, 0x86, 0x6}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000bc0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}}, 0x0) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x24}}, 0x0) (async) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async) sendto$l2tp(r0, &(0x7f0000000a80)="2364f0f9c4eee16d196e45f63baf0c92a1e6d60d1623326afdea7fe6f71fb77b340ec59be022d4a792ca534dcafc708e6f5ea9cd7c2b8e0ecbb39bea3e583a1a14f77fb956fb0ab9475c3aaaf8b0f7b8829bb786f64e67dbc52576055ada35556460ff5e1238e63717eab75c0bf49a2d78673fa658dbaab3c46ef21e", 0x7c, 0x40000, &(0x7f0000000b00)={0x2, 0x0, @multicast1}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r13, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x0, 0x7fffffff, 0x8, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x5, 0x8000}}) (async) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r15, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c000400ef672316da62d1bb4372b82086ecdcf75a6ecff780eea0b4ae759c95845e09e5ec450d240e00f5aea2c9e94807b0a8f4c0b5e2b11a023a9d2db98a3fafacbefd74ad68acee01dd89b1bc74af", @ANYRES16=r16, @ANYBLOB="010000000000000000000100000008000300", @ANYRES32=r17, @ANYBLOB], 0x1c}}, 0x0) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000a40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f00000002c0)={0x708, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x250, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r4}, {0x260, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ee6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7811d2fb}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x22c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r17}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x12e}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x708}, 0x1, 0x0, 0x0, 0x1}, 0x44090) 14:19:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f00000001c0)={0x11}) 14:19:50 executing program 0: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, r0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r2}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000000000000001}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004}, 0x20000040) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES32=r3, @ANYRES32=r4], 0x30}}, 0x0) 14:19:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:50 executing program 1: ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x3, 0x2, {0x4, 0x2, 0x0, 0x3, 0x3}, 0x8001}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x4c, r2, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffd}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (async) r3 = socket(0x16, 0x5, 0xfffffffb) setsockopt$MRT_PIM(r3, 0x0, 0xcf, &(0x7f0000000300), 0x4) 14:19:50 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x4b, 0x4, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, 0x10000004}, 0x10) 14:19:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x0, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:50 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x4b, 0x4, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, 0x10000004}, 0x10) 14:19:50 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x31, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast, 0x2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000000)={0x8, 0x3, 0x9, {0x7, 0xf8e3}, 0x86, 0x6}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000bc0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}}, 0x0) (async, rerun: 32) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x24}}, 0x0) (async, rerun: 32) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendto$l2tp(r0, &(0x7f0000000a80)="2364f0f9c4eee16d196e45f63baf0c92a1e6d60d1623326afdea7fe6f71fb77b340ec59be022d4a792ca534dcafc708e6f5ea9cd7c2b8e0ecbb39bea3e583a1a14f77fb956fb0ab9475c3aaaf8b0f7b8829bb786f64e67dbc52576055ada35556460ff5e1238e63717eab75c0bf49a2d78673fa658dbaab3c46ef21e", 0x7c, 0x40000, &(0x7f0000000b00)={0x2, 0x0, @multicast1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r13, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x0, 0x7fffffff, 0x8, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x5, 0x8000}}) r15 = socket$nl_generic(0x10, 0x3, 0x10) (async) r16 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r15, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c000400ef672316da62d1bb4372b82086ecdcf75a6ecff780eea0b4ae759c95845e09e5ec450d240e00f5aea2c9e94807b0a8f4c0b5e2b11a023a9d2db98a3fafacbefd74ad68acee01dd89b1bc74af", @ANYRES16=r16, @ANYBLOB="010000000000000000000100000008000300", @ANYRES32=r17, @ANYBLOB], 0x1c}}, 0x0) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000a40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f00000002c0)={0x708, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x250, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r4}, {0x260, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ee6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7811d2fb}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x22c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r17}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x12e}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x708}, 0x1, 0x0, 0x0, 0x1}, 0x44090) 14:19:50 executing program 3: sendto$l2tp(0xffffffffffffffff, 0x0, 0x4b, 0x4, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, 0x10000004}, 0x10) 14:19:50 executing program 3: socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(0xffffffffffffffff, 0x0, 0x4b, 0x4, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, 0x10000004}, 0x10) 14:19:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x0, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x264}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffff80000001}]}, 0x44}}, 0x80) 14:19:50 executing program 3: socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(0xffffffffffffffff, 0x0, 0x4b, 0x4, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, 0x10000004}, 0x10) 14:19:50 executing program 0: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, r0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r2}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000000000000001}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004}, 0x20000040) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES32=r3, @ANYRES32=r4], 0x30}}, 0x0) 14:19:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x0, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:50 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa0, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r0}}}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4004844}, 0x20000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000003c0), 0x20c40, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r0, 0x29, 0x7f, 0x5e, 0x1, 0x0, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x20, 0x7800, 0xfff, 0x3ff}}) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000580)={&(0x7f0000000380), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40850) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r5, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x44011}, 0x2000) 14:19:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:50 executing program 0: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, r0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r2}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000000000000001}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004}, 0x20000040) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES32=r3, @ANYRES32=r4], 0x30}}, 0x0) 14:19:50 executing program 3: socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(0xffffffffffffffff, 0x0, 0x4b, 0x4, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, 0x10000004}, 0x10) 14:19:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x264}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffff80000001}]}, 0x44}}, 0x80) [ 945.993402] nbd: couldn't find device at index 5 [ 946.012287] nbd: must specify at least one socket 14:19:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:50 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x4b, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, 0x10000004}, 0x10) 14:19:50 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:19:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x30}}, 0x0) 14:19:50 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa0, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r0}}}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4004844}, 0x20000080) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) (async) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000003c0), 0x20c40, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r0, 0x29, 0x7f, 0x5e, 0x1, 0x0, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x20, 0x7800, 0xfff, 0x3ff}}) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000580)={&(0x7f0000000380), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40850) (async, rerun: 32) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x1}, 0x14}}, 0x0) (async, rerun: 64) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r5, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x44011}, 0x2000) (rerun: 64) 14:19:50 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:19:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x305042, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x40, 0x0, 0x48, @remote, @mcast1, 0x10, 0x7, 0x3, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x8, 0x9, 0x11, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x8, 0x506337e10f4b8c6c, 0x40}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r10, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000c80)={'wlan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r14, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r15}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) r17 = socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r17, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r17, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r18, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r19}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000c40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000440)={0x7a8, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x1d0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x41fb}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r5}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x36}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}]}}, {{0x8}, {0x14c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x386}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x1f, 0x20, 0x7}]}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0x190, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xffff, 0x0, 0x0, 0x9}, {0xc065, 0x0, 0x2e, 0xffff}, {0x5, 0x6, 0x4, 0x5}, {0x9, 0x0, 0x4, 0x4}, {0x59bf, 0x1, 0xbe, 0x80}, {0x1000, 0x3, 0x0, 0x6f}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r20}}}]}}, {{0x8, 0x1, r21}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x7a8}, 0x1, 0x0, 0x0, 0x4000}, 0xcbd7dc51578fb4cc) 14:19:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (rerun: 64) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x30}}, 0x0) 14:19:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x264}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffff80000001}]}, 0x44}}, 0x80) [ 946.217515] nbd: must specify at least one socket 14:19:50 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa0, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r0}}}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4004844}, 0x20000080) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000003c0), 0x20c40, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r0, 0x29, 0x7f, 0x5e, 0x1, 0x0, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x20, 0x7800, 0xfff, 0x3ff}}) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000580)={&(0x7f0000000380), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40850) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r5, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x44011}, 0x2000) 14:19:50 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:19:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x30}}, 0x0) [ 946.264893] nbd: must specify at least one socket 14:19:51 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x4b, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev, 0x10000004}, 0x10) [ 946.347249] nbd: must specify at least one socket 14:19:51 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x4b, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) 14:19:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_SOCKETS={0x4}]}, 0x28}}, 0x0) 14:19:51 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x41, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000180)=""/4096, &(0x7f0000000000)=0x1000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000040)=0x8f) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$sndseq(r1, &(0x7f0000000100), 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000080)={0xd190, 0x2, {0x1, 0x0, 0xfffffffc, 0x1, 0x1}, 0x6}) 14:19:51 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000b18f000780000000000057a5dc460000"], 0x30}}, 0x0) 14:19:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x305042, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x40, 0x0, 0x48, @remote, @mcast1, 0x10, 0x7, 0x3, 0x1}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x8, 0x9, 0x11, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x8, 0x506337e10f4b8c6c, 0x40}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r10, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) (async, rerun: 32) r13 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000c80)={'wlan1\x00'}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r14, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r15}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) (async) r17 = socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r17, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r17, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r18, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r19}]}, 0x1c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000c40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000440)={0x7a8, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x1d0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x41fb}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r5}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x36}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}]}}, {{0x8}, {0x14c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x386}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x1f, 0x20, 0x7}]}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0x190, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xffff, 0x0, 0x0, 0x9}, {0xc065, 0x0, 0x2e, 0xffff}, {0x5, 0x6, 0x4, 0x5}, {0x9, 0x0, 0x4, 0x4}, {0x59bf, 0x1, 0xbe, 0x80}, {0x1000, 0x3, 0x0, 0x6f}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r20}}}]}}, {{0x8, 0x1, r21}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x7a8}, 0x1, 0x0, 0x0, 0x4000}, 0xcbd7dc51578fb4cc) 14:19:51 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:19:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x20201) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) r7 = socket(0x25, 0x8, 0x5) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x503, 0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r9, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0xa4, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x14, 0xa, '/dev/input/mice\x00'}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r3}, {0x8, 0x1, r2}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r5}, {0x8, 0x1, r3}, {0x8, 0x1, r9}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1f}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2a}]}, 0xa4}}, 0x20040800) 14:19:51 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x41, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000180)=""/4096, &(0x7f0000000000)=0x1000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000040)=0x8f) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$sndseq(r1, &(0x7f0000000100), 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000080)={0xd190, 0x2, {0x1, 0x0, 0xfffffffc, 0x1, 0x1}, 0x6}) socket$l2tp(0x2, 0x2, 0x73) (async) sendto$l2tp(r0, 0x0, 0x0, 0x41, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) (async) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000180)=""/4096, &(0x7f0000000000)=0x1000) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) (async) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000040)=0x8f) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) write$sndseq(r1, &(0x7f0000000100), 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000080)={0xd190, 0x2, {0x1, 0x0, 0xfffffffc, 0x1, 0x1}, 0x6}) (async) 14:19:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x305042, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x40, 0x0, 0x48, @remote, @mcast1, 0x10, 0x7, 0x3, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x8, 0x9, 0x11, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x8, 0x506337e10f4b8c6c, 0x40}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r10, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000c80)={'wlan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r14, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r15}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) r17 = socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r17, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r17, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r18, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r19}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000c40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000440)={0x7a8, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x1d0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x41fb}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r5}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x36}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}]}}, {{0x8}, {0x14c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x386}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x1f, 0x20, 0x7}]}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0x190, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xffff, 0x0, 0x0, 0x9}, {0xc065, 0x0, 0x2e, 0xffff}, {0x5, 0x6, 0x4, 0x5}, {0x9, 0x0, 0x4, 0x4}, {0x59bf, 0x1, 0xbe, 0x80}, {0x1000, 0x3, 0x0, 0x6f}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r20}}}]}}, {{0x8, 0x1, r21}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x7a8}, 0x1, 0x0, 0x0, 0x4000}, 0xcbd7dc51578fb4cc) [ 946.463770] nla_parse: 27 callbacks suppressed [ 946.463777] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 14:19:51 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000b18f000780000000000057a5dc460000"], 0x30}}, 0x0) [ 946.515356] nbd: must specify at least one socket 14:19:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_SOCKETS={0x4}]}, 0x28}}, 0x0) 14:19:51 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x41, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) (async) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000180)=""/4096, &(0x7f0000000000)=0x1000) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) (async) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000040)=0x8f) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) write$sndseq(r1, &(0x7f0000000100), 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000080)={0xd190, 0x2, {0x1, 0x0, 0xfffffffc, 0x1, 0x1}, 0x6}) 14:19:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x20201) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) (async) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) (async) r7 = socket(0x25, 0x8, 0x5) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x503, 0x0) (async) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r9, 0x40383d03, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0xa4, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x14, 0xa, '/dev/input/mice\x00'}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r3}, {0x8, 0x1, r2}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r5}, {0x8, 0x1, r3}, {0x8, 0x1, r9}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1f}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2a}]}, 0xa4}}, 0x20040800) [ 946.589172] nbd: must specify a size in bytes for the device 14:19:51 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000b18f000780000000000057a5dc460000"], 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r1) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000b18f000780000000000057a5dc460000"], 0x30}}, 0x0) (async) 14:19:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (async, rerun: 32) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x305042, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x40, 0x0, 0x48, @remote, @mcast1, 0x10, 0x7, 0x3, 0x1}}) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x8, 0x9, 0x11, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x8, 0x506337e10f4b8c6c, 0x40}}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) (async, rerun: 32) r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r10, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000c80)={'wlan1\x00'}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r14, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r15}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) (async) r17 = socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r17, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) (rerun: 32) sendmsg$BATADV_CMD_GET_MESH(r17, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r18, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r19}]}, 0x1c}}, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000c40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000440)={0x7a8, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x1d0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x41fb}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r5}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x36}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}]}}, {{0x8}, {0x14c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x386}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x1f, 0x20, 0x7}]}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0x190, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xffff, 0x0, 0x0, 0x9}, {0xc065, 0x0, 0x2e, 0xffff}, {0x5, 0x6, 0x4, 0x5}, {0x9, 0x0, 0x4, 0x4}, {0x59bf, 0x1, 0xbe, 0x80}, {0x1000, 0x3, 0x0, 0x6f}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r20}}}]}}, {{0x8, 0x1, r21}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x7a8}, 0x1, 0x0, 0x0, 0x4000}, 0xcbd7dc51578fb4cc) 14:19:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_SOCKETS={0x4}]}, 0x28}}, 0x0) 14:19:51 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10000}]}, 0x34}, 0x1, 0x0, 0x0, 0x8005}, 0x4000020) socket$l2tp(0x2, 0x2, 0x73) 14:19:51 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10000}]}, 0x34}, 0x1, 0x0, 0x0, 0x8005}, 0x4000020) (async) socket$l2tp(0x2, 0x2, 0x73) 14:19:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="e6d43deed7e7cf917927ed4bc6d31d00", @ANYRES16=0x0, @ANYBLOB="0100000000000000000014000000"], 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r3, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x30}}, 0x20004801) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:51 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) (async, rerun: 32) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10000}]}, 0x34}, 0x1, 0x0, 0x0, 0x8005}, 0x4000020) (rerun: 32) socket$l2tp(0x2, 0x2, 0x73) [ 946.772801] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 946.812174] nbd: must specify at least one socket 14:19:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x20201) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) r7 = socket(0x25, 0x8, 0x5) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x503, 0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r9, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0xa4, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x14, 0xa, '/dev/input/mice\x00'}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r3}, {0x8, 0x1, r2}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r5}, {0x8, 0x1, r3}, {0x8, 0x1, r9}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1f}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2a}]}, 0xa4}}, 0x20040800) 14:19:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x20201) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) (async) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) (async) r7 = socket(0x25, 0x8, 0x5) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x503, 0x0) (async) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r9, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0xa4, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x14, 0xa, '/dev/input/mice\x00'}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r3}, {0x8, 0x1, r2}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r5}, {0x8, 0x1, r3}, {0x8, 0x1, r9}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1f}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2a}]}, 0xa4}}, 0x20040800) 14:19:51 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000001000000000010000000c000200000006000100000000000000040007800000000000000000"], 0x30}}, 0x0) 14:19:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) [ 946.845710] nbd: must specify a size in bytes for the device 14:19:51 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$dri(&(0x7f0000000000), 0xffffffffffffffe0, 0x420000) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 14:19:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="e6d43deed7e7cf917927ed4bc6d31d00", @ANYRES16=0x0, @ANYBLOB="0100000000000000000014000000"], 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r3, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x30}}, 0x20004801) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="e6d43deed7e7cf917927ed4bc6d31d00", @ANYRES16=0x0, @ANYBLOB="0100000000000000000014000000"], 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan4\x00'}) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x30}}, 0x20004801) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (async) 14:19:51 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$dri(&(0x7f0000000000), 0xffffffffffffffe0, 0x420000) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 14:19:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:51 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000001000000000010000000c000200000006000100000000000000040007800000000000000000"], 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000001000000000010000000c000200000006000100000000000000040007800000000000000000"], 0x30}}, 0x0) (async) 14:19:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) [ 946.963615] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 946.979680] nbd: must specify at least one socket [ 946.988722] nbd: must specify a size in bytes for the device [ 947.002378] nbd: must specify a size in bytes for the device 14:19:51 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$dri(&(0x7f0000000000), 0xffffffffffffffe0, 0x420000) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 14:19:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="e6d43deed7e7cf917927ed4bc6d31d00", @ANYRES16=0x0, @ANYBLOB="0100000000000000000014000000"], 0x14}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x30}}, 0x20004801) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:51 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x2800c000) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) [ 947.073399] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 947.105450] nbd: must specify at least one socket 14:19:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_SOCKETS={0x4}]}, 0x28}}, 0x0) 14:19:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000000000000200060001000000000000000400078000000100", @ANYRES32, @ANYBLOB='\x00\x00V\a', @ANYRES32, @ANYBLOB="00000100", @ANYRES32=r2, @ANYBLOB="00000100", @ANYRES32=r3, @ANYBLOB="00000100", @ANYRES32=r2, @ANYBLOB="00000100", @ANYRES32=r3, @ANYBLOB], 0x30}}, 0x0) [ 947.131977] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 947.168880] nbd: must specify at least one socket 14:19:51 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000001000000000010000000c000200000006000100000000000000040007800000000000000000"], 0x30}}, 0x0) 14:19:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff}) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:51 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x2800c000) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) socket$l2tp(0x2, 0x2, 0x73) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x2800c000) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) 14:19:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) (async, rerun: 64) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000000000000200060001000000000000000400078000000100", @ANYRES32, @ANYBLOB='\x00\x00V\a', @ANYRES32, @ANYBLOB="00000100", @ANYRES32=r2, @ANYBLOB="00000100", @ANYRES32=r3, @ANYBLOB="00000100", @ANYRES32=r2, @ANYBLOB="00000100", @ANYRES32=r3, @ANYBLOB], 0x30}}, 0x0) (rerun: 64) [ 947.261901] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 947.279717] nbd: must specify at least one socket 14:19:52 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff}) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:52 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff1f, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000000000000004000780eedf6aa57bcfb6de72be9e4eda23a194ec7ddcf0827996188ce69984ebfc8daa2fe91cc850954d0e33e8a084e6"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 947.342939] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 947.356998] nbd: must specify at least one socket 14:19:52 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:52 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x2800c000) (async) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 14:19:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) [ 947.469756] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 947.490270] nbd: must specify at least one socket [ 947.500650] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 14:19:52 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff1f, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000000000000004000780eedf6aa57bcfb6de72be9e4eda23a194ec7ddcf0827996188ce69984ebfc8daa2fe91cc850954d0e33e8a084e6"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 14:19:52 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:52 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000000)={0xfffffffe, 0x6, 0x6, {0x1ff, 0x5bc4}, 0x63, 0xfffffffe}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0x181442) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r2) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x524, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x51}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x7c}}]}, 0x30}, 0x1, 0x0, 0x0, 0x9c432d532917a9cd}, 0x4000) [ 947.524688] nbd: must specify at least one socket 14:19:52 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x94140, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010000000000000000f9"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:52 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, r0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r2}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000000000000001}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004}, 0x20000040) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES32=r3, @ANYRES32=r4], 0x30}}, 0x0) [ 947.566399] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 947.601661] nbd: must specify at least one socket 14:19:52 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff1f, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000000000000004000780eedf6aa57bcfb6de72be9e4eda23a194ec7ddcf0827996188ce69984ebfc8daa2fe91cc850954d0e33e8a084e6"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 947.667920] nbd: must specify at least one socket [ 947.707816] nbd: must specify at least one socket [ 947.712795] nbd: must specify at least one socket [ 947.732441] nbd: must specify at least one socket [ 947.777329] nbd: must specify at least one socket [ 947.782290] nbd: must specify at least one socket [ 947.790377] nbd: must specify at least one socket [ 947.795394] nbd: must specify at least one socket [ 947.803313] nbd: must specify at least one socket [ 947.810414] nbd: must specify at least one socket [ 947.815509] nbd: must specify at least one socket [ 947.822720] nbd: must specify at least one socket [ 947.828840] nbd: must specify at least one socket [ 947.833777] nbd: must specify at least one socket [ 947.839199] nbd: must specify at least one socket [ 947.844092] nbd: must specify at least one socket [ 947.849361] nbd: must specify at least one socket [ 947.854262] nbd: must specify at least one socket [ 947.859390] nbd: must specify at least one socket [ 947.864296] nbd: must specify at least one socket [ 947.869254] nbd: must specify at least one socket [ 947.874147] nbd: must specify at least one socket [ 947.879109] nbd: must specify at least one socket [ 947.884002] nbd: must specify at least one socket [ 947.888993] nbd: must specify at least one socket [ 947.893880] nbd: must specify at least one socket [ 947.898901] nbd: must specify at least one socket [ 947.903813] nbd: must specify at least one socket [ 947.909092] nbd: must specify at least one socket [ 947.914005] nbd: must specify at least one socket [ 947.919066] nbd: must specify at least one socket [ 947.923974] nbd: must specify at least one socket [ 947.928958] nbd: must specify at least one socket [ 947.933874] nbd: must specify at least one socket [ 947.938862] nbd: must specify at least one socket [ 947.943761] nbd: must specify at least one socket [ 947.948726] nbd: must specify at least one socket [ 947.953625] nbd: must specify at least one socket [ 947.958597] nbd: must specify at least one socket [ 947.963504] nbd: must specify at least one socket [ 947.968481] nbd: must specify at least one socket [ 947.973377] nbd: must specify at least one socket [ 947.978336] nbd: must specify at least one socket [ 947.983226] nbd: must specify at least one socket [ 947.988546] nbd: must specify at least one socket [ 947.993449] nbd: must specify at least one socket [ 947.998408] nbd: must specify at least one socket [ 948.003328] nbd: must specify at least one socket [ 948.008313] nbd: must specify at least one socket [ 948.013205] nbd: must specify at least one socket [ 948.018175] nbd: must specify at least one socket [ 948.023089] nbd: must specify at least one socket 14:19:52 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000000000000200060001000000000000000400078000000100", @ANYRES32, @ANYBLOB='\x00\x00V\a', @ANYRES32, @ANYBLOB="00000100", @ANYRES32=r2, @ANYBLOB="00000100", @ANYRES32=r3, @ANYBLOB="00000100", @ANYRES32=r2, @ANYBLOB="00000100", @ANYRES32=r3, @ANYBLOB], 0x30}}, 0x0) 14:19:52 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000000)={0xfffffffe, 0x6, 0x6, {0x1ff, 0x5bc4}, 0x63, 0xfffffffe}) (rerun: 32) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0x181442) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r2) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x524, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x51}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x7c}}]}, 0x30}, 0x1, 0x0, 0x0, 0x9c432d532917a9cd}, 0x4000) 14:19:52 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:52 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x94140, 0x0) (async, rerun: 64) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010000000000000000f9"], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:52 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x94140, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010000000000000000f9"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:52 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000df97", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000000000000004000780"], 0x30}}, 0x0) [ 948.028055] nbd: must specify at least one socket [ 948.032942] nbd: must specify at least one socket [ 948.037894] nbd: must specify at least one socket [ 948.042780] nbd: must specify at least one socket [ 948.047759] nbd: must specify at least one socket [ 948.052645] nbd: must specify at least one socket [ 948.057599] nbd: must specify at least one socket [ 948.062484] nbd: must specify at least one socket [ 948.067588] nbd: must specify at least one socket [ 948.072474] nbd: must specify at least one socket 14:19:52 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x0) 14:19:52 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000df97", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000000000000004000780"], 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000df97", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000000000000004000780"], 0x30}}, 0x0) (async) 14:19:52 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000000)={0xfffffffe, 0x6, 0x6, {0x1ff, 0x5bc4}, 0x63, 0xfffffffe}) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0x181442) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r2) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x524, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x51}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x7c}}]}, 0x30}, 0x1, 0x0, 0x0, 0x9c432d532917a9cd}, 0x4000) 14:19:52 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x48900, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000005016df4a9cd46b578139331b038e254e70ac1a5b594812bf460f216860ff1406a1fb333e8f3799a37f5813e394684bd5d56ea55bd6a72b428c63bad4755a6643ef2b00cdd02a802bdf26c351fd6ffcfd8f2cc524dc471a1ba70e00378bf917c6e020fa79855ac039bce38c2c0d5b30396bc35972337dc916abd58dc58c14668633b717272b346742ed6a554e2af2af9d35ce845d0b98fd205a1ba0a001bf4f4b9d496216f06c967177895eda4ae0f47070629c177717a3df1cbd903bfaa472f5ef226779446fe98828554784", @ANYRES16=r2, @ANYBLOB="01000000000000000000010008000c00020000000000000000000c0006000100000000000000040007a1de83f191f4242c5e6f9d97ea27b541bade625aa7253d200c551a3569e1eb1d9f8ac258c9bee25a2707f3dd23f867e8146155e0b83d1c12f0f80c263ff86dc905679e9dfcb0c5fa2a86fe5eb29fd44754c1840b61395121298ef74e5183268630ca4820be32be0e205caa7416d7f086f7fc0d4227a1ab8cd498552a43c1adc0d4824f18e3a01b177152a73a6b8e174fd05f000000000000000000"], 0x30}}, 0x0) 14:19:52 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x94140, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010000000000000000f9"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:52 executing program 4: r0 = getpid() r1 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0xd6) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r0, r2, 0x0, 0x1, &(0x7f00000003c0)='\x00'}, 0x30) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)={0x38, r3, 0x300, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4011}, 0x20000004) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x148800, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000180)={r4, 0x8000, {0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x3, 0x0, 0xc, "1f8f6fb42fc060ba3c700aa7a418eed421c139f1e0b3275fc821ee578bc414fbc127cde4bcbf7164ae8391394b03b58c535feeea77f1738796c828e0cdf4c379", "a409780210ecf75b120b6d14dcd7f3a8f62cebf262ab5af5b8ca231c940ff9f069423d81afda278c8f2b7036252c5ddf50df42980703cb3982252b5b5889ceec", "9a609e9fac34b29a0d48fdb8ff2d756804d8c9195c81434622799730c5290f64", [0x9, 0x1ba6]}}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, r1, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r5 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r5, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x20008011}, 0x40000) [ 948.188863] nbd: must specify at least one socket 14:19:52 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000df97", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c000600010000000000000004000780"], 0x30}}, 0x0) 14:19:52 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x48900, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000005016df4a9cd46b578139331b038e254e70ac1a5b594812bf460f216860ff1406a1fb333e8f3799a37f5813e394684bd5d56ea55bd6a72b428c63bad4755a6643ef2b00cdd02a802bdf26c351fd6ffcfd8f2cc524dc471a1ba70e00378bf917c6e020fa79855ac039bce38c2c0d5b30396bc35972337dc916abd58dc58c14668633b717272b346742ed6a554e2af2af9d35ce845d0b98fd205a1ba0a001bf4f4b9d496216f06c967177895eda4ae0f47070629c177717a3df1cbd903bfaa472f5ef226779446fe98828554784", @ANYRES16=r2, @ANYBLOB="01000000000000000000010008000c00020000000000000000000c0006000100000000000000040007a1de83f191f4242c5e6f9d97ea27b541bade625aa7253d200c551a3569e1eb1d9f8ac258c9bee25a2707f3dd23f867e8146155e0b83d1c12f0f80c263ff86dc905679e9dfcb0c5fa2a86fe5eb29fd44754c1840b61395121298ef74e5183268630ca4820be32be0e205caa7416d7f086f7fc0d4227a1ab8cd498552a43c1adc0d4824f18e3a01b177152a73a6b8e174fd05f000000000000000000"], 0x30}}, 0x0) 14:19:52 executing program 4: r0 = getpid() r1 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0xd6) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r0, r2, 0x0, 0x1, &(0x7f00000003c0)='\x00'}, 0x30) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)={0x38, r3, 0x300, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4011}, 0x20000004) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x148800, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000180)={r4, 0x8000, {0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x3, 0x0, 0xc, "1f8f6fb42fc060ba3c700aa7a418eed421c139f1e0b3275fc821ee578bc414fbc127cde4bcbf7164ae8391394b03b58c535feeea77f1738796c828e0cdf4c379", "a409780210ecf75b120b6d14dcd7f3a8f62cebf262ab5af5b8ca231c940ff9f069423d81afda278c8f2b7036252c5ddf50df42980703cb3982252b5b5889ceec", "9a609e9fac34b29a0d48fdb8ff2d756804d8c9195c81434622799730c5290f64", [0x9, 0x1ba6]}}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, r1, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r5 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r5, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x20008011}, 0x40000) getpid() (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0xd6) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r0, r2, 0x0, 0x1, &(0x7f00000003c0)='\x00'}, 0x30) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)={0x38, r3, 0x300, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4011}, 0x20000004) (async) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x148800, 0x0) (async) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000180)={r4, 0x8000, {0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x3, 0x0, 0xc, "1f8f6fb42fc060ba3c700aa7a418eed421c139f1e0b3275fc821ee578bc414fbc127cde4bcbf7164ae8391394b03b58c535feeea77f1738796c828e0cdf4c379", "a409780210ecf75b120b6d14dcd7f3a8f62cebf262ab5af5b8ca231c940ff9f069423d81afda278c8f2b7036252c5ddf50df42980703cb3982252b5b5889ceec", "9a609e9fac34b29a0d48fdb8ff2d756804d8c9195c81434622799730c5290f64", [0x9, 0x1ba6]}}) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, r1, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) (async) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) (async) socket$l2tp(0x2, 0x2, 0x73) (async) sendto$l2tp(r5, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x20008011}, 0x40000) (async) 14:19:52 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x94140, 0x0) (async, rerun: 32) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010000000000000000f9"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:52 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x0) [ 948.271061] nbd: must specify a size in bytes for the device 14:19:53 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan0\x00'}) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x28084}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x5c, r1, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 14:19:53 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x48900, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000005016df4a9cd46b578139331b038e254e70ac1a5b594812bf460f216860ff1406a1fb333e8f3799a37f5813e394684bd5d56ea55bd6a72b428c63bad4755a6643ef2b00cdd02a802bdf26c351fd6ffcfd8f2cc524dc471a1ba70e00378bf917c6e020fa79855ac039bce38c2c0d5b30396bc35972337dc916abd58dc58c14668633b717272b346742ed6a554e2af2af9d35ce845d0b98fd205a1ba0a001bf4f4b9d496216f06c967177895eda4ae0f47070629c177717a3df1cbd903bfaa472f5ef226779446fe98828554784", @ANYRES16=r2, @ANYBLOB="01000000000000000000010008000c00020000000000000000000c0006000100000000000000040007a1de83f191f4242c5e6f9d97ea27b541bade625aa7253d200c551a3569e1eb1d9f8ac258c9bee25a2707f3dd23f867e8146155e0b83d1c12f0f80c263ff86dc905679e9dfcb0c5fa2a86fe5eb29fd44754c1840b61395121298ef74e5183268630ca4820be32be0e205caa7416d7f086f7fc0d4227a1ab8cd498552a43c1adc0d4824f18e3a01b177152a73a6b8e174fd05f000000000000000000"], 0x30}}, 0x0) 14:19:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:53 executing program 4: r0 = getpid() (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0xd6) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r0, r2, 0x0, 0x1, &(0x7f00000003c0)='\x00'}, 0x30) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)={0x38, r3, 0x300, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4011}, 0x20000004) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x148800, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000180)={r4, 0x8000, {0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x3, 0x0, 0xc, "1f8f6fb42fc060ba3c700aa7a418eed421c139f1e0b3275fc821ee578bc414fbc127cde4bcbf7164ae8391394b03b58c535feeea77f1738796c828e0cdf4c379", "a409780210ecf75b120b6d14dcd7f3a8f62cebf262ab5af5b8ca231c940ff9f069423d81afda278c8f2b7036252c5ddf50df42980703cb3982252b5b5889ceec", "9a609e9fac34b29a0d48fdb8ff2d756804d8c9195c81434622799730c5290f64", [0x9, 0x1ba6]}}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, r1, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) (async) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) (async) r5 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r5, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x20008011}, 0x40000) 14:19:53 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x0) [ 948.396980] nbd: must specify a size in bytes for the device 14:19:53 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7b5aea3a7c4185227e8c8d260a8bec03090817854b3d1b646ce781f9a71a69a0202bb111505474a76e1820e4fb053cfe6298b2391ccea5bf2e5352bd16d19e5d77be02041b29b015b3f809197ee8648123cd3a4dc4888ead7235a940e553a589230ba5086984d0589be1c9bf8e31344813e7dba92e4146ec7daecb3b59fd29d4eb62cb1f5df763434ccd22a5cf64398ea95c5d6919ebec980b20d7f2e5b07ffd7f872334fa4fb8", @ANYRES16=r1, @ANYBLOB="01000010000000000000010000000c00020000000000000000000c000600010000000000000004000780"], 0x30}}, 0x18800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000400), 0x84400, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r10, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000009c0)={'syztnl2\x00', &(0x7f0000000940)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x8, 0xffffffff, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, 0x40, 0x80, 0x8001, 0x4}}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r14, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r15}]}, 0x1c}}, 0x0) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r16, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r16, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r17, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r18}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000840)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f0000000a00)={0x298, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r8}, {0xc0, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r12}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x64}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r18}}, {0x8}}}]}}, {{0x8, 0x1, r19}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2400}}}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x8000}, 0x2000090) r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r21 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r21, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r20}, {0x8, 0x1, r21}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, ']--}'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 14:19:53 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x31, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast, 0x2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000000)={0x8, 0x3, 0x9, {0x7, 0xf8e3}, 0x86, 0x6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000bc0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x24}}, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendto$l2tp(r0, &(0x7f0000000a80)="2364f0f9c4eee16d196e45f63baf0c92a1e6d60d1623326afdea7fe6f71fb77b340ec59be022d4a792ca534dcafc708e6f5ea9cd7c2b8e0ecbb39bea3e583a1a14f77fb956fb0ab9475c3aaaf8b0f7b8829bb786f64e67dbc52576055ada35556460ff5e1238e63717eab75c0bf49a2d78673fa658dbaab3c46ef21e", 0x7c, 0x40000, &(0x7f0000000b00)={0x2, 0x0, @multicast1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r13, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x0, 0x7fffffff, 0x8, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x5, 0x8000}}) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r15, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c000400ef672316da62d1bb4372b82086ecdcf75a6ecff780eea0b4ae759c95845e09e5ec450d240e00f5aea2c9e94807b0a8f4c0b5e2b11a023a9d2db98a3fafacbefd74ad68acee01dd89b1bc74af", @ANYRES16=r16, @ANYBLOB="010000000000000000000100000008000300", @ANYRES32=r17, @ANYBLOB], 0x1c}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000a40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f00000002c0)={0x708, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x250, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r4}, {0x260, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ee6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7811d2fb}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x22c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r17}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x12e}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x708}, 0x1, 0x0, 0x0, 0x1}, 0x44090) 14:19:53 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (async, rerun: 32) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan0\x00'}) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x28084}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x5c, r1, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 14:19:53 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) [ 948.522002] nbd: must specify a size in bytes for the device 14:19:53 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7b5aea3a7c4185227e8c8d260a8bec03090817854b3d1b646ce781f9a71a69a0202bb111505474a76e1820e4fb053cfe6298b2391ccea5bf2e5352bd16d19e5d77be02041b29b015b3f809197ee8648123cd3a4dc4888ead7235a940e553a589230ba5086984d0589be1c9bf8e31344813e7dba92e4146ec7daecb3b59fd29d4eb62cb1f5df763434ccd22a5cf64398ea95c5d6919ebec980b20d7f2e5b07ffd7f872334fa4fb8", @ANYRES16=r1, @ANYBLOB="01000010000000000000010000000c00020000000000000000000c000600010000000000000004000780"], 0x30}}, 0x18800) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async, rerun: 64) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) (async) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000400), 0x84400, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) (async, rerun: 32) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r10, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x1c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000009c0)={'syztnl2\x00', &(0x7f0000000940)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x8, 0xffffffff, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, 0x40, 0x80, 0x8001, 0x4}}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r14, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r15}]}, 0x1c}}, 0x0) (async) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r16, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r16, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r17, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r18}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000840)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f0000000a00)={0x298, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r8}, {0xc0, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r12}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x64}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r18}}, {0x8}}}]}}, {{0x8, 0x1, r19}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2400}}}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x8000}, 0x2000090) r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r21 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r21, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r20}, {0x8, 0x1, r21}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, ']--}'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 14:19:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x60100002}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r1, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xb93}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r9, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000000000000001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xd37}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$PTP_PEROUT_REQUEST(r7, 0x40383d03, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="080026bd7000fddbdf25020000003400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0c00030007000000000000000c0004000600000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="0f000005a348ad506533a3202ce946ecddfe82b15400", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c000200000000000000000004000a000c000600010000000000000004000780"], 0x34}}, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000001c0)={'\x00', 0x2, 0x2, 0x1}) 14:19:53 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x0) 14:19:53 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 14:19:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f00000001c0)={0x11}) 14:19:53 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 14:19:53 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7b5aea3a7c4185227e8c8d260a8bec03090817854b3d1b646ce781f9a71a69a0202bb111505474a76e1820e4fb053cfe6298b2391ccea5bf2e5352bd16d19e5d77be02041b29b015b3f809197ee8648123cd3a4dc4888ead7235a940e553a589230ba5086984d0589be1c9bf8e31344813e7dba92e4146ec7daecb3b59fd29d4eb62cb1f5df763434ccd22a5cf64398ea95c5d6919ebec980b20d7f2e5b07ffd7f872334fa4fb8", @ANYRES16=r1, @ANYBLOB="01000010000000000000010000000c00020000000000000000000c000600010000000000000004000780"], 0x30}}, 0x18800) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000400), 0x84400, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) (async, rerun: 32) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r10, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x1c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000009c0)={'syztnl2\x00', &(0x7f0000000940)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x8, 0xffffffff, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, 0x40, 0x80, 0x8001, 0x4}}) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) (rerun: 32) sendmsg$BATADV_CMD_GET_MESH(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r14, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r15}]}, 0x1c}}, 0x0) r16 = socket$nl_generic(0x10, 0x3, 0x10) (async) r17 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r16, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r16, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r17, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r18}]}, 0x1c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000840)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f0000000a00)={0x298, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r8}, {0xc0, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r12}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x64}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r18}}, {0x8}}}]}}, {{0x8, 0x1, r19}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2400}}}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x8000}, 0x2000090) r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r21 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r21, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r20}, {0x8, 0x1, r21}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, ']--}'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 14:19:53 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x6c, r2, 0x2b3, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c5b000000", @ANYRES16=r11, @ANYBLOB="010000000000000000000100000008000300", @ANYRES32=r12, @ANYBLOB], 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r16, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r16, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r17, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r18}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f00000001c0)={0x68c, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0x258, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r12}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffe01}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8}, {0x23c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7, 0x9, 0x7, 0x1}, {0x45, 0x1c, 0x2b, 0x1}, {0x8, 0x2, 0x3f, 0x1}, {0x6, 0x81, 0x9, 0x7ff}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2573}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfd63}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}]}}, {{0x8}, {0x4}}]}, 0x68c}, 0x1, 0x0, 0x0, 0x8810}, 0x14008841) 14:19:53 executing program 3: ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x3, 0x2, {0x4, 0x2, 0x0, 0x3, 0x3}, 0x8001}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x4c, r2, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffd}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) r3 = socket(0x16, 0x5, 0xfffffffb) setsockopt$MRT_PIM(r3, 0x0, 0xcf, &(0x7f0000000300), 0x4) 14:19:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x60100002}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r1, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xb93}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r9, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000000000000001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xd37}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$PTP_PEROUT_REQUEST(r7, 0x40383d03, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="080026bd7000fddbdf25020000003400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0c00030007000000000000000c0004000600000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="0f000005a348ad506533a3202ce946ecddfe82b15400", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c000200000000000000000004000a000c000600010000000000000004000780"], 0x34}}, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000001c0)={'\x00', 0x2, 0x2, 0x1}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x60100002}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r1, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xb93}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) (async) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r8) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_STATUS(r9, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000000000000001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xd37}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x800) (async) ioctl$PTP_PEROUT_REQUEST(r7, 0x40383d03, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="080026bd7000fddbdf25020000003400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="2d11010017641683a2f04219ce6e4b8674a8d161d3eaf259ac5ae2fbfc1f9d2fe45ee773aa904a3f8ca53e1c9191f7dfed2f095f5c2cfb2a794c417e1d76ee03493cc34699e85cdd6c994e83feeb7077c2a175ad159ef0e3d99ae701c687655de37aafc33291a05e84fd0e3b6cb27df1bd00c318425b7d71da9b1d353b00ae74e874144d4da55cc82026d87bb7c380cee23f9acad266cd91559d937808476fcf160c838ebb03decbf7a153d12146e181617132017533e69ebca3261be6ee628c8abdfe38773dd7dbe843032ab3b2042273f9db121ee604a592dc6ca5535480e07655a73d4cef172cec104a3c71033a5852df8116867687afe45879cdfca20d0c8bae5dbfe1dee53768929b58de143bee38df82fab9c1b0e356dba4e5be74e8a90364d266509b3fd467bc3a316a1fd83d93e736b4e53440", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0c00030007000000000000000c0004000600000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x1) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="0f000005a348ad506533a3202ce946ecddfe82b15400", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c000200000000000000000004000a000c000600010000000000000004000780"], 0x34}}, 0x0) (async) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000001c0)={'\x00', 0x2, 0x2, 0x1}) (async) [ 948.948522] nbd: must specify a size in bytes for the device 14:19:54 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan0\x00'}) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x28084}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x5c, r1, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 14:19:54 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02000001000000000000010000000c000400ffffffffffffffff0c00060001000000000000000c00040000005efcffffffffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x6c, r1, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9e}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x20000091) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x101}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x101) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:19:54 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:54 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 32) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x6c, r2, 0x2b3, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c5b000000", @ANYRES16=r11, @ANYBLOB="010000000000000000000100000008000300", @ANYRES32=r12, @ANYBLOB], 0x1c}}, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r16, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r16, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r17, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r18}]}, 0x1c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f00000001c0)={0x68c, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0x258, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r12}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffe01}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8}, {0x23c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7, 0x9, 0x7, 0x1}, {0x45, 0x1c, 0x2b, 0x1}, {0x8, 0x2, 0x3f, 0x1}, {0x6, 0x81, 0x9, 0x7ff}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2573}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfd63}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}]}}, {{0x8}, {0x4}}]}, 0x68c}, 0x1, 0x0, 0x0, 0x8810}, 0x14008841) 14:19:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) (async) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x60100002}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r1, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xb93}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) (async) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) (async) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r9, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000000000000001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xd37}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$PTP_PEROUT_REQUEST(r7, 0x40383d03, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="080026bd7000fddbdf25020000003400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0c00030007000000000000000c0004000600000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x1) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="0f000005a348ad506533a3202ce946ecddfe82b15400", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c000200000000000000000004000a000c000600010000000000000004000780"], 0x34}}, 0x0) (async) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000001c0)={'\x00', 0x2, 0x2, 0x1}) 14:19:54 executing program 0: ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000300)={0x0, 0x3, &(0x7f0000000200)=[0x7f, 0x73ff, 0x8000], &(0x7f0000000240)=[0x81, 0x1], 0x2, 0x7, 0x4ef6, &(0x7f0000000280)=[0xe451, 0x9, 0x400, 0x80, 0x10000, 0x7fff, 0x406a], &(0x7f00000002c0)=[0x81]}) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3f8, 0x200, 0x70bd2d, 0x25dfdbff, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x10000, 0x0) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c00020000000006000100000000000060bc0307db5c864202a93fae"], 0x30}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000080) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) ioctl$NS_GET_NSTYPE(r3, 0xb703, 0x0) 14:19:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:54 executing program 0: ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000300)={0x0, 0x3, &(0x7f0000000200)=[0x7f, 0x73ff, 0x8000], &(0x7f0000000240)=[0x81, 0x1], 0x2, 0x7, 0x4ef6, &(0x7f0000000280)=[0xe451, 0x9, 0x400, 0x80, 0x10000, 0x7fff, 0x406a], &(0x7f00000002c0)=[0x81]}) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3f8, 0x200, 0x70bd2d, 0x25dfdbff, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x10000, 0x0) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c00020000000006000100000000000060bc0307db5c864202a93fae"], 0x30}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000080) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) ioctl$NS_GET_NSTYPE(r3, 0xb703, 0x0) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000300)={0x0, 0x3, &(0x7f0000000200)=[0x7f, 0x73ff, 0x8000], &(0x7f0000000240)=[0x81, 0x1], 0x2, 0x7, 0x4ef6, &(0x7f0000000280)=[0xe451, 0x9, 0x400, 0x80, 0x10000, 0x7fff, 0x406a], &(0x7f00000002c0)=[0x81]}) (async) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3f8, 0x200, 0x70bd2d, 0x25dfdbff, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x10000, 0x0) (async) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r1) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c00020000000006000100000000000060bc0307db5c864202a93fae"], 0x30}}, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000080) (async) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) (async) ioctl$NS_GET_NSTYPE(r3, 0xb703, 0x0) (async) [ 949.529515] nbd: must specify at least one socket 14:19:54 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x90, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff7}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r7) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x48, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3f}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '$'}]}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:54 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) 14:19:54 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) gettid() 14:19:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:54 executing program 0: ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000300)={0x0, 0x3, &(0x7f0000000200)=[0x7f, 0x73ff, 0x8000], &(0x7f0000000240)=[0x81, 0x1], 0x2, 0x7, 0x4ef6, &(0x7f0000000280)=[0xe451, 0x9, 0x400, 0x80, 0x10000, 0x7fff, 0x406a], &(0x7f00000002c0)=[0x81]}) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3f8, 0x200, 0x70bd2d, 0x25dfdbff, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x10000, 0x0) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c00020000000006000100000000000060bc0307db5c864202a93fae"], 0x30}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000080) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) ioctl$NS_GET_NSTYPE(r3, 0xb703, 0x0) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000300)={0x0, 0x3, &(0x7f0000000200)=[0x7f, 0x73ff, 0x8000], &(0x7f0000000240)=[0x81, 0x1], 0x2, 0x7, 0x4ef6, &(0x7f0000000280)=[0xe451, 0x9, 0x400, 0x80, 0x10000, 0x7fff, 0x406a], &(0x7f00000002c0)=[0x81]}) (async) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3f8, 0x200, 0x70bd2d, 0x25dfdbff, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x10000, 0x0) (async) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r1) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c00020000000006000100000000000060bc0307db5c864202a93fae"], 0x30}}, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000080) (async) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) (async) ioctl$NS_GET_NSTYPE(r3, 0xb703, 0x0) (async) 14:19:54 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:54 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) gettid() [ 949.797603] nbd: must specify at least one socket 14:19:54 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x6c, r2, 0x2b3, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c5b000000", @ANYRES16=r11, @ANYBLOB="010000000000000000000100000008000300", @ANYRES32=r12, @ANYBLOB], 0x1c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) (async) r16 = socket$nl_generic(0x10, 0x3, 0x10) (async) r17 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r16, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r16, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r17, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r18}]}, 0x1c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f00000001c0)={0x68c, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0x258, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r12}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffe01}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8}, {0x23c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7, 0x9, 0x7, 0x1}, {0x45, 0x1c, 0x2b, 0x1}, {0x8, 0x2, 0x3f, 0x1}, {0x6, 0x81, 0x9, 0x7ff}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2573}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfd63}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}]}}, {{0x8}, {0x4}}]}, 0x68c}, 0x1, 0x0, 0x0, 0x8810}, 0x14008841) 14:19:54 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x90, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff7}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r7) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x48, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3f}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '$'}]}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x90, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff7}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r7) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x48, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3f}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '$'}]}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (async) 14:19:54 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x4, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x4040010) 14:19:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) (async) 14:19:54 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:54 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x90, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff7}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r7) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x48, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3f}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '$'}]}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:55 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x4, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x4040010) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x4, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x4040010) (async) 14:19:55 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) (async) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) (async) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x90, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff7}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r7) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x48, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3f}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '$'}]}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 14:19:55 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$l2tp(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) sendmsg$AUDIT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3e8, 0x2, 0x70bd25, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00'}, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x34}}, 0x0) 14:19:55 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x4, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x4040010) [ 950.497413] ================================================================== [ 950.504998] BUG: KASAN: use-after-free in refcount_dec_not_one+0x9a/0xc0 [ 950.511835] Read of size 4 at addr ffff8880947a3198 by task systemd-udevd/4157 [ 950.519178] [ 950.520800] CPU: 1 PID: 4157 Comm: systemd-udevd Not tainted 4.14.302-syzkaller #0 [ 950.528493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 950.537995] Call Trace: [ 950.540592] dump_stack+0x1b2/0x281 [ 950.544237] print_address_description.cold+0x54/0x1d3 [ 950.549521] kasan_report_error.cold+0x8a/0x191 [ 950.554195] ? refcount_dec_not_one+0x9a/0xc0 [ 950.558705] __asan_report_load4_noabort+0x68/0x70 [ 950.563642] ? refcount_dec_not_one+0x9a/0xc0 [ 950.568270] refcount_dec_not_one+0x9a/0xc0 [ 950.572586] refcount_dec_and_mutex_lock+0x1a/0x60 [ 950.577509] nbd_release+0xf3/0x150 [ 950.581129] ? nbd_ioctl+0xad0/0xad0 [ 950.584826] __blkdev_put+0x5aa/0x800 [ 950.588635] ? revalidate_disk+0x1f0/0x1f0 [ 950.592862] ? locks_remove_file+0x2cd/0x420 [ 950.597265] ? blkdev_put+0x75/0x4c0 [ 950.600974] ? blkdev_put+0x4c0/0x4c0 [ 950.605118] blkdev_close+0x86/0xb0 [ 950.608732] __fput+0x25f/0x7a0 [ 950.611998] task_work_run+0x11f/0x190 [ 950.615886] exit_to_usermode_loop+0x1ad/0x200 [ 950.620458] do_syscall_64+0x4a3/0x640 [ 950.624328] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 950.629501] RIP: 0033:0x7f7442a04270 [ 950.633195] RSP: 002b:00007ffd036eb9f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 950.640884] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 00007f7442a04270 [ 950.648136] RDX: 000000000aba9500 RSI: 0000000000000000 RDI: 0000000000000007 [ 950.655391] RBP: 00007f74438be710 R08: 0000000000000045 R09: 0000000000000018 [ 950.662647] R10: 000055bcd226a5e8 R11: 0000000000000246 R12: 0000000000000000 [ 950.669898] R13: 000055bcd2277b80 R14: 0000000000000003 R15: 000000000000000e [ 950.677161] [ 950.678775] Allocated by task 4135: [ 950.682395] kasan_kmalloc+0xeb/0x160 [ 950.686190] kmem_cache_alloc_trace+0x131/0x3d0 [ 950.690844] nbd_dev_add+0x7c/0x800 [ 950.694459] nbd_genl_connect+0x3a4/0x13e0 [ 950.698688] genl_family_rcv_msg+0x572/0xb20 [ 950.703082] genl_rcv_msg+0xaf/0x140 [ 950.706776] netlink_rcv_skb+0x125/0x390 [ 950.710905] genl_rcv+0x24/0x40 [ 950.714163] netlink_unicast+0x437/0x610 [ 950.718206] netlink_sendmsg+0x648/0xbc0 [ 950.722257] sock_sendmsg+0xb5/0x100 [ 950.725956] ___sys_sendmsg+0x6c8/0x800 [ 950.729912] __sys_sendmsg+0xa3/0x120 [ 950.733702] SyS_sendmsg+0x27/0x40 [ 950.737231] do_syscall_64+0x1d5/0x640 [ 950.741101] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 950.746265] [ 950.747879] Freed by task 4157: [ 950.751145] kasan_slab_free+0xc3/0x1a0 [ 950.755101] kfree+0xc9/0x250 [ 950.758188] nbd_put.part.0+0x100/0x140 [ 950.762146] nbd_config_put+0x51c/0x6c0 [ 950.766107] nbd_release+0xdf/0x150 [ 950.769722] __blkdev_put+0x5aa/0x800 [ 950.773504] blkdev_close+0x86/0xb0 [ 950.777127] __fput+0x25f/0x7a0 [ 950.780401] task_work_run+0x11f/0x190 [ 950.784276] exit_to_usermode_loop+0x1ad/0x200 [ 950.788839] do_syscall_64+0x4a3/0x640 [ 950.792707] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 950.797875] [ 950.799493] The buggy address belongs to the object at ffff8880947a30c0 [ 950.799493] which belongs to the cache kmalloc-512 of size 512 [ 950.812133] The buggy address is located 216 bytes inside of [ 950.812133] 512-byte region [ffff8880947a30c0, ffff8880947a32c0) [ 950.823992] The buggy address belongs to the page: [ 950.828911] page:ffffea000251e8c0 count:1 mapcount:0 mapping:ffff8880947a30c0 index:0x0 [ 950.837039] flags: 0xfff00000000100(slab) [ 950.841174] raw: 00fff00000000100 ffff8880947a30c0 0000000000000000 0000000100000006 [ 950.849033] raw: ffffea0002a567a0 ffffea00024481a0 ffff88813fe74940 0000000000000000 [ 950.856895] page dumped because: kasan: bad access detected [ 950.862594] [ 950.864203] Memory state around the buggy address: [ 950.869110] ffff8880947a3080: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 950.876457] ffff8880947a3100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 950.883803] >ffff8880947a3180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 950.891142] ^ [ 950.895267] ffff8880947a3200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 950.902611] ffff8880947a3280: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 950.909950] ================================================================== [ 950.917296] Disabling lock debugging due to kernel taint [ 950.923418] Kernel panic - not syncing: panic_on_warn set ... [ 950.923418] [ 950.930778] CPU: 1 PID: 4157 Comm: systemd-udevd Tainted: G B 4.14.302-syzkaller #0 [ 950.939693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 950.949042] Call Trace: [ 950.951630] dump_stack+0x1b2/0x281 [ 950.955253] panic+0x1f9/0x42d [ 950.958438] ? add_taint.cold+0x16/0x16 [ 950.962405] ? ___preempt_schedule+0x16/0x18 [ 950.966811] kasan_end_report+0x43/0x49 [ 950.970781] kasan_report_error.cold+0xa7/0x191 [ 950.975444] ? refcount_dec_not_one+0x9a/0xc0 [ 950.979918] __asan_report_load4_noabort+0x68/0x70 [ 950.984829] ? refcount_dec_not_one+0x9a/0xc0 [ 950.989304] refcount_dec_not_one+0x9a/0xc0 [ 950.993604] refcount_dec_and_mutex_lock+0x1a/0x60 [ 950.998511] nbd_release+0xf3/0x150 [ 951.002118] ? nbd_ioctl+0xad0/0xad0 [ 951.005814] __blkdev_put+0x5aa/0x800 [ 951.009599] ? revalidate_disk+0x1f0/0x1f0 [ 951.013811] ? locks_remove_file+0x2cd/0x420 [ 951.018198] ? blkdev_put+0x75/0x4c0 [ 951.021894] ? blkdev_put+0x4c0/0x4c0 [ 951.025681] blkdev_close+0x86/0xb0 [ 951.029290] __fput+0x25f/0x7a0 [ 951.032690] task_work_run+0x11f/0x190 [ 951.036575] exit_to_usermode_loop+0x1ad/0x200 [ 951.041165] do_syscall_64+0x4a3/0x640 [ 951.045040] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 951.050216] RIP: 0033:0x7f7442a04270 [ 951.053914] RSP: 002b:00007ffd036eb9f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 951.061611] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 00007f7442a04270 [ 951.068864] RDX: 000000000aba9500 RSI: 0000000000000000 RDI: 0000000000000007 [ 951.076122] RBP: 00007f74438be710 R08: 0000000000000045 R09: 0000000000000018 [ 951.083375] R10: 000055bcd226a5e8 R11: 0000000000000246 R12: 0000000000000000 [ 951.090623] R13: 000055bcd2277b80 R14: 0000000000000003 R15: 000000000000000e [ 951.098075] Kernel Offset: disabled [ 951.101693] Rebooting in 86400 seconds..